last executing test programs: 32.883310498s ago: executing program 0 (id=224): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x10, &(0x7f0000004280)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000540000017b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705621ec51e402c4e5b5d0b7bf1a33abc00000800000085000000a50000009500000000000600"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000004240)=ANY=[@ANYBLOB="ffffffffffff0180c200000eb288a80000810000020800450000240000400000119078ac1e0001e00000014e2117c1001090782204000100000000"], 0x3a) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r4, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r0, 0x5) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip6_flowlabel\x00') read$FUSE(r5, &(0x7f0000002200)={0x2020}, 0x2020) read$FUSE(r5, &(0x7f00000000c0)={0x2020}, 0x2020) unlinkat(r5, &(0x7f00000021c0)='./file0\x00', 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000000100)=@pptp={0x18, 0x2, {0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="4a58685d855f5aa9f6f15e55a78b0d72884c17643c0d9f2ad95212e75080769f342fbf65e41a12201c50833e95e0bf4ec8ede6e4b92bf580e9929d26aadc6771e408f8e1854854e64616fac5cbd6a9b6547903717fd761c17e5c4b5ae744d465dbfd4749bf357bdcea480a62b425436025cd4919eb1222a8dc197cedaed3f3baa4894f7b4f49df66bda77d09b559a57575262232785acd25e4db79d32c4a0214741aa349da417415b7705920746bed726da3e51558b204b39f002cf81136d4b70dd7", 0xc2}, {&(0x7f0000001280)="c18b766b30cbdab566536933897caf0acbb2f414a3934279b5b923511fa10394f7a5d14b4e08fb944d706d164f74bcafd5e9f045cec865cf12c6ddd3907dd51538eda50c0bbd0caaa707c21fa5be332b3e99297d1e9d4103a8a03d44", 0x5c}, {&(0x7f0000001300)="b6d2fb9c24c9949e66dd46dcae99249c2016aadf1b0c10e9b0cb88b92b", 0x1d}, {&(0x7f0000001340)="60e42afdb3c7d9c127fb22382b8bd5ef661a9a120301b2588c98c889586fa373f877e239700893ca9644c8d37dd1dbbc09d0db688a14f58d7df6c105443fead09d3e58e96edd35cd7968424882e7ecc27046a39c1cb08e5b40ce743571ff16050853e935ea2791d4f55de9c12bcd2f78cdce09dc889178bbdcce71cf9ad823436e173f8c2aeeaf13668fc5c0908fabbd868b579bb04bd7ce36dabcc01cde99bfd2cde4a8de980b79f59f2b02e93b5b7fed36ae6f327667bcfc96793dcbc329b853976a83c92c37344982a32ab9983e072b4154d79edc9de3cf70423405d4e70bfcdabb969dc6ef8a28f7baff3fdbb84d1b69806aa63e3939704cc5c66ee09a", 0xff}], 0x5}, 0x4001) r6 = socket$phonet(0x23, 0x2, 0x1) move_mount(r5, &(0x7f0000004340)='./file0\x00', r4, &(0x7f0000004380)='./file0\x00', 0x206) sendto$phonet(r6, 0x0, 0xea, 0x0, &(0x7f00000000c0)={0x23, 0x2, 0x0, 0x3}, 0x10) 32.53947904s ago: executing program 0 (id=237): syz_clone3(&(0x7f00000001c0)={0x26000800, &(0x7f0000000040), &(0x7f0000000080)=0x0, &(0x7f0000000240), {0x2b}, &(0x7f0000000100)=""/34, 0x22, &(0x7f0000000140)=""/50, &(0x7f0000000180)=[0xffffffffffffffff], 0x1}, 0x58) capset(&(0x7f0000000000)={0x20080522, r0}, 0x0) (async) capset(&(0x7f0000000000)={0x20080522, r0}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) timerfd_create(0x9, 0x0) (async) r2 = timerfd_create(0x9, 0x0) open$dir(&(0x7f0000000300)='./file0\x00', 0x10300, 0x100) capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_GET_LAPIC(r5, 0x8400ae8e, &(0x7f0000000200)) prctl$PR_CAPBSET_DROP(0x2f, 0x2) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) (async) timerfd_settime(r2, 0x1, &(0x7f0000007000)={{0x77359400}, {0x0, 0x989680}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x20}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x601, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x118}}, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000000)=0xe1) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000280)={0x0, 0x80000, r6}) bpf$LINK_DETACH(0x22, &(0x7f00000002c0)=r7, 0x4) 32.144209956s ago: executing program 0 (id=247): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r2) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42003, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r2, 0x400455cb, 0x19) r4 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}], 0x20}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r1, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x7}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r6, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/s\xf8:e[\a\x9d1\xfd2haref\xb5D\x8er=root,pass=root,port=445,') r7 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x0, 0x0) syz_emit_ethernet(0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000462ffffe80000000000000000000000000003fff0200ee0000000000000000000000000124"], 0x0) r9 = openat$cgroup_pressure(r8, &(0x7f0000000840)='io.pressure\x00', 0x2, 0x0) read(r9, &(0x7f0000000040)=""/252, 0xfc) r10 = accept(r6, 0x0, 0x0) write(r10, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) fsopen(&(0x7f0000000140)='jfs\x00', 0x1) 31.914307534s ago: executing program 0 (id=251): file_setattr(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa2, 0x3, 0x4, 0x7}, 0x18, 0x100) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) syz_emit_vhci(&(0x7f0000000040)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x24}, "e6198e3ed9aa0a98dd8a8413e5edd6ed58bace28b41d45ca64a96efb42551d0f4d1ac504"}, 0x28) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000800)={'syzkaller1\x00', &(0x7f0000000700)=@ethtool_drvinfo={0x3, "9c50e461bb9f8800fee66179da30339db31bf1f25fcb4337f06831534068aae1", "bf30c47d31baadde6514adf2a327b860637165a4dfedf377aea92f76e9e9fc9d", "4dc0e0ee7550dd81d47805951348cad82f44616ab14d60cb269d3ddc06d84f95", "c4a11786b057f004273e038969cc037ba66cecd6485f6b075ad23d75516e99da", "d1b4aebae93b5cbb6b9fbc01f0a2e1d9b5f035f56b031bc815f44786a8abe767", "80fba2b65f56b472ec92e9a2", 0xdd0, 0xfffff1dc, 0x8001, 0x561, 0x8000}}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$mixer_OSS_ALSAEMULVER(r2, 0x80044df9, &(0x7f0000000100)) ioctl$TCFLSH(r1, 0x540b, 0x2) 31.84223793s ago: executing program 0 (id=254): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='select \n', 0x10) write(r0, &(0x7f0000000100)='file read /etc/passwd task.uid=0-0xec.argv[0]=\"sh\" exec.envp[\"PATH\"]=\"/bin\"\n', 0x4c) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1, r2}}, 0x40) (async) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, r3, 0x0) 31.723958128s ago: executing program 0 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = fanotify_init(0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) close_range(r2, r3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r8, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2dd24d7d7287936d}, 0x4048890) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a80)=@deltaction={0x250, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x880}, 0x840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2004, 0x2}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x108800, &(0x7f00000075c0)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 16.611461618s ago: executing program 32 (id=255): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mount$cgroup(0x0, &(0x7f0000000600)='.\x00', &(0x7f0000000640), 0x2008000, &(0x7f0000000080)={[{@noprefix}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = fanotify_init(0x20, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) close_range(r2, r3, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x30, r6, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7fff}]}, 0x30}}, 0x20000000) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r7) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070600000000000000002d0000000c0005000201aaaaaaaaaaaa0a0001007770616e3000000008002f000500000005002e001500000005002b"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000002}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r8, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@IEEE802154_ATTR_STATUS={0x5, 0x3, 0x8}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x5}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xe6}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}]}, 0x48}, 0x1, 0x0, 0x0, 0x2dd24d7d7287936d}, 0x4048890) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000780)={&(0x7f0000000a80)=@deltaction={0x250, 0x31, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x50, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffa}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xea}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @TCA_ACT_TAB={0x88, 0x1, [{0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8000}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x200}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x60, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x14, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x880}, 0x840) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x2004, 0x2}, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x108800, &(0x7f00000075c0)) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r9, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 3.194048161s ago: executing program 2 (id=605): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_delete(r0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)=""/108, 0x6c}, {&(0x7f0000000280)=""/85, 0x55}], 0x2}}], 0x1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001300010000002000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="0208020000000000050027000000000044001a80100002800c"], 0x6c}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) 3.024017964s ago: executing program 2 (id=608): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x8, 0x1, 0x400, 0x0, {0xa, 0x0, 0xe38, @private0}}}, 0x32) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000001280), r5) sendmsg$L2TP_CMD_TUNNEL_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="2503000000000000000008"], 0x14}}, 0x0) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="0100000000000000000000000100000082b0cfc4337965941538be02000000000000080000007400a391793ba5f400000000fdf700"/63], 0x40) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x64, r6, 0x30a, 0x70bd2a, 0x25dfdbfd, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x3}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x10}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp=r7}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x81}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xd}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004084}, 0x4000000) 2.970907517s ago: executing program 2 (id=609): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x0, 0x0}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002f00090027bd7000eddbdf250400000008001a8004000480"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r3, 0x701, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f00000000c0)={0xc}, 0x4) bind$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x10, @empty, 0x1}, 0x1c) listen(r4, 0x5) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) dup(r1) sendto$inet6(r5, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x1, @loopback}, 0x1c) 1.38216795s ago: executing program 2 (id=619): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000240)={0x0, 0xea60}, 0x10) connect$vsock_stream(r6, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x7c41c8cea7fad08e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) (async) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsmount(r3, 0x0, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x300, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) bind$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000240)={0x0, 0xea60}, 0x10) (async) connect$vsock_stream(r6, &(0x7f0000000300)={0x28, 0x0, 0xffffffff}, 0x10) (async) read$FUSE(r5, &(0x7f0000000480)={0x2020}, 0x2020) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, 0x0, 0x7c41c8cea7fad08e}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) 1.311509644s ago: executing program 1 (id=622): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) (async, rerun: 64) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) (rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r6, &(0x7f00000071c0)=[{{&(0x7f00000001c0)={0xa, 0x1, 0x10, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000240)="8f", 0x1}], 0x1}}], 0x1, 0x4004) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async, rerun: 32) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 32) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000040)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b8377a000000d80f300f300fc79d53bf00000f0057000f01c3", 0x61}], 0x1, 0x14, 0x0, 0x0) ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000940)={"879862f1b64358ed0c655d724876d98e58758000f3b9ae36e400c5bda6c5399c9cc9e753c7c59a0b8ef38561aed8817b8b6a7ce37f99c54b27164492e5d599b7020327998f1d059ab9ca7d40f154ecde247b2568ea6e458f53faec416d2169d22d3daa0f9bf6f90b8e374bec396dc2b60c596312dbeede336bebc9b4fa21f2a042dc47e39a820ad492b2352c148a9fde39f685405ed0ca712ba9253ec7bddd2900459455ac9da0fe5c7285010880ccda54c864abb8cb94fc9d372053a833b59b809c25639a34d25221ee980c3357225e02281ff1f2088c0d4a1f07a65484cc26eded503c52c3f07eb18c954107ba97793fb5b0b4a43cde44be334996b59234fcf7663c0a59d0af1484efdb8e364abfb1ee277771c198777e1fffb8bb0ad5e6146bd8fe200f0dd271602c49dd517e5225e413e2908534edd88a557a4303ade836a09940d312ef694f173fb21f7e307ffbfa0000000000000064abf270c97901b86c17635fd7afee11a76453f9e8c873eac8e4fef5f3b494c4fb6bd391fa571d48a1021fd57a12c2dc8f7e633aa7eae4bdb56e0a699ae13cd03ac272b6af2f60fced115f4709202046ea7f60f9b1b37660c4049ddda94302509e77973d53b7cafd1f5476e0aa21e54cf38a84254f7feeb1c1ab22c83e7532d9601f5819d8511cd36bf0716430583f608a9998172d1881dcead5f0f48b8cd5b7fb312f2ded010a2439ebd846f1d4b03b7c7b39b0e683479d568a69db86f44f55fbea9fc74f488c2d3991ad37738560a60f2918dc2feb1d9aec4b9c6a617059a8b914be9aa2c4c832c23d23a41091c6a65889547e3c9b6aab293648abb72d703e3a5408e04ab39f75891c2425fde67ea31bd4544f7ad873df2db6ff4d53476e092fd04849e07b983fd09bdae92fd1855082798dbc5ff71d51cace1a4e0957a516195178b6ace5eb203816d15d00f08431e0840a6243f24ee87a9d6230bec445a4ef20853db951630a8e8ffba1a8099c45fc4a9bc9fd6c3506b9ddf5df5ee60c1d1935984db73e9e549f435769b4b36850819634bfc0ba87fda98b09828d9e6ad2bc19da6afc58b3894d78fddb624609a76ea3cc5953267ffe73c5485125c0b6ad1e37a5b5142c014d1e06ad37296cc6dbf663692bb0b70ff51e186aa1282511ce0680206ce79450a9148661aa405d225dcb9b9b8c6df52d7d5caa787e9b9775f4947fef9160391cc3db38d46262a6799f41ea2b8cd73e7ee4775ed889074b0c74ef3e15ce5040216536d75946102967c71069123bd9567560224c85b42d52fd86d8f9d5bde1327926b945b6ac4bc9fd86777f44e91d15c751b584482d4b579b5c9b01000000bd37abd08621336e83c0e4a43621c0fc9a00"}) (async) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.093769353s ago: executing program 2 (id=625): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x10, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x40) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x40000400004, &(0x7f0000000040)) r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000b1f000/0xf000)=nil, &(0x7f0000f4a000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fbc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f00008f7000/0x1000)=nil, &(0x7f00004d9000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x2405a045) r3 = io_uring_setup(0x2b24, &(0x7f0000000040)={0x0, 0xcaa0, 0xc000, 0x2, 0x2f8, 0x0, r2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x800}]}) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYRESOCT], 0x2000, 0x0) msgctl$IPC_RMID(0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000000)={{{@in=@empty, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @remote}}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000100)=0xe8) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000001c0), 0x21f803, 0x0) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000800)={0x0, 0x40, 0x8}, 0xc) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="02000000000000000000fbdfa568b6b02f00004000000000000000", @ANYRES32=r5, @ANYRES32, @ANYBLOB="04000000020000000400"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x26, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24f6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@alu={0x4, 0x1, 0x6, 0x9, 0x6, 0xfffffffffffffff0, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0xb, 0x9, 0x4, 0x6, 0x4}, @map_fd={0x18, 0x6, 0x1, 0x0, r7}, @alu={0x7, 0x0, 0xd, 0x0, 0x9, 0xc, 0xfffffffffffffff0}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x6}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000700)='GPL\x00', 0x31, 0x1b, &(0x7f0000000740)=""/27, 0x41100, 0x28, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x2, 0x7, 0x7c, 0x2}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000008c0)=[r8, r9], &(0x7f0000000900)=[{0x4, 0x5, 0x7, 0x8}, {0x3, 0x1, 0x0, 0x7}, {0x2, 0x1, 0xc, 0xa}, {0x3, 0x4, 0xa, 0x8}], 0x10, 0x7}, 0x94) mount$fuseblk(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', &(0x7f0000000480), 0x1000000, &(0x7f00000004c0)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x80000000000}}, {@allow_other}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x400}}, {@default_permissions}], [{@permit_directio}]}}) 1.003638099s ago: executing program 1 (id=626): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6ec6b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca00", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x103, {0x1000006, 0x2, 0x0, 0xc9, 0x4, 0xe4, {0x40, 0x1, 0xffffffffffff826c, 0x0, 0x1005002, 0x0, 0x800, 0x81, 0x3, 0x2000, 0x75, r6, r7, 0xacd, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0x1224, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @nested={0x1202, 0xe4, 0x0, 0x1, [@generic="3d3047e235f3ecf541c197b5c9fda02b1d2277c1a4d3097da31d6be1caabda35e3a56cd36d3f5b867e2c4f3713d055ffee11b367774905aeb183d9d06323f65258789ea43774dd4e1a5318c27eb95a360e078b166989eaaa4e", @typed={0x1004, 0x83, 0x0, 0x0, @binary="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"}, @generic="dfb2e138c1bba3a6a8411f967c64c9493771b7f7540cf27e295257b40c405d06578d4aaadc20a5a406d15124a482757c228e427013497b2318d7c93adc49eb00ff3cc34d304691ab0c58d5bf1eb3662980bba60cb933796e8ef497e2a4e8431d8308bf21c231c31774d247acc05c750b477553a19bb2600258ab2846249a75e8e7c63e2f5f86b43313757c34bec918a20ba4537b6133554615731a97e8b5cd4fd14af1d96dbb1d97e1041f9b611f60eb4b20ff03b36d524e0d831178", @generic="0ba702f54dd2fbcab6abe629b7d3668067d404001727e2b6f9bcc5c2cc0815d520ab6fcc6a08ceb201651cc705fc7a4e95f4e00afcf7810bd969414bae821f98ea4570a2aa2a9b78ca930b3ffd494e51a68f44a40320f2157573b4c76c852a0dd6d916a99de544cc7149c57d22e406baa39cc48d6e3605ab61db20b5e6d553a7bd043ff59a3d98e1ac3c9b522a432a2ea23f3d88f31d0a98a325d48c6ee15b65a2c0995528d25ea3eb87fde3db014ae8314a312c626c84fc66d679a4480cd34ba49dbf6fba5ca726c0e695b0f075e69a985179cf70b5183ee224ca7db73d7660f06f28deaf"]}, @nested={0x4}, @nested={0x4, 0x8003}]}, 0x1224}, 0x1, 0x0, 0x0, 0x4400c005}, 0x4000080) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) setsockopt$TIPC_IMPORTANCE(r8, 0x10f, 0x7f, &(0x7f0000000140)=0xfffffff9, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x3c, r0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1) 903.672546ms ago: executing program 1 (id=628): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f0000000480)=@raw=[@exit], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x1, &(0x7f0000000480)=@raw=[@exit], &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x1}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014000300697036746e6c300000000000000000001c0012800b000100697036746e6c00000c00028006000f0002"], 0x50}}, 0x0) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000100)={0x1, 