last executing test programs: 48.056655096s ago: executing program 2 (id=1686): r0 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) (async) open_by_handle_at(0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1a00000004000000000000000100000000800000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000004000000000000000000000074f68049995cfd9997bc0fcbc021e3926e33329191067f305dd76d592bbcec4ee6a28be27b96242ddadf46a128989cb3f2fd2e81ce2cd0b9ea89b25a738165dcf8f0fba91aefa4d35500832f76313bedcc48ff5702d18c0a129e7a7b45da9e9a21389e5df71856261b2b3a5f12e2bcb2f46f90660b277d5170b74a4fb6af32a880bd66340e66b03f0619a21128307b885857301621fe732b0a2b69f6f3a54dde09cd4f24d455cba02791d2093aadd4c29773b807b80f3e5472b35155fd917c558d4c571b130f7975cc531c87bbeafecac505ae5e31fdefa1", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000900008a0000000000"]) creat(&(0x7f0000000100)='./bus\x00', 0x100) (async) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000007, 0x40032, 0xffffffffffffffff, 0x40000000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400101, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f00000000c0)=""/216) 47.852171956s ago: executing program 2 (id=1689): socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) syz_emit_vhci(0x0, 0x7) 47.851297653s ago: executing program 2 (id=1691): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000000)="eb3ec93c01487c8768d0c9a16841d555afc55e4761c41da712390cf869c54f5f3552902909fe43b23ace4f365bc949c17f8054df252deb", 0x37, r0}, 0x68) r1 = mq_open(&(0x7f0000000100)='\x00', 0x1, 0x100, &(0x7f0000000140)={0x0, 0x5, 0x2, 0x9}) writev(r1, &(0x7f0000001480)=[{&(0x7f0000000180)="de9605d32d54504efc2b513eddef38631ab2116fccefa40a61c50a17266d32964610ed6a9bf24685e2916819523b8a5c1927d6744025bdbc74818a503e2f8bd52e7c22a594e7175a15434faf0ae26058e5bb77e143a4a38a544a29a31365666f9dee90223257d5c914ac09f5442cca0f84417520d298411e4e64f65a292f2c47048994b7415051d7b82be934963d0608bca0ecb2427fbfc80a30deb319775197a74342801ae475b8a7d3bdcfa1bc25", 0xaf}, {&(0x7f0000000240)="e708de992c108424d0d6828f8b18c5a7a7128772272284832d9af968c70b8801de44f58bacafbdcbc2514491bb159d489b7473eaaa60653140d351432daa9cd3e3f6a7c0203bdb0885eb31a446a264317c8ccc5cdcc6f4a8c33928a9fe40f1abddcb5e7107e046d36a1331f0fdfaf9983fbd352290fadc5b5471f1369c7945b98dc1f5653f60a92053a30952ea198d93bdf14c2a3e47c348b9f6b5d93ead58ad0be56c268c325ec7e963", 0xaa}, {&(0x7f0000000300)="78197ee55c037f17c5e7c47738fab1a89c53ea190960d131a86669f0dd775fb194f22ab56f2f7e246a4dc27e9b15f5d1fc497dcfa6cf4fea7949ca666f5aa5f74e2b1c5d655c0ecab4994dbadbe4b8e93fc261748ad771fe07ad003e13993f917e1acdf7e30d692c46c1eb213d5d43a38d0dd8356e394456c81019ba3bf472ec9529", 0x82}, {&(0x7f00000003c0)="70c9292d405f3a54882fd084529e9117fbdbbb7402ce73162801098bf1fd98019dbafa2c3444ced44a66f7d7cb6e2fbf3f072a2cfd4f720cfba829522017d9c912d23598131da0b7d4c28f3675e07c9abdffb8d5a078", 0x56}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)}], 0x6) writev(r0, &(0x7f0000001540)=[{&(0x7f0000001500)="0a52f64247", 0x5}], 0x1) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000001580)=""/64, 0x40}], 0x1, 0x4, 0x7c6e) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000001600)={0x1000, 0x4, 0x1}) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000001740)={0x5, 0x6, 0x7, 0x3, '\x00', 0x2}) setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000001780)=0x4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000018c0)={@ifindex, 0x33, 0x0, 0x400, &(0x7f00000017c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001840)=[0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000001940)={0x6, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001900)={@map=r0, 0xffffffffffffffff, 0x4, 0x24, 0x0, @void, @void, @void, @value=r3, r2}, 0x20) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000001980), &(0x7f00000019c0)=0x8) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000001a00), &(0x7f0000001a40)=0x4) r4 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) mkdir(&(0x7f0000001a80)='./file0\x00', 0x44) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000001ac0)) ioctl$KVM_GET_SREGS2(r4, 0x8140aecc, &(0x7f0000001b00)) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000001c40)={0x0, 0x1ff, [0x9, 0x7, 0x9, 0x9, 0x1, 0x7ff]}) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r4, 0x80045530, &(0x7f0000001c80)) r5 = openat(r0, &(0x7f0000001cc0)='./file0\x00', 0x202802, 0xbb) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001ec0)={&(0x7f0000001d00)="162869c9d6a15530f9acaa5b2cfb9801ea73e1877fc0fc1ce2cca9aa2cca71ba7eda65e819ae1e4c710c152c01dec4dc75f7fccc178088296bf62ef4", &(0x7f0000001d40)=""/126, &(0x7f0000001dc0)="6df2cb827696e1ae1baf58cdb6e80b30aa0b2b04ea0e6383ef7e11e0fa87954572ff8bb99654259ef2d9d553a447e998c626a3f4aeaed62a813144d59400239b62b4ebb2baf1156f1f8460bdf5dcb33e9a195cc98a2d1114e401eb9a443288c555ef04", &(0x7f0000001e40)="168ca8d5c3f344932c19408d316b260fa1f9ab21bf0c62fcf42c94664048dbffb9cfee69629e68b7b5d4a3559eb7f15fcbb09051894b9f354878e01679d0ff6c18150186e21c51ed68938a", 0x0, r4, 0x4}, 0x38) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000001f00)={0x0, 0x7}, &(0x7f0000001f40)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000002040)={r6, 0xbc, &(0x7f0000001f80)=[@in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x6, @loopback, 0x5a91}, @in={0x2, 0x4e22, @empty}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in6={0xa, 0x4e24, 0x401, @empty, 0x3}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x1, @private1, 0x1}]}, &(0x7f0000002080)=0x10) ioctl$SG_GET_REQUEST_TABLE(r5, 0x2286, &(0x7f00000020c0)) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000002240)={0x0, 0x2, 0x8}) ioctl$F2FS_IOC_GARBAGE_COLLECT(r7, 0x4004f506, &(0x7f0000002640)) clock_gettime(0x5, &(0x7f0000002680)) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, 0xfffffffffffffffc) 47.754133088s ago: executing program 2 (id=1692): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000000)) 47.752634375s ago: executing program 2 (id=1693): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x7, 0x400008, 0x200101, 0xb, 0x1d, "a6c00d00000400f8ffffff00"}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x109001, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000440)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000003c0)=0x8) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f0000000040)=0xd) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x503143, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r11}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f00000004c0)={0x1, 0x0, [{0x6e0, 0x0, 0x400000000000000}]}) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r12, 0xffffffffffffffff, 0x0) 47.491411029s ago: executing program 2 (id=1700): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = socket$inet6(0xa, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x400009, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1bf) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001000000300051"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev_mnt/ttyUSB0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x20000, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a0100000001020001090219000101008032090400"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) close(r5) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) 31.226603837s ago: executing program 32 (id=1700): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) r0 = socket$inet6(0xa, 0x1, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x62], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x14e24, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x400009, @dev={0xfe, 0x80, '\x00', 0x2d}}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_sysfs\x00', 0x1bf) mount(0x0, &(0x7f0000000400)='./my_sysfs\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000700)='./my_dev\x00', &(0x7f0000000800)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000900)='./my_configfs/dlm/cluster1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./my_configfs/dlm/cluster1/cluster_name\x00', 0x2, 0x0) write(r2, &(0x7f0000000b00)='cluster1\x00', 0x9) mkdir(&(0x7f0000000d00)='./my_configfs/dlm/cluster1/comms/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./my_configfs/dlm/cluster1/comms/1/local\x00', 0x2, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010100060000000000002b00000008000300", @ANYRES32=r4, @ANYBLOB="040046000a0034000101010101010000080026006c0900000800270001000000300051"], 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev_mnt/ttyUSB0\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x20000, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040990a0100000001020001090219000101008032090400"], 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev_mnt/ttyUSB0\x00', 0x802, 0x0) close(r5) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfffa}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_plug={{0x9}, {0x1, 0x2, {0x3, 0xbc}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x15}, 0x4040010) 16.647851469s ago: executing program 4 (id=2135): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000480)={{0x6, 0x6, 0x40, 0x1e, 0x2}, [{0x9, 0x6, 0x6, 0x4}, {0x2, 0x6, 0x6, 0x4}, {0x0, 0xffff, 0x7f, 0x3}, {0x8, 0x3c, 0x1, 0x7f}]}) (async) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1000, 0x201) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x9e0000, 0x1, 0x1903, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa00901, 0xd35b, '\x00', @string=0x0}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000440)={0x0, 0xfffffffffffffe2a, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2], 0x14}, 0x1, 0x0, 0x0, 0x4008085}, 0x4000000) (async) syz_usb_connect(0x2, 0x1b3, &(0x7f0000000540)={{0x12, 0x1, 0x300, 0xf2, 0x16, 0x14, 0x40, 0x2357, 0x9000, 0xd3e1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a1, 0x3, 0x5, 0x4, 0xd0, 0x3, "", [{{0x9, 0x4, 0x4, 0x8, 0x4, 0x91, 0x92, 0xe8, 0x4, [], [{{0x9, 0x5, 0x80, 0x0, 0x40, 0x83, 0x2, 0x8}}, {{0x9, 0x5, 0xf, 0x10, 0x3ff, 0x20, 0x84, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0x1, 0x4, 0x400, 0x3, 0x4, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x0, 0x5}]}}, {{0x9, 0x5, 0x1, 0x0, 0x10, 0x2a, 0xf2, 0x5}}]}}, {{0x9, 0x4, 0x2, 0x4, 0x0, 0xff, 0x5d, 0x81, 0xa, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x101, 0x3, 0x7, 0x8}, [@ncm={0x6, 0x24, 0x1a, 0xb, 0x8}, @country_functional={0x6, 0x24, 0x7, 0x7, 0x6}, @obex={0x5, 0x24, 0x15, 0xfff}, @mbim={0xc, 0x24, 0x1b, 0x7fff, 0x39, 0x1, 0x9, 0x6}]}]}}, {{0x9, 0x4, 0x2d, 0x38, 0x1, 0xff, 0x5, 0x6, 0x2, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "856d6603cb"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x1, 0x4, 0xb0}, {0x6, 0x24, 0x1a, 0x7, 0x4}, [@mdlm_detail={0xcd, 0x24, 0x13, 0x5a, "31150e61a32f3b19018b69c39482ffb6eab6c73d3e20fc0efb3b8b63cf73d5d64da1c9208c3a81cda1af70115c5404bab2d367b7b691abff67c77b8d46a6b810071b446829de9162ccb898c2e2deaa4dfde8c3d901fe3973f633b06e36a1c3b21fff6142aa63fc01f668741bf5a24d4250aaaba97c3a44c3984acdcdf65ae89e50fb35fa400d25d3c795c4a75685423c7e4f4ddf85aef3cead16f798e5a1ab313a5b4853fc00c19064fc856e0c8ac4fb1a9fbbf8440c867ef4f98435a1d2a6d27bd398a6e54c59fa7a"}, @mbim_extended={0x8, 0x24, 0x1c, 0x6, 0x6, 0xf}, @mdlm_detail={0xb, 0x24, 0x13, 0x9, "6878c796925e18"}, @network_terminal={0x7, 0x24, 0xa, 0xfa, 0x5, 0x2, 0x80}, @obex={0x5, 0x24, 0x15, 0xd8}]}], [{{0x9, 0x5, 0x8, 0x0, 0x8, 0x1, 0xf9, 0x6}}]}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x110, 0x80, 0x40, 0x5, 0x40, 0xf9}, 0xe6, &(0x7f0000000740)={0x5, 0xf, 0xe6, 0x3, [@generic={0xad, 0x10, 0xa, "4f8d225883d1e200852a56e3c20c33b38c237721211996ae686f9890a81da26040b314fcb1046f37554768264631b39a40f705224e07222cba0073f4f8984435d35895f03dfd2f9bbff6cc5aa0e68d348b4a965ee838663d8a5bac95e5aaeb6e1ad8af236e16b45f838d3463a77565d37259f5961d4980814860b74b1e93fc1d2a986f382f3f1c0a48f19e085dc750d12d6f16cd326ecedc3c83d3c97bf63dedfe6e9c86eeafd49aff3a"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x5a, 0xff00, 0xe, [0xf, 0xc0, 0x1f80, 0xff0000, 0x3f0f]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "1fb08bc9e4b5f52764df43af5adf45c4"}]}, 0x4, [{0x59, &(0x7f0000000840)=@string={0x59, 0x3, "4e440d0e4a0e20208138511f4e6f032661fac4c2ea3a22e8ea3c393f192ffeb4446dc7cf19bb25c90047d0edc1bef941f8070c3e92704b0b4b623fad905a26147ea692d901d63099f86ac28e5054c4d54efcb65e497b11"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x1004}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x409}}]}) r4 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x4002, 0x2bd}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x2}]}, 0x1}, 0x1) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x12, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000300012800b00010067656e6576650000200002801400070020010000000000000000000000000000080001000100000008000a00", @ANYRES32], 0x58}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 15.219017001s ago: executing program 4 (id=2144): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000680)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0xfffffffe, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x2e}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xca}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x400}], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x64, r3, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x8001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40081) r4 = socket(0x10, 0x3, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0xbe, 0x0, 0x1}) r5 = socket(0x10, 0x803, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@newtaction={0x6c, 0x30, 0xb, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ct={0x54, 0x1, 0x0, 0x0, {{0x7}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x5}, @TCA_CT_MARK={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) 14.252150461s ago: executing program 4 (id=2151): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000040)={0x34c, 0x26, 0x300, 0x70bd2a, 0x0, "", [@nested={0x10, 0x105, 0x0, 0x1, [@typed={0xc, 0x26, 0x0, 0x0, @u64=0x5}]}, @typed={0x7, 0x61, 0x0, 0x0, @str='}{\x00'}, @nested={0xc2, 0x85, 0x0, 0x1, [@generic="b826f609b51bf017fba86db724e04f5ffd9393e0e4111a91f13978c1dc3dd0143a7b019c92f27431e2fe27cbdddf242dccfefc79e37e21cef1f3fb886de891ac7657fcf1e201fbd27f1fa0a3b1707057cccf541dc7e4852620cda39175ec758ff98bfcab61b977c29116079f2e39fce81508b79564d16f86674fc2717c2627a2e3d8c3ab91", @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x8000}, @generic="b7bf48fca0ccda90ea6331bbe9786d4b978bc32bf3d5a605be10cc568f7be5d0f9b7561fe3b29c12f949feba1e"]}, @typed={0xc, 0x157, 0x0, 0x0, @u64=0x8}, @nested={0x156, 0x68, 0x0, 0x1, [@generic="63d6da727072875e82", @typed={0x4, 0xbb}, @generic="394e713fca96585f72140939a73572deb692d4b772574acd737e49291e75afa4dfcc21e8030c3a4e7f9a35c1d1a5c0397728f5f556139eb7d48c58d26dd019a2e9d7a3b0a8f9f00e908c97ddef6db3287fccc08a0458a09022fe01cfa0c9030e9ce02ed090a447bc35f36831e7c16206d40e419db88ea4333a420c46110976907eef9afb2788fbe2dec84613d9d86c55a63ba5cc8e2b21aa1f3628fe543dc7a995d8157aea0c5501d89504c718", @nested={0x6c, 0xe7, 0x0, 0x1, [@generic="7e0418fcc21263521b549eec63ffcefb72197e4c78c73b1ec16a1c9ae526355d1137f1d7836f2af2ceee910bcfb2a386c04c4d23247f2d4e3e6289e6cdd6ad41c1ff941549e40a9e6dd3b1a41c40cc15ebef66f430765eb685db415afd9b0f76459ee00fda62e33b"]}, @nested={0x18, 0x16a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xd}, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x57}]}, @typed={0x8, 0xd4, 0x0, 0x0, @ipv4=@loopback}, @nested={0xc, 0x58, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x31}]}]}, @generic="68ed1b848350c659f28930d45d38a73677", @typed={0x7e, 0xbc, 0x0, 0x0, @binary="5d3c9ab7afe776c40a94c1a3017f635f60f50675b93f97b7010011cbcaf8b7ecc42553b3c2407799402030508ae7af6d3c7ea9a57440196419708dee1208a78c10fc398771eb82611828b40fe25e0927dbf7326461716db5d53b1b08f5d7f5fd4e977516f72335cfa2030729bf5c71a3ee62c5db8371461937cc"}, @generic="34b8a3cc8703c54565bdd608ea9cd8f1c9243b33603a8f268dfdf1774be859371facee0d5350e7dce35050e2cee725042508aebfda403f8dbbb15307f31a4fb2522f2fcf7a39d6fe2d6cd57cd83bb01497ffccfb189ca2cd3595222c9d3a278ebdd9871e6e89fc68ecd5"]}, 0x34c}], 0x1}, 0x440) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000000040)={0x34c, 0x26, 0x300, 0x70bd2a, 0x0, "", [@nested={0x10, 0x105, 0x0, 0x1, [@typed={0xc, 0x26, 0x0, 0x0, @u64=0x5}]}, @typed={0x7, 0x61, 0x0, 0x0, @str='}{\x00'}, @nested={0xc2, 0x85, 0x0, 0x1, [@generic="b826f609b51bf017fba86db724e04f5ffd9393e0e4111a91f13978c1dc3dd0143a7b019c92f27431e2fe27cbdddf242dccfefc79e37e21cef1f3fb886de891ac7657fcf1e201fbd27f1fa0a3b1707057cccf541dc7e4852620cda39175ec758ff98bfcab61b977c29116079f2e39fce81508b79564d16f86674fc2717c2627a2e3d8c3ab91", @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x8000}, @generic="b7bf48fca0ccda90ea6331bbe9786d4b978bc32bf3d5a605be10cc568f7be5d0f9b7561fe3b29c12f949feba1e"]}, @typed={0xc, 0x157, 0x0, 0x0, @u64=0x8}, @nested={0x156, 0x68, 0x0, 0x1, [@generic="63d6da727072875e82", @typed={0x4, 0xbb}, @generic="394e713fca96585f72140939a73572deb692d4b772574acd737e49291e75afa4dfcc21e8030c3a4e7f9a35c1d1a5c0397728f5f556139eb7d48c58d26dd019a2e9d7a3b0a8f9f00e908c97ddef6db3287fccc08a0458a09022fe01cfa0c9030e9ce02ed090a447bc35f36831e7c16206d40e419db88ea4333a420c46110976907eef9afb2788fbe2dec84613d9d86c55a63ba5cc8e2b21aa1f3628fe543dc7a995d8157aea0c5501d89504c718", @nested={0x6c, 0xe7, 0x0, 0x1, [@generic="7e0418fcc21263521b549eec63ffcefb72197e4c78c73b1ec16a1c9ae526355d1137f1d7836f2af2ceee910bcfb2a386c04c4d23247f2d4e3e6289e6cdd6ad41c1ff941549e40a9e6dd3b1a41c40cc15ebef66f430765eb685db415afd9b0f76459ee00fda62e33b"]}, @nested={0x18, 0x16a, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0xd}, @typed={0x8, 0xa4, 0x0, 0x0, @ipv4=@loopback}, @nested={0x4, 0x57}]}, @typed={0x8, 0xd4, 0x0, 0x0, @ipv4=@loopback}, @nested={0xc, 0x58, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x31}]}]}, @generic="68ed1b848350c659f28930d45d38a73677", @typed={0x7e, 0xbc, 0x0, 0x0, @binary="5d3c9ab7afe776c40a94c1a3017f635f60f50675b93f97b7010011cbcaf8b7ecc42553b3c2407799402030508ae7af6d3c7ea9a57440196419708dee1208a78c10fc398771eb82611828b40fe25e0927dbf7326461716db5d53b1b08f5d7f5fd4e977516f72335cfa2030729bf5c71a3ee62c5db8371461937cc"}, @generic="34b8a3cc8703c54565bdd608ea9cd8f1c9243b33603a8f268dfdf1774be859371facee0d5350e7dce35050e2cee725042508aebfda403f8dbbb15307f31a4fb2522f2fcf7a39d6fe2d6cd57cd83bb01497ffccfb189ca2cd3595222c9d3a278ebdd9871e6e89fc68ecd5"]}, 0x34c}], 0x1}, 0x440) (async) 14.251221338s ago: executing program 4 (id=2153): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a09040000000000000000020000000900020073797a32000000000900010073797a300000000070000000080a01010000000000000000020000000900010073797a30000000000900020073797a32000000002c00058008000140000000000800024000000000080001400000000608000140000000f9080001400000005c080009"], 0xc4}}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000480)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a5d0292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f0000000840)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a8049d2a44ce42557b2e72e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c5301001ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f5d6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e54908000000a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7fbc0efaccca18e94b87dc586ee60baa55469755ab00e92b607f2aeee00ad72fb29c1847f85b2f8ec3a34864b18eaaa131a4940c9af11606e5d9360c3f4a2c8308d50c34b1bbaac018469ac346dc2a539e20350297097e7bf21ea0c2a0aa083b2b3543af05c7fb5391a1c81304b520fafb941b2dc3cfb03c3dd8567a459752a5ca573ee7cf4f518af508d141c98dc9914df1521e9ee49decdf2418e7f74adea9fda805bc75906dafd279aee36397966427cdef205c67fbbb3", 0x1cb}, {&(0x7f0000000a40)="0a985d7879f1bb", 0x7}], 0x3}, 0x8001) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000240), 0x80a42, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000340)=@any_dev={0x2, 0xb91, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff}}}, &(0x7f0000000400)) ppoll(&(0x7f0000000480)=[{r0, 0x8}, {0xffffffffffffffff, 0x2}, {r2, 0x8008}, {r3, 0x302}, {r4, 0x4}], 0x5, &(0x7f00000004c0), &(0x7f0000000500)={[0x2]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0, 0x0], 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r5, 0xc05064a7, &(0x7f0000000b80)={&(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000000800), &(0x7f0000000a80), 0x7, 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000180), &(0x7f0000000b40)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x2, 0x100000080000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000080)={0x0, 0x80000, r5}) accept$unix(r7, 0x0, &(0x7f0000000100)) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000eb000/0x1000)=nil, 0x1000, 0xb) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r8, 0x28, 0x0, &(0x7f00000002c0)=0x62, 0x8) pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') 14.175539522s ago: executing program 4 (id=2155): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x25dfdbfe, {0x2, 0x20, 0x10, 0x0, 0xfd, 0x0, 0xfe, 0x2, 0x20000000}, [@RTA_NH_ID={0x8, 0x1e, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x400a044}, 0x20004090) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000540)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x16, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000ffff4b867b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r4, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x4) (async) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000740)={r0, 0x58, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000780)={'wg1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'nicvf0\x00', 0x0}) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000008c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x70, r7, 0x300, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0xffffffffffffffff}]}}}, @IFLA_LINK={0x8, 0x5, r11}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x5}]}, {0x0, [0x30, 0x30]}}, &(0x7f0000000240)=""/94, 0x28, 0x5e, 0x1, 0xfffffff7}, 0x28) r13 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x80801, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r13, 0x40086607, &(0x7f0000000400)) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x9a5b, '\x00', r11, r12, 0x1, 0x2, 0x2}, 0x50) 13.830031435s ago: executing program 4 (id=2159): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 13.747469171s ago: executing program 33 (id=2159): r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) 5.04769897s ago: executing program 0 (id=2261): r0 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f0000000340)=ANY=[], 0x0) syz_usb_disconnect(r0) r1 = syz_clone(0x4820000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) r3 = epoll_create(0x10e) epoll_wait(r3, &(0x7f0000000000)=[{}], 0x1, 0x4) r4 = syz_usb_connect(0x1, 0x3f, &(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYRESOCT=r2, @ANYRES8=r3, @ANYRES16=r3, @ANYRESHEX=r3, @ANYRESDEC=r3, @ANYRESOCT=r3], 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) timer_create(0x1, &(0x7f0000000000)={0x0, 0x0, 0x2, @tid=r5}, &(0x7f0000000040)=0x0) timer_settime(r6, 0x0, &(0x7f0000000080)={{}, {0x0, 0x3938700}}, &(0x7f00000000c0)) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_disconnect(r0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) getgroups(0x27, &(0x7f0000002540)) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x4, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x0, 0x5, 0x0, 'queue0\x00', 0x200}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x401040a4}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000050601040000000000000000020000050900030073797a3000000000090002007301a731000000000900020073797a3200000000e9a7183d77e389103cfee8"], 0x38}, 0x1, 0x0, 0x0, 0x200288d4}, 0x8056) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x3, 0x0) r13 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r13, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r8) syz_usb_control_io$rtl8150(r4, 0x0, 0x0) 3.535813229s ago: executing program 1 (id=2278): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001b40)={r0, 0xfeffff, 0xe, 0x0, &(0x7f0000001bc0)="c45c57ce395de5b289f07d637a22", 0x0, 0x29, 0x0, 0x2a, 0x0, &(0x7f0000000700)="30045c262ad28e566e825e85fd10a4155eed06a0190acaf8796c7e109250fca9c0086cbc80aaf48a1c6a", 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006119a400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000000bc0)={0x2020}, 0x2020) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20001) ioctl$BLKFRASET(r2, 0x1264, 0x0) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$BSG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)=0x10001) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/wireless\x00') r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x8, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x38}}}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x81}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}], @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x4) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000100)={0x0, @reserved}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x1b0, r3, 0x1, 0x0, 0x21dfdbfe, {}, [@WGDEVICE_A_PEERS={0x188, 0x8, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}, {0x148, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3c}}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "35e038aeda0f5e3bf1b788ea96936b85edff8cba2d86430c6d841c960c53effe"}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4085}, 0x40000) 3.469502052s ago: executing program 1 (id=2279): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@ipv6_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x0, {0xa, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2400}}, 0x1c}}, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="120000000d0000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000240), &(0x7f00000002c0)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r3}, &(0x7f0000000280), &(0x7f0000000400)=r1}, 0x20) r4 = fcntl$dupfd(r0, 0x406, r0) ioctl$TCFLSH(r4, 0x400455c8, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0xd) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x7) 1.726368666s ago: executing program 0 (id=2283): getsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, 0x0, &(0x7f0000000100)) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f0000000040)={0xff, 0x4, 0x80000001, 0x0, 0x6, 0x3, 0x0, &(0x7f0000000000)=[{0x17, 0xfe, 0x2db}, {0x11, 0x1ff, 0x8}, {0xb, 0x101, 0x8001}]}) 1.72581314s ago: executing program 0 (id=2284): r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') preadv(r0, &(0x7f0000000040)=[{&(0x7f00000014c0)=""/215, 0x11c}], 0x1, 0x94, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000040)={0x9, 0x7, 0x9, 0x6, 'syz0\x00', 0x8}) syz_emit_ethernet(0x55, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x34, 0x47, 0x68, 0x0, 0x0, 0x6, 0x0, @multicast2, @empty, {[@end]}}, @payload_mcast={{{{{{0x2f, 0x0, 0x1, 0x0, 0x1, 0xb, 0x2, 0x2, 0x4, 0x0, 0x2, 0xa, 0x3, 0x1, 0x9, 0x86bf, 0x1, 0x4e20, 0x4e23}, 0x1}, 0x4, 0x3}, 0x4}}, [0x0, 0x0, 0x0]}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NHA_GROUP_TYPE={0x6, 0x3, 0x1}, @NHA_FDB={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.649805202s ago: executing program 0 (id=2285): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x30, r4, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) r6 = dup2(r1, r0) ioctl$sock_SIOCINQ(r6, 0x541b, &(0x7f0000000040)) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010327bc7022fdcf0000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4000004) r8 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x121021) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/oops_count', 0x8a883, 0x2) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) ioctl$LOOP_SET_BLOCK_SIZE(r8, 0x4c09, 0x200) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 1.50960488s ago: executing program 0 (id=2286): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r3, 0xc0585611, &(0x7f0000000040)=@overlay={0x0, 0x1, 0x4, 0x0, 0x1000, {}, {0x4, 0x0, 0x0, 0x1, 0x0, 0x0, "12848098"}, 0x3}) readv(r3, &(0x7f0000002a80)=[{&(0x7f00000017c0)=""/214, 0xd6}], 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) r6 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x80b2, 0x110101, 0x3, 0x55}, &(0x7f0000000100), &(0x7f0000000240), &(0x7f0000000080)) io_uring_enter(r6, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x3, 0x0, 0x3}, 0x10) recvmmsg(r5, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000001c0)=""/180, 0xb4}], 0x1}, 0x8}], 0x1, 0x2000, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x4477}], 0x1}}], 0x400000000000181, 0x9200000000000000) rt_sigsuspend(&(0x7f0000000140)={[0x9]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x4801}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.086483294s ago: executing program 1 (id=2287): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x9, 0xfffffffd}) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'ip6gretap0\x00', &(0x7f0000000040)=@ethtool_gstrings={0x1b, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = syz_usbip_server_init(0x5) write$usbip_server(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="000000017f"], 0x30) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffff9, 0x100a99e, 0x10}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r2, 0x7aa, &(0x7f0000000080)={{@hyper, 0x2}, 0x100, 0x4}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) 880.967118ms ago: executing program 3 (id=2288): syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8, 0x50}, "efc53dd319a72699ad7472d0e2611fa9df0d55e11eaa039e795620252a4ba7431d889d9aed834daefc90cb31592bb8ee8234feb431e1f078bf1bf7bff612551bb10476176da24462b9b66391fd0def41"}, 0x54) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0xef, 0x18}, {0x96, 0x8, [0x1, 0xbbe7, 0x1ff, 0x0, 0x1, 0x80, 0x7, 0x8, 0x7, 0x6]}}}}, 0x25) (async) syz_emit_vhci(&(0x7f0000000080)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_reconf_req={{0x19, 0xef, 0x18}, {0x96, 0x8, [0x1, 0xbbe7, 0x1ff, 0x0, 0x1, 0x80, 0x7, 0x8, 0x7, 0x6]}}}}, 0x25) syz_emit_vhci(&(0x7f00000000c0)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x2c}, "4d17dc344d4d5c006d178e0841cce922b3e56f7b9f76dd10999a54bf69708dd922f181d5f4bbcf17c57459e3"}, 0x30) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x8001, 0xfff8, 0x788, 0xb}}}, 0xa) r0 = syz_open_dev$I2C(&(0x7f0000000140), 0x6, 0x101440) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000500)={&(0x7f0000000480)=[{0xf0, 0x600, 0x68, &(0x7f0000000180)="dbdfcaf08a525a7f6443ab91754bd2a81a1faef8da14b701d7123c36646945c10fe7eef52435e6cd7f9cfc58b6a2c97b6dba64fee4d71b6a74c1001ce7ecf4b8ec0c29cf11daba0526d18538f40b47b5237abf050cab883afb75f0895879af6e5e1d5c0cff40d90d"}, {0x4, 0x1010, 0x14, &(0x7f0000000200)="cdcf5152449807737b7c85c10160a197ae5ba48f"}, {0xe, 0x5000, 0xfa, &(0x7f0000000240)="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"}, {0x2a32, 0x0, 0x83, &(0x7f0000000340)="109fa6f6e5978b0846a0be2c70c00bdd6b5f7bbad1158afe820c3b97b914f900953da871a107f5ed3b225edb7455d2f7426fa555b727b50d904ebf3ab43ccbd83433e249637de82bfde6f65fa2611623b4222613b90d1caf97fc6eb39d6a7b237e72c610ba98da4c9dc818cde58b279fee163c47ae80d2eb09cd92b705c35fec8bb255"}, {0xfff9, 0x1, 0x66, &(0x7f0000000400)="7cc3ceec29fbac041fd7ef154896b54c725abe6dd394714c31935f7ae39d76d113a8c8d555492d80e5b5fb02ed8d9e277f1314cbcf639e4c7ca8f1c6705feb5012b7d38f01bc028c295176cd81fe26d885853d642f1498f17cdf360f80de436ec327c9b32402"}], 0x5}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x1a, 0x1, 0x5, 0x9, 0x3, 0x3e, 0xffffd1e9, 0x125, 0x38, 0x2ca, 0x5, 0xf800, 0x20, 0x3, 0x9, 0x5, 0x1000}, [{0x6474e551, 0x1877, 0x8, 0xfffffe00, 0xffffffff, 0xffffffc0, 0x10, 0xffffffff}, {0x70000000, 0x71, 0x100, 0x7, 0xfffffffc, 0x99, 0x0, 0x1}, {0x6474e551, 0x8f, 0x8, 0x2, 0x4, 0x1, 0x0, 0x200}], "867cc962956d08e30e176ec797d7094455300fc4d0b4b713cfc97f6806aa4e6a7f6baa7127fbac4622937b613cc0789ac5480c30ed721bf4e8920406ae0212eda316c8224e4a4fc6c694b9aed1cf02531a8b835ca521b90c8ecc4c703fda9434a77f03e87ea20bb240ad5b3de2ed1eb96467a7892e41ab64dc1da648e1115afb42a212ad13ca101e67b91ebfe98239fa33360c3657a4979794b7c89d0229fdd7075f9692fc5b3d4f36fbbd9f8e41115aaca1b4c344a98b9a5a3d9aec6d211e23359e36282585e434569c113b9ffc87a0b0", ['\x00', '\x00', '\x00']}, 0x469) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r3, 0x100, 0x70bd28, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}}, 0x20000001) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x4) timer_create(0x3, &(0x7f0000000b40)={0x0, 0x9}, &(0x7f0000000b80)) (async) timer_create(0x3, &(0x7f0000000b40)={0x0, 0x9}, &(0x7f0000000b80)=0x0) clock_gettime(0x0, &(0x7f0000000bc0)) (async) clock_gettime(0x0, &(0x7f0000000bc0)={0x0, 0x0}) timer_settime(r4, 0x0, &(0x7f0000000c00)={{r5, r6+10000000}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x110, r0, 0xedb74000) write(r0, &(0x7f0000000c40)="d47adfe3134557838f42e1e5d632ed345380394ecbc411cdcf512a4a164175ac937fbc27f65a040c60a162934d0706c70c3ff4b56dbefda10a344184ddfed03db43c338cc44e183ad54e90963e293a141fca60b085c945485e2e57dbbfbda59f88d08c9e7a442a2c512da64c5692caabbc9c20cf75b6b9838c28f622b56fdfd0ea24177ab55c2cf03980e8434df6eedd330a27d24ce6dda439ef0e73b536165b6ffed1dfeb1ef06afb92c102b3c5616cef2d205685fd31807d760c217b44", 0xbe) (async) write(r0, &(0x7f0000000c40)="d47adfe3134557838f42e1e5d632ed345380394ecbc411cdcf512a4a164175ac937fbc27f65a040c60a162934d0706c70c3ff4b56dbefda10a344184ddfed03db43c338cc44e183ad54e90963e293a141fca60b085c945485e2e57dbbfbda59f88d08c9e7a442a2c512da64c5692caabbc9c20cf75b6b9838c28f622b56fdfd0ea24177ab55c2cf03980e8434df6eedd330a27d24ce6dda439ef0e73b536165b6ffed1dfeb1ef06afb92c102b3c5616cef2d205685fd31807d760c217b44", 0xbe) timer_delete(r4) (async) timer_delete(r4) syz_emit_vhci(&(0x7f0000000d00)=@HCI_EVENT_PKT={0x4, @hci_ev_keypress_notify={{0x3c, 0x7}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0xf3}}}, 0xa) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_buf(r2, 0x107, 0x15, &(0x7f0000000d40)="d530c3036500cc48cd61c751e3ae86", 0xf) (async) setsockopt$packet_buf(r2, 0x107, 0x15, &(0x7f0000000d40)="d530c3036500cc48cd61c751e3ae86", 0xf) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000dc0)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@deltclass={0x64, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff0}, {0xc, 0x10}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xb8, 0xb}}, @TCA_RATE={0x6, 0x5, {0xe4}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_prio={0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4880) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000ec0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)=@deltclass={0x64, 0x29, 0x400, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0xfff0}, {0xc, 0x10}, {0xfff2}}, [@TCA_RATE={0x6, 0x5, {0xb8, 0xb}}, @TCA_RATE={0x6, 0x5, {0xe4}}, @tclass_kind_options=@c_fq_codel={0xd}, @tclass_kind_options=@c_mq={0x7}, @tclass_kind_options=@c_netem={0xa}, @tclass_kind_options=@c_prio={0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x4880) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000f00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9d}, "6d62c1191ee1da20cc5e0b9d4010dcc0e678a563458aa90d2e1cfe119ffa14ddf8b521b3644a0167e5e413416062927de8c09e059dcb102ce47b869b56f1018d6f48536c67efa87774438c1435cdce034dc5efd84a86c029c0eec7b5fb75c2ee7ed11cc6208baad35855d89974ba5c35a45ac2961fd9cd395d302d63f055d96305d6336803e53552a1e21ee6bab24d211fc2c2b3b60b0e2465d3ad4539"}, 0xa1) (async) syz_emit_vhci(&(0x7f0000000f00)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x9d}, "6d62c1191ee1da20cc5e0b9d4010dcc0e678a563458aa90d2e1cfe119ffa14ddf8b521b3644a0167e5e413416062927de8c09e059dcb102ce47b869b56f1018d6f48536c67efa87774438c1435cdce034dc5efd84a86c029c0eec7b5fb75c2ee7ed11cc6208baad35855d89974ba5c35a45ac2961fd9cd395d302d63f055d96305d6336803e53552a1e21ee6bab24d211fc2c2b3b60b0e2465d3ad4539"}, 0xa1) ioctl$FS_IOC_GETFSSYSFSPATH(r7, 0x80811501, &(0x7f0000000fc0)={0x80}) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x202, 0x0) (async) openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x202, 0x0) sendmsg$nl_route(r9, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)=@ipv4_getroute={0x1c, 0x1a, 0x2, 0x70bd2a, 0x25dfdbfd, {0x2, 0x80, 0x80, 0x6, 0xfe, 0x3, 0xfe, 0x3, 0x1400}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) timer_create(0x2, &(0x7f00000012c0)={0x0, 0x1a, 0x2, @thr={&(0x7f00000011c0)="44924f7e599eae7a", &(0x7f0000001200)="10d28d382dd09f363e688b1eb816726ce8474f7a3fc3745cc58b32864087b890a0f97de1a6d26b4f9dd09f5dfd7531511d2a46b35c3eaebd9fad9b8ebaa55d7b353dab925d524419327aa98e4b229db9936004606e5a88c4c51e25a568c9e81ef2b10da3f738c0ce299c11ce8965b2c3a7937ac5a8f88c1775cd09bdd85ddcace0a6ae05fa81438920a375faf8f7f8aa1a7084008a4add184e09a8529a3beaae92c2dfdbdf9f2534b655ece7e526c460870aab13cf08b4167ca364"}}, &(0x7f0000001300)) ioctl$HIDIOCGUSAGE(r2, 0xc018480b, &(0x7f0000001340)={0x1, 0x100, 0x4, 0x3, 0x90e}) 880.380561ms ago: executing program 3 (id=2289): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000d5ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call]}, &(0x7f0000000a00)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x13b02, r5, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) 728.829366ms ago: executing program 3 (id=2290): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x400, 0x0) ioctl$TIOCCBRK(r0, 0x5428) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45}, 0x48) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/fail_page_alloc/times\x00', 0x1, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 728.542719ms ago: executing program 3 (id=2291): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0xfffffffd, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r3, 0x40104d05, &(0x7f0000000900)) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xd}}, './file0\x00'}) symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00') ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000300)={r1, r1, 0x8, 0x88, &(0x7f0000000240)="2ba4a4233dbe3d419cc758a96f22c14840d6b4803c52a4f0ae2f8e5cd20b1de457afb66e9656b79c7b753f7d8ea50a50bc21593a86593e125f93d720297d946cd2951f6882efaeb6c83e50fe98bc4fb23a5f2c5756a96ca5b3e0f30efb9d185090c8e63519c991e09e40ec5c6d1c983d9ba6f1a0efb7402dc4126eb4cf75e646bab597f585e86035", 0x3b, 0x1, 0x9, 0x10, 0x6, 0x1, 0x7, 'syz0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {}, {0x0, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048000) 599.060793ms ago: executing program 3 (id=2292): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)=@newtaction={0x14, 0x76, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000480)={{}, 'syz0\x00'}) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000002340)={0x2020}, 0x2020) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="3c0000001000010400000000fbdbdf2500000000", @ANYRES32=r4, @ANYBLOB="8a450200000000003a00128009000100626f6e64000000000c00028005000d0001000000645360dd5fb477dcd098c0d5e3f7002f3f85a65d49e28ec4f35679ed3c882d1374761e9d23e532d3b6bf245e2b5e417252c5249633c5469e9fc064c099688e81f93c386cd8cd1cd19026b72cf570ddad2cb62363176f60b46d0005d41402649e5f0359cf3aac04e69bf5faa40afff61070b08655ac6fdc3ece209e4f8f36b8eb8a685059c7ab26087136ba0088dde65f7ed5bd958036bcf86b6a379f07afb661dffed038a14a6425"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000040) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$BLKGETSIZE(r3, 0x1260, &(0x7f0000000140)) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000001000010400000000fedbdf2500000000", @ANYRES32=r8, @ANYBLOB="00030000800000000a0001"], 0x2c}}, 0x884) 583.446912ms ago: executing program 0 (id=2293): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) r1 = io_uring_setup(0x4a86, &(0x7f0000000380)={0x0, 0x9481, 0x2, 0x1, 0x2b8}) socket$inet6(0xa, 0x1, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r2, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000940)=""/32, 0x20, 0x4, 0x7, 0x0, 0x0, 0x3}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000080), 0x1, 0x200) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f00000005c0)={0x88, "895cd46771f00301c1ca639506f24c672ecfd2bd1050f9c5774eb3e02ce08f61bb32758aa48d8b91deae8e868458c5a16302ef180c82320b8e92c2821ee0eb19"}) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000640)="42f8f4a36d4b201e00b814ff835264d1bf49ae85a2a48a2dee29521214") close_range(r1, 0xffffffffffffffff, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x31, &(0x7f0000001600), 0x4) r4 = socket$netlink(0x10, 0x3, 0x8000000004) r5 = syz_open_dev$evdev(&(0x7f00000005c0), 0x3214, 0x0) syz_usb_disconnect(r5) syz_usb_connect$uac3(0x6, 0x80, &(0x7f0000000580)=ANY=[], 0x0) ioctl$EVIOCRMFF(r5, 0x4004550a, 0x0) r6 = socket(0x1e, 0x4, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x24, 0x16, 0xa01, 0x0, 0x0, {0x3}, [@typed={0x4}, @typed={0xc, 0xa, 0x0, 0x0, @u64}]}, 0x24}}, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 455.827435ms ago: executing program 5 (id=2294): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="500000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000001c0012800b0001006d616373656300000c02000000000000003ca900140035006d61637365633000000096b968abf500"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x9a68, 0x101000) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000380)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x8, 0x23, &(0x7f0000000280)="3bab1adcc8128cd0f543bdf1c1eb2b05b2e8bef3bb741af44d3473eb890e6d2f4922ec35f19a30063e57f591203f423722de7298c6df12571c0d73037d01d98041d2627c39734f221e136fd18f6b921daf0742046154b6a67cc563ee3dd3f68d52e3ce8b9dc3a52325792cf5e0fc8e43", 0x70, 0x7, 0xf203, 0x0, 0xfffffff9, 0x401, &(0x7f0000000300)="4c1d76c0d709e24e87e30454447a47835eaa2d866e45157e0599c41641c610e07bfc807cd084e79caabfb185cc5668dd8eb9ac5198ca9aaf9abfa2f07f151237d7ae32c6f3db52eef8a0f5a0493ecb161dbf05fdcb94955a008defacf5c9a9066292a80f84e3456512a959b2c41cebfc93671dd026598dd14e8224c3"}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001800090000000000000000001c140000fe00000143f4"], 0x30}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@newtfilter={0x5c, 0x2c, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x8, 0x3}, {0xc, 0xe}, {0xd, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0xffffffff}, @TCA_RATE={0x6, 0x5, {0xf, 0x6}}, @filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x4}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5, 0x52, 0xf}]}}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x81}, 0x4091) 455.550744ms ago: executing program 1 (id=2295): r0 = syz_open_dev$vcsn(&(0x7f0000000000), 0x4, 0x4000) read$sequencer(r0, &(0x7f0000000040)=""/164, 0xa4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x1, 0x1}, 0x6) 378.404555ms ago: executing program 3 (id=2296): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x4010744d, &(0x7f0000000000)=0x20000002) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6401000010000100feffffff00010000fc00000000000000000000000000000164010101000000000000000000000000000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14143f000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b000600000008001800400000000a001000010000000000000008000b000600000008000c00"], 0x164}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) (async) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, r4, 0x16, 0x0, @void}, 0x10) r5 = socket(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000840)=ANY=[@ANYBLOB="030083204be0000000d200000a004e2300020009ff010000000000000000000000000001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x90) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000040)={'wlan1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) socket(0x26, 0xb, 0xe) socket$unix(0x1, 0x1, 0x0) (async) r8 = socket$unix(0x1, 0x1, 0x0) r9 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r9, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) (async) r10 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x30, 0x0) landlock_restrict_self(r10, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) socket(0x1d, 0x2, 0x6) (async) r12 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r12, 0x6a, 0x1, 0x0, &(0x7f0000000640)) bind$unix(r11, &(0x7f0000003000)=@file={0x1}, 0x6e) listen(r11, 0x0) (async) listen(r11, 0x0) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) (async) connect$unix(r8, &(0x7f0000000640)=@file={0x1}, 0x6e) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000c00)=ANY=[@ANYRES8=0x0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x278}, 0x10}, 0x94) 378.088864ms ago: executing program 5 (id=2297): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) write$selinux_attr(r1, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) r5 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x228240, 0x374, 0x22}, 0x18) write$UHID_SET_REPORT_REPLY(r5, &(0x7f0000000200)={0xe, {0x0, 0x6, 0x7f, 0x3b, "89830ed9824215f00748565d23b5627b2ab5bb80be72897006693385c89950728c4f61d7dd291ef19dbc2c487cf0eaa54e348a7926ab432feaf1b3"}}, 0x47) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$IPSET_CMD_DEL(r2, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)={0xfc, 0xa, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PACKETS={0xc}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xde}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xff}]}, @IPSET_ATTR_DATA={0x58, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x9}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x5}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0x3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x1ac4}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAME={0x9, 0x12, 'syz2\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_LINENO={0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xc}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000800) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 376.867043ms ago: executing program 1 (id=2298): socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(0x0, 0x0, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000002000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000090000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 295.45662ms ago: executing program 5 (id=2299): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000000)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x18, 0x16, 0x1, 0x0, 0x0, {0xa}, [@nested={0x4, 0xca}]}, 0x18}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a28000000000a01040000000000000000010080030900010073797a300000000008000240000000012c000000030a01010000000000000000010002000900010073797a30000000000900030073797a300000000028010000030a05000000000000000000010000050c00024000000000000000010900010073797a30000000000c0002400000000000000001080005"], 0x1a4}, 0x1, 0x0, 0x0, 0xc021}, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) mq_timedreceive(r4, &(0x7f0000000080)=""/58, 0x3a, 0x5, &(0x7f00000001c0)={r5, r6+10000000}) 295.253146ms ago: executing program 5 (id=2300): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) chdir(&(0x7f0000000000)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x1c0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) (async) chdir(&(0x7f0000000000)='./file0\x00') (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x2a) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) 198.395284ms ago: executing program 5 (id=2301): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r2 = socket$kcm(0x2, 0xa, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) (async, rerun: 32) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:03.0/resource4\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c000440000000000000000b14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000210a010300000000000000000a0000010900020073797a31000000e20800010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x24000841}, 0x8000) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbb9d3d93f9dc2b88a84d00817a0601cdd9e717d900009c1100fc000000000000000000000000000000ff0200068225000000000000000000000000014e204e20009c90780100000001000000f5256f784b2f3eb14db902f6e8af9bcf554dfb1db4f6de3ccda49fec1ba7b9ac8dcc8a965e7ef915f0974caef5bf907611fde498ba2769e287e812fc5bf19ae703ff9408d3c498f9fbcf9748bdeb5cd2f6677c05c0686e2268a61979ca2135c605190cd5eadfab5db3a73f12c0b9efcafd122e03dccefeea1c521ef8808391032e3f8423b366895b9b610b03"], 0xde) 76.426748ms ago: executing program 1 (id=2302): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff0000000705810240000007050202400000070583030800"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0xe002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000028c0)={'wlan0\x00', &(0x7f0000000100)=@ethtool_gstrings={0x1b, 0x1}}) 0s ago: executing program 5 (id=2303): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) r4 = io_uring_setup(0x70c3, &(0x7f0000000180)={0x0, 0x2c41, 0x2, 0x20002, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630173100000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001d896c89347e7fa"], 0x7c}}, 0x8084) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close_range(r4, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): 4][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.268061][ T9822] bond0: (slave bond_slave_0): Releasing backup interface [ 215.289507][ T9822] bond0: (slave bond_slave_1): Releasing backup interface [ 215.299253][ T9822] team0: Port device team_slave_0 removed [ 215.305981][ T9822] team0: Port device team_slave_1 removed [ 215.309920][ T9822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.313169][ T9822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.317606][ T9822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.322504][ T9822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.328688][ T9822] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 215.349981][ T5821] syz2: Port: 1 Link DOWN [ 215.667879][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1436'. [ 216.687618][ T42] audit: type=1400 audit(1785627324.528:544): avc: denied { read } for pid=9856 comm="syz.2.1441" name="trace" dev="tracefs" ino=1808 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 217.259877][ T9879] siw: device registration error -23 [ 217.772940][ T9899] bridge0: port 1(erspan0) entered blocking state [ 217.776625][ T9899] bridge0: port 1(erspan0) entered disabled state [ 217.779823][ T9899] erspan0: entered allmulticast mode [ 217.782600][ T9899] erspan0: entered promiscuous mode [ 218.170963][ T9903] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 218.700322][ T42] audit: type=1400 audit(1785627326.374:545): avc: denied { bind } for pid=9924 comm="syz.2.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 220.333976][ T42] audit: type=1400 audit(1785627327.887:546): avc: denied { write } for pid=9973 comm="syz.2.1487" name="c.1" dev="configfs" ino=10172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 220.344614][ T42] audit: type=1400 audit(1785627327.887:547): avc: denied { create } for pid=9973 comm="syz.2.1487" name="midi2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 220.354189][ T9974] Config c/1 of g1 needs at least one function. [ 220.357604][ T9974] udc dummy_udc.0: failed to start g1: -22 [ 220.360276][ T9974] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 220.366187][ T9974] UDC core: g1: couldn't find an available UDC or it's busy [ 221.242524][ T9993] siw: device registration error -23 [ 221.640280][ T42] audit: type=1400 audit(1785627329.096:548): avc: denied { getopt } for pid=10007 comm="syz.3.1500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 221.752729][ T42] audit: type=1400 audit(1785627329.197:549): avc: denied { read } for pid=10011 comm="syz.1.1502" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 221.761987][ T42] audit: type=1400 audit(1785627329.197:550): avc: denied { open } for pid=10011 comm="syz.1.1502" path="/271/config" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 222.191370][ T5821] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 222.348393][ T42] audit: type=1326 audit(1785627329.751:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.1510" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7079e019 code=0x7ffc0000 [ 222.358680][ T42] audit: type=1326 audit(1785627329.760:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.1510" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7079e019 code=0x7ffc0000 [ 222.368225][ T42] audit: type=1326 audit(1785627329.760:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.1510" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc7079e019 code=0x7ffc0000 [ 222.377762][ T5821] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.377788][ T5821] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 222.377800][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.379742][ T5821] usb 7-1: config 0 descriptor?? [ 222.384505][ T42] audit: type=1326 audit(1785627329.760:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10035 comm="syz.0.1510" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fcc7079e019 code=0x7ffc0000 [ 222.414736][T10040] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1512'. [ 222.631651][ T5821] usbhid 7-1:0.0: can't add hid device: -71 [ 222.633806][ T5821] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 222.641706][ T5821] usb 7-1: USB disconnect, device number 31 [ 223.010518][T10045] 9pnet_virtio: no channels available for device #! ./file0 [ 223.010518][T10045] [ 223.133342][ T24] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 223.393103][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.412436][T10056] hfs: unable to load iocharset "io#harset" [ 223.415488][T10056] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1516'. [ 223.526163][T10059] wg1: entered promiscuous mode [ 223.527879][T10059] wg1: entered allmulticast mode [ 223.678055][T10070] netlink: 'syz.0.1522': attribute type 11 has an invalid length. [ 224.158082][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 224.158100][ T42] audit: type=1326 audit(1785627331.421:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10083 comm="syz.0.1527" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcc7079e019 code=0x0 [ 224.202900][ T24] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 224.206905][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.215776][ T24] usb 7-1: config 0 descriptor?? [ 224.383903][T10094] trusted_key: encrypted_key: hex blob is missing [ 224.474814][ T42] audit: type=1400 audit(1785627331.707:567): avc: denied { open } for pid=10097 comm="syz.1.1532" path="/dev/ptyq7" dev="devtmpfs" ino=134 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 224.482725][ T42] audit: type=1400 audit(1785627331.707:568): avc: denied { ioctl } for pid=10097 comm="syz.1.1532" path="/dev/ptyq7" dev="devtmpfs" ino=134 ioctlcmd=0x5405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 224.884613][T10019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.891519][T10019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.106638][ T24] aiptek 7-1:0.0: Aiptek using 400 ms programming speed [ 225.114140][ T24] input: Aiptek as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input9 [ 225.449224][ T5821] usb 7-1: USB disconnect, device number 32 [ 225.449340][ C2] aiptek 7-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 225.707052][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1538'. [ 225.711288][T10114] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1538'. [ 225.716022][T10114] overlayfs: failed to resolve './file2': -2 [ 225.885379][T10122] EXT4-fs: Conflicting test_dummy_encryption options [ 225.945827][T10125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1542'. [ 226.024406][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.035470][T10127] bridge_slave_0 (unregistering): left allmulticast mode [ 226.038436][T10127] bridge_slave_0 (unregistering): left promiscuous mode [ 226.040675][T10127] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.041356][ T42] audit: type=1400 audit(1785627333.156:569): avc: denied { append } for pid=10132 comm="syz.2.1546" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 226.083483][T10134] No source specified [ 226.085489][T10133] No source specified [ 226.188479][ T42] audit: type=1400 audit(1785627333.285:570): avc: denied { getopt } for pid=10144 comm="syz.0.1551" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.477822][ T42] audit: type=1400 audit(1785627333.562:572): avc: denied { create } for pid=10164 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 226.479152][T10165] kAFS: No cell specified [ 226.484031][ T42] audit: type=1400 audit(1785627333.562:571): avc: denied { create } for pid=10164 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 226.487256][T10165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1564'. [ 226.495627][ T42] audit: type=1400 audit(1785627333.580:573): avc: denied { getopt } for pid=10164 comm="syz.0.