0x6}, 0x2) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f00000001c0)=0xc9) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) (async) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x3}, 0x2) (async) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f0000000000)={0x2, 0x3}, 0x2) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f8c0c809001000000000000100008000000000372be90aa7eb4167816a39f4748cfc8b64aa9cd6be0d948929b215b750b033b962ecd27372a41a2f9eff2aaab4bffc8d4083e08d04488151af0f1b2c1f651bcc60933e61020e69a5b17e61696ee1045fc39da74f7e81aeb700", 0x6c}], 0x1}}, {{0x0, 0x0, &(0x7f0000003680)}}], 0x2, 0x4000) (async) sendmmsg$inet(r2, &(0x7f0000006440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f8c0c809001000000000000100008000000000372be90aa7eb4167816a39f4748cfc8b64aa9cd6be0d948929b215b750b033b962ecd27372a41a2f9eff2aaab4bffc8d4083e08d04488151af0f1b2c1f651bcc60933e61020e69a5b17e61696ee1045fc39da74f7e81aeb700", 0x6c}], 0x1}}, {{0x0, 0x0, &(0x7f0000003680)}}], 0x2, 0x4000) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x54, 0x2, r4, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000400)={0x54, 0x2, r4, 0x0, &(0x7f0000003000/0x2000)=nil, 0x2000, 0x7ffffffe}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000300), 0x80002, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x1000002, 0x8c012, r6, 0x343e2000) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv4_delroute={0x2c, 0x18, 0x901, 0x0, 0x25dfdbfc, {0x2, 0x18, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x9}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_PRIORITY={0x8, 0x6, 0x13}]}, 0x2c}}, 0x8000000) sendfile(r7, r1, &(0x7f0000000180)=0x5, 0x1) ioctl$FE_DISEQC_SEND_BURST(r6, 0x6f41, &(0x7f0000000040)=0x1) (async) ioctl$FE_DISEQC_SEND_BURST(r6, 0x6f41, &(0x7f0000000040)=0x1) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x2, '\x00', 0x0, r6, 0x2, 0x1, 0x4}, 0x50) socket$can_bcm(0x1d, 0x2, 0x2) (async) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r9, &(0x7f00000000c0)={0x1d, r10}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)={0x1b, 0x0, 0x0, 0xf3f, 0x0, r8, 0x100, '\x00', r10, r6, 0x5, 0x1}, 0x50) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000500)={0x48, 0x7, r5, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x26}) 820.130182ms ago: executing program 4 (id=630): r0 = syz_open_dev$video(&(0x7f0000000300), 0x3, 0x28201) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000009f00)=0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000010009f7a86df0000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000000000110000008001b000000000004002b80"], 0x2c}}, 0x0) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000840)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000003509fe8fd57fd44aa5074c50bc700e530c001c00", @ANYRES32=0x0, @ANYBLOB="02000037"], 0x158}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm], 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r9 = socket$inet6(0xa, 0xa, 0x5) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f0000000640)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000400)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e23, 0x5, 0x4e24, 0x800, 0x2, 0x20, 0x0, 0x3c, r8, r11}, {0x7ff, 0x1, 0x259342b3, 0x36, 0x800, 0x0, 0xa, 0x8}, {0x9, 0x8000, 0x3, 0xfffffffffffffff9}, 0x22b1de6, 0x6e6bb0, 0x0, 0x1, 0x3}, {{@in=@multicast1, 0x4d6, 0x3c}, 0x2, @in6=@loopback, 0x3506, 0x1, 0x1, 0x7f, 0xc, 0xb1, 0x10}}, 0xe8) (async) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYRES8, @ANYRESHEX=r10, @ANYBLOB="410d00000080010028001280080026c25498d6aa7916132f76d3c2d3e8345330a80100687372001c0002800800020022ad64a75475a590f662682c6055e4855df66227276e2923974f46ae90065a7c715e41a902737cfa", @ANYRES32=r8, @ANYRESDEC=r12, @ANYRES16, @ANYRES32=r7], 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000000)) (async) ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000040)) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x18, 0x1, {0x0, 0x104}}]}, @TCA_NETEM_RATE={0x14, 0xd, {0x0, 0x0, 0x7}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x3}}]}}}]}, 0x9c}}, 0x0) (async) sendto$inet(r4, &(0x7f0000000340)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217", 0x58, 0x440dc, 0x0, 0x0) 432.456006ms ago: executing program 1 (id=634): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r0, &(0x7f0000000040)=@other={'lock', ' ', 'mem'}, 0x9) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)={0x18, 0x41, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x4, 0x2d}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c090}, 0x40040) (async, rerun: 64) close(r0) (rerun: 64) 432.069102ms ago: executing program 4 (id=635): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000d40)=0xfffffffe, 0x4) poll(&(0x7f0000000200)=[{r0, 0xe000}], 0x1, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) file_setattr(0xffffffffffffff9c, 0x0, &(0x7f0000000340)={0x0, 0x0, 0x800, 0xfffffe01, 0x881}, 0x18, 0x1000) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_open_dev$hidraw(&(0x7f0000000000), 0x1ff, 0x2c100) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r2, 0x0, 0x0) getsockopt$CAN_RAW_FD_FRAMES(r2, 0x65, 0x5, &(0x7f0000000240), &(0x7f0000000280)=0x4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d3, &(0x7f0000000480)) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e21, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x2}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @random="24bd0a4e6969", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x20, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x2, 0x0, 0xe7}}}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 428.522238ms ago: executing program 3 (id=636): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x21, 0x0, 0x3, 0x0, 0x144}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x9c, 0x10, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4a0d, 0x10a}, [@IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VF_PORTS={0x58, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_REQUEST={0x5}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xfc\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d120f9cebdcdbd5a73e8422c475b6f30"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0xa, 0x2, 'wlan\xdf\x00'}]}]}, @IFLA_NET_NS_FD={0x8}]}, 0x9c}, 0x1, 0xba01, 0x0, 0x40880}, 0xc880) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newlink={0x9c, 0x10, 0x100, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4a0d, 0x10a}, [@IFLA_MTU={0x8, 0x4, 0x3}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VF_PORTS={0x58, 0x18, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x4}, @IFLA_PORT_REQUEST={0x5, 0x6, 0xf}, @IFLA_PORT_REQUEST={0x5}]}, {0x4}, {0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x6, 0x2, '\xfc\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d120f9cebdcdbd5a73e8422c475b6f30"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0xa, 0x2, 'wlan\xdf\x00'}]}]}, @IFLA_NET_NS_FD={0x8}]}, 0x9c}, 0x1, 0xba01, 0x0, 0x40880}, 0xc880) 427.503756ms ago: executing program 2 (id=637): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x0, 0x3938700}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000000, 0xc3072, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket(0x2b, 0x1, 0x1) listen(r0, 0x5) accept4$vsock_stream(r0, 0x0, 0x0, 0x80800) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010424bd70007cc8b6548e13825e08000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x0) writev(r2, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="04630200c9001b7deb19026dbd7cc480d96f2959f19a523bde3871c0f8ae36d37870eab8adfe1bf6a4e9a018d4c1f8522dc34ac4bfa19341f9bac4257f4fa8820cb69f97c0bbd8c0791887b1780ce0c571402c332254e30bddea50b7bfbbf1907a1532aca14dd6ec9ed9cbcb30e535481469f8609c9e4f80f456089924371780c45bce4f07f642e565f5e07005c391a1e009c54571d50fad46e1de3e5b1de4f8ed0564fb9b5b740c9b8e88c187c075dcdf20ad8c9930bf05f05f45aa3bbf"], 0x6) 426.809308ms ago: executing program 3 (id=638): r0 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) pread64(r0, &(0x7f00000002c0)=""/73, 0xffffffeb, 0x936) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0xb}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x3, 0x2000000, 0x0, 0x3}}, 0x2e) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010040000000300000006000100050000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008845}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80200, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000080), 0x9, 0x7bd3b2a1b6de2cce) r8 = syz_open_dev$media(&(0x7f0000000340), 0x3, 0x101000) ioctl$MEDIA_IOC_REQUEST_ALLOC(r8, 0x80047c05, &(0x7f00000000c0)=0xffffffffffffffff) sendfile(r7, r9, &(0x7f0000000180)=0x3, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x0, r11}) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000040)={0x27805000000, 0x0, 0x0, r11, 0x5}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080000006400000008000200c8"], 0x2c}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000004c0)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @local}]}, 0x2c}}, 0x0) r13 = syz_open_dev$sndctrl(&(0x7f0000003f40), 0x1, 0x109800) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r13, 0xc1105511, &(0x7f0000004000)={{0x4, 0x6, 0x4, 0x9, 'syz0\x00', 0x7ff}, 0x0, 0x3, 0x8, 0x0, 0x0, 0x6ca, 'syz1\x00', 0x0}) 353.958609ms ago: executing program 4 (id=639): r0 = socket(0x10, 0xa, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a3100000000080005"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280"], 0x48}}, 0x4084) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 353.796883ms ago: executing program 1 (id=640): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000020c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="110b2dbd7000fddbdf2507000000836e4770a393258589db90b82be871a58a0d888c767c1f63f8643764077ed16c10dbfcb4cffb68829b4951e4c13723123a87fc373dcd74e723d17075192003277cf4e6db5dfceb223453d581f20c784d2f7fb4bce4"], 0x14}}, 0x4090) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x40, 0x0, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x40}}, 0x400c0c0) ioctl$sock_inet6_SIOCDIFADDR(r2, 0x8936, &(0x7f0000000000)={@loopback, 0x80, r4}) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) 353.568414ms ago: executing program 4 (id=641): ioprio_set$pid(0x1, 0x0, 0x4000) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500"], 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x60400, 0xb0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = socket(0x2, 0x3, 0x6) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='1\x00', 0x1) ioprio_set$pid(0x1, 0x0, 0x4000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500"], 0x50) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x39a}) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) (async) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x60400, 0xb0) (async) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./proc\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) (async) socket(0x2, 0x3, 0x6) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sys/net/ipv6/conf/all/forwarding\x00', 0x1, 0x0) (async) write(r2, &(0x7f0000000180)='1\x00', 0x1) (async) 352.808881ms ago: executing program 1 (id=642): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20044894) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000f40)=0xffffffff, 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) munlock(&(0x7f0000002000/0x2000)=nil, 0x2000) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wg2\x00'}) 252.689252ms ago: executing program 4 (id=643): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x10c, 0x0, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xbc, 0x6, "0190e3c2a4272dfa7b46885048923895706b3323c0d160cdd290ecca07d033f543e585f07e6c07533c79d3bcffd75888835379f90313f9ca6781657508e8d25c8174d596ba14c8cd4735aa4aa2175633cfb8370e20450725f762312e4aff778a49d3faf04dba1f3864dbc09732ee1cfdf2a1b4f06d0cf11d13eafea1c0ffb1852b2a7c8a66d8dae7eef95dbe4d997e824d4a7f82eaf14af9d6d05e30bbd36259c85aaffdc5a2f6ed453264dd433608023ecae04680c50c71"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe6f2e206f9fb65f1}}}, 0x134}, 0x1, 0x0, 0x0, 0x8880}, 0x24044010) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x1, 0x7, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000009000128009000100766c616e00000000800002800c0002000e0000000a000000340004800c0001001790000002000000080001"], 0xb8}}, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) r4 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r4, 0x40106f52, &(0x7f0000000400)={0x3b, &(0x7f00000001c0)=[{0x24, '\x00', @data=0x9, 0x2}]}) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r6, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="51252cbd7000fddbdf3107000000080001000d000000140004006970766c616e310000000400000000007e1e38b5e4fc989c9a1c9cf73cd27486e50d6c67f8890c68707f38e4ab543cac0490a79326a34a49bd"], 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x10) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r4, 0xf507, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000600)=""/4096, &(0x7f0000001600)=0x1000) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r5) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000001700)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x48, r8, 0x20, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x4}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_IRQ={0x8, 0x5, 0xd7eb}, @ETHTOOL_A_COALESCE_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1ff}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000004) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000000000)={0x1c, 0x2, 0x1, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) 203.919624ms ago: executing program 3 (id=644): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x40c42, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./debug/kvm/exits\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0', 0x1) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0x7, 0x1, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x58, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast1}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r8, &(0x7f0000000200)=[{&(0x7f0000000240)='n', 0x1}], 0x1) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000100)={0x9, @pix={0x5, 0x4, 0x41416770, 0x7, 0x1, 0x40, 0x9, 0x5, 0x0, 0x1, 0x1, 0x5}}) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x1a}}}}]}, 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001200)={&(0x7f0000001300), 0x10, &(0x7f0000001400)={&(0x7f0000001500)={0x60, r4, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r9}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r10}}}]}}]}, 0x60}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)) 103.645356ms ago: executing program 3 (id=645): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r5 = socket(0x1, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRESOCT=r1, @ANYRES64=r0, @ANYRES32=r4, @ANYBLOB="0a0006000802110000010000060066008e8800001c0033"], 0x4c}}, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r2, 0x0, 0xffdd) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40c, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12614, 0x6818}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_USE_CARRIER={0x5, 0x6, 0x80}, @IFLA_BOND_PRIMARY={0x8, 0xb, r1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 97.531692ms ago: executing program 4 (id=646): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000440)=0x1) write(r1, &(0x7f0000000180)="2a002e2f202031343734383336342320010000000000009fb4c31fe6f700203020300a", 0x23) getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000080), 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="eb0000039f231cb85b39a08784bea9de38ab42fbe40de4e95f17e3cab97c8b33bcaba19c00cf701c6b9aa029255fea191baeb6840276f585621bdb191831e40c33c69f68d8c45b42aecb7b063c3c9a9efb3cf3f2170d3fb1bfa5f38bde08066926b65dbf8a40eb3292240e8609678bbd54a1f7307be4a189a618963b7b4bcef5d19e35d68bce0e7f53db106eda1fddd65c4c3a2eb877c88a32720ca188b8af0f087361b0cd743337012880a76f82b4d10c8e0e0c2e90c714fc2cc2da7106001000000000004fbb3f3dfd75411fa37d22f7f9d47ae6293aed7e5288440da7", @ANYRES16=r3, @ANYBLOB="010020000000fddbdf252300000018000180140002006970365f767469300000000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000400)={0x6, 0x7fffffff, 0xfffff13d, 0x0, 0x8}) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r4, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000500)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x508818, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='off', 0x3) write(r5, &(0x7f0000000180)='on', 0x2) syz_fuse_handle_req(r4, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_virt_wifi\x00'}) setsockopt$sock_attach_bpf(r0, 0x29, 0x4b, 0x0, 0x4) 97.366985ms ago: executing program 3 (id=647): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) ioctl$SOUND_PCM_READ_RATE(r1, 0x80045002, &(0x7f0000000040)) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)='ext2\x00', 0x8080, &(0x7f00000001c0)='discard') 0s ago: executing program 3 (id=648): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x20005, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x6, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121701, 0x0) ioctl$TIOCOUTQ(r4, 0x5411, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf252b000000180001801400020076657468305f746f5f626174616476"], 0x2c}, 0x1, 0x0, 0x0, 0x8800}, 0x4048040) syz_usb_disconnect(r1) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000400)={0x3b, &(0x7f00000001c0)=[{0x24, '\x00', @data=0x9, 0x2}]}) kernel console output (not intermixed with test programs): 0 [ 49.655844][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.658398][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.661646][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.666742][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.694173][ T5540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.707971][ T5729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.734267][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.737974][ T115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.741287][ T115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.758771][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.760348][ T115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.762412][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.765392][ T115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.768152][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.772212][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.795827][ T115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.798357][ T115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.816163][ T781] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.819104][ T781] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.831564][ T5880] Bluetooth: MGMT ver 1.23 [ 49.835314][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.839302][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.841957][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.845526][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.847972][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.850604][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.853018][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.856567][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.859043][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.873802][ T5540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.934397][ T5887] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 50.009630][ T5898] Zero length message leads to an empty skb [ 50.021151][ T5902] netlink: 'syz.1.2': attribute type 10 has an invalid length. [ 50.024147][ T5902] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 50.024142][ T5898] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 50.026945][ T5902] dummy0: entered promiscuous mode [ 50.192801][ T5917] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12'. [ 50.253021][ T5930] overlayfs: failed to resolve './file0': -2 [ 50.285476][ T5936] ufs: You didn't specify the type of your ufs filesystem [ 50.285476][ T5936] [ 50.285476][ T5936] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 50.285476][ T5936] [ 50.285476][ T5936] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 50.294916][ T5936] ufs: failed to set blocksize [ 50.338259][ T5941] 8021q: VLANs not supported on ip6tnl0 [ 50.346484][ T5940] netlink: NAT attribute type 6 has unexpected length (0 != 2) [ 50.350202][ T5940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.480549][ T5959] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 50.485698][ T5960] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 50.494376][ T5835] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 50.535067][ T5972] netlink: 'syz.0.28': attribute type 10 has an invalid length. [ 50.542828][ T5968] Bluetooth: MGMT ver 1.23 [ 50.547632][ T5972] team0: Device wg2 is of different type [ 50.579302][ T5977] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 50.616334][ T5965] syzkaller0: entered promiscuous mode [ 50.618705][ T5965] syzkaller0: entered allmulticast mode [ 50.634949][ T5980] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 50.646222][ T5835] usb 8-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 50.654536][ T5835] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 50.659060][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 50.880775][ T5835] qmi_wwan 8-1:1.0: cdc-wdm0: USB WDM device [ 50.895821][ T5835] wwan wwan0: port wwan0qmi0 attached [ 50.993712][ T5738] Bluetooth: hci0: command tx timeout [ 50.995352][ T5739] Bluetooth: hci2: command tx timeout [ 51.075670][ T5739] Bluetooth: hci3: command tx timeout [ 51.092895][ T5835] qmi_wwan 8-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, 16:87:90:45:c5:fb [ 51.184934][ T6017] IPVS: set_ctl: invalid protocol: 108 0.0.0.0:20002 [ 51.300087][ T5835] usb 8-1: USB disconnect, device number 2 [ 51.318656][ T5835] qmi_wwan 8-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 51.482634][ T5835] wwan wwan0: port wwan0qmi0 disconnected [ 51.636917][ T42] kauditd_printk_skb: 179 callbacks suppressed [ 51.636927][ T42] audit: type=1400 audit(1787472503.320:345): avc: denied { write } for pid=6056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.685748][ T42] audit: type=1400 audit(1787472503.370:346): avc: denied { write } for pid=6061 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.790614][ T6070] syz.2.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 51.842012][ T6073] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 51.886214][ T42] audit: type=1400 audit(1787472503.570:347): avc: denied { write } for pid=6079 comm="syz.3.48" name="unix" dev="proc" ino=4026533049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 51.893195][ T42] audit: type=1400 audit(1787472503.570:348): avc: denied { create } for pid=6079 comm="syz.3.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 51.950126][ T42] audit: type=1400 audit(1787472503.630:349): avc: denied { read write } for pid=6081 comm="syz.3.49" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.960722][ T42] audit: type=1400 audit(1787472503.630:350): avc: denied { open } for pid=6081 comm="syz.3.49" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.964657][ T6082] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 51.975411][ T42] audit: type=1400 audit(1787472503.630:351): avc: denied { ioctl } for pid=6081 comm="syz.3.49" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 51.987975][ T42] audit: type=1400 audit(1787472503.630:352): avc: denied { create } for pid=6081 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 51.997921][ T42] audit: type=1400 audit(1787472503.630:353): avc: denied { connect } for pid=6081 comm="syz.3.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 52.004753][ T42] audit: type=1400 audit(1787472503.660:354): avc: denied { mount } for pid=6086 comm="syz.2.51" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 52.096340][ T6094] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 52.130026][ T6099] FAULT_INJECTION: forcing a failure. [ 52.130026][ T6099] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 52.135455][ T6099] CPU: 3 UID: 0 PID: 6099 Comm: syz.3.54 Not tainted syzkaller #0 PREEMPT(full) [ 52.135476][ T6099] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 52.135486][ T6099] Call Trace: [ 52.135493][ T6099] [ 52.135500][ T6099] dump_stack_lvl+0x100/0x190 [ 52.135531][ T6099] should_fail_ex.cold+0x5/0xa [ 52.135554][ T6099] _copy_from_user+0x2e/0xd0 [ 52.135585][ T6099] get_timespec64+0x8d/0x240 [ 52.135611][ T6099] ? __pfx_get_timespec64+0x10/0x10 [ 52.135641][ T6099] __x64_sys_utimensat+0x150/0x290 [ 52.135665][ T6099] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 52.135686][ T6099] ? xfd_validate_state+0x129/0x190 [ 52.135722][ T6099] do_syscall_64+0x123/0x790 [ 52.135745][ T6099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.135763][ T6099] RIP: 0033:0x7fbbabb9e0d9 [ 52.135780][ T6099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.135796][ T6099] RSP: 002b:00007fbbaca8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 52.135816][ T6099] RAX: ffffffffffffffda RBX: 00007fbbabe25fa0 RCX: 00007fbbabb9e0d9 [ 52.135829][ T6099] RDX: 0000200000000100 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 52.135841][ T6099] RBP: 00007fbbabc35024 R08: 0000000000000000 R09: 0000000000000000 [ 52.135851][ T6099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 52.135861][ T6099] R13: 00007fbbabe26038 R14: 00007fbbabe25fa0 R15: 00007ffd95f1e6e8 [ 52.135884][ T6099] [ 52.136647][ T6099] netlink: ct family unspecified [ 52.158369][ T6101] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 52.159717][ T6099] openvswitch: netlink: Actions may not be safe on all matching packets [ 52.161755][ T6101] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 52.213539][ T5978] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.214101][ T6103] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 52.365908][ T5978] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 52.370511][ T5978] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.374011][ T5978] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 52.377783][ T5978] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 52.381076][ T5978] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 52.385777][ T5978] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.388066][ T5978] usb 7-1: Product: syz [ 52.389378][ T5978] usb 7-1: Manufacturer: syz [ 52.390811][ T5978] usb 7-1: SerialNumber: syz [ 52.398019][ T5978] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 52.404331][ T5978] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 52.409072][ T5978] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 52.473560][ T34] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 52.493544][ T41] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 52.601019][ T61] usb 7-1: USB disconnect, device number 2 [ 52.607674][ T61] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 52.614524][ T61] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 52.618544][ T61] ti_usb_3410_5052 7-1:2.0: device disconnected [ 52.624093][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 52.628751][ T34] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 52.632354][ T34] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x82 has invalid maxpacket 41446, setting to 64 [ 52.636058][ T34] usb 8-1: config 0 interface 0 has no altsetting 0 [ 52.640522][ T34] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 52.643033][ T34] usb 8-1: Product: syz [ 52.644424][ T34] usb 8-1: Manufacturer: syz [ 52.645930][ T34] usb 8-1: SerialNumber: syz [ 52.649132][ T34] usb 8-1: config 0 descriptor?? [ 52.651517][ T6107] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 52.658167][ T34] usb 8-1: selecting invalid altsetting 0 [ 52.664098][ T41] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 52.670028][ T41] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.675063][ T41] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 52.679322][ T41] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 52.685402][ T41] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 52.688675][ T41] usb 6-1: Product: syz [ 52.690351][ T41] usb 6-1: Manufacturer: syz [ 52.699309][ T6109] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 52.707774][ T41] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 52.716621][ T41] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 52.833579][ T5739] Bluetooth: hci1: command tx timeout [ 52.862595][ T6107] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.867056][ T6106] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 52.871798][ T61] usb 8-1: USB disconnect, device number 3 [ 52.925900][ T34] usb 6-1: USB disconnect, device number 2 [ 52.932046][ T34] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 52.935297][ T34] garmin_gps 6-1:1.0: device disconnected [ 53.073799][ T5739] Bluetooth: hci2: command tx timeout [ 53.074837][ T5738] Bluetooth: hci0: command tx timeout [ 53.155058][ T6114] evm: overlay not supported [ 53.163650][ T5738] Bluetooth: hci3: command tx timeout [ 53.427316][ T6121] ip_tables: iptables: counters copy to user failed while replacing table [ 53.455828][ T6123] netlink: 36 bytes leftover after parsing attributes in process `syz.1.62'. [ 53.578008][ T6129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18962 sclass=netlink_route_socket pid=6129 comm=syz.3.64 [ 54.053849][ T5814] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.057590][ T6153] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 54.088668][ T1345] cfg80211: failed to load regulatory.db [ 54.167253][ T6158] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 54.236739][ T5814] usb 8-1: Using ep0 maxpacket: 16 [ 54.240703][ T5814] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 54.246391][ T5814] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.252864][ T5814] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 54.257166][ T5814] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.262405][ T5814] usb 8-1: config 0 descriptor?? [ 54.296204][ T6153] mmap: syz.0.72 (6153) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.369214][ T6174] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 54.369697][ T6175] netlink: 'syz.1.79': attribute type 2 has an invalid length. [ 54.412819][ T6180] bond1: entered allmulticast mode [ 54.417343][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz.1.81'. [ 54.420635][ T6180] netlink: 60 bytes leftover after parsing attributes in process `syz.1.81'. [ 54.498785][ T5814] usbhid 8-1:0.0: can't add hid device: -71 [ 54.500894][ T5814] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 54.504766][ T5814] usb 8-1: USB disconnect, device number 4 [ 54.554206][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'. [ 54.732274][ T6199] netlink: 28 bytes leftover after parsing attributes in process `syz.1.86'. [ 54.784037][ T6203] netlink: 124 bytes leftover after parsing attributes in process `syz.1.88'. [ 54.787717][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.88'. [ 54.914136][ T5738] Bluetooth: hci1: command tx timeout [ 54.928077][ T6222] syz.1.90 uses obsolete (PF_INET,SOCK_PACKET) [ 54.930855][ T6222] syzkaller1: entered promiscuous mode [ 54.932606][ T6222] syzkaller1: entered allmulticast mode [ 54.985608][ T6233] IPv4: Oversized IP packet from 127.202.26.0 [ 55.003506][ T41] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 55.154486][ T5738] Bluetooth: hci0: command tx timeout [ 55.155213][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 55.159480][ T41] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 55.163736][ T5738] Bluetooth: hci2: command tx timeout [ 55.168872][ T41] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 55.172294][ T41] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 55.176929][ T41] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 55.181058][ T41] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 55.185894][ T41] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 55.190050][ T41] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 55.196122][ T41] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.201803][ T6245] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.211324][ T6245] 9p: Unknown access argument 18446744073709551615: -34 [ 55.233583][ T5738] Bluetooth: hci3: command tx timeout [ 55.279730][ T6251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=6251 comm=syz.0.102 [ 55.299723][ T6253] [U] ^O^O [ 55.333000][ T6257] netlink: 32 bytes leftover after parsing attributes in process `syz.0.103'. [ 55.393165][ T6262] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 55.408065][ T41] usb 7-1: GET_CAPABILITIES returned 0 [ 55.413657][ T41] usbtmc 7-1:16.0: can't read capabilities [ 55.616833][ T9] usb 7-1: USB disconnect, device number 3 [ 55.623128][ T6291] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 55.673356][ T6293] gadgetfs: bound to dummy_udc driver [ 55.764731][ T6297] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 55.885660][ T6311] program syz.0.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 55.913701][ T61] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.924919][ C3] gadgetfs: connected [ 55.926553][ T61] gadgetfs: disconnected [ 56.045132][ T6315] xt_l2tp: v2 doesn't support IP mode [ 56.063345][ T6305] kvm_intel: kvm [6292]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc2d9 [ 56.076734][ T6305] kvm: kvm [6292]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x351b [ 56.079992][ T6305] kvm: kvm [6292]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x40c4 [ 56.086964][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.121'. [ 56.089881][ T6317] netlink: 'syz.0.121': attribute type 10 has an invalid length. [ 56.092379][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.121'. [ 56.093303][ T6305] kvm: kvm [6292]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x5dba [ 56.100201][ T6317] geneve2: entered promiscuous mode [ 56.101908][ T6317] geneve2: entered allmulticast mode [ 56.103766][ C3] gadgetfs: connected [ 56.105307][ T61] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 56.111697][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.121522][ C3] gadgetfs: configuration #1 [ 56.234342][ T6292] gadgetfs: suspended from state 3 [ 56.235529][ T61] usb 5-1: can't set config #1, error -71 [ 56.237013][ T6292] gadgetfs: disconnected [ 56.240536][ T61] usb 5-1: USB disconnect, device number 2 [ 56.269045][ T6331] xt_hashlimit: size too large, truncated to 1048576 [ 56.271230][ T6331] xt_hashlimit: invalid rate [ 56.332324][ T6343] netlink: 12 bytes leftover after parsing attributes in process `syz.0.128'. [ 56.360626][ T6343] bond1: entered promiscuous mode [ 56.370898][ T6343] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.375204][ T6348] warning: `syz.3.129' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 56.391286][ T6343] bond1: (slave ipip0): refused to change device type [ 56.411996][ T6351] ======================================================= [ 56.411996][ T6351] WARNING: The mand mount option has been deprecated and [ 56.411996][ T6351] and is ignored by this kernel. Remove the mand [ 56.411996][ T6351] option from the mount to silence this warning. [ 56.411996][ T6351] ======================================================= [ 56.484369][ T6369] loop5: detected capacity change from 0 to 7 [ 56.495736][ T6369] Dev loop5: unable to read RDB block 7 [ 56.501007][ T6369] loop5: AHDI p1 p3 p4 [ 56.502432][ T6369] loop5: partition table partially beyond EOD, truncated [ 56.506672][ T6369] loop5: p1 size 100663296 extends beyond EOD, truncated [ 56.510691][ T6369] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 56.565298][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 56.566289][ T5733] udevd[5733]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 56.660251][ T42] kauditd_printk_skb: 117 callbacks suppressed [ 56.660263][ T42] audit: type=1400 audit(1787472508.340:472): avc: denied { write } for pid=6379 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.702933][ T42] audit: type=1400 audit(1787472508.380:473): avc: denied { map_create } for pid=6383 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.711018][ T42] audit: type=1400 audit(1787472508.380:474): avc: denied { map_read map_write } for pid=6383 comm="syz.1.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.722208][ T42] audit: type=1400 audit(1787472508.400:475): avc: denied { write } for pid=6382 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.843840][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 56.847067][ T42] audit: type=1400 audit(1787472508.530:476): avc: denied { create } for pid=6390 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.855017][ T6392] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 56.857800][ T42] audit: type=1400 audit(1787472508.530:477): avc: denied { bind } for pid=6390 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.865992][ T6391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.138'. [ 56.871957][ T42] audit: type=1400 audit(1787472508.530:478): avc: denied { setopt } for pid=6390 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.881774][ T42] audit: type=1400 audit(1787472508.530:479): avc: denied { write } for pid=6390 comm="syz.1.139" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 56.888549][ T42] audit: type=1400 audit(1787472508.570:480): avc: denied { connect } for pid=6389 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 56.927435][ T6397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.140'. [ 56.932343][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.0.140'. [ 56.945171][ T42] audit: type=1400 audit(1787472508.630:481): avc: denied { shutdown } for pid=6398 comm="syz.1.141" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 56.993095][ T6397] ip_tables: iptables: counters copy to user failed while replacing table [ 57.014678][ T34] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 57.020075][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.022696][ T34] usb 7-1: Product: syz [ 57.024284][ T34] usb 7-1: Manufacturer: syz [ 57.025784][ T34] usb 7-1: SerialNumber: syz [ 57.059583][ T61] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 57.214283][ T6415] fuse: Unknown parameter 'fd}0x0000000000000003' [ 57.218716][ T6415] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 57.220127][ T6416] fuse: Unknown parameter 'fd}0x0000000000000003' [ 57.273769][ T34] usb 7-1: USB disconnect, device number 4 [ 57.352836][ T6433] netlink: 14 bytes leftover after parsing attributes in process `syz.3.149'. [ 58.123541][ T61] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 58.134802][ T61] ath9k_htc: Failed to initialize the device [ 58.140205][ T34] usb 7-1: ath9k_htc: USB layer deinitialized [ 58.443550][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.593590][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 58.596602][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=58.e8 [ 58.600239][ T34] usb 7-1: too many configurations: 196, using maximum allowed: 8 [ 58.604863][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 58.608750][ T34] usb 7-1: can't read configurations, error -61 [ 58.733534][ T34] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 58.883500][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 58.886002][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=58.e8 [ 58.888687][ T34] usb 7-1: too many configurations: 196, using maximum allowed: 8 [ 58.892039][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 58.894317][ T34] usb 7-1: can't read configurations, error -61 [ 58.897296][ T34] usb usb7-port1: attempt power cycle [ 59.233854][ T34] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 59.254310][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 59.257096][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=58.e8 [ 59.260944][ T34] usb 7-1: too many configurations: 196, using maximum allowed: 8 [ 59.265810][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 59.268987][ T34] usb 7-1: can't read configurations, error -61 [ 59.403547][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 59.423928][ T34] usb 7-1: Using ep0 maxpacket: 32 [ 59.425995][ T34] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=58.e8 [ 59.428902][ T34] usb 7-1: too many configurations: 196, using maximum allowed: 8 [ 59.432783][ T34] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 59.437648][ T34] usb 7-1: can't read configurations, error -61 [ 59.440843][ T34] usb usb7-port1: unable to enumerate USB device [ 59.472548][ T6466] random: crng reseeded on system resumption [ 59.634121][ T9] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.637815][ T6490] netlink: 'syz.0.167': attribute type 1 has an invalid length. [ 59.664866][ T6490] 8021q: adding VLAN 0 to HW filter on device bond2 [ 59.668015][ T6490] bond1: (slave bond2): making interface the new active one [ 59.670859][ T6490] bond1: (slave bond2): Enslaving as an active interface with an up link [ 59.679820][ T6490] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 59.684759][ T6490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 59.783516][ T34] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 59.794367][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 59.798646][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 59.805476][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.808840][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 59.813964][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.814777][ T6498] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 59.816426][ T9] usb 6-1: Product: syz [ 59.816436][ T9] usb 6-1: Manufacturer: syz [ 59.816443][ T9] usb 6-1: SerialNumber: syz [ 59.825436][ T9] usb 6-1: config 0 descriptor?? [ 59.955019][ T6481] macvlan0: entered allmulticast mode [ 59.957024][ T6481] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 59.965083][ T6481] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 59.970385][ T34] usb 8-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 59.984520][ T34] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 59.987714][ T34] usb 8-1: can't read configurations, error -71 [ 60.036856][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 60.043016][ T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input5 [ 60.054841][ T9] imon:send_packet: packet tx failed (-71) [ 60.073520][ T9] imon 6-1:0.0: panel buttons/knobs setup failed [ 60.133516][ T9] rc_core: IR keymap rc-imon-pad not found [ 60.135359][ T9] Registered IR keymap rc-empty [ 60.137335][ T9] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 60.140925][ T9] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 60.145693][ T9] imon:send_packet: packet tx failed (-71) [ 60.164709][ T9] imon 6-1:0.0: remote input dev register failed [ 60.166870][ T9] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 60.185917][ T9] imon 6-1:0.0: unable to initialize intf0, err 0 [ 60.187966][ T9] imon:imon_probe: failed to initialize context! [ 60.189900][ T9] imon 6-1:0.0: unable to register, err -19 [ 60.196428][ T9] usb 6-1: USB disconnect, device number 3 [ 60.503892][ T5814] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.515378][ T6524] cgroup: none used incorrectly [ 60.518277][ T6524] cgroup: none used incorrectly [ 60.533524][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 60.653976][ T5814] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 60.659558][ T5814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.662255][ T5814] usb 5-1: Product: syz [ 60.663690][ T5814] usb 5-1: Manufacturer: syz [ 60.665190][ T5814] usb 5-1: SerialNumber: syz [ 60.668823][ T5814] usb 5-1: config 0 descriptor?? [ 60.694230][ T9] usb 6-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 60.699018][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 60.703724][ T9] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 60.708009][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 60.713837][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.717235][ T9] usb 6-1: Product: syz [ 60.718892][ T9] usb 6-1: Manufacturer: syz [ 60.720785][ T9] usb 6-1: SerialNumber: syz [ 60.727198][ T9] usb 6-1: config 0 descriptor?? [ 60.729345][ T6462] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 60.928750][ T6534] __nla_validate_parse: 6 callbacks suppressed [ 60.928767][ T6534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.171'. [ 60.933936][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 60.938830][ T9] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 61.203550][ T9] rc_core: IR keymap rc-imon-pad not found [ 61.205354][ T9] Registered IR keymap rc-empty [ 61.206837][ T9] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 61.209958][ T9] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 61.355057][ T9] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 61.359519][ T9] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input8 [ 61.365809][ T9] imon 6-1:0.0: iMON device (15c2:0045, intf0) on usb<6:4> initialized [ 61.465315][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.468152][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.470599][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.472965][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.476118][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.478542][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.480935][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.483279][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.485868][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.488259][ T34] hid-generic 000A:FFFFFF1D:0002.0002: unknown main item tag 0x0 [ 61.494548][ T34] hid-generic 000A:FFFFFF1D:0002.0002: hidraw1: HID v0.04 Device [syz0] on syz1 [ 61.521822][ T6543] fido_id[6543]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 61.530684][ T6545] netlink: 32 bytes leftover after parsing attributes in process `syz.2.176'. [ 61.538799][ T6462] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 61.542825][ T6462] Cannot find add_set index 0 as target [ 61.551679][ T9] usb 6-1: USB disconnect, device number 4 [ 61.741592][ T6560] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 61.754477][ T6560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.766227][ T6560] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 62.003527][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 62.154150][ T34] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 62.157816][ T34] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.161007][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 62.164122][ T34] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 62.167113][ T34] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 62.170922][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.176714][ T6560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.179016][ T6560] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 62.182414][ T34] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 62.185612][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 62.187990][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 62.192260][ T34] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 62.198106][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 62.201858][ T34] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 62.209544][ T34] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 62.382719][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 62.382731][ T42] audit: type=1400 audit(1787472514.060:515): avc: denied { mount } for pid=6559 comm="syz.2.179" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.482528][ T42] audit: type=1400 audit(1787472514.160:516): avc: denied { create } for pid=6572 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.488033][ T34] usb 7-1: USB disconnect, device number 9 [ 62.489486][ T42] audit: type=1400 audit(1787472514.180:517): avc: denied { write } for pid=6572 comm="syz.1.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.497706][ T34] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 62.506174][ T34] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 62.509398][ T34] keyspan 7-1:1.0: device disconnected [ 62.519367][ T42] audit: type=1400 audit(1787472514.200:518): avc: denied { mount } for pid=6572 comm="syz.1.183" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 62.521069][ T6573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 62.573196][ T6576] netlink: 200 bytes leftover after parsing attributes in process `syz.1.184'. [ 62.737729][ T6585] veth1_virt_wifi: entered allmulticast mode [ 62.834452][ T6591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.187'. [ 62.863850][ T5540] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.867221][ T5540] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.870650][ T5540] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.874219][ T5540] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 62.965275][ T42] audit: type=1400 audit(1787472514.650:519): avc: denied { create } for pid=6594 comm="syz.1.188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 63.019274][ T42] audit: type=1400 audit(1787472514.700:520): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 63.053593][ T6600] process 'syz.2.190' launched './file1' with NULL argv: empty string added [ 63.057599][ T42] audit: type=1400 audit(1787472514.740:521): avc: denied { execute_no_trans } for pid=6599 comm="syz.2.190" path="/40/file1" dev="tmpfs" ino=240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 63.068672][ T42] audit: type=1400 audit(1787472514.740:522): avc: denied { setopt } for pid=6596 comm="syz.1.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 63.076092][ T42] audit: type=1400 audit(1787472514.740:523): avc: denied { watch_mount watch_reads } for pid=6596 comm="syz.1.189" path="/53" dev="tmpfs" ino=283 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 63.085737][ T42] audit: type=1400 audit(1787472514.760:524): avc: denied { append } for pid=6599 comm="syz.2.190" name="frontend0" dev="devtmpfs" ino=950 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 63.120804][ T6600] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 63.162269][ T6604] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 63.167426][ T6604] netlink: 868 bytes leftover after parsing attributes in process `syz.1.191'. [ 63.212827][ T6606] netlink: 'syz.1.192': attribute type 1 has an invalid length. [ 63.215395][ T6606] netlink: 224 bytes leftover after parsing attributes in process `syz.1.192'. [ 63.257341][ T6615] overlayfs: failed to resolve './bus': -2 [ 63.283858][ T10] usb 5-1: USB disconnect, device number 3 [ 63.387310][ T6620] veth3: entered allmulticast mode [ 63.582975][ T6642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.200'. [ 63.587507][ T6642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6642 comm=syz.2.200 [ 63.614860][ T37] IPVS: starting estimator thread 0... [ 63.637382][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 63.641542][ T6651] xt_hashlimit: size too large, truncated to 1048576 [ 63.641700][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 63.648017][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 63.675069][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 63.703514][ T6648] IPVS: using max 45 ests per chain, 108000 per kthread [ 63.827722][ T5978] vcan0 speed is unknown, defaulting to 1000 [ 63.831994][ T6643] infiniband syz1: set active [ 63.835716][ T6643] infiniband syz1: added vcan0 [ 63.843750][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 63.848421][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 63.851334][ T10] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 63.853130][ T6643] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 63.859252][ T10] usb 5-1: string descriptor 0 read error: -22 [ 63.861351][ T6643] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 63.863998][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.870308][ T6643] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 63.885383][ T10] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 63.888634][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 63.894142][ T6643] RDS/IB: syz1: added [ 63.894290][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 63.895960][ T6643] smc: adding ib device syz1 with port count 1 [ 63.900464][ T6643] smc: ib device syz1 port 1 has no pnetid [ 63.905140][ T5978] vcan0 speed is unknown, defaulting to 1000 [ 63.913386][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 63.921060][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 63.925138][ T10] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 63.929428][ T10] usb 5-1: media controller created [ 63.936814][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 63.937297][ T6673] kvm: user requested TSC rate below hardware speed [ 63.939221][ T10] dw2102: i2c transfer failed. [ 63.944187][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 63.946973][ T10] dw2102: i2c transfer failed. [ 63.948889][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 63.951382][ T10] dw2102: i2c transfer failed. [ 63.957164][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 63.959454][ T10] dw2102: i2c transfer failed. [ 63.961452][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 63.962472][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.210'. [ 63.964127][ T10] dw2102: i2c transfer failed. [ 63.966349][ T6673] netlink: 4 bytes leftover after parsing attributes in process `syz.3.210'. [ 63.968230][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 63.973872][ T10] dw2102: i2c transfer failed. [ 63.975591][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 63.989208][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 63.993604][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.997909][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.002149][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.006912][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 64.013511][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 64.016364][ T10] dw2102: command 0x0e transfer failed. [ 64.018390][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 64.020358][ T10] dw2102: command 0x0e transfer failed. [ 64.034249][ T1361] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 64.091491][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 64.193863][ T1361] usb 7-1: Using ep0 maxpacket: 8 [ 64.196120][ T1361] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 64.199822][ T1361] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.203359][ T1361] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.207196][ T1361] usb 7-1: config 0 interface 0 has no altsetting 0 [ 64.209334][ T1361] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.214058][ T1361] usb 7-1: config 0 descriptor?? [ 64.254969][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 64.334760][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 64.337231][ T10] dw2102: command 0x0e transfer failed. [ 64.339478][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 64.341819][ T10] dw2102: command 0x0e transfer failed. [ 64.344197][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 64.346513][ T10] dw2102: command 0x51 transfer failed. [ 64.351284][ T6625] dvb-usb: bulk message failed: -22 (38/0) [ 64.354389][ T6625] dw2102: i2c transfer failed. [ 64.356992][ T6625] i2c i2c-2: Invalid block size returned: 34 [ 64.370589][ T10] DVB: Unable to find symbol ds3000_attach() [ 64.373006][ T10] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 64.381549][ T6643] vcan0 speed is unknown, defaulting to 1000 [ 64.423701][ T10] rc_core: IR keymap rc-su3000 not found [ 64.426160][ T10] Registered IR keymap rc-empty [ 64.430857][ T10] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0 [ 64.436901][ T10] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.0/usb5/5-1/rc/rc0/input9 [ 64.445911][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 64.448767][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 64.451165][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 64.456797][ T10] usb 5-1: USB disconnect, device number 4 [ 64.502855][ T10] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 64.587857][ T849] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 64.593241][ T849] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 64.624945][ T6686] ceph: No mds server is up or the cluster is laggy [ 64.627440][ T1361] mcp2221 0003:04D8:00DD.0003: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 64.832040][ T10] usb 7-1: USB disconnect, device number 10 [ 65.245844][ T6733] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.258155][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.261694][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.265128][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.269227][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.272116][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.275748][ T6733] netlink: 'syz.3.222': attribute type 1 has an invalid length. [ 65.303318][ T6733] bond1: option mode: invalid value (8) [ 65.306469][ T6733] bond1 (unregistering): Released all slaves [ 65.323672][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.363818][ T6742] synth uevent: /bus/platform/drivers/usb-conn-gpio: unknown uevent action string [ 65.424818][ T6732] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.473207][ T6752] binder: 6751:6752 ioctl c0306201 2000000003c0 returned -22 [ 65.477042][ T6754] binder: BINDER_SET_CONTEXT_MGR already set [ 65.480154][ T6754] binder: 6751:6754 ioctl 4018620d 200000003280 returned -16 [ 65.488571][ T6759] loop0: detected capacity change from 0 to 128 [ 65.560464][ T6772] binder: 6771:6772 ioctl c018620c 200000000240 returned -22 [ 65.656939][ T6780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 