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 227.046960][T10218] bond1: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 227.092831][ T42] audit: type=1400 audit(1785627334.125:574): avc: denied { listen } for pid=10224 comm="syz.2.1578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 227.147339][T10231] exFAT-fs (nullb0): invalid boot record signature [ 227.158003][T10231] exFAT-fs (nullb0): failed to read boot sector [ 227.160082][T10231] exFAT-fs (nullb0): failed to recognize exfat type [ 227.166511][ T42] audit: type=1400 audit(1785627334.198:575): avc: denied { read } for pid=10229 comm="syz.2.1580" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 227.253740][T10247] mmap: syz.3.1587 (10247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 227.258845][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1586'. [ 227.428971][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1589'. [ 227.464746][ T65] Bluetooth: hci3: unexpected event for opcode 0x200a [ 227.750904][ T60] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 227.842585][T10281] lo speed is unknown, defaulting to 1000 [ 227.936506][ T60] usb 6-1: config 0 has an invalid interface number: 255 but max is 0 [ 227.940035][ T60] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.944228][ T60] usb 6-1: config 0 has no interface number 0 [ 227.947025][ T60] usb 6-1: too many endpoints for config 0 interface 255 altsetting 178: 61, using maximum allowed: 30 [ 227.951731][ T60] usb 6-1: config 0 interface 255 altsetting 178 has 0 endpoint descriptors, different from the interface descriptor's value: 61 [ 227.957545][ T60] usb 6-1: config 0 interface 255 has no altsetting 0 [ 227.962494][ T60] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 227.966371][ T60] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 227.970142][ T60] usb 6-1: Product: syz [ 227.972021][ T60] usb 6-1: Manufacturer: syz [ 227.974046][ T60] usb 6-1: SerialNumber: syz [ 227.978549][ T60] usb 6-1: config 0 descriptor?? [ 228.065334][ T24] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 228.200996][ T848] usb 6-1: USB disconnect, device number 37 [ 228.205708][ T24] usb 7-1: device descriptor read/64, error -71 [ 228.311241][ T65] Bluetooth: hci2: unexpected event for opcode 0x200a [ 228.465465][ T24] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 228.592030][T10302] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1607'. [ 228.594942][T10302] nbd: must specify at least one socket [ 228.606499][ T24] usb 7-1: device descriptor read/64, error -71 [ 228.725938][ T24] usb usb7-port1: attempt power cycle [ 228.793913][T10304] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1608'. [ 228.979703][ T65] Bluetooth: hci0: unexpected event for opcode 0x200a [ 229.097765][ T24] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 229.117335][ T24] usb 7-1: device descriptor read/8, error -71 [ 229.270056][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 229.273836][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 229.279667][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 229.282827][T10323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1617'. [ 229.363490][ T7676] IPVS: starting estimator thread 0... [ 229.366402][T10327] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 229.375896][ T60] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 229.398074][ T24] usb 7-1: new full-speed USB device number 36 using dummy_hcd [ 229.430603][ T24] usb 7-1: device descriptor read/8, error -71 [ 229.462600][T10328] IPVS: using max 48 ests per chain, 115200 per kthread [ 229.540183][ T60] usb 6-1: config 0 has an invalid descriptor of length 61, skipping remainder of the config [ 229.544134][ T60] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.548775][ T60] usb 6-1: config 0 interface 0 has no altsetting 0 [ 229.549639][ T24] usb usb7-port1: unable to enumerate USB device [ 229.553917][ T60] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 229.557318][ T60] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 229.560516][ T60] usb 6-1: Product: syz [ 229.562094][ T60] usb 6-1: Manufacturer: syz [ 229.563873][ T60] usb 6-1: SerialNumber: syz [ 229.567479][ T60] usb 6-1: config 0 descriptor?? [ 229.655494][T10342] netlink: 'syz.0.1624': attribute type 4 has an invalid length. [ 229.809109][ T60] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 229.812981][ T60] usb 6-1: USB disconnect, device number 38 [ 229.821291][T10043] udevd[10043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 230.487846][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 230.487866][ T42] audit: type=1400 audit(1785627337.262:582): avc: denied { listen } for pid=10378 comm="syz.1.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 230.562971][ T42] audit: type=1400 audit(1785627337.326:583): avc: denied { setopt } for pid=10388 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.571179][ T42] audit: type=1400 audit(1785627337.326:584): avc: denied { listen } for pid=10388 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.578943][ T42] audit: type=1400 audit(1785627337.326:585): avc: denied { accept } for pid=10388 comm="syz.0.1639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.762632][ T42] audit: type=1400 audit(1785627337.511:586): avc: denied { create } for pid=10395 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 230.769256][ T42] audit: type=1400 audit(1785627337.511:587): avc: denied { ioctl } for pid=10395 comm="syz.1.1640" path="socket:[27873]" dev="sockfs" ino=27873 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=rawip_socket permissive=1 [ 230.821171][ T42] audit: type=1400 audit(1785627337.566:588): avc: denied { create } for pid=10395 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=kcm_socket permissive=1 [ 230.829665][ T42] audit: type=1400 audit(1785627337.566:589): avc: denied { create } for pid=10395 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 230.837888][ T42] audit: type=1400 audit(1785627337.566:590): avc: denied { ioctl } for pid=10395 comm="syz.1.1640" path="socket:[25598]" dev="sockfs" ino=25598 ioctlcmd=0x8980 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=phonet_socket permissive=1 [ 230.848384][ T42] audit: type=1400 audit(1785627337.566:591): avc: denied { create } for pid=10395 comm="syz.1.1640" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 231.127200][ T65] Bluetooth: hci2: unexpected event for opcode 0x200a [ 231.566730][ T10] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 231.749409][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 231.753245][ T10] usb 7-1: config 0 has no interfaces? [ 231.755589][ T10] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 231.759521][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.765343][ T10] usb 7-1: config 0 descriptor?? [ 232.124329][T10467] sctp: [Deprecated]: syz.3.1659 (pid 10467) Use of struct sctp_assoc_value in delayed_ack socket option. [ 232.124329][T10467] Use struct sctp_sack_info instead [ 232.185191][ T6128] usb 7-1: USB disconnect, device number 37 [ 232.292800][T10479] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1663'. [ 232.781704][T10463] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 232.943407][T10515] ip6t_srh: unknown srh invflags 51E8 [ 233.452166][T10547] program syz.2.1686 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 233.521866][T10552] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1687'. [ 233.699887][T10567] random: crng reseeded on system resumption [ 233.765898][T10569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1693'. [ 233.782092][T10569] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.791015][T10569] macvlan0: entered promiscuous mode [ 233.792836][T10569] macvlan0: entered allmulticast mode [ 233.795561][T10569] bond2: (slave macvlan0): Opening slave failed [ 234.072005][ T65] Bluetooth: hci0: command 0x0405 tx timeout [ 234.222896][T10611] Bluetooth: MGMT ver 1.23 [ 234.226715][T10611] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 234.229935][T10611] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1710'. [ 234.261967][T10618] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1712'. [ 234.264792][T10618] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1712'. [ 234.326845][T10628] binder: 10627:10628 ioctl 4018620d 0 returned -22 [ 234.334099][T10628] binder: 10627:10628 ioctl c0306201 200000000300 returned -11 [ 234.378936][T10632] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 234.990353][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1729'. [ 235.002986][T10689] kAFS: unable to lookup cell 'syz0' [ 235.018174][T10695] netlink: 'syz.3.1730': attribute type 1 has an invalid length. [ 235.021102][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1730'. [ 235.149070][T10713] syzkaller0: entered promiscuous mode [ 235.150816][T10713] syzkaller0: entered allmulticast mode [ 235.525415][T10745] vivid-000: ================= START STATUS ================= [ 235.529198][T10745] vivid-000: Generate PTS: true [ 235.530848][T10745] vivid-000: Generate SCR: true [ 235.534013][T10745] tpg source WxH: 320x240 (Y'CbCr) [ 235.535728][T10745] tpg field: 1 [ 235.536969][T10745] tpg crop: (0,0)/320x240 [ 235.538318][T10745] tpg compose: (0,0)/320x240 [ 235.539764][T10745] tpg colorspace: 8 [ 235.540991][T10745] tpg transfer function: 0/0 [ 235.548187][T10745] tpg Y'CbCr encoding: 0/0 [ 235.549664][T10745] tpg quantization: 0/0 [ 235.551032][T10745] tpg RGB range: 0/2 [ 235.552267][T10745] vivid-000: ================== END STATUS ================== [ 235.553342][T10742] could not allocate digest TFM handle crc32-pclmul [ 235.554876][T10747] vivid-000: ================= START STATUS ================= [ 235.560283][T10747] vivid-000: Generate PTS: true [ 235.563508][T10747] vivid-000: Generate SCR: true [ 235.566272][T10747] tpg source WxH: 320x240 (Y'CbCr) [ 235.568234][T10747] tpg field: 1 [ 235.569551][T10747] tpg crop: (0,0)/320x240 [ 235.571215][T10747] tpg compose: (0,0)/320x240 [ 235.573014][T10747] tpg colorspace: 8 [ 235.574665][T10747] tpg transfer function: 0/0 [ 235.576438][T10747] tpg Y'CbCr encoding: 0/0 [ 235.579576][T10747] tpg quantization: 0/0 [ 235.582878][T10747] tpg RGB range: 0/2 [ 235.584294][T10747] vivid-000: ================== END STATUS ================== [ 235.687836][T10759] xt_NFQUEUE: number of total queues is 0 [ 235.695491][T10740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1745'. [ 235.806609][T10758] lo speed is unknown, defaulting to 1000 [ 235.840257][T10773] fuse: fd is not a fuse device [ 235.842311][T10773] fuse: fd is not a fuse device [ 235.936394][T10784] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1760'. [ 236.097662][ T42] kauditd_printk_skb: 35 callbacks suppressed [ 236.097675][ T42] audit: type=1400 audit(1785627342.438:627): avc: denied { write } for pid=10790 comm="syz.3.1762" path="socket:[29125]" dev="sockfs" ino=29125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 236.110305][ T42] audit: type=1400 audit(1785627342.447:628): avc: denied { watch } for pid=10790 comm="syz.3.1762" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 236.428417][T10806] netlink: 'syz.3.1767': attribute type 1 has an invalid length. [ 236.469571][T10815] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1769'. [ 236.503104][T10817] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1770'. [ 236.513061][T10812] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 236.541114][T10812] CIFS: Attempting to mount //127.0.0.1/share [ 236.545876][T10812] CIFS: VFS: Error connecting to socket. Aborting operation. [ 236.548638][T10812] CIFS: VFS: cifs_mount failed w/return code = -101 [ 236.556608][T10812] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1767'. [ 236.570463][T10812] 8021q: adding VLAN 0 to HW filter on device bond2 [ 236.674323][T10825] netlink: 'syz.0.1774': attribute type 1 has an invalid length. [ 236.679470][T10825] netlink: 'syz.0.1774': attribute type 61 has an invalid length. [ 236.719308][T10827] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=369 sclass=netlink_route_socket pid=10827 comm=syz.0.1775 [ 236.758883][T10829] veth0_to_bond: entered allmulticast mode [ 236.779253][T10829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5129 sclass=netlink_route_socket pid=10829 comm=syz.0.1776 [ 236.785720][T10829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=10829 comm=syz.0.1776 [ 236.891955][T10831] fuse: fd is not a fuse device [ 237.366928][ T9] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 237.527239][ T9] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 237.531684][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 237.535422][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 237.539677][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 237.542291][ T9] usb 6-1: Product: syz [ 237.543713][ T9] usb 6-1: Manufacturer: syz [ 237.545438][ T9] usb 6-1: SerialNumber: syz [ 237.549398][ T9] usb 6-1: config 0 descriptor?? [ 237.583494][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 237.597284][T10043] udevd[10043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.779182][ T6128] usb 6-1: USB disconnect, device number 39 [ 239.465038][T10890] sch_tbf: peakrate 6 is lower than or equals to rate 666 ! [ 239.469263][ T42] audit: type=1400 audit(1785627345.548:629): avc: denied { getopt } for pid=10889 comm="syz.1.1799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 239.507602][ T42] audit: type=1400 audit(1785627345.575:630): avc: denied { write } for pid=10891 comm="syz.1.1800" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 240.007816][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 240.143247][T10927] fuse: fd is not a fuse device [ 240.186576][ T9] usb 6-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.192768][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 240.199472][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 240.205736][ T9] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 240.209311][ T9] usb 6-1: Product: syz [ 240.211141][ T9] usb 6-1: Manufacturer: syz [ 240.213210][ T9] usb 6-1: SerialNumber: syz [ 240.218054][ T9] usb 6-1: config 0 descriptor?? [ 240.262532][ T9] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 240.285572][T10043] udevd[10043]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.450885][ T9] usb 6-1: USB disconnect, device number 40 [ 240.583699][T10952] xt_ipcomp: unknown flags 1D [ 240.816860][ T42] audit: type=1400 audit(1785627346.784:631): avc: denied { setattr } for pid=10964 comm="syz.3.1813" name="PACKET" dev="sockfs" ino=28194 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 240.817291][T10965] __nla_validate_parse: 4 callbacks suppressed [ 240.817305][T10965] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1813'. [ 240.837286][T10965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 240.854239][ T42] audit: type=1326 audit(1785627346.830:632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10964 comm="syz.3.1813" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efc8d39e019 code=0x0 [ 241.128607][T10974] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1815'. [ 241.158899][ T42] audit: type=1400 audit(1785627347.107:633): avc: denied { read } for pid=10973 comm="syz.1.1815" lport=34489 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 241.518212][T10983] lo speed is unknown, defaulting to 1000 [ 241.605295][T10991] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 241.608280][T10991] IPv6: NLM_F_CREATE should be set when creating new route [ 241.894940][ T42] audit: type=1400 audit(1785627347.790:634): avc: denied { setopt } for pid=11006 comm="syz.0.1825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 241.902753][ T42] audit: type=1400 audit(1785627347.790:635): avc: denied { name_bind } for pid=11006 comm="syz.0.1825" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 241.913701][ T42] audit: type=1400 audit(1785627347.790:636): avc: denied { name_bind } for pid=11006 comm="syz.0.1825" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 241.925579][ T42] audit: type=1400 audit(1785627347.790:637): avc: denied { node_bind } for pid=11006 comm="syz.0.1825" saddr=fe80::28 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 241.976691][T11010] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1826'. [ 241.994170][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1826'. [ 242.063831][ T42] audit: type=1400 audit(1785627347.937:638): avc: denied { getopt } for pid=11012 comm="syz.1.1827" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.078065][T11013] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 242.084605][ T42] audit: type=1400 audit(1785627347.956:639): avc: denied { cmd } for pid=11012 comm="syz.1.1827" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 242.097371][ T42] audit: type=1400 audit(1785627347.965:640): avc: denied { map } for pid=11012 comm="syz.1.1827" path="/dev/ublkc0" dev="devtmpfs" ino=3294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 242.287531][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1831'. [ 242.563937][T11046] netlink: 27 bytes leftover after parsing attributes in process `syz.3.1836'. [ 242.628994][T11049] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1837'. [ 242.644035][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1837'. [ 243.256953][T11077] netlink: 'syz.1.1846': attribute type 1 has an invalid length. [ 243.263379][T11077] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.313420][ T42] audit: type=1400 audit(1785627349.091:641): avc: denied { read } for pid=11079 comm="syz.1.1847" dev="nsfs" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.322534][ T42] audit: type=1400 audit(1785627349.100:642): avc: denied { open } for pid=11079 comm="syz.1.1847" path="net:[4026533082]" dev="nsfs" ino=4026533082 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 243.388037][T11081] netlink: 'syz.1.1847': attribute type 4 has an invalid length. [ 243.415808][T11084] overlayfs: failed to clone upperpath [ 243.523274][T11094] fuse: fd is not a fuse device [ 243.601327][T11109] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1855'. [ 243.605361][T11105] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.647397][T11113] netlink: 'syz.3.1856': attribute type 10 has an invalid length. [ 243.673401][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 243.691624][ T42] audit: type=1400 audit(1785627349.441:643): avc: denied { watch_with_perm } for pid=11120 comm="syz.3.1859" path="/591/bus" dev="tmpfs" ino=3083 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.750021][T11127] netlink: 'syz.3.1860': attribute type 1 has an invalid length. [ 243.772703][ T65] Bluetooth: hci2: unexpected event for opcode 0x200a [ 243.904643][ T65] Bluetooth: hci2: unexpected event for opcode 0x202f [ 243.929063][T11146] 8021q: adding VLAN 0 to HW filter on device bond4 [ 244.001700][ T65] Bluetooth: hci2: unexpected event for opcode 0x200a [ 244.202274][ T5093] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.207469][ T5093] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.211163][ T5093] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.216548][ T5093] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.219905][ T5093] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.425013][T11196] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=11196 comm=syz.1.1876 [ 244.668598][T11177] lo speed is unknown, defaulting to 1000 [ 244.712741][T11218] 8021q: VLANs not supported on wg2 [ 244.839204][T11177] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.841700][T11177] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.844076][T11177] bridge_slave_0: entered allmulticast mode [ 244.846792][T11177] bridge_slave_0: entered promiscuous mode [ 244.850336][T11177] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.852709][T11177] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.855054][T11177] bridge_slave_1: entered allmulticast mode [ 244.858171][T11177] bridge_slave_1: entered promiscuous mode [ 244.875244][T11177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.879698][T11177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.895252][T11177] team0: Port device team_slave_0 added [ 244.898493][T11177] team0: Port device team_slave_1 added [ 244.912656][T11177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.914862][T11177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.922794][T11177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.927007][T11177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.929223][T11177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.937196][T11177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.941251][ T60] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 244.962094][T11177] hsr_slave_0: entered promiscuous mode [ 244.964346][T11177] hsr_slave_1: entered promiscuous mode [ 244.966418][T11177] debugfs: 'hsr0' already exists in 'hsr' [ 244.968221][T11177] Cannot create hsr debugfs directory [ 245.045876][T11177] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.113749][T11177] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.134117][ T60] usb 6-1: Using ep0 maxpacket: 8 [ 245.140189][ T60] usb 6-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 245.143727][ T60] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.147195][ T60] usb 6-1: Product: syz [ 245.148976][ T60] usb 6-1: Manufacturer: syz [ 245.151040][ T60] usb 6-1: SerialNumber: syz [ 245.156577][ T60] usb 6-1: config 0 descriptor?? [ 245.161983][ T60] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 245.168278][ T60] pctv452e: pctv452e_power_ctrl: 1 [ 245.168278][ T60] [ 245.171600][ T60] usb 6-1: selecting invalid altsetting 3 [ 245.173900][ T60] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 245.173900][ T60] [ 245.177939][ T60] dvb-usb: bulk message failed: -22 (5/0) [ 245.183270][ T60] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 245.187788][ T60] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 245.191587][ T60] usb 6-1: media controller created [ 245.193634][ T60] dvb-usb: bulk message failed: -22 (8/0) [ 245.196455][ T60] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 245.201544][ T60] dvb-usb: MAC address reading failed. [ 245.202113][T11177] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.214033][ T60] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 245.245063][ T60] DVB: Unable to find symbol stb0899_attach() [ 245.247392][ T60] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 245.263467][T11177] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.296529][ T60] rc_core: IR keymap rc-tt-1500 not found [ 245.298635][ T60] Registered IR keymap rc-empty [ 245.302220][ T60] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 245.307632][ T60] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input10 [ 245.316995][ T60] dvb-usb: schedule remote query interval to 100 msecs. [ 245.319869][ T60] pctv452e: pctv452e_power_ctrl: 0 [ 245.319869][ T60] [ 245.323173][ T60] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 245.409943][T11177] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 245.414184][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.417420][T11177] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 245.421367][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 245.424310][T11177] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 245.428480][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 245.431327][T11177] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 245.435103][T11177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 245.440680][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 245.448216][ T60] dvb-usb: error -22 while querying for an remote control event. [ 245.503607][T11177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.518730][T11177] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.523720][ T9528] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.527264][ T9528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.534745][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.537111][ T9528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.569483][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 245.573115][ T60] dvb-usb: error -22 while querying for an remote control event. [ 245.687690][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 245.690216][ T60] dvb-usb: error -22 while querying for an remote control event. [ 245.725667][T11251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11251 comm=syz.0.1882 [ 245.733537][T11251] fuse: fd is not a fuse device [ 245.819127][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 245.828782][ T60] dvb-usb: error -22 while querying for an remote control event. [ 245.850466][T11177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 245.888867][T11177] veth0_vlan: entered promiscuous mode [ 245.894388][T11177] veth1_vlan: entered promiscuous mode [ 245.894806][T11264] nbd: must specify at least one socket [ 245.909821][T11177] veth0_macvtap: entered promiscuous mode [ 245.916970][T11177] veth1_macvtap: entered promiscuous mode [ 245.934396][T11177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.942864][T11177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.968965][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 245.970914][ T60] dvb-usb: error -22 while querying for an remote control event. [ 245.974185][ T7297] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.977253][ T7297] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.004410][ T7295] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.010526][ T7295] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.065150][ T9514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.069282][ T9514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.076104][T11269] overlayfs: failed to clone upperpath [ 246.093918][ T9540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.096425][ T9540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.099157][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.100985][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.113671][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11271 comm=syz.0.1887 [ 246.119099][T11272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=11272 comm=syz.0.1887 [ 246.124761][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=11271 comm=syz.0.1887 [ 246.130058][T11272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2580 sclass=netlink_route_socket pid=11272 comm=syz.0.1887 [ 246.135412][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11271 comm=syz.0.1887 [ 246.139476][T11272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11272 comm=syz.0.1887 [ 246.145578][T11271] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11271 comm=syz.0.1887 [ 246.151594][T11272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=11272 comm=syz.0.1887 [ 246.216424][T11271] netlink: 'syz.0.1887': attribute type 21 has an invalid length. [ 246.216444][T11272] netlink: 'syz.0.1887': attribute type 21 has an invalid length. [ 246.219900][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.219931][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.338268][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.340749][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.418000][T11289] __nla_validate_parse: 3 callbacks suppressed [ 246.418021][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1892'. [ 246.467824][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.473571][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.478004][ T5093] Bluetooth: hci4: command tx timeout [ 246.546859][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1895'. [ 246.610154][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.612533][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.738886][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.741616][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.857183][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.861590][ T60] dvb-usb: error -22 while querying for an remote control event. [ 246.987629][ T60] dvb-usb: bulk message failed: -22 (4/0) [ 246.993775][ T60] dvb-usb: error -22 while querying for an remote control event. [ 247.117448][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.120761][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.236538][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.238405][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.369121][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.371494][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.485783][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.488258][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.561074][ T5883] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 247.628596][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.630727][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.756708][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.759127][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.849401][ T5883] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 247.886812][ T34] dvb-usb: bulk message failed: -22 (4/0) [ 247.889033][ T34] dvb-usb: error -22 while querying for an remote control event. [ 247.920878][ T34] usb 6-1: USB disconnect, device number 41 [ 247.957470][ T34] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 247.963365][ T5093] Bluetooth: hci0: unexpected event for opcode 0x200a [ 248.407649][ T5883] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 248.430838][ T50] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 248.508546][T11322] ceph: No mds server is up or the cluster is laggy [ 248.524801][T11345] CIFS: Attempting to mount //127.0.0.1/share [ 248.577365][T11345] CIFS: VFS: Error connecting to socket. Aborting operation. [ 248.584808][T11345] CIFS: VFS: cifs_mount failed w/return code = -111 [ 248.605344][ T50] usb 6-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 248.613684][ T50] usb 6-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 248.617783][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 248.626938][ T50] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 248.630733][ T50] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 248.633907][ T50] usb 6-1: Product: syz [ 248.635766][ T50] usb 6-1: Manufacturer: syz [ 248.650479][ T50] usb 6-1: SerialNumber: syz [ 248.655618][ T50] usb 6-1: config 0 descriptor?? [ 248.658927][T11341] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 248.668483][ T50] usb 6-1: selecting invalid altsetting 0 [ 248.737029][ T5093] Bluetooth: hci4: command tx timeout [ 248.884315][ T5883] usb 6-1: USB disconnect, device number 42 [ 249.063311][T11376] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1925'. [ 249.191082][T11386] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 249.196409][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 249.196425][ T42] audit: type=1400 audit(1785627354.516:656): avc: denied { relabelto } for pid=11385 comm="syz.3.1928" name="cgroup.procs" dev="cgroup" ino=178 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 249.211061][ T42] audit: type=1400 audit(1785627354.516:657): avc: denied { associate } for pid=11385 comm="syz.3.1928" name="cgroup.procs" dev="cgroup" ino=178 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 249.233710][ T42] audit: type=1400 audit(1785627354.553:658): avc: denied { read } for pid=11389 comm="syz.3.1930" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.240210][T11390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.244256][ T42] audit: type=1400 audit(1785627354.553:659): avc: denied { open } for pid=11389 comm="syz.3.1930" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 249.258841][T11390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.297574][ T42] audit: type=1400 audit(1785627354.618:660): avc: denied { create } for pid=11393 comm="syz.0.1932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.430316][T11394] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.509472][ T42] audit: type=1400 audit(1785627354.812:661): avc: denied { bind } for pid=11406 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.517718][ T42] audit: type=1400 audit(1785627354.821:662): avc: denied { setopt } for pid=11406 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.525867][ T42] audit: type=1400 audit(1785627354.830:663): avc: denied { accept } for pid=11406 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.533668][ T42] audit: type=1400 audit(1785627354.830:664): avc: denied { write } for pid=11406 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.541591][ T42] audit: type=1400 audit(1785627354.830:665): avc: denied { read } for pid=11406 comm="syz.1.1935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 249.572372][T11412] bridge0: port 3(syz_tun) entered blocking state [ 249.574523][T11412] bridge0: port 3(syz_tun) entered disabled state [ 249.578190][T11412] syz_tun: entered allmulticast mode [ 249.581116][T11412] syz_tun: entered promiscuous mode [ 249.583279][T11412] bridge0: port 3(syz_tun) entered blocking state [ 249.586459][T11412] bridge0: port 3(syz_tun) entered forwarding state [ 249.593029][T11412] bridge0: port 3(syz_tun) entered disabled state [ 249.595356][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.598078][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.608553][T11412] SELinux: policydb version 277 does not match my version range 15-35 [ 249.612276][T11412] SELinux: failed to load policy [ 250.195597][ T5883] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 250.329546][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 250.341747][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 250.346661][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 250.355872][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 250.360483][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 250.388016][ T5883] usb 8-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 250.393150][ T5883] usb 8-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 250.400760][ T5883] usb 8-1: config 0 interface 0 has no altsetting 0 [ 250.411907][ T5883] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 250.415411][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 250.418567][ T5883] usb 8-1: Product: syz [ 250.420091][ T5883] usb 8-1: Manufacturer: syz [ 250.421502][ T5883] usb 8-1: SerialNumber: syz [ 250.425616][ T5883] usb 8-1: config 0 descriptor?? [ 250.430774][T11428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 250.436128][ T5883] usb 8-1: selecting invalid altsetting 0 [ 250.658933][ T7297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.663244][ T34] usb 8-1: USB disconnect, device number 8 [ 250.779368][ T7297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.842099][T11446] lo speed is unknown, defaulting to 1000 [ 250.926987][ T7297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.002915][T11478] selinux_netlink_send: 12 callbacks suppressed [ 251.002934][T11478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=33 sclass=netlink_tcpdiag_socket pid=11478 comm=syz.0.1955 [ 251.024708][T11478] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11478 comm=syz.0.1955 [ 251.045383][ T7297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.080268][T11446] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.083180][T11446] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.088655][T11446] bridge_slave_0: entered allmulticast mode [ 251.091880][T11446] bridge_slave_0: entered promiscuous mode [ 