65.662874][ T6780] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3636772828 (465506921984 ns) > initial count (76220649728 ns). Using initial count to start timer. [ 65.734991][ T6786] kvm: kvm [6782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 65.738459][ T6786] kvm: kvm [6782]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 65.848728][ T6803] capability: warning: `syz.2.242' uses deprecated v2 capabilities in a way that may be insecure [ 65.859177][ T6803] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 66.111741][ T6821] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 66.121330][ T6821] CIFS: Attempting to mount //127.0.0.1/sø:e[�1ý2harefµDŽr=root [ 66.171917][ T6823] CIFS: VFS: \\127.0.0.1 SMB response too short (0 bytes) [ 66.180304][ T6821] CIFS: VFS: cifs_mount failed w/return code = -112 [ 66.253544][ T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 66.364905][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 66.395560][ T41] usb 6-1: device descriptor read/64, error -71 [ 66.542857][ T6849] /dev/sr0: Can't open blockdev [ 66.550994][ T6848] /dev/sr0: Can't open blockdev [ 66.642734][ T6863] netlink: 'syz.3.259': attribute type 49 has an invalid length. [ 66.647887][ T6863] bond0: (slave bond_slave_0): Releasing backup interface [ 66.653534][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 66.710077][ T6863] bond_slave_0: entered promiscuous mode [ 66.712543][ T6863] bond_slave_0: entered allmulticast mode [ 66.731905][ T5440] veth0_vlan: left promiscuous mode [ 66.739737][ T5978] veth0_vlan: entered promiscuous mode [ 66.793782][ T41] usb 6-1: device descriptor read/64, error -71 [ 66.808075][ T6872] fuse: Bad value for 'fd' [ 66.915005][ T41] usb usb6-port1: attempt power cycle [ 66.958971][ T6891] tun0: tun_chr_ioctl cmd 1074025675 [ 66.960817][ T6891] tun0: persist enabled [ 66.962571][ T6892] tun0: tun_chr_ioctl cmd 1074025675 [ 66.964491][ T6892] tun0: persist enabled [ 67.013963][ T6895] __nla_validate_parse: 2 callbacks suppressed [ 67.013975][ T6895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.265'. [ 67.273509][ T41] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 67.294145][ T41] usb 6-1: device descriptor read/8, error -71 [ 67.403736][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.533552][ T41] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 67.554341][ T41] usb 6-1: device descriptor read/8, error -71 [ 67.633706][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.665668][ T41] usb usb6-port1: unable to enumerate USB device [ 68.993379][ T42] kauditd_printk_skb: 44 callbacks suppressed [ 68.993394][ T42] audit: type=1400 audit(1787472520.670:569): avc: denied { write } for pid=6912 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.094214][ T42] audit: type=1400 audit(1787472520.770:570): avc: denied { write } for pid=6920 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.176274][ T6923] CIFS: Attempting to mount //127.0.0.1/share [ 69.948911][ T6923] CIFS: VFS: cifs_mount failed w/return code = -112 [ 70.000083][ T42] audit: type=1400 audit(1787472521.680:571): avc: denied { write } for pid=6928 comm="syz.1.269" name="functions" dev="configfs" ino=11463 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 70.023590][ T42] audit: type=1800 audit(1787472521.700:572): pid=6929 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.269" name="c_srate" dev="configfs" ino=16482 res=0 errno=0 [ 70.067946][ T6931] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 70.070597][ T6931] [U] J"—e:ÀÆ" [ 70.266601][ T6944] blkio.reset_stats is deprecated [ 70.290227][ T42] audit: type=1400 audit(1787472521.970:573): avc: denied { ioctl } for pid=6938 comm="syz.1.273" path="socket:[17414]" dev="sockfs" ino=17414 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.302289][ T42] audit: type=1400 audit(1787472521.980:574): avc: denied { write } for pid=6940 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 70.309478][ T42] audit: type=1400 audit(1787472521.990:575): avc: denied { connect } for pid=6940 comm="syz.2.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 70.515081][ T34] net_ratelimit: 2 callbacks suppressed [ 70.515098][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.606987][ T6954] syz.1.277 (6954): attempted to duplicate a private mapping with mremap. This is not supported. [ 70.628829][ T6954] input: syz0 as /devices/virtual/input/input10 [ 70.670767][ T42] audit: type=1400 audit(1787472522.350:576): avc: denied { write } for pid=6953 comm="syz.1.277" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 70.677996][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.679123][ T6954] input: syz0 as /devices/virtual/input/input11 [ 70.725049][ T42] audit: type=1400 audit(1787472522.410:577): avc: denied { write } for pid=6956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 70.776764][ T42] audit: type=1400 audit(1787472522.460:578): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 71.091611][ T6983] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 71.164596][ T1438] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.167682][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.207331][ T6989] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 71.249561][ T6991] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 71.523555][ T5978] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 71.553868][ T1345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.674813][ T5978] usb 8-1: New USB device found, idVendor=05e0, idProduct=0600, bcdDevice= 1.00 [ 71.678476][ T5978] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.682381][ T5978] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.687829][ T5978] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.690738][ T5978] usb 8-1: Product: syz [ 71.692527][ T5978] usb 8-1: Manufacturer: syz [ 71.694996][ T5978] usb 8-1: SerialNumber: syz [ 71.712589][ T5978] symbolserial 8-1:1.0: symbol converter detected [ 71.723320][ T5978] usb 8-1: symbol converter now attached to ttyUSB0 [ 71.795776][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.910862][ T6993] loop0: detected capacity change from 0 to 4096 [ 72.035485][ T6993] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 72.042698][ T6993] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 72.049767][ T6993] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 72.052786][ T6993] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 72.054919][ T6993] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 72.057346][ T6993] loop0: [ 72.062502][ T2088] usb 8-1: USB disconnect, device number 7 [ 72.072295][ T2088] symbol ttyUSB0: symbol converter now disconnected from ttyUSB0 [ 72.075797][ T2088] symbolserial 8-1:1.0: device disconnected [ 72.182014][ T7005] netlink: 'syz.2.289': attribute type 9 has an invalid length. [ 72.184928][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.289'. [ 72.463624][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.466362][ T7015] netlink: 'syz.2.295': attribute type 13 has an invalid length. [ 72.468668][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.478762][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.481493][ T7015] netlink: 'syz.2.295': attribute type 13 has an invalid length. [ 72.484757][ T7015] netlink: 4 bytes leftover after parsing attributes in process `syz.2.295'. [ 72.493728][ T5540] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.496633][ T5540] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.499395][ T5540] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.502517][ T5540] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 72.514076][ T7019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.296'. [ 72.516938][ T7019] netlink: 60 bytes leftover after parsing attributes in process `syz.2.296'. [ 72.604638][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.605109][ T7029] FAULT_INJECTION: forcing a failure. [ 72.605109][ T7029] name failslab, interval 1, probability 0, space 0, times 1 [ 72.610878][ T7029] CPU: 0 UID: 0 PID: 7029 Comm: syz.2.299 Tainted: G L syzkaller #0 PREEMPT(full) [ 72.610895][ T7029] Tainted: [L]=SOFTLOCKUP [ 72.610899][ T7029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 72.610906][ T7029] Call Trace: [ 72.610910][ T7029] [ 72.610915][ T7029] dump_stack_lvl+0x100/0x190 [ 72.610946][ T7029] should_fail_ex.cold+0x5/0xa [ 72.610961][ T7029] should_failslab+0xc2/0x120 [ 72.610982][ T7029] __kmalloc_cache_noprof+0x91/0x6b0 [ 72.610996][ T7029] ? resv_map_alloc+0x46/0x400 [ 72.611015][ T7029] resv_map_alloc+0x46/0x400 [ 72.611031][ T7029] hugetlbfs_get_inode+0x385/0x700 [ 72.611048][ T7029] hugetlb_file_setup+0x15b/0x5b0 [ 72.611064][ T7029] ksys_mmap_pgoff+0x242/0x610 [ 72.611082][ T7029] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 72.611098][ T7029] ? xfd_validate_state+0x129/0x190 [ 72.611116][ T7029] __x64_sys_mmap+0x125/0x190 [ 72.611135][ T7029] do_syscall_64+0x123/0x790 [ 72.611151][ T7029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.611162][ T7029] RIP: 0033:0x7f360d79e0d9 [ 72.611171][ T7029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.611181][ T7029] RSP: 002b:00007f360e5da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 72.611192][ T7029] RAX: ffffffffffffffda RBX: 00007f360da25fa0 RCX: 00007f360d79e0d9 [ 72.611199][ T7029] RDX: 000000000000000c RSI: 0000000000010001 RDI: 0000000000000000 [ 72.611207][ T7029] RBP: 00007f360d835024 R08: ffffffffffffffff R09: 0000000000000000 [ 72.611214][ T7029] R10: 000000000004c032 R11: 0000000000000246 R12: 0000000000000000 [ 72.611221][ T7029] R13: 00007f360da26038 R14: 00007f360da25fa0 R15: 00007ffd2481ee18 [ 72.611235][ T7029] [ 72.732158][ T7037] netlink: 80 bytes leftover after parsing attributes in process `syz.2.302'. [ 72.873352][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.312'. [ 72.877805][ T7064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 72.932993][ T7074] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 73.016869][ T7087] netlink: 'syz.3.320': attribute type 1 has an invalid length. [ 73.084632][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.240277][ T7095] tipc: Started in network mode [ 73.241990][ T7095] tipc: Node identity f629e773c11c, cluster identity 4711 [ 73.244871][ T7095] tipc: Enabled bearer , priority 0 [ 73.258235][ T7095] tipc: Disabling bearer [ 73.643712][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.723910][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 73.862790][ T5978] libceph: connect (1)[c::]:6789 error -101 [ 73.866552][ T5978] libceph: mon0 (1)[c::]:6789 connect error [ 73.894743][ T7116] ceph: No mds server is up or the cluster is laggy [ 73.957457][ T7132] program syz.2.334 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.963256][ T7134] IPVS: sync thread started: state = MASTER, mcast_ifn = batadv0, syncid = 4, id = 0 [ 74.002592][ T7137] nfs: Bad value for 'port' [ 74.058845][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 74.058861][ T42] audit: type=1400 audit(1787472525.740:599): avc: denied { map } for pid=7135 comm="syz.2.335" path="/dev/binderfs/binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 74.065115][ T7141] binder: BINDER_SET_CONTEXT_MGR already set [ 74.070065][ T7141] binder: 7135:7141 ioctl 4018620d 2000000002c0 returned -16 [ 74.283601][ T849] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 74.353238][ T42] audit: type=1400 audit(1787472526.030:600): avc: denied { watch_mount } for pid=7144 comm="syz.3.339" path="/93/file0" dev="tmpfs" ino=528 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 74.362403][ T7145] binder_alloc: 7144: binder_alloc_buf, no vma [ 74.367858][ T42] audit: type=1400 audit(1787472526.040:601): avc: denied { setopt } for pid=7144 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 74.376748][ T42] audit: type=1400 audit(1787472526.040:602): avc: denied { call } for pid=7144 comm="syz.3.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 74.444376][ T849] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.448186][ T849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.452069][ T849] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.456383][ T849] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.461480][ T849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.469074][ T849] usb 6-1: config 0 descriptor?? [ 74.549572][ T5738] Bluetooth: hci0: adv larger than maximum supported [ 74.549623][ T5738] Bluetooth: hci0: Unknown advertising packet type: 0x32 [ 74.553966][ T5738] Bluetooth: hci0: adv larger than maximum supported [ 74.554121][ T7151] binder: 7150:7151 ioctl 4018620d 0 returned -22 [ 74.556871][ T5738] Bluetooth: hci0: Malformed LE Event: 0x0d [ 74.567074][ T7151] binder_alloc: binder_alloc_mmap_handler: 7150 200000fff000-200001000000 already mapped failed -16 [ 74.673753][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.766878][ T7156] Invalid source name [ 74.768159][ T7156] UBIFS error (pid: 7156): cannot open "/dev/sr0", error -22 [ 74.879828][ T849] hid_parser_main: 90 callbacks suppressed [ 74.879847][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.889107][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.892171][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.894694][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.896988][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.899297][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.902287][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.905846][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.909478][ T849] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 74.933680][ T849] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 75.055274][ T42] audit: type=1400 audit(1787472526.740:603): avc: denied { read write } for pid=7163 comm="syz.2.346" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 75.055865][ T7164] ***************************************************** [ 75.061900][ T42] audit: type=1400 audit(1787472526.740:604): avc: denied { open } for pid=7163 comm="syz.2.346" path="/88/bus/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 75.073060][ T7164] ORANGEFS Device Error: You cannot open the device file [ 75.073069][ T7164] [ 75.073069][ T7164] /dev/pvfs2-req more than once. Please make sure that [ 75.073069][ T7164] there are no [ 75.078706][ T7164] instances of a program using this device [ 75.078706][ T7164] currently running. (You must verify this!) [ 75.083284][ T42] audit: type=1400 audit(1787472526.760:605): avc: denied { write } for pid=7139 comm="syz.1.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 75.086190][ T7164] For example, you can use the lsof program as follows: [ 75.093764][ T7164] 'lsof | grep pvfs2-req' (run this as root) [ 75.095609][ T7164] open_access_count = 1 [ 75.096954][ T7164] ***************************************************** [ 75.171683][ T7169] netlink: 'syz.3.344': attribute type 1 has an invalid length. [ 75.174227][ T7169] netlink: 'syz.3.344': attribute type 2 has an invalid length. [ 75.448438][ T7173] netlink: 'syz.2.347': attribute type 3 has an invalid length. [ 75.519508][ T7184] gadgetfs: bound to dummy_udc driver [ 75.586659][ T7182] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 75.589288][ T7182] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 75.592948][ T7182] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 75.598185][ T7182] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 75.660988][ T7191] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 75.715302][ T61] net_ratelimit: 8 callbacks suppressed [ 75.715313][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.720244][ T7182] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 75.723969][ T7182] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 75.727753][ T7182] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 75.763500][ T1345] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 75.765899][ C3] gadgetfs: connected [ 75.767156][ T1345] gadgetfs: disconnected [ 75.793495][ T5978] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 75.923570][ T5978] usb 8-1: device descriptor read/64, error -71 [ 75.925347][ C3] gadgetfs: connected [ 75.926574][ T1345] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 75.929540][ T1345] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.933320][ C3] gadgetfs: configuration #1 [ 76.163480][ T5978] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 76.202157][ T42] audit: type=1400 audit(1787472527.880:606): avc: denied { setattr } for pid=7193 comm="syz.2.352" name="trace_marker" dev="tracefs" ino=6085 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 76.294442][ T5978] usb 8-1: device descriptor read/64, error -71 [ 76.414628][ T5978] usb usb8-port1: attempt power cycle [ 76.429789][ T7201] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 76.433125][ T42] audit: type=1400 audit(1787472528.110:607): avc: denied { getopt } for pid=7200 comm="syz.2.354" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.532278][ T42] audit: type=1400 audit(1787472528.210:608): avc: denied { accept } for pid=7202 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 76.614168][ T7204] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.620429][ T7204] block device autoloading is deprecated and will be removed. [ 76.683844][ T61] usb 6-1: reset high-speed USB device number 9 using dummy_hcd [ 76.707411][ T7206] input input12: cannot allocate more than FF_MAX_EFFECTS effects [ 76.753748][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.774499][ T5978] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 76.794908][ T7217] erspan0: entered promiscuous mode [ 76.804597][ T5978] usb 8-1: device descriptor read/8, error -71 [ 76.924418][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.927457][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.935981][ T7223] 0: reclassify loop, rule prio 0, protocol 03 [ 76.946273][ T7223] hfs: can't find a HFS filesystem on dev sr0 [ 77.063650][ T5978] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 77.096433][ T5978] usb 8-1: device descriptor read/8, error -71 [ 77.214207][ T5978] usb usb8-port1: unable to enumerate USB device [ 77.295880][ T7237] netlink: 'syz.2.366': attribute type 1 has an invalid length. [ 77.326143][ T7237] bond2 (unregistering): Released all slaves [ 77.483120][ T7244] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.508611][ T7244] __nla_validate_parse: 12 callbacks suppressed [ 77.508629][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.368'. [ 77.523704][ T7244] xt_hashlimit: size too large, truncated to 1048576 [ 77.803668][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.915917][ T7268] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7268 comm=syz.2.374 [ 78.020962][ T7279] input: syz0 as /devices/virtual/input/input13 [ 78.074014][ T2088] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 78.131457][ T7283] bond0: (slave veth0): Enslaving as an active interface with an up link [ 78.204296][ T2088] usb 8-1: device descriptor read/64, error -71 [ 78.427313][ T5517] usb 6-1: USB disconnect, device number 9 [ 78.453559][ T2088] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 78.524820][ T7183] gadgetfs: suspended from state 3 [ 78.526626][ T1345] usb 5-1: can't set config #1, error -71 [ 78.528682][ T7183] gadgetfs: disconnected [ 78.529818][ T1345] usb 5-1: USB disconnect, device number 5 [ 78.610584][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.3.382'. [ 78.614318][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.3.382'. [ 78.623403][ T7304] geneve2: entered promiscuous mode [ 78.625714][ T7304] geneve2: entered allmulticast mode [ 78.709938][ T7306] 0x000000000007-0x000000020000 : "" [ 78.719616][ T7306] ftl_cs: FTL header corrupt! [ 78.798473][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.804964][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.808881][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.812723][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.817425][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.822717][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.829574][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.835460][ T5517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.836563][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 78.843200][ T7311] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7311 comm=syz.3.384 [ 79.114426][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 79.114438][ T42] audit: type=1400 audit(1787472530.800:616): avc: denied { write } for pid=7322 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.165770][ T42] audit: type=1400 audit(1787472530.850:617): avc: denied { write } for pid=7325 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.175460][ T42] audit: type=1400 audit(1787472530.860:618): avc: denied { map } for pid=7313 comm="syz.3.385" path="/104/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=6039 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.215640][ T7328] xt_CT: No such helper "snmp_trap" [ 79.259114][ T42] audit: type=1400 audit(1787472530.940:619): avc: denied { write } for pid=7331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.304671][ T42] audit: type=1400 audit(1787472530.990:620): avc: denied { write } for pid=7336 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 79.447145][ T7341] netlink: 14 bytes leftover after parsing attributes in process `syz.2.389'. [ 79.473701][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.768811][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 79.772319][ T7346] netlink: 28 bytes leftover after parsing attributes in process `syz.3.391'. [ 79.801461][ T42] audit: type=1400 audit(1787472531.480:621): avc: denied { mounton } for pid=7348 comm="syz.2.392" path="/116/mnt_trace/trace_pipe" dev="tracefs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 79.823345][ T7350] rnbd_client L213: map_device: Parameters missing [ 79.861751][ T42] audit: type=1400 audit(1787472531.540:622): avc: denied { mmap_zero } for pid=7351 comm="syz.2.393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 79.874451][ T5517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.907900][ T42] audit: type=1400 audit(1787472531.590:623): avc: denied { getopt } for pid=7353 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 79.926691][ T7354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.395'. [ 79.933359][ T42] audit: type=1400 audit(1787472531.610:624): avc: denied { write } for pid=7353 comm="syz.2.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 79.963746][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.110721][ T7385] Bluetooth: hci0: unsupported parameter 256 [ 80.112653][ T7385] Bluetooth: hci0: invalid len left 4, exp >= 7 [ 80.181288][ T42] audit: type=1400 audit(1787472531.860:625): avc: denied { shutdown } for pid=7388 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 80.377457][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.3.409'. [ 80.463719][ T5517] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 80.625973][ T5517] usb 6-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 80.631937][ T5517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 80.636777][ T5517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.641048][ T5517] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 80.648063][ T5517] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.651502][ T5517] usb 6-1: Product: syz [ 80.653912][ T5517] usb 6-1: Manufacturer: syz [ 80.656103][ T5517] usb 6-1: SerialNumber: syz [ 80.661107][ T5517] usb 6-1: config 0 descriptor?? [ 80.871662][ T5517] adutux 6-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 80.913781][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.967425][ T7423] netlink: 'syz.2.415': attribute type 5 has an invalid length. [ 80.970640][ T7423] netlink: 'syz.2.415': attribute type 5 has an invalid length. [ 80.973859][ T7423] netlink: 'syz.2.415': attribute type 5 has an invalid length. [ 81.078150][ T61] usb 6-1: USB disconnect, device number 10 [ 81.106310][ T7430] netlink: Conntrack attr has 8 unknown bytes [ 81.115650][ T7430] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 81.287403][ T7436] netlink: 24 bytes leftover after parsing attributes in process `syz.3.418'. [ 81.368755][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz.3.419'. [ 81.415012][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.425136][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.428434][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.431504][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.435058][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.437749][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.440399][ T7446] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.502307][ T7446] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 81.784992][ T5087] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.803750][ T5087] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.817394][ T5087] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.824886][ T5087] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.833514][ T5087] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.881151][ T7458] Invalid argument reading file caps for ./file0 [ 81.915824][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.009520][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.051099][ T7474] vcan1: entered allmulticast mode [ 82.118642][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.142969][ T7454] vcan0 speed is unknown, defaulting to 1000 [ 82.213521][ T5835] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 82.247012][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.373648][ T5835] usb 7-1: Using ep0 maxpacket: 32 [ 82.375760][ T5835] usb 7-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 82.379380][ T5835] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 82.382112][ T5835] usb 7-1: config 0 has no interface number 0 [ 82.384400][ T5835] usb 7-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 82.387893][ T5835] usb 7-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 82.391541][ T5835] usb 7-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 82.395032][ T5835] usb 7-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 82.400740][ T5835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.403335][ T5835] usb 7-1: Product: syz [ 82.407165][ T5835] usb 7-1: Manufacturer: syz [ 82.408780][ T5835] usb 7-1: SerialNumber: syz [ 82.411689][ T5835] usb 7-1: config 0 descriptor?? [ 82.412273][ T13] bridge_slave_1: left allmulticast mode [ 82.416055][ T13] bridge_slave_1: left promiscuous mode [ 82.416987][ T5835] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.119/input/input14 [ 82.420624][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.440941][ T5739] Bluetooth: hci0: command 0x0406 tx timeout [ 82.454784][ T13] bridge_slave_0: left allmulticast mode [ 82.456632][ T13] bridge_slave_0: left promiscuous mode [ 82.464539][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.591858][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 82.617068][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.624986][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.629427][ T7464] tmpfs: Unknown parameter 'usrquota_bl ' [ 82.633522][ T5877] usb 7-1: USB disconnect, device number 11 [ 82.651558][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.657754][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.661614][ T13] bond0 (unregistering): Released all slaves [ 82.669797][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 82.678751][ T13] bond1 (unregistering): Released all slaves [ 82.688685][ T13] bond2 (unregistering): Released all slaves [ 82.721876][ T7454] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.724405][ T7454] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.727046][ T7454] bridge_slave_0: entered allmulticast mode [ 82.730823][ T7454] bridge_slave_0: entered promiscuous mode [ 82.735727][ T7454] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.738042][ T7454] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.740495][ T7454] bridge_slave_1: entered allmulticast mode [ 82.743163][ T7454] bridge_slave_1: entered promiscuous mode [ 82.766814][ T7454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.771166][ T7454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.786918][ T7454] team0: Port device team_slave_0 added [ 82.790286][ T7454] team0: Port device team_slave_1 added [ 82.803965][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.806312][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.815256][ T7454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.819870][ T7454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.822081][ T7454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.830499][ T7454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.912302][ T7454] hsr_slave_0: entered promiscuous mode [ 82.915547][ T7454] hsr_slave_1: entered promiscuous mode [ 82.918235][ T7454] debugfs: 'hsr0' already exists in 'hsr' [ 82.920723][ T7454] Cannot create hsr debugfs directory [ 82.940059][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 83.086401][ T7518] netlink: 'syz.1.437': attribute type 5 has an invalid length. [ 83.239725][ T7540] __nla_validate_parse: 1 callbacks suppressed [ 83.239742][ T7540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 83.291286][ T7544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.443'. [ 83.301284][ T13] hsr_slave_0: left promiscuous mode [ 83.305697][ T13] hsr_slave_1: left promiscuous mode [ 83.308006][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.310269][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.313324][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.315798][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.325440][ T13] veth1_macvtap: left promiscuous mode [ 83.327347][ T13] veth0_macvtap: left promiscuous mode [ 83.329123][ T13] veth1_vlan: left promiscuous mode [ 83.330895][ T13] veth0_vlan: left promiscuous mode [ 83.345625][ T7540] jffs2: notice: (7540) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 83.473155][ T13] team0 (unregistering): Port device team_slave_1 removed [ 83.484430][ T13] team0 (unregistering): Port device team_slave_0 removed [ 83.503632][ T5517] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 83.563988][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 83.584824][ T7454] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 83.591513][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.595397][ T7454] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 83.602505][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.606503][ T7454] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 83.613152][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.617170][ T7454] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 83.624075][ T7454] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.686995][ T5517] usb 8-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 83.696696][ T5517] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 83.700279][ T5517] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 83.705938][ T5517] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.709075][ T5517] usb 8-1: Product: syz [ 83.710474][ T5517] usb 8-1: Manufacturer: syz [ 83.711917][ T5517] usb 8-1: SerialNumber: syz [ 83.722014][ T7454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.789003][ T7454] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.797709][ T781] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.800761][ T781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.815147][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.818208][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.833542][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 83.876724][ T5738] Bluetooth: hci4: command tx timeout [ 83.920164][ T7572] fuse: Unknown parameter '* ì+�Ut Þvâ}ª.â *U…†»RŒ?²¸wLÄú§QþnòåK\Åi ã' [ 83.929060][ T5517] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 83.929344][ T7572] nfs4: Unknown parameter 'proc' [ 84.032977][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5 [ 84.159788][ T7454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.337166][ T7454] veth0_vlan: entered promiscuous mode [ 84.348612][ T7454] veth1_vlan: entered promiscuous mode [ 84.370769][ T7454] veth0_macvtap: entered promiscuous mode [ 84.378033][ T7454] veth1_macvtap: entered promiscuous mode [ 84.391312][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.401229][ T7454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.452638][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.463770][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.518499][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.523916][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.539275][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.542268][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.561721][ T42] kauditd_printk_skb: 30 callbacks suppressed [ 84.561738][ T42] audit: type=1400 audit(1787472536.240:656): avc: denied { mounton } for pid=7454 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 84.563932][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.576860][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.604172][ T5835] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 84.638598][ T42] audit: type=1400 audit(1787472536.320:657): avc: denied { bpf } for pid=7615 comm="syz.4.449" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.646350][ T42] audit: type=1400 audit(1787472536.320:658): avc: denied { perfmon } for pid=7615 comm="syz.4.449" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.654076][ T42] audit: type=1400 audit(1787472536.330:659): avc: denied { read } for pid=7615 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 84.700009][ T7620] netlink: 'syz.1.451': attribute type 2 has an invalid length. [ 84.703939][ T42] audit: type=1400 audit(1787472536.380:660): avc: denied { write } for pid=7619 comm="syz.1.451" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 84.733954][ T5835] usb 7-1: device descriptor read/64, error -71 [ 84.745576][ T7625] input: syz1 as /devices/virtual/input/input15 [ 84.900930][ T7622] bond1: ARP target 9.0.0.0 is already present [ 84.903792][ T7622] bond1: option arp_ip_target: invalid value (9) [ 84.907896][ T7622] bond1 (unregistering): Released all slaves [ 84.973547][ T5835] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 85.103580][ T5835] usb 7-1: device descriptor read/64, error -71 [ 85.214568][ T5835] usb usb7-port1: attempt power cycle [ 85.555948][ T5835] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 85.577306][ T5835] usb 7-1: device descriptor read/8, error -71 [ 85.594138][ T42] audit: type=1400 audit(1787472537.280:661): avc: denied { write } for pid=7632 comm="syz.4.454" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 85.619425][ T42] audit: type=1400 audit(1787472537.300:662): avc: denied { read } for pid=7634 comm="syz.1.455" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.636832][ T42] audit: type=1400 audit(1787472537.300:663): avc: denied { open } for pid=7634 comm="syz.1.455" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.647079][ T7635] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 85.655088][ T42] audit: type=1400 audit(1787472537.300:664): avc: denied { ioctl } for pid=7634 comm="syz.1.455" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 85.672913][ T42] audit: type=1400 audit(1787472537.330:665): avc: denied { write } for pid=7634 comm="syz.1.455" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 85.721579][ T7641] IPVS: set_ctl: invalid protocol: 135 0.0.0.0:20003 [ 85.825291][ T5835] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 85.854643][ T5835] usb 7-1: device descriptor read/8, error -71 [ 85.878361][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 85.963928][ T5835] usb usb7-port1: unable to enumerate USB device [ 86.034206][ T849] net_ratelimit: 748 callbacks suppressed [ 86.034219][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.123832][ T5517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.184152][ T7661] GUP no longer grows the stack in syz.1.463 (7661): 200000004000-20000000a000 (200000002000) [ 86.189296][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.1.463 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.189315][ T7661] Tainted: [L]=SOFTLOCKUP [ 86.189319][ T7661] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.189325][ T7661] Call Trace: [ 86.189329][ T7661] [ 86.189333][ T7661] dump_stack_lvl+0x100/0x190 [ 86.189363][ T7661] gup_vma_lookup.cold+0x83/0x96 [ 86.189380][ T7661] __get_user_pages+0x252/0x3280 [ 86.189405][ T7661] ? __pfx___get_user_pages+0x10/0x10 [ 86.189420][ T7661] ? mtree_load+0x311/0xa90 [ 86.189435][ T7661] ? mtree_load+0x311/0xa90 [ 86.189451][ T7661] get_user_pages_remote+0x3d2/0xb10 [ 86.189468][ T7661] ? mas_root_expand+0x6f0/0x750 [ 86.189481][ T7661] ? __pfx_get_user_pages_remote+0x10/0x10 [ 86.189503][ T7661] __access_remote_vm+0x3bb/0x890 [ 86.189521][ T7661] ? __pfx___access_remote_vm+0x10/0x10 [ 86.189536][ T7661] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 86.189560][ T7661] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 86.189578][ T7661] proc_pid_cmdline_read+0x552/0x9a0 [ 86.189596][ T7661] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 86.189613][ T7661] ? rw_verify_area+0xce/0x6d0 [ 86.189627][ T7661] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 86.189643][ T7661] vfs_readv+0x5d8/0x8d0 [ 86.189658][ T7661] ? __pfx_vfs_readv+0x10/0x10 [ 86.189679][ T7661] ? __fget_files+0x21f/0x3d0 [ 86.189699][ T7661] ? do_preadv+0x1ac/0x270 [ 86.189710][ T7661] do_preadv+0x1ac/0x270 [ 86.189723][ T7661] ? __pfx_do_preadv+0x10/0x10 [ 86.189739][ T7661] do_syscall_64+0x123/0x790 [ 86.189752][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.189763][ T7661] RIP: 0033:0x7f9ea599e0d9 [ 86.189773][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.189783][ T7661] RSP: 002b:00007f9ea692a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 86.189795][ T7661] RAX: ffffffffffffffda RBX: 00007f9ea5c25fa0 RCX: 00007f9ea599e0d9 [ 86.189801][ T7661] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 86.189808][ T7661] RBP: 00007f9ea5a35024 R08: 00000000fffffff9 R09: 0000000000000000 [ 86.189814][ T7661] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 86.189820][ T7661] R13: 00007f9ea5c26038 R14: 00007f9ea5c25fa0 R15: 00007fff3fe16338 [ 86.189833][ T7661] [ 86.235790][ T849] usb 8-1: USB disconnect, device number 14 [ 86.289661][ T849] usblp0: removed [ 86.392062][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.397026][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.400544][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.404448][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.407195][ T7672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.410504][ T7671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.414676][ T7671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.420356][ T7671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.477629][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.481078][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.485926][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.489958][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.494978][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.501616][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.505296][ T7679] netlink: 52 bytes leftover after parsing attributes in process `syz.1.469'. [ 86.683598][ T5738] Bluetooth: hci4: command tx timeout [ 86.741314][ T7689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.744706][ T7689] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.824049][ T7689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.831707][ T7689] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.919498][ T7689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 86.923799][ T7689] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.006852][ T7689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 87.010065][ T7689] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.555516][ T5738] Bluetooth: hci4: unexpected cc 0x204b length: 34 > 3 [ 87.619834][ T7708] null_blk: nullb1: using native zone append [ 87.623216][ T7708] workqueue: Failed to create a rescuer kthread for wq "nullb1_zwplugs": -EINTR [ 87.692155][ T7720] bonding: bond0 is being created... [ 87.700406][ T7720] bonding: bond0 already exists [ 87.799174][ T7731] selinux_netlink_send: 56 callbacks suppressed [ 87.799191][ T7731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7731 comm=syz.1.486 [ 87.810199][ T7731] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 87.933517][ T849] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.997297][ C1] vcan0: j1939_tp_rxtimer: 0xffff888047917c00: rx timeout, send abort [ 88.002223][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888047917c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 88.087284][ T849] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 88.093985][ T849] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.099535][ T849] usb 9-1: Product: syz [ 88.101226][ T849] usb 9-1: Manufacturer: syz [ 88.103181][ T849] usb 9-1: SerialNumber: syz [ 88.137494][ T5876] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 88.393524][ T5814] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 88.453512][ T849] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 88.544223][ T7726] PKCS8: Unsupported PKCS#8 version [ 88.553895][ T5814] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 88.557601][ T5814] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 88.561408][ T5814] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 88.564459][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.569272][ T7763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 88.573385][ T5814] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.574277][ T9] usb 9-1: USB disconnect, device number 2 [ 88.603651][ T849] usb 6-1: Using ep0 maxpacket: 8 [ 88.607316][ T849] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.615751][ T849] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 88.619338][ T849] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.627003][ T849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.631053][ T849] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.635312][ T849] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.640609][ T849] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.779375][ T5517] usb 7-1: USB disconnect, device number 16 [ 88.856277][ T849] usb 6-1: usb_control_msg returned -32 [ 88.858544][ T849] usbtmc 6-1:16.0: can't read capabilities [ 88.861259][ T7773] __nla_validate_parse: 34 callbacks suppressed [ 88.861272][ T7773] netlink: 168 bytes leftover after parsing attributes in process `syz.2.498'. [ 88.867352][ T7773] netlink: 168 bytes leftover after parsing attributes in process `syz.2.498'. [ 89.114483][ T7778] netlink: 28 bytes leftover after parsing attributes in process `syz.4.501'. [ 89.164891][ T5876] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 89.171195][ T5876] ath9k_htc: Failed to initialize the device [ 89.173618][ T9] usb 9-1: ath9k_htc: USB layer deinitialized [ 89.207714][ T7783] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 89.287786][ T7786] netlink: 'syz.4.503': attribute type 1 has an invalid length. [ 89.301271][ T7786] bond1: option mode: invalid value (8) [ 89.305660][ T7786] bond1 (unregistering): Released all slaves [ 89.408712][ T41] usb 6-1: USB disconnect, device number 11 [ 89.546319][ T5738] Bluetooth: hci0: unexpected event for opcode 0x0c26 [ 89.549981][ T7808] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 89.553308][ T7808] netlink: 224 bytes leftover after parsing attributes in process `syz.3.508'. [ 89.983352][ T7828] cgroup: Unknown subsys name 'obj_type' [ 90.114678][ T7854] netlink: 'syz.3.519': attribute type 63 has an invalid length. [ 90.117789][ T7854] netlink: 5 bytes leftover after parsing attributes in process `syz.3.519'. [ 90.120404][ T7854] gretap0: entered allmulticast mode [ 90.132338][ T7858] netlink: 20 bytes leftover after parsing attributes in process `syz.2.520'. [ 90.137059][ T7858] Unknown options in mask b7f2 [ 90.169539][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 90.169556][ T42] audit: type=1400 audit(1787472541.850:697): avc: denied { read } for pid=7859 comm="syz.3.521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 90.186681][ T7860] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7860 comm=syz.3.521 [ 90.199159][ T7860] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7860 comm=syz.3.521 [ 90.210568][ T7860] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7860 comm=syz.3.521 [ 90.224128][ T7860] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7860 comm=syz.3.521 [ 90.230357][ T7863] nvme_fabrics: missing parameter 'nqn=%s' [ 90.233796][ T7860] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=7860 comm=syz.3.521 [ 90.259103][ T7871] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 90.268554][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.2.524'. [ 90.295732][ T7875] input: syz0 as /devices/virtual/input/input17 [ 90.301930][ T7877] webusb: landingPage URL too long [ 90.388433][ T42] audit: type=1400 audit(1787472542.070:698): avc: denied { write } for pid=7878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.465425][ T42] audit: type=1400 audit(1787472542.130:699): avc: denied { write } for pid=7888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.506895][ T42] audit: type=1400 audit(1787472542.190:700): avc: denied { read } for pid=7896 comm="syz.3.532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 90.526517][ T42] audit: type=1400 audit(1787472542.210:701): avc: denied { write } for pid=7895 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.578573][ T7905] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 90.584066][ T7905] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 90.592839][ T42] audit: type=1400 audit(1787472542.270:702): avc: denied { write } for pid=7902 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.626558][ T7914] fuse: Bad value for 'fd' [ 90.658093][ T42] audit: type=1400 audit(1787472542.340:703): avc: denied { write } for pid=7915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.700786][ T42] audit: type=1400 audit(1787472542.380:704): avc: denied { write } for pid=7918 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.779340][ T42] audit: type=1400 audit(1787472542.460:705): avc: denied { write } for pid=7922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 90.839657][ T42] audit: type=1400 audit(1787472542.520:706): avc: denied { write } for pid=7927 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 91.209690][ T7940] syz.4.538 (7940): drop_caches: 2 [ 91.313660][ T5517] net_ratelimit: 24 callbacks suppressed [ 91.313679][ T5517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.395811][ T7951] netlink: 'syz.1.541': attribute type 11 has an invalid length. [ 91.431167][ T7951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 91.436395][ T7951] 8021q: adding VLAN 0 to HW filter on device bond2 [ 91.451297][ T61] vcan0 speed is unknown, defaulting to 1000 [ 91.455910][ T13] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 91.495740][ T7953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.542'. [ 91.563337][ T7963] netlink: 'syz.2.544': attribute type 1 has an invalid length. [ 91.589485][ T7962] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=7962 comm=syz.2.544 [ 91.593926][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.544'. [ 91.637102][ T5738] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 91.637176][ T5738] Bluetooth: hci4: Injecting HCI hardware error event [ 91.640137][ T5738] Bluetooth: hci4: hardware error 0x00 [ 91.652002][ T849] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.707593][ T7977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.710663][ T7977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.741572][ T7979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.744264][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 91.936938][ T7986] ecryptfs: Unknown parameter 'ecŒ|}«' [ 91.943538][ T5814] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 92.094728][ T5814] usb 7-1: Using ep0 maxpacket: 8 [ 92.099950][ T5814] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 92.110920][ T5814] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.118041][ T5814] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 92.122980][ T5814] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 92.127844][ T5814] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 92.131566][ T5814] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.138256][ T5814] hub 7-1:1.0: bad descriptor, ignoring hub [ 92.140165][ T5814] hub 7-1:1.0: probe with driver hub failed with error -5 [ 92.147055][ T5814] cdc_wdm 7-1:1.0: skipping garbage [ 92.148695][ T5814] cdc_wdm 7-1:1.0: skipping garbage [ 92.157105][ T5814] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 92.161238][ T5814] cdc_wdm 7-1:1.0: Unknown control protocol [ 92.366674][ T5517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.389302][ T8019] gfs2: gfs2 mount does not exist [ 92.513687][ T5876] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 92.514204][ T5739] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.526339][ T5876] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 92.738252][ T8033] fuse: Unknown parameter 'f' [ 92.758809][ T7971] usb 7-1: reset high-speed USB device number 17 using dummy_hcd [ 92.782169][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.788294][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 92.791276][ T8035] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 93.045675][ T61] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 93.104229][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.104241][ T8046] unable to load match [ 93.108386][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.108395][ T8046] unable to load match [ 93.111938][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.111946][ T8046] unable to load match [ 93.115985][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.115993][ T8046] unable to load match [ 93.119666][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.119674][ T8046] unable to load match [ 93.123382][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.123389][ T8046] unable to load match [ 93.127748][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.127755][ T8046] unable to load match [ 93.132236][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.132246][ T8046] unable to load match [ 93.137081][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.137093][ T8046] unable to load match [ 93.148230][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.148246][ T8046] unable to load match [ 93.152998][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.153010][ T8046] unable to load match [ 93.164012][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.164026][ T8046] unable to load match [ 93.168824][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.168836][ T8046] unable to load match [ 93.172602][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.172609][ T8046] unable to load match [ 93.176416][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.176424][ T8046] unable to load match [ 93.179975][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.179982][ T8046] unable to load match [ 93.188611][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.188621][ T8046] unable to load match [ 93.198214][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.198223][ T8046] unable to load match [ 93.201858][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.201866][ T8046] unable to load match [ 93.205436][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.205443][ T8046] unable to load match [ 93.205662][ T8053] fuse: Unknown parameter 'W)0x0000000000000005' [ 93.207637][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.210837][ T8046] unable to load match [ 93.214600][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.214608][ T8046] unable to load match [ 93.214878][ T61] usb 6-1: Using ep0 maxpacket: 8 [ 93.216858][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.219485][ T8046] unable to load match [ 93.221964][ T61] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 93.222925][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.225700][ T8046] unable to load match [ 93.226615][ T61] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 93.227986][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.229178][ T61] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 93.231501][ T8046] unable to load match [ 93.231707][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.233668][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 93.233684][ T61] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 93.233696][ T61] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.233718][ T61] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.253135][ T8046] unable to load match [ 93.254789][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.254797][ T8046] unable to load match [ 93.258286][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.258293][ T8046] unable to load match [ 93.261789][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.261796][ T8046] unable to load match [ 93.265691][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.265698][ T8046] unable to load match [ 93.269179][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.269186][ T8046] unable to load match [ 93.272692][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.272699][ T8046] unable to load match [ 93.276195][ T8046] policy can only be matched on NF_INET_PRE_ROUTING [ 93.276202][ T8046] unable to load match [ 93.324784][ T41] usb 7-1: USB disconnect, device number 17 [ 93.439114][ T61] usb 6-1: usb_control_msg returned -32 [ 93.440870][ T61] usbtmc 6-1:16.0: can't read capabilities [ 93.637069][ T8063] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 93.641758][ T8063] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 93.646383][ T8063] netlink: 'syz.4.575': attribute type 1 has an invalid length. [ 93.717369][ T5738] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 93.728005][ T8075] netlink: 'syz.4.577': attribute type 2 has an invalid length. [ 93.796234][ T8080] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 93.802830][ T61] usb 6-1: USB disconnect, device number 12 [ 93.941550][ T8110] netlink: 'syz.4.585': attribute type 26 has an invalid length. [ 94.319748][ T8150] vlan2: entered promiscuous mode [ 94.321577][ T8150] hsr0: entered promiscuous mode [ 94.323227][ T8150] vlan2: entered allmulticast mode [ 94.328507][ T8150] hsr0: entered allmulticast mode [ 94.331677][ T8150] hsr_slave_0: entered allmulticast mode [ 94.333388][ T8150] hsr_slave_1: entered allmulticast mode [ 94.373912][ T8150] __nla_validate_parse: 4 callbacks suppressed [ 94.373923][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'. [ 94.382659][ T8150] hsr_slave_0: left promiscuous mode [ 94.385413][ T8150] hsr_slave_1: left promiscuous mode [ 94.595651][ T5738] Bluetooth: hci0: command 0x0406 tx timeout [ 94.599019][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 94.602518][ T5876] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 94.687398][ T8168] Trying to write to read-only block-device nullb0 [ 94.912287][ T8195] syz_tun: entered allmulticast mode [ 95.049138][ T8214] netlink: 'syz.1.606': attribute type 1 has an invalid length. [ 95.052233][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.606'. [ 95.069945][ T8218] xt_hashlimit: size too large, truncated to 1048576 [ 95.163718][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 95.306149][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 95.306167][ T42] audit: type=1400 audit(1787472546.990:769): avc: denied { write } for pid=8237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.350070][ T42] audit: type=1400 audit(1787472547.030:770): avc: denied { write } for pid=8241 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.390628][ T42] audit: type=1400 audit(1787472547.070:771): avc: denied { getopt } for pid=8244 comm="syz.4.