251.097956][T11446] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.100921][T11446] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.103794][T11446] bridge_slave_1: entered allmulticast mode [ 251.107790][T11446] bridge_slave_1: entered promiscuous mode [ 251.125990][T11446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.131368][T11446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.151846][T11446] team0: Port device team_slave_0 added [ 251.170073][T11446] team0: Port device team_slave_1 added [ 251.249792][T11446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.253340][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.264690][T11446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.272529][T11446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.275182][T11446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.283479][T11446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.457756][ T7297] bond0 (unregistering): Released all slaves [ 251.463139][ T7297] bond1 (unregistering): Released all slaves [ 251.470487][ T7297] bond2 (unregistering): Released all slaves [ 251.540117][T11446] hsr_slave_0: entered promiscuous mode [ 251.542804][T11446] hsr_slave_1: entered promiscuous mode [ 251.544964][T11446] debugfs: 'hsr0' already exists in 'hsr' [ 251.546785][T11446] Cannot create hsr debugfs directory [ 251.586842][T11529] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1970'. [ 251.612813][T11533] IPv6: NLM_F_CREATE should be specified when creating new route [ 251.616843][T11533] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 251.619731][T11533] IPv6: NLM_F_CREATE should be set when creating new route [ 251.625246][T11533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=11533 comm=syz.0.1972 [ 251.639553][T11533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=128 sclass=netlink_route_socket pid=11533 comm=syz.0.1972 [ 251.646901][T11533] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11533 comm=syz.0.1972 [ 251.721104][T11536] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 251.939898][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 252.006217][T11555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1976'. [ 252.191617][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 252.249364][T11446] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.263778][T11446] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.267951][T11446] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.276692][T11446] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.280508][T11446] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.295878][T11446] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.300069][T11446] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.309314][T11446] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.391975][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11584 comm=syz.3.1979 [ 252.443006][ T7297] hsr_slave_0: left promiscuous mode [ 252.448079][ T7297] hsr_slave_1: left promiscuous mode [ 252.463447][ T7297] veth1_macvtap: left promiscuous mode [ 252.466911][ T7297] veth0_macvtap: left promiscuous mode [ 252.527571][T11591] exFAT-fs (nbd3): unable to read boot sector [ 252.529989][T11591] exFAT-fs (nbd3): failed to read boot sector [ 252.532307][T11591] exFAT-fs (nbd3): failed to recognize exfat type [ 252.633740][ T5093] Bluetooth: hci2: command tx timeout [ 252.685744][T11595] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 252.695251][T11595] hpfs: hpfs_map_sector(): read error [ 252.837987][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 252.852871][T11446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.876050][T11446] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.890013][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.892401][ T9514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.909201][ T9528] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.912360][ T9528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 253.141003][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 253.266495][T11446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.444051][T11446] veth0_vlan: entered promiscuous mode [ 253.462096][T11446] veth1_vlan: entered promiscuous mode [ 253.491986][T11446] veth0_macvtap: entered promiscuous mode [ 253.526736][T11446] veth1_macvtap: entered promiscuous mode [ 253.538809][T11446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.547591][T11446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.576916][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.593135][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.643189][ T7296] bridge_slave_1: left allmulticast mode [ 253.645628][ T7296] bridge_slave_1: left promiscuous mode [ 253.651660][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.658600][ T7296] bridge_slave_0: left allmulticast mode [ 253.660816][ T7296] bridge_slave_0: left promiscuous mode [ 253.663048][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.850407][ T7296] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 253.866795][ T7296] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.877410][ T7296] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.886400][ T7296] bond0 (unregistering): Released all slaves [ 253.891405][ T7296] bond1 (unregistering): Released all slaves [ 253.898856][ T7296] bond2 (unregistering): Released all slaves [ 253.945388][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.950980][ T9540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.954473][ T9540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.955959][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.993537][ T7296] tipc: Left network mode [ 253.994747][ T9540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.007706][ T9540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.096880][ T5093] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 254.104750][ T5093] Bluetooth: hci4: Injecting HCI hardware error event [ 254.109514][ T5093] Bluetooth: hci4: hardware error 0x00 [ 254.260692][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 254.273798][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 254.280066][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 254.288613][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 254.298448][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 254.480830][ T7296] hsr_slave_0: left promiscuous mode [ 254.483301][ T7296] hsr_slave_1: left promiscuous mode [ 254.486058][ T7296] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.490312][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.493356][ T7296] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.499229][ T7296] veth1_macvtap: left promiscuous mode [ 254.501033][ T7296] veth0_macvtap: left promiscuous mode [ 254.509013][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 254.610617][ T7296] team0 (unregistering): Port device team_slave_1 removed [ 254.624580][ T7296] team0 (unregistering): Port device team_slave_0 removed [ 254.642885][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 254.642906][ T42] audit: type=1400 audit(1785627359.545:686): avc: denied { mounton } for pid=11702 comm="syz.1.2002" path="/proc/1060/task" dev="proc" ino=33625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 254.671195][ T34] usb 9-1: Using ep0 maxpacket: 32 [ 254.686071][ T34] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 254.689369][ T34] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 254.692675][ T34] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.696298][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.700043][ T34] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.705651][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 254.727203][ T34] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 254.733990][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.745700][ T34] usb 9-1: config 0 descriptor?? [ 254.808521][ T42] audit: type=1400 audit(1785627359.702:687): avc: denied { getopt } for pid=11707 comm="syz.3.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 254.841215][ T50] IPVS: starting estimator thread 0... [ 254.879593][ T65] Bluetooth: hci2: command tx timeout [ 254.942175][T11711] IPVS: using max 30 ests per chain, 72000 per kthread [ 254.969586][ T34] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 255.070724][T11685] lo speed is unknown, defaulting to 1000 [ 255.182743][ T7296] IPVS: stop unused estimator thread 0... [ 255.189574][T11680] syzkaller0: entered promiscuous mode [ 255.192871][T11680] syzkaller0: entered allmulticast mode [ 255.217242][ T34] usb 9-1: USB disconnect, device number 2 [ 255.229536][ T34] usblp0: removed [ 255.288730][T11685] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.291373][T11685] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.294135][T11685] bridge_slave_0: entered allmulticast mode [ 255.297796][T11685] bridge_slave_0: entered promiscuous mode [ 255.303741][T11685] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.306770][T11685] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.309805][T11685] bridge_slave_1: entered allmulticast mode [ 255.313971][T11685] bridge_slave_1: entered promiscuous mode [ 255.340638][T11685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 255.348036][T11685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.365571][T11685] team0: Port device team_slave_0 added [ 255.368782][T11685] team0: Port device team_slave_1 added [ 255.383756][T11685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.386016][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.394030][T11685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.399049][T11685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.401342][T11685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 255.410304][T11685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.457182][ T7296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.491625][T11685] hsr_slave_0: entered promiscuous mode [ 255.493924][T11685] hsr_slave_1: entered promiscuous mode [ 255.496095][T11685] debugfs: 'hsr0' already exists in 'hsr' [ 255.497852][T11685] Cannot create hsr debugfs directory [ 255.566551][ T7296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.660181][ T7296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.752388][ T7296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.880149][T11729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2007'. [ 255.908413][ T42] audit: type=1400 audit(1785627360.717:688): avc: denied { getopt } for pid=11728 comm="syz.3.2007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 256.017862][ T7296] erspan0: left allmulticast mode [ 256.019464][ T7296] erspan0: left promiscuous mode [ 256.021117][ T7296] bridge0: port 1(erspan0) entered disabled state [ 256.054026][ T42] audit: type=1400 audit(1785627360.846:689): avc: denied { write } for pid=11740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.100789][ T42] audit: type=1400 audit(1785627360.892:690): avc: denied { write } for pid=11746 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.197128][ T7296] bond0 (unregistering): Released all slaves [ 256.212884][ T7296] bond1 (unregistering): Released all slaves [ 256.218295][T11751] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2012'. [ 256.227413][ T7296] bond2 (unregistering): Released all slaves [ 256.235504][ T7296] bond3 (unregistering): Released all slaves [ 256.243267][ T7296] bond4 (unregistering): Released all slaves [ 256.273264][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 256.363611][ T5093] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 256.390336][ T42] audit: type=1400 audit(1785627361.160:691): avc: denied { write } for pid=11760 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.458605][ T42] audit: type=1400 audit(1785627361.215:692): avc: denied { write } for pid=11763 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.522626][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 256.529579][T11765] syzkaller0: entered promiscuous mode [ 256.531871][T11765] syzkaller0: entered allmulticast mode [ 256.535580][ T65] Bluetooth: hci3: command tx timeout [ 256.560030][T11771] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 256.566866][ T42] audit: type=1400 audit(1785627361.317:693): avc: denied { write } for pid=11767 comm="syz.1.2015" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 256.592412][ T42] audit: type=1400 audit(1785627361.344:694): avc: denied { append } for pid=11764 comm="syz.3.2014" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 256.740265][ T42] audit: type=1400 audit(1785627361.473:695): avc: denied { write } for pid=11777 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.823246][ T7296] hsr_slave_0: left promiscuous mode [ 256.825415][ T7296] hsr_slave_1: left promiscuous mode [ 256.835522][ T7296] veth1_macvtap: left promiscuous mode [ 256.837420][ T7296] veth0_macvtap: left promiscuous mode [ 256.975015][ T9540] smc: removing ib device syz2 [ 257.126112][T11786] dvmrp0: entered allmulticast mode [ 257.143731][ T65] Bluetooth: hci2: command tx timeout [ 257.165263][ T9540] smbdirect: ib_dev[syz2] removed [ 257.217276][T11794] fuse: Unknown parameter ' 4096) [ 262.799553][T12147] pim6reg1: entered promiscuous mode [ 262.801872][T12147] pim6reg1: entered allmulticast mode [ 262.807104][T12147] Config c/1 of g1 needs at least one function. [ 262.812173][T12147] udc usbip-vudc.0: failed to start g1: -22 [ 262.814942][T12147] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 262.820476][T12147] UDC core: g1: couldn't find an available UDC or it's busy [ 262.987688][T12161] __nla_validate_parse: 7 callbacks suppressed [ 262.987709][T12161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2110'. [ 263.007762][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2110'. [ 263.011359][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2110'. [ 263.070198][T12167] input: syz0 as /devices/virtual/input/input11 [ 263.125981][T12169] IPv6: sit1: Disabled Multicast RS [ 263.129039][T12169] sit1: entered allmulticast mode [ 263.287351][ T65] Bluetooth: hci3: command tx timeout [ 263.311583][T12180] ip6t_srh: unknown srh match flags 4015 [ 263.432125][T12199] syzkaller0: entered promiscuous mode [ 263.434654][T12199] syzkaller0: entered allmulticast mode [ 263.451041][ T5883] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 263.555851][ T65] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 263.635132][ T5883] usb 5-1: not running at top speed; connect to a high speed hub [ 263.638799][ T5883] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.642087][ T5883] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 263.645356][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.651290][ T5883] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 263.653904][ T5883] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 263.656492][ T5883] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 263.659459][ T5883] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 84 [ 263.662002][ T5883] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 263.667605][ T5883] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 263.671958][ T5883] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 263.675248][ T5883] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 263.679027][ T5883] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 263.731632][ T5821] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 263.850322][T12213] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 263.853568][T12213] netlink: 'syz.1.2124': attribute type 12 has an invalid length. [ 263.856673][T12213] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2124'. [ 263.864585][T12215] netlink: 'syz.1.2124': attribute type 1 has an invalid length. [ 263.867697][T12215] netlink: 'syz.1.2124': attribute type 12 has an invalid length. [ 263.870791][T12215] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2124'. [ 263.908693][ T5821] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 263.915637][ T5821] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 263.919652][ T5821] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.922976][ T5821] usb 8-1: Product: syz [ 263.924687][ T5821] usb 8-1: Manufacturer: ఌ [ 263.926735][ T5821] usb 8-1: SerialNumber: syz [ 263.987505][ T5883] usb 5-1: USB disconnect, device number 11 [ 264.007845][ T5883] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 264.028129][ T5883] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 264.033137][ T5883] keyspan 5-1:1.0: device disconnected [ 264.043650][T12227] af_packet: tpacket_rcv: packet too big, clamped from 74 to 4294967286. macoff=82 [ 264.266535][T12237] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2130'. [ 264.312730][T12237] bridge1: port 1(veth3) entered blocking state [ 264.315031][T12237] bridge1: port 1(veth3) entered disabled state [ 264.317119][T12237] veth3: entered allmulticast mode [ 264.321261][T12237] veth3: entered promiscuous mode [ 264.332794][T12237] bridge1: port 2(veth0_to_bond) entered blocking state [ 264.335914][T12237] bridge1: port 2(veth0_to_bond) entered disabled state [ 264.338960][T12237] veth0_to_bond: entered allmulticast mode [ 264.342939][T12237] veth0_to_bond: entered promiscuous mode [ 264.409825][ T5821] cdc_ncm 8-1:1.0: bind() failure [ 264.422541][ T5821] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 264.426048][ T5821] cdc_ncm 8-1:1.1: bind() failure [ 264.433214][ T5821] usb 8-1: USB disconnect, device number 11 [ 264.442881][T12239] WARNING! power/level is deprecated; use power/control instead [ 264.481792][ T5883] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 264.664020][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 264.667623][ T5883] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.670990][ T5883] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.674148][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 264.677481][ T5883] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 264.680481][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.684650][ T5883] usb 5-1: config 0 descriptor?? [ 264.908489][ T5883] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 264.911843][ T5883] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 264.914198][ T5883] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 264.916348][ T5883] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 264.918595][ T5883] mcp2221 0003:04D8:00DD.000A: unknown main item tag 0x0 [ 264.921071][ T5883] mcp2221 0003:04D8:00DD.000A: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 264.937372][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.994216][T12263] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 265.003296][T12264] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 265.131413][ T24] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 265.135668][ T50] usb 5-1: USB disconnect, device number 12 [ 265.293840][ T24] usb 9-1: not running at top speed; connect to a high speed hub [ 265.296828][ T24] usb 9-1: config 5 has an invalid interface number: 4 but max is 2 [ 265.299040][ T24] usb 9-1: config 5 has an invalid interface number: 45 but max is 2 [ 265.301311][ T24] usb 9-1: config 5 has no interface number 0 [ 265.303128][ T24] usb 9-1: config 5 has no interface number 1 [ 265.304770][ T24] usb 9-1: config 5 interface 4 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 265.307885][ T24] usb 9-1: config 5 interface 4 altsetting 8 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 265.311492][ T24] usb 9-1: config 5 interface 4 altsetting 8 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 265.315545][ T24] usb 9-1: config 5 interface 4 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 265.319387][ T24] usb 9-1: config 5 interface 4 has no altsetting 0 [ 265.321836][ T24] usb 9-1: config 5 interface 2 has no altsetting 0 [ 265.324224][ T24] usb 9-1: config 5 interface 45 has no altsetting 0 [ 265.327979][ T24] usb 9-1: New USB device found, idVendor=2357, idProduct=9000, bcdDevice=d3.e1 [ 265.330522][ T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.332743][ T24] usb 9-1: Product: ᠊ [ 265.333956][ T24] usb 9-1: Manufacturer: င [ 265.335245][ T24] usb 9-1: SerialNumber: Љ [ 265.670916][ T24] option 9-1:5.2: GSM modem (1-port) converter detected [ 265.676334][ T24] option 9-1:5.45: GSM modem (1-port) converter detected [ 265.680463][ T24] usb 9-1: USB disconnect, device number 4 [ 265.697718][ T24] option 9-1:5.2: device disconnected [ 265.703827][ T24] option 9-1:5.45: device disconnected [ 266.022837][ T50] IPVS: starting estimator thread 0... [ 266.115940][T12287] IPVS: using max 33 ests per chain, 79200 per kthread [ 266.306944][T12304] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2146'. [ 266.324251][T12304] team1: entered promiscuous mode [ 266.327317][T12304] team1: entered allmulticast mode [ 266.329708][T12304] 8021q: adding VLAN 0 to HW filter on device team1 [ 266.379059][T12307] netlink: 'syz.0.2147': attribute type 1 has an invalid length. [ 266.917970][ T5883] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 267.091217][ T5883] usb 5-1: Using ep0 maxpacket: 8 [ 267.094467][ T5883] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 267.097446][ T5883] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 267.101306][ T5883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 267.105236][ T5883] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 267.109795][ T5883] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 267.114962][ T5883] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 267.118529][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.160070][T12218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 267.218288][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 267.218307][ T42] audit: type=1400 audit(1785627371.143:741): avc: denied { nlmsg_read } for pid=12325 comm="syz.4.2151" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 267.264025][T12331] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2153'. [ 267.301373][T12335] overlayfs: missing 'lowerdir' [ 267.350016][ T5883] usb 5-1: usb_control_msg returned -32 [ 267.356246][ T5883] usbtmc 5-1:16.0: can't read capabilities [ 267.416095][ T42] audit: type=1807 audit(1785627371.328:742): action=measure func=FILE_CHECK res=1 [ 267.416588][T12340] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2156'. [ 267.420824][ T42] audit: type=1807 audit(1785627371.328:743): action=measure func=FILE_CHECK res=1 [ 267.422289][T12341] netlink: 380 bytes leftover after parsing attributes in process `syz.3.2156'. [ 267.422495][T12339] ima: policy update completed [ 267.430854][ T42] audit: type=1802 audit(1785627371.346:744): pid=12339 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=policy_update cause=completed comm="syz.3.2156" res=1 errno=0 [ 267.464888][ T42] audit: type=1800 audit(1785627371.374:745): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 267.475251][ T42] audit: type=1800 audit(1785627371.383:746): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 267.481967][ T42] audit: type=1400 audit(1785627371.383:747): avc: denied { map } for pid=12346 comm="syz.3.2157" path="socket:[39290]" dev="sockfs" ino=39290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.489136][ T42] audit: type=1400 audit(1785627371.383:748): avc: denied { read } for pid=12346 comm="syz.3.2157" path="socket:[39290]" dev="sockfs" ino=39290 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 267.500657][T12347] CIFS mount error: No usable UNC path provided in device string! [ 267.500657][T12347] [ 267.507451][T12347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 267.539389][ T42] audit: type=1800 audit(1785627371.448:749): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 267.554563][ T42] audit: type=1800 audit(1785627371.457:750): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=5514 res=0 errno=0 [ 267.669299][ T5812] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.743010][ T5812] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.828067][ T5812] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.845450][ T5093] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 267.853940][ T5093] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 267.857936][ T5093] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 267.871293][T12357] FAT-fs (nullb0): bogus number of reserved sectors [ 267.873237][ T5093] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 267.874075][T12357] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 267.878232][ T5093] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 267.942999][ T5812] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.118407][T12373] usbtmc 5-1:16.0: control status returned 0 [ 268.146808][T12355] lo speed is unknown, defaulting to 1000 [ 268.258266][ T5812] bridge_slave_1: left allmulticast mode [ 268.260746][ T5812] bridge_slave_1: left promiscuous mode [ 268.263598][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.270272][ T5812] bridge_slave_0: left allmulticast mode [ 268.273123][ T5812] bridge_slave_0: left promiscuous mode [ 268.275807][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.282499][ T5812] veth0_to_bond: left allmulticast mode [ 268.284991][ T5812] veth0_to_bond: left promiscuous mode [ 268.287727][ T5812] bridge1: port 2(veth0_to_bond) entered disabled state [ 268.292106][ T5812] veth3: left allmulticast mode [ 268.295988][ T5812] veth3: left promiscuous mode [ 268.298105][ T5812] bridge1: port 1(veth3) entered disabled state [ 268.476766][ T5812] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.481494][ T5812] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.486647][ T5812] bond0 (unregistering): Released all slaves [ 268.493150][ T5812] bond1 (unregistering): Released all slaves [ 268.505545][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 268.721571][T12410] netlink: 'syz.3.2169': attribute type 3 has an invalid length. [ 268.724022][T12410] netlink: 'syz.3.2169': attribute type 1 has an invalid length. [ 268.726361][T12410] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2169'. [ 268.729461][T12410] NCSI netlink: No device for ifindex 0 [ 268.800311][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 268.819947][T12355] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.822208][T12355] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.824700][T12355] bridge_slave_0: entered allmulticast mode [ 268.827820][T12355] bridge_slave_0: entered promiscuous mode [ 268.833966][T12355] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.840837][T12355] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.843491][T12355] bridge_slave_1: entered allmulticast mode [ 268.846646][T12355] bridge_slave_1: entered promiscuous mode [ 268.882641][T12355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.913611][T12355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.934692][ T5812] hsr_slave_0: left promiscuous mode [ 268.942639][ T5812] hsr_slave_1: left promiscuous mode [ 268.945823][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.955695][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.966774][ T5812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.969033][ T5812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.983709][ T5812] veth1_macvtap: left promiscuous mode [ 268.985485][ T5812] veth0_macvtap: left promiscuous mode [ 268.987193][ T5812] veth1_vlan: left promiscuous mode [ 268.988931][ T5812] veth0_vlan: left promiscuous mode [ 269.052348][T12428] dlm: non-version read from control device 8224 [ 269.055627][T12428] dlm: non-version read from control device 8224 [ 269.090298][T12430] capability: warning: `syz.3.2174' uses deprecated v2 capabilities in a way that may be insecure [ 269.266511][T12440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2177'. [ 269.276490][ T5812] team0 (unregistering): Port device team_slave_1 removed [ 269.285844][ T5812] team0 (unregistering): Port device team_slave_0 removed [ 269.435616][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 269.459290][T12355] team0: Port device team_slave_0 added [ 269.466180][T12355] team0: Port device team_slave_1 added [ 269.485612][T12355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.491050][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.499022][T12355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.503866][T12355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.506183][T12355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.515012][T12355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.553715][T12355] hsr_slave_0: entered promiscuous mode [ 269.556890][T12355] hsr_slave_1: entered promiscuous mode [ 269.701581][ T5446] 8021q: adding VLAN 0 to HW filter on device eth9 [ 269.832754][T12456] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 269.853158][T12355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 269.872277][T12456] (syz.3.2179,12456,3):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 269.872606][T12355] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 269.880088][T12355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 269.886335][T12355] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 269.890738][T12355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 269.898295][T12355] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.902016][T12355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 269.910963][T12355] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 269.948332][T12465] NILFS (nbd3): device size too small [ 269.968500][ T24] usb 5-1: USB disconnect, device number 13 [ 269.994716][T12355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.010292][T12355] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.018867][ T9514] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.021796][ T9514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.043566][ T9514] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.046695][ T9514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.159805][T12469] genirq: Flags mismatch irq 4. 00200000 (comedi_parport) vs. 00200080 (ttyS0) [ 270.245002][T12484] binder: 12479:12484 ioctl c018620c 2000000001c0 returned -22 [ 270.408403][T12355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.517854][T12500] input: syz0 as /devices/virtual/input/input12 [ 270.542016][T12480] syz.3.2185 (12480): drop_caches: 2 [ 270.669650][T12355] veth0_vlan: entered promiscuous mode [ 270.679388][T12355] veth1_vlan: entered promiscuous mode [ 270.709918][T12355] veth0_macvtap: entered promiscuous mode [ 270.724255][T12355] veth1_macvtap: entered promiscuous mode [ 270.739986][T12355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.752743][T12355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.821369][ T7296] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.828534][ T7296] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.886623][ T9540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.891242][ T9540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.913885][ T169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.917300][ T169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.938724][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.945166][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.370641][T12538] syzkaller0: entered promiscuous mode [ 271.372459][T12538] syzkaller0: entered allmulticast mode [ 271.993526][T12578] overlay: Bad value for 'verity' [ 272.114333][T12587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2212'. [ 272.117201][T12587] netlink: 'syz.5.2212': attribute type 10 has an invalid length. [ 272.119736][T12587] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2212'. [ 272.126284][T12587] geneve2: entered promiscuous mode [ 272.128117][T12587] geneve2: entered allmulticast mode [ 272.222153][T12590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.236649][T12590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.488667][ T5884] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 272.510208][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 272.512094][T12593] netlink: 'syz.0.2214': attribute type 1 has an invalid length. [ 272.515720][T12593] netlink: 'syz.0.2214': attribute type 4 has an invalid length. [ 272.518197][T12593] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2214'. [ 272.521824][T12593] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 272.525553][T12593] SELinux: failed to load policy [ 272.589233][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2215'. [ 272.593559][T12595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2215'. [ 272.601079][T12595] geneve2: entered promiscuous mode [ 272.602819][T12595] geneve2: entered allmulticast mode [ 272.609434][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2215'. [ 272.623006][T12595] netlink: 'syz.0.2215': attribute type 1 has an invalid length. [ 272.656253][ T42] kauditd_printk_skb: 151 callbacks suppressed [ 272.656268][ T42] audit: type=1800 audit(1785627376.172:902): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 272.664297][ T24] usb 8-1: device descriptor read/64, error -71 [ 272.680765][ T42] audit: type=1400 audit(1785627376.190:903): avc: denied { bind } for pid=12596 comm="syz.0.2216" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 272.865133][ T42] audit: type=1800 audit(1785627376.357:904): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 272.873460][ T42] audit: type=1400 audit(1785627376.366:905): avc: denied { write } for pid=12599 comm="syz.0.2217" name="functions" dev="configfs" ino=10777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.883164][ T42] audit: type=1400 audit(1785627376.366:906): avc: denied { write } for pid=12599 comm="syz.0.2217" name="c.1" dev="configfs" ino=10172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.892080][ T42] audit: type=1400 audit(1785627376.366:907): avc: denied { write } for pid=12599 comm="syz.0.2217" name="c.1" dev="configfs" ino=10172 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 272.900980][ T42] audit: type=1800 audit(1785627376.366:908): pid=12600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.2217" name="UDC" dev="configfs" ino=42065 res=0 errno=0 [ 272.944460][ T24] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 273.075520][ T42] audit: type=1800 audit(1785627376.560:909): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 273.086560][ T24] usb 8-1: device descriptor read/64, error -71 [ 273.101409][ T42] audit: type=1800 audit(1785627376.578:910): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16225 res=0 errno=0 [ 273.110365][ T42] audit: type=1400 audit(1785627376.578:911): avc: denied { write } for pid=12603 comm="syz.5.2218" name="functions" dev="configfs" ino=10777 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 273.226168][ T24] usb usb8-port1: attempt power cycle [ 273.287736][T12616] base or size exceeds the MTRR width [ 273.296324][T12618] loop8: detected capacity change from 0 to 7 [ 273.307369][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.311184][ C2] buffer_io_error: 344 callbacks suppressed [ 273.311198][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.320622][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.323599][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.328192][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.331134][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.334248][ C3] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.337614][ C3] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.340558][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.344397][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.350268][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.353413][T12622] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 273.355907][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.361600][ C2] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.365157][ C2] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.367159][T12622] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.367826][T12618] ldm_validate_partition_table(): Disk read failed. [ 273.375048][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.378038][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.380522][T12622] bond1: (slave geneve3): making interface the new active one [ 273.382457][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.386237][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.386278][T12622] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 273.392115][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 273.393543][T12625] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 273.395522][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 273.395728][T12618] Dev loop8: unable to read RDB block 0 [ 273.396106][T12618] loop8: unable to read partition table [ 273.405291][T12618] loop8: partition table beyond EOD, truncated [ 