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 95.401887][ T42] audit: type=1400 audit(1787472547.070:772): avc: denied { setattr } for pid=8244 comm="syz.4.610" name="PPPOE" dev="sockfs" ino=25907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.541330][ T8252] netlink: 'syz.4.611': attribute type 11 has an invalid length. [ 95.543922][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 95.552797][ T8252] netlink: 'syz.4.611': attribute type 11 has an invalid length. [ 95.555316][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.4.611'. [ 95.573801][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.578344][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.581223][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.582179][ T42] audit: type=1400 audit(1787472547.260:773): avc: denied { ioctl } for pid=8253 comm="syz.4.612" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=25918 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 95.584009][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.716802][ T8256] netlink: 8 bytes leftover after parsing attributes in process `syz.4.612'. [ 95.759745][ T8258] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.905139][ T8265] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=8265 comm=syz.1.616 [ 95.910211][ T8265] netlink: 'syz.1.616': attribute type 30 has an invalid length. [ 95.961325][ T8267] netlink: 'syz.1.616': attribute type 30 has an invalid length. [ 96.171454][ T8275] netlink: 64 bytes leftover after parsing attributes in process `syz.1.618'. [ 96.513547][ T42] audit: type=1400 audit(1787472548.190:774): avc: denied { write } for pid=8278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.513904][ T61] net_ratelimit: 9 callbacks suppressed [ 96.513919][ T61] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.563871][ T42] audit: type=1400 audit(1787472548.250:775): avc: denied { write } for pid=8281 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.673562][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.676481][ T5876] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 96.678430][ T5876] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 96.869492][ T42] audit: type=1400 audit(1787472548.550:776): avc: denied { write } for pid=8286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.907377][ T42] audit: type=1400 audit(1787472548.590:777): avc: denied { write } for pid=8295 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.935947][ T42] audit: type=1400 audit(1787472548.620:778): avc: denied { name_connect } for pid=8298 comm="syz.1.622" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 97.255213][ T8321] aoe: unknown AoE command type 0xbc [ 97.286769][ T8323] tipc: Trying to set illegal importance in message [ 97.333842][ T8327] misc userio: Begin command sent, but we're already running [ 97.340477][ T8327] misc userio: Begin command sent, but we're already running [ 97.343849][ T8328] misc userio: Begin command sent, but we're already running [ 97.366724][ T8332] netlink: 12 bytes leftover after parsing attributes in process `syz.3.629'. [ 97.425148][ T8332] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 97.491235][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.494248][ T8350] Invalid source name [ 97.495447][ T8341] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.495569][ T8350] UBIFS error (pid: 8350): cannot open "/dev/sg0", error -22 [ 97.498751][ T8350] virtio-fs: tag not found [ 97.563922][ T5978] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.584913][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.598403][ T8341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.734024][ T5540] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.736964][ T5540] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.739944][ T5540] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.742674][ T5540] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.745847][ T5540] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.748632][ T5540] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.751460][ T5540] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 97.755719][ T5540] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.808823][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.812590][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.816843][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.820524][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.825152][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.829174][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.833290][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.837141][ T8373] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 97.893981][ T8378] netlink: 16 bytes leftover after parsing attributes in process `syz.3.638'. [ 97.965861][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz.4.643'. [ 97.969076][ T8393] netlink: 60 bytes leftover after parsing attributes in process `syz.4.643'. [ 98.057437][ T8393] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 98.060665][ T8393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=28 sclass=netlink_tcpdiag_socket pid=8393 comm=syz.4.643 [ 98.068528][ T8393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=38 sclass=netlink_tcpdiag_socket pid=8393 comm=syz.4.643 [ 98.073198][ T8393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8393 comm=syz.4.643 [ 98.080065][ T8393] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8393 comm=syz.4.643 [ 98.245471][ T8417] smpboot: CPU 1 is now offline [ 98.310479][ T8417] smpboot: CPU 3 is now offline [ 98.355880][ T8418] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 98.362622][ T19] ------------[ cut here ]------------ [ 98.363612][ T19] [ 98.363619][ T19] ====================================================== [ 98.363625][ T19] WARNING: possible circular locking dependency detected [ 98.363635][ T19] syzkaller #0 Tainted: G L [ 98.363644][ T19] ------------------------------------------------------ [ 98.363650][ T19] migration/0/19 is trying to acquire lock: [ 98.363658][ T19] ffffffff8ecf5cc0 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 98.363716][ T19] [ 98.363716][ T19] but task is already holding lock: [ 98.363721][ T19] ffff88806a43b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 98.363757][ T19] [ 98.363757][ T19] which lock already depends on the new lock. [ 98.363757][ T19] [ 98.363763][ T19] [ 98.363763][ T19] the existing dependency chain (in reverse order) is: [ 98.363768][ T19] [ 98.363768][ T19] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 98.363790][ T19] lock_acquire+0x1b9/0x370 [ 98.363821][ T19] _raw_spin_lock_nested+0x31/0x40 [ 98.363850][ T19] raw_spin_rq_lock_nested+0x2c/0x140 [ 98.363866][ T19] _task_rq_lock+0xcf/0x500 [ 98.363880][ T19] cgroup_move_task+0x81/0x320 [ 98.363900][ T19] css_set_move_task+0x285/0x600 [ 98.363916][ T19] cgroup_post_fork+0x1f9/0x9a0 [ 98.363939][ T19] copy_process+0x64da/0x8370 [ 98.363964][ T19] kernel_clone+0x176/0x9d0 [ 98.363978][ T19] rest_init+0xa3/0x2e0 [ 98.363998][ T19] start_kernel+0x48e/0x490 [ 98.364015][ T19] x86_64_start_reservations+0x24/0x30 [ 98.364033][ T19] x86_64_start_kernel+0x12b/0x130 [ 98.364051][ T19] common_startup_64+0x13e/0x158 [ 98.364068][ T19] [ 98.364068][ T19] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 98.364091][ T19] lock_acquire+0x1b9/0x370 [ 98.364113][ T19] _raw_spin_lock_irq_disable+0x5e/0x90 [ 98.364137][ T19] try_to_wake_up+0xc1/0x1c90 [ 98.364152][ T19] __queue_work+0x4a6/0x1370 [ 98.364172][ T19] queue_work_on+0x1a9/0x1e0 [ 98.364192][ T19] rpm_suspend+0xf6b/0x1220 [ 98.364213][ T19] rpm_idle+0x60c/0x790 [ 98.364229][ T19] __pm_runtime_idle+0xba/0x1a0 [ 98.364246][ T19] __device_attach+0x37e/0x4d0 [ 98.364262][ T19] device_initial_probe+0xaf/0xd0 [ 98.364306][ T19] bus_probe_device+0x64/0x160 [ 98.364331][ T19] device_add+0x121d/0x1970 [ 98.364349][ T19] serial_base_port_add+0x227/0x2b0 [ 98.364368][ T19] serial_core_register_port+0x13c/0x16f0 [ 98.364385][ T19] serial8250_register_8250_port+0x15af/0x2330 [ 98.364407][ T19] serial_pnp_probe+0x436/0x930 [ 98.364428][ T19] pnp_device_probe+0x2b3/0x4a0 [ 98.364444][ T19] really_probe+0x241/0xa60 [ 98.364459][ T19] __driver_probe_device+0x210/0x460 [ 98.364475][ T19] driver_probe_device+0x4a/0x140 [ 98.364490][ T19] __driver_attach+0x21f/0x5b0 [ 98.364505][ T19] bus_for_each_dev+0x13e/0x1d0 [ 98.364526][ T19] bus_add_driver+0x305/0x5b0 [ 98.364548][ T19] driver_register+0x1e2/0x360 [ 98.364565][ T19] serial8250_init+0xcc/0x1c0 [ 98.364580][ T19] do_one_initcall+0x11c/0x6f0 [ 98.364596][ T19] kernel_init_freeable+0x6ea/0x7b0 [ 98.364613][ T19] kernel_init+0x21/0x1e0 [ 98.364632][ T19] ret_from_fork+0x730/0xd60 [ 98.364657][ T19] ret_from_fork_asm+0x1a/0x30 [ 98.364672][ T19] [ 98.364672][ T19] -> #2 (&dev->power.lock){-...}-{3:3}: [ 98.364695][ T19] lock_acquire+0x1b9/0x370 [ 98.364717][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 98.364742][ T19] __pm_runtime_resume+0xa9/0x170 [ 98.364759][ T19] __uart_start+0x1b0/0x510 [ 98.364781][ T19] uart_write+0x211/0xb20 [ 98.364794][ T19] n_tty_write+0x431/0x1160 [ 98.364826][ T19] file_tty_write.isra.0+0x4d2/0x890 [ 98.364840][ T19] redirected_tty_write+0xd4/0x120 [ 98.364854][ T19] vfs_write+0x6af/0x1050 [ 98.364873][ T19] ksys_write+0x12a/0x250 [ 98.364892][ T19] do_syscall_64+0x123/0x790 [ 98.364908][ T19] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.364925][ T19] [ 98.364925][ T19] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 98.364946][ T19] lock_acquire+0x1b9/0x370 [ 98.364969][ T19] _raw_spin_lock_irqsave+0x3a/0x60 [ 98.364992][ T19] serial8250_console_write+0x177/0x1a50 [ 98.365011][ T19] console_flush_one_record+0x78e/0xf10 [ 98.365029][ T19] console_unlock+0x103/0x260 [ 98.365045][ T19] vprintk_emit+0x407/0x6b0 [ 98.365063][ T19] _printk+0xcf/0x110 [ 98.365078][ T19] register_console.cold+0xc0/0x248 [ 98.365094][ T19] univ8250_console_init+0x6f/0x80 [ 98.365109][ T19] console_init+0x3d5/0x5b0 [ 98.365132][ T19] start_kernel+0x314/0x490 [ 98.365148][ T19] x86_64_start_reservations+0x24/0x30 [ 98.365167][ T19] x86_64_start_kernel+0x12b/0x130 [ 98.365185][ T19] common_startup_64+0x13e/0x158 [ 98.365202][ T19] [ 98.365202][ T19] -> #0 (console_owner){-.-.}-{0:0}: [ 98.365224][ T19] check_prev_add+0xeb/0xe60 [ 98.365246][ T19] __lock_acquire+0x1492/0x1ec0 [ 98.365268][ T19] lock_acquire+0x1b9/0x370 [ 98.365290][ T19] console_lock_spinning_enable+0x72/0x80 [ 98.365307][ T19] console_flush_one_record+0x737/0xf10 [ 98.365325][ T19] console_unlock+0x103/0x260 [ 98.365341][ T19] vprintk_emit+0x407/0x6b0 [ 98.365357][ T19] _printk+0xcf/0x110 [ 98.365370][ T19] __report_bug.cold+0x34/0x141 [ 98.365389][ T19] report_bug+0xb3/0x220 [ 98.365405][ T19] handle_bug+0x16a/0x2a0 [ 98.365422][ T19] exc_invalid_op+0x17/0x50 [ 98.365440][ T19] asm_exc_invalid_op+0x1a/0x20 [ 98.365456][ T19] update_rq_clock+0x40a/0xd20 [ 98.365471][ T19] __schedule+0x1c69/0x6920 [ 98.365495][ T19] schedule+0xdd/0x2c0 [ 98.365519][ T19] smpboot_thread_fn+0x8a0/0xab0 [ 98.365536][ T19] kthread+0x373/0x450 [ 98.365554][ T19] ret_from_fork+0x730/0xd60 [ 98.365578][ T19] ret_from_fork_asm+0x1a/0x30 [ 98.365594][ T19] [ 98.365594][ T19] other info that might help us debug this: [ 98.365594][ T19] [ 98.365598][ T19] Chain exists of: [ 98.365598][ T19] console_owner --> &p->pi_lock --> &rq->__lock [ 98.365598][ T19] [ 98.365622][ T19] Possible unsafe locking scenario: [ 98.365622][ T19] [ 98.365627][ T19] CPU0 CPU1 [ 98.365631][ T19] ---- ---- [ 98.365636][ T19] lock(&rq->__lock); [ 98.365646][ T19] lock(&p->pi_lock); [ 98.365657][ T19] lock(&rq->__lock); [ 98.365667][ T19] lock(console_owner); [ 98.365677][ T19] [ 98.365677][ T19] *** DEADLOCK *** [ 98.365677][ T19] [ 98.365681][ T19] locks held by migration/0/19: 3, on CPU#0: [ 98.365694][ T19] #0: ffff88806a43b960 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 98.365731][ T19] #1: ffffffff8edd6100 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 98.365768][ T19] #2: ffffffff8edd6178 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xf10 [ 98.365812][ T19] [ 98.365812][ T19] stack backtrace: [ 98.365822][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.365845][ T19] Tainted: [L]=SOFTLOCKUP [ 98.365852][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.365862][ T19] Stopper: 0x0 <- 0x0 [ 98.365877][ T19] Call Trace: [ 98.365883][ T19] [ 98.365889][ T19] dump_stack_lvl+0x100/0x190 [ 98.365912][ T19] print_circular_bug.cold+0x178/0x1be [ 98.365940][ T19] check_noncircular+0x146/0x160 [ 98.365967][ T19] check_prev_add+0xeb/0xe60 [ 98.365993][ T19] __lock_acquire+0x1492/0x1ec0 [ 98.366021][ T19] lock_acquire+0x1b9/0x370 [ 98.366045][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 98.366064][ T19] ? console_lock_spinning_enable+0x4a/0x80 [ 98.366085][ T19] console_lock_spinning_enable+0x72/0x80 [ 98.366102][ T19] ? console_lock_spinning_enable+0x61/0x80 [ 98.366121][ T19] console_flush_one_record+0x737/0xf10 [ 98.366142][ T19] ? __pfx_console_flush_one_record+0x10/0x10 [ 98.366165][ T19] ? is_printk_cpu_sync_owner+0x32/0x40 [ 98.366187][ T19] console_unlock+0x103/0x260 [ 98.366205][ T19] ? __pfx_console_unlock+0x10/0x10 [ 98.366225][ T19] ? do_raw_spin_unlock+0x145/0x1e0 [ 98.366242][ T19] ? _printk+0xcf/0x110 [ 98.366258][ T19] vprintk_emit+0x407/0x6b0 [ 98.366278][ T19] ? __pfx_vprintk_emit+0x10/0x10 [ 98.366298][ T19] ? __lock_acquire+0x4c5/0x1ec0 [ 98.366322][ T19] ? __update_load_avg_se+0x5c7/0xe80 [ 98.366345][ T19] _printk+0xcf/0x110 [ 98.366362][ T19] ? __pfx__printk+0x10/0x10 [ 98.366377][ T19] ? __lock_acquire+0x4c5/0x1ec0 [ 98.366401][ T19] ? lock_acquire+0x1b9/0x370 [ 98.366426][ T19] ? find_held_lock+0x2b/0x80 [ 98.366445][ T19] ? clockevents_program_event+0x1bf/0x820 [ 98.366465][ T19] ? clockevents_program_event+0x1bf/0x820 [ 98.366484][ T19] ? __report_bug.cold+0x24/0x141 [ 98.366506][ T19] __report_bug.cold+0x34/0x141 [ 98.366526][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.366543][ T19] ? __pfx___report_bug+0x10/0x10 [ 98.366560][ T19] ? pick_eevdf+0x1ad/0x880 [ 98.366582][ T19] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 98.366608][ T19] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 98.366635][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.366653][ T19] report_bug+0xb3/0x220 [ 98.366670][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.366687][ T19] handle_bug+0x16a/0x2a0 [ 98.366708][ T19] exc_invalid_op+0x17/0x50 [ 98.366728][ T19] asm_exc_invalid_op+0x1a/0x20 [ 98.366744][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 98.366763][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 98.366779][ T19] RSP: 0018:ffffc90000167c30 EFLAGS: 00010046 [ 98.366794][ T19] RAX: 0000000000000000 RBX: ffff88806a53b900 RCX: 0000000000000001 [ 98.366809][ T19] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 98.366820][ T19] RBP: ffffc90000167dd0 R08: 0000000000000001 R09: 0000000000000001 [ 98.366831][ T19] R10: ffff88806a43c498 R11: 00000016e6dd3000 R12: ffffffff91438a84 [ 98.366842][ T19] R13: ffff88806a53c7e0 R14: ffff88806a53b900 R15: 0000000000000001 [ 98.366861][ T19] __schedule+0x1c69/0x6920 [ 98.366891][ T19] ? __pfx___schedule+0x10/0x10 [ 98.366916][ T19] ? find_held_lock+0x2b/0x80 [ 98.366935][ T19] ? schedule+0x225/0x2c0 [ 98.366961][ T19] schedule+0xdd/0x2c0 [ 98.366986][ T19] smpboot_thread_fn+0x8a0/0xab0 [ 98.367006][ T19] ? kthread+0x13a/0x450 [ 98.367024][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 98.367042][ T19] kthread+0x373/0x450 [ 98.367061][ T19] ? __pfx_kthread+0x10/0x10 [ 98.367081][ T19] ret_from_fork+0x730/0xd60 [ 98.367107][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 98.367134][ T19] ? __switch_to+0x800/0x10f0 [ 98.367155][ T19] ? __pfx_kthread+0x10/0x10 [ 98.367175][ T19] ret_from_fork_asm+0x1a/0x30 [ 98.367197][ T19] [ 98.709780][ T19] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 98.709791][ T19] WARNING: kernel/sched/sched.h:1666 at update_rq_clock+0x40a/0xd20, CPU#0: migration/0/19 [ 98.715034][ T19] Modules linked in: [ 98.716243][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.719419][ T19] Tainted: [L]=SOFTLOCKUP [ 98.720711][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.723644][ T19] Stopper: 0x0 <- 0x0 [ 98.724861][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 98.726539][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 98.732151][ T19] RSP: 0018:ffffc90000167c30 EFLAGS: 00010046 [ 98.733944][ T19] RAX: 0000000000000000 RBX: ffff88806a53b900 RCX: 0000000000000001 [ 98.736368][ T19] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 98.738670][ T19] RBP: ffffc90000167dd0 R08: 0000000000000001 R09: 0000000000000001 [ 98.741059][ T19] R10: ffff88806a43c498 R11: 00000016e6dd3000 R12: ffffffff91438a84 [ 98.743457][ T19] R13: ffff88806a53c7e0 R14: ffff88806a53b900 R15: 0000000000000001 [ 98.745881][ T19] FS: 0000000000000000(0000) GS:ffff8880d5ba2000(0000) knlGS:0000000000000000 [ 98.748578][ T19] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 98.750582][ T19] CR2: 00007fb0d1790ff8 CR3: 0000000064be1000 CR4: 0000000000352ef0 [ 98.752996][ T19] Call Trace: [ 98.754032][ T19] [ 98.754950][ T19] __schedule+0x1c69/0x6920 [ 98.756373][ T19] ? __pfx___schedule+0x10/0x10 [ 98.757864][ T19] ? find_held_lock+0x2b/0x80 [ 98.759307][ T19] ? schedule+0x225/0x2c0 [ 98.760663][ T19] schedule+0xdd/0x2c0 [ 98.761924][ T19] smpboot_thread_fn+0x8a0/0xab0 [ 98.763441][ T19] ? kthread+0x13a/0x450 [ 98.764757][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 98.766455][ T19] kthread+0x373/0x450 [ 98.767717][ T19] ? __pfx_kthread+0x10/0x10 [ 98.769144][ T19] ret_from_fork+0x730/0xd60 [ 98.770522][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 98.771988][ T19] ? __switch_to+0x800/0x10f0 [ 98.773362][ T19] ? __pfx_kthread+0x10/0x10 [ 98.774710][ T19] ret_from_fork_asm+0x1a/0x30 [ 98.776127][ T19] [ 98.777065][ T19] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 98.779148][ T19] CPU: 0 UID: 0 PID: 19 Comm: migration/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 98.782275][ T19] Tainted: [L]=SOFTLOCKUP [ 98.783535][ T19] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.786505][ T19] Stopper: 0x0 <- 0x0 [ 98.787731][ T19] Call Trace: [ 98.788780][ T19] [ 98.789698][ T19] dump_stack_lvl+0x100/0x190 [ 98.791136][ T19] vpanic+0x553/0x970 [ 98.792347][ T19] ? __pfx_vpanic+0x10/0x10 [ 98.793709][ T19] ? lock_release+0x24d/0x310 [ 98.795141][ T19] panic+0xd1/0xe0 [ 98.796294][ T19] ? __pfx_panic+0x10/0x10 [ 98.797668][ T19] check_panic_on_warn.cold+0x19/0x34 [ 98.799305][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.800834][ T19] __warn.cold+0x191/0x318 [ 98.802209][ T19] __report_bug+0x30f/0x440 [ 98.803611][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.805132][ T19] ? __pfx___report_bug+0x10/0x10 [ 98.806694][ T19] ? pick_eevdf+0x1ad/0x880 [ 98.808086][ T19] ? ktime_expiry_to_cycles+0xc0/0x2c0 [ 98.809762][ T19] ? ktime_expiry_to_cycles+0x3c/0x2c0 [ 98.811431][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.812951][ T19] report_bug+0xb3/0x220 [ 98.814252][ T19] ? update_rq_clock+0x40a/0xd20 [ 98.815776][ T19] handle_bug+0x16a/0x2a0 [ 98.817109][ T19] exc_invalid_op+0x17/0x50 [ 98.818509][ T19] asm_exc_invalid_op+0x1a/0x20 [ 98.820008][ T19] RIP: 0010:update_rq_clock+0x40a/0xd20 [ 98.821711][ T19] Code: ab c8 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 69 f3 09 a8 04 0f 84 df fc ff ff 90 0f 0b 90 e9 d6 fc ff ff 90 <0f> 0b 90 e9 92 fc ff ff 4c 8d 83 c0 0b 00 00 48 b8 00 00 00 00 00 [ 98.827510][ T19] RSP: 0018:ffffc90000167c30 EFLAGS: 00010046 [ 98.829368][ T19] RAX: 0000000000000000 RBX: ffff88806a53b900 RCX: 0000000000000001 [ 98.831764][ T19] RDX: 0000000000000046 RSI: ffffffff8e3add81 RDI: ffffffff8c615f80 [ 98.834162][ T19] RBP: ffffc90000167dd0 R08: 0000000000000001 R09: 0000000000000001 [ 98.836577][ T19] R10: ffff88806a43c498 R11: 00000016e6dd3000 R12: ffffffff91438a84 [ 98.838969][ T19] R13: ffff88806a53c7e0 R14: ffff88806a53b900 R15: 0000000000000001 [ 98.841381][ T19] __schedule+0x1c69/0x6920 [ 98.842784][ T19] ? __pfx___schedule+0x10/0x10 [ 98.844288][ T19] ? find_held_lock+0x2b/0x80 [ 98.845748][ T19] ? schedule+0x225/0x2c0 [ 98.847083][ T19] schedule+0xdd/0x2c0 [ 98.848356][ T19] smpboot_thread_fn+0x8a0/0xab0 [ 98.849887][ T19] ? kthread+0x13a/0x450 [ 98.851196][ T19] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 98.852874][ T19] kthread+0x373/0x450 [ 98.854140][ T19] ? __pfx_kthread+0x10/0x10 [ 98.855589][ T19] ret_from_fork+0x730/0xd60 [ 98.857022][ T19] ? __pfx_ret_from_fork+0x10/0x10 [ 98.858555][ T19] ? __switch_to+0x800/0x10f0 [ 98.859951][ T19] ? __pfx_kthread+0x10/0x10 [ 98.861328][ T19] ret_from_fork_asm+0x1a/0x30 [ 98.862742][ T19] [ 99.926643][ T19] Shutting down cpus with NMI [ 99.928688][ T19] Kernel Offset: disabled [ 99.930033][ T19] Rebooting in 86400 seconds..