273.407273][T12618] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 273.451734][T12631] program syz.5.2224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 273.559045][T12637] lo speed is unknown, defaulting to 1000 [ 273.626590][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 273.655516][ T24] usb 8-1: device descriptor read/8, error -71 [ 273.763599][T12652] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2233'. [ 273.766638][T12652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2233'. [ 273.930126][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 273.959460][ T24] usb 8-1: device descriptor read/8, error -71 [ 274.084251][ T24] usb usb8-port1: unable to enumerate USB device [ 274.390142][T12688] netlink: 'syz.5.2245': attribute type 18 has an invalid length. [ 274.393011][T12688] __nla_validate_parse: 2 callbacks suppressed [ 274.393020][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2245'. [ 274.405654][T12688] netlink: 'syz.5.2245': attribute type 18 has an invalid length. [ 274.408049][ T5812] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.409817][T12688] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2245'. [ 274.415440][ T5812] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.450747][ T7296] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.456669][ T7296] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 274.632194][T12693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.671454][T12693] bridge0: port 2(bridge_slave_1) entered listening state [ 274.676874][T12693] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.855496][T12699] binder: 12698:12699 unknown command 0 [ 274.857976][T12699] binder: 12698:12699 ioctl c0306201 200000000480 returned -22 [ 274.876880][T12699] bridge0: entered promiscuous mode [ 274.879162][T12699] bridge0: entered allmulticast mode [ 275.410526][T12724] cgroup: Need name or subsystem set [ 275.589014][T12737] binder: 12728:12737 ioctl c0306201 2000000003c0 returned -14 [ 276.344396][T12726] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.472692][T12748] FAULT_INJECTION: forcing a failure. [ 276.472692][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 276.479136][T12748] CPU: 0 UID: 0 PID: 12748 Comm: syz.5.2259 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 276.479161][T12748] Tainted: [L]=SOFTLOCKUP [ 276.479166][T12748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 276.479174][T12748] Call Trace: [ 276.479179][T12748] [ 276.479184][T12748] dump_stack_lvl+0x100/0x190 [ 276.479228][T12748] should_fail_ex.cold+0x5/0xa [ 276.479246][T12748] should_failslab+0xc2/0x120 [ 276.479265][T12748] kmem_cache_alloc_noprof+0x91/0x6a0 [ 276.479281][T12748] ? vm_area_dup+0x27/0x8e0 [ 276.479306][T12748] vm_area_dup+0x27/0x8e0 [ 276.479328][T12748] __split_vma+0x18c/0xda0 [ 276.479344][T12748] ? __pfx___split_vma+0x10/0x10 [ 276.479367][T12748] vma_modify+0x12ad/0x25c0 [ 276.479393][T12748] ? __pfx_vma_modify+0x10/0x10 [ 276.479410][T12748] ? find_held_lock+0x2b/0x80 [ 276.479422][T12748] ? is_bpf_text_address+0x8a/0x1a0 [ 276.479437][T12748] ? bpf_ksym_find+0x128/0x1c0 [ 276.479457][T12748] vma_modify_flags+0x257/0x3d0 [ 276.479469][T12748] ? __pfx_vma_modify_flags+0x10/0x10 [ 276.479486][T12748] ? __pfx_ima_file_mprotect+0x10/0x10 [ 276.479507][T12748] ? __pfx__kstrtoull+0x10/0x10 [ 276.479527][T12748] mprotect_fixup+0x27a/0xe30 [ 276.479547][T12748] ? __pfx_mprotect_fixup+0x10/0x10 [ 276.479571][T12748] ? selinux_file_mprotect+0x155/0x5f0 [ 276.479589][T12748] ? __pfx_mas_prev+0x10/0x10 [ 276.479640][T12748] do_mprotect_pkey+0xa4b/0xef0 [ 276.479655][T12748] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 276.479664][T12748] ? ksys_write+0x190/0x250 [ 276.479686][T12748] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 276.479701][T12748] ? __fget_files+0x21f/0x3d0 [ 276.479722][T12748] ? __pfx_ksys_write+0x10/0x10 [ 276.479741][T12748] __x64_sys_mprotect+0x78/0xc0 [ 276.479751][T12748] ? lockdep_hardirqs_on+0x78/0x100 [ 276.479763][T12748] do_syscall_64+0x115/0x870 [ 276.479779][T12748] ? clear_bhb_loop+0x40/0x90 [ 276.479799][T12748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.479820][T12748] RIP: 0033:0x7f8e6e79e019 [ 276.479838][T12748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.479854][T12748] RSP: 002b:00007f8e6f5ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 276.479884][T12748] RAX: ffffffffffffffda RBX: 00007f8e6ea25fa0 RCX: 00007f8e6e79e019 [ 276.479896][T12748] RDX: 0000000000000001 RSI: 0000000000003000 RDI: 0000200000000000 [ 276.479907][T12748] RBP: 00007f8e6f5ac090 R08: 0000000000000000 R09: 0000000000000000 [ 276.479917][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 276.479925][T12748] R13: 00007f8e6ea26038 R14: 00007f8e6ea25fa0 R15: 00007ffe24ba5a58 [ 276.479951][T12748] [ 276.649055][T12759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2262'. [ 276.716947][ T60] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 276.755257][T12773] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 276.759415][T12773] netlink: 'syz.3.2266': attribute type 1 has an invalid length. [ 276.862907][T12779] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2268'. [ 276.867222][ T60] usb 5-1: device descriptor read/64, error -71 [ 277.111801][T12799] random: crng reseeded on system resumption [ 277.127150][ T60] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 277.143788][T12801] xt_hashlimit: max too large, truncated to 1048576 [ 277.147309][T12801] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 277.156247][T12802] kernel read not supported for file /policy (pid: 12802 comm: syz.3.2276) [ 277.171126][T12801] SELinux: policydb magic number 0x6e617077 does not match expected magic number 0xf97cff8c [ 277.176792][T12801] SELinux: failed to load policy [ 277.268417][ T60] usb 5-1: device descriptor read/64, error -71 [ 277.387719][ T60] usb usb5-port1: attempt power cycle [ 277.430809][ T7676] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 277.593172][ T7676] usb 10-1: Using ep0 maxpacket: 8 [ 277.604897][ T7676] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 277.613754][ T7676] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 277.625052][ T7676] usb 10-1: New USB device found, idVendor=044f, idProduct=b320, bcdDevice= 0.40 [ 277.629306][ T7676] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.635363][ T7676] usb 10-1: Product: ࠚ [ 277.640068][ T7676] usb 10-1: Manufacturer: 髌窛ꈁ礵꬘㪟飯趽纟먫K鸹魯娪ф籊됚뾜觱鹶⩖쎆畭矅﫯岉維膩襹颙ଙㆃ㲃 [ 277.646430][ T7676] usb 10-1: SerialNumber: ဈᲶꯉⳐ蕖⧠띥䫔뒟魱㕂㆟㫝焄朌쐙슙鍾谣쥬蚜喥ᕛ睊Ⴕਏﱼ꺰캡폀בֿ俀瀁銒Ϲ [ 277.755604][ T60] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 277.778003][ T60] usb 5-1: device descriptor read/8, error -71 [ 277.884928][T12799] xt_TPROXY: Can be used only with -p tcp or -p udp [ 277.894822][ T7676] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 277.902673][ T7676] usb 10-1: USB disconnect, device number 3 [ 278.048450][ T60] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.070482][ T60] usb 5-1: device descriptor read/8, error -71 [ 278.190440][ T60] usb usb5-port1: unable to enumerate USB device [ 278.524182][ T42] kauditd_printk_skb: 105 callbacks suppressed [ 278.524200][ T42] audit: type=1800 audit(1785627381.579:1017): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 278.535548][ T42] audit: type=1400 audit(1785627381.588:1018): avc: denied { block_suspend } for pid=12813 comm="syz.5.2280" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 278.545068][ T42] audit: type=1800 audit(1785627381.597:1019): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235772 res=0 errno=0 [ 278.556414][ T42] audit: type=1800 audit(1785627381.597:1020): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235787 res=0 errno=0 [ 278.575240][ T42] audit: type=1800 audit(1785627381.625:1021): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 278.596188][ T42] audit: type=1800 audit(1785627381.644:1022): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235802 res=0 errno=0 [ 278.600357][ T42] audit: type=1800 audit(1785627381.644:1023): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235814 res=0 errno=0 [ 278.615433][ T42] audit: type=1800 audit(1785627381.662:1024): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235826 res=0 errno=0 [ 278.646614][ T42] audit: type=1800 audit(1785627381.699:1025): pid=5144 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 278.660926][ T42] audit: type=1800 audit(1785627381.708:1026): pid=10043 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=235838 res=0 errno=0 [ 278.680084][ T9528] Bluetooth: hci5: Frame reassembly failed (-84) [ 279.821414][T12827] loop3: detected capacity change from 0 to 7 [ 279.828060][ C0] blk_print_req_error: 10 callbacks suppressed [ 279.828074][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.832965][ C0] buffer_io_error: 10 callbacks suppressed [ 279.832974][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.839327][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.842416][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.845062][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.848826][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.852258][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.856101][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.862320][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.866257][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.869972][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.873787][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.877704][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.880974][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.883898][T12827] ldm_validate_partition_table(): Disk read failed. [ 279.886329][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.890070][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.893597][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.897674][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.900992][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 279.904670][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 279.908179][T12827] Dev loop3: unable to read RDB block 0 [ 279.911295][T12827] loop3: unable to read partition table [ 279.914009][T12827] loop3: partition table beyond EOD, truncated [ 279.916360][T12827] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 280.177773][T12834] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.281118][ T5745] Bluetooth: hci2: command 0x1003 tx timeout [ 280.289523][ T5093] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 280.400577][T12837] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 280.403313][T12837] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 280.410493][T12837] vhci_hcd vhci_hcd.0: Device attached [ 280.414428][T12838] vhci_hcd: unknown pdu 1 [ 280.418708][ T5812] vhci_hcd vhci_hcd.1: stop threads [ 280.426601][ T5812] vhci_hcd vhci_hcd.1: release socket [ 280.429163][ T5812] vhci_hcd vhci_hcd.1: disconnect device [ 280.810823][T12850] zero sized request [ 280.888071][ T65] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 280.889016][ T5093] Bluetooth: hci5: command 0x1003 tx timeout [ 280.911116][T12852] input: syz0 as /devices/virtual/input/input14 [ 280.949845][T12852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2292'. [ 280.955688][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.960522][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.964109][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.967344][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.970460][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.974017][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.989100][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.992592][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.995706][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 280.999648][ T24] hid-generic 0004:0007:0000.000B: unknown main item tag 0x0 [ 281.020086][T12857] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2294'. [ 281.034702][T12857] macsec0: entered promiscuous mode [ 281.036629][T12857] macsec0: entered allmulticast mode [ 281.038799][T12857] veth1_macvtap: entered allmulticast mode [ 281.049122][T12857] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2294'. [ 281.060380][ T24] hid-generic 0004:0007:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz0 [ 281.111948][T12862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1546 sclass=netlink_route_socket pid=12862 comm=syz.5.2297 [ 281.120516][T12862] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2297'. [ 281.170413][T12868] netlink: 232 bytes leftover after parsing attributes in process `syz.5.2299'. [ 281.179988][T12865] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2296'. [ 281.183436][T12866] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2296'. [ 281.216136][ T5883] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 281.291497][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2301'. [ 281.388332][ T5883] usb 5-1: config 0 has no interfaces? [ 281.390748][ T5883] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 281.394678][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.404927][ T5883] usb 5-1: config 0 descriptor?? [ 281.558035][T12890] smpboot: CPU 1 is now offline [ 281.650204][T12892] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 281.656344][ T0] Disabled fast string operations [ 281.658684][ T0] ------------[ cut here ]------------ [ 281.661013][ T0] alternatives_patched [ 281.661026][ T0] WARNING: arch/x86/kernel/cpu/cpuid-deps.c:127 at do_clear_cpu_cap+0x356/0x440, CPU#1: swapper/1/0 [ 281.667213][ T0] Modules linked in: [ 281.669026][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(lazy) SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 281.673071][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 281.675863][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.678952][ T34] usb 6-1: new full-speed USB device number 43 using dummy_hcd [ 281.679966][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 281.685279][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 dc 71 0f 31 ff 89 ee e8 88 c6 59 00 85 ed 0f 84 7d fd ff ff e8 0b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 f5 cb 59 00 8b [ 281.693266][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 281.695997][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 281.699213][ T0] RDX: ffff88801ee8a540 RSI: ffffffff81b095d5 RDI: ffff88801ee8a540 [ 281.702556][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 281.706083][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 281.709577][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 281.712991][ T0] FS: 0000000000000000(0000) GS:ffff8880d5ed8000(0000) knlGS:0000000000000000 [ 281.717037][ T0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 281.719970][ T0] CR2: 0000000000000000 CR3: 000000000e994000 CR4: 0000000000350eb0 [ 281.723379][ T0] Call Trace: [ 281.724795][ T0] [ 281.726093][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 281.728468][ T0] ? _printk+0xcf/0x110 [ 281.730157][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 281.732566][ T0] ? early_init_intel.cold+0x129/0x1eb [ 281.734985][ T0] early_init_intel.cold+0x13f/0x1eb [ 281.737193][ T0] init_intel+0x1c/0x7b0 [ 281.739076][ T0] identify_cpu+0x8b0/0x1c30 [ 281.741092][ T0] identify_secondary_cpu+0x178/0x270 [ 281.743455][ T0] start_secondary+0xcf/0x2d0 [ 281.745379][ T0] ? __pfx_start_secondary+0x10/0x10 [ 281.747662][ T0] common_startup_64+0x13e/0x158 [ 281.749771][ T0] [ 281.751111][ T0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 281.754205][ T0] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G S L syzkaller #0 PREEMPT(lazy) [ 281.758606][ T0] Tainted: [S]=CPU_OUT_OF_SPEC, [L]=SOFTLOCKUP [ 281.761172][ T0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 281.765334][ T0] Call Trace: [ 281.766901][ T0] [ 281.768207][ T0] dump_stack_lvl+0x100/0x190 [ 281.770257][ T0] vpanic+0x552/0x970 [ 281.772012][ T0] ? __pfx_vpanic+0x10/0x10 [ 281.774020][ T0] panic+0xd1/0xe0 [ 281.775692][ T0] ? __pfx_panic+0x10/0x10 [ 281.777747][ T0] ? check_panic_on_warn+0x1f/0x90 [ 281.779984][ T0] check_panic_on_warn.cold+0x19/0x34 [ 281.782276][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 281.784635][ T0] __warn.cold+0x191/0x318 [ 281.786582][ T0] __report_bug+0x30f/0x440 [ 281.788623][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 281.790829][ T0] ? __pfx___report_bug+0x10/0x10 [ 281.793036][ T0] ? prb_read_valid+0x78/0xa0 [ 281.795121][ T0] ? __pfx_prb_read_valid+0x10/0x10 [ 281.797347][ T0] ? tick_nohz_tick_stopped+0x6c/0xa0 [ 281.799631][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 281.801803][ T0] report_bug+0xb2/0x220 [ 281.803666][ T0] ? do_clear_cpu_cap+0x356/0x440 [ 281.805828][ T0] handle_bug+0x16a/0x2a0 [ 281.807740][ T0] exc_invalid_op+0x17/0x50 [ 281.809735][ T0] asm_exc_invalid_op+0x1a/0x20 [ 281.811773][ T0] RIP: 0010:do_clear_cpu_cap+0x356/0x440 [ 281.814207][ T0] Code: 2a 38 d0 7c 08 84 d2 0f 85 ea 00 00 00 8b 2d d1 dc 71 0f 31 ff 89 ee e8 88 c6 59 00 85 ed 0f 84 7d fd ff ff e8 0b cc 59 00 90 <0f> 0b 90 e9 6f fd ff ff 48 89 54 24 18 89 14 24 e8 f5 cb 59 00 8b [ 281.822316][ T0] RSP: 0000:ffffc90000177c98 EFLAGS: 00010093 [ 281.824822][ T0] RAX: 0000000000000000 RBX: 0000000000000070 RCX: ffffffff81b095c8 [ 281.828224][ T0] RDX: ffff88801ee8a540 RSI: ffffffff81b095d5 RDI: ffff88801ee8a540 [ 281.831615][ T0] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000000 [ 281.834961][ T0] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000070 [ 281.838408][ T0] R13: 0000000000000601 R14: ffffc90000177ce0 R15: ffffc90000177d80 [ 281.841845][ T0] ? do_clear_cpu_cap+0x348/0x440 [ 281.844090][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 281.846308][ T0] ? do_clear_cpu_cap+0x355/0x440 [ 281.848533][ T0] ? __pfx_do_clear_cpu_cap+0x10/0x10 [ 281.850868][ T0] ? _printk+0xcf/0x110 [ 281.852700][ T0] ? __pfx_cpu_parse_topology+0x10/0x10 [ 281.855099][ T0] ? early_init_intel.cold+0x129/0x1eb [ 281.857479][ T0] early_init_intel.cold+0x13f/0x1eb [ 281.859810][ T0] init_intel+0x1c/0x7b0 [ 281.861675][ T0] identify_cpu+0x8b0/0x1c30 [ 281.863717][ T0] identify_secondary_cpu+0x178/0x270 [ 281.866050][ T0] start_secondary+0xcf/0x2d0 [ 281.868127][ T0] ? __pfx_start_secondary+0x10/0x10 [ 281.870415][ T0] common_startup_64+0x13e/0x158 [ 281.872558][ T0] [ 281.874649][ T0] Kernel Offset: disabled [ 281.876556][ T0] Rebooting in 86400 seconds..