last executing test programs: 49.09493063s ago: executing program 2 (id=91): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r2, 0x0, 0x0, &(0x7f0000000000)=0x1, 0x4) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f0000000180)=0x7, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001640)={'wlan0\x00', 0x0}) r6 = socket$caif_seqpacket(0x25, 0x5, 0x2) connect$caif(r6, &(0x7f0000000140)=@util={0x25, "97f3ca78aec7caf225803b0b58225361"}, 0x18) r7 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) fcntl$notify(r7, 0x402, 0x8000003d) write$P9_RLOCK(r7, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x3}, 0x8) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @multicast, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "080108", 0x14, 0x2f, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, {[], {{0x0, 0x8902, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd008a0eab7c0a00373dd543c23a762909cee3e82a13e94f77521e9cdb6c038fc1d20e9e2297777b68f7b18189e31f000000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32=r5, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x10) 49.043963093s ago: executing program 2 (id=92): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x1c, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4480}, 0x20000014) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4c}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x6}]}, 0x30}, 0x1, 0xffffa888}, 0x0) r5 = dup(0xffffffffffffffff) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f00000000c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, 0x6, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x40) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r5, 0x3b87, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x0, 0x0, 0xff}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="120000000400800004000000df0000000000000058dbcd72c5efd41efaa1b429b21097105c0c5092594ce60baa093db37c99b3ca7d3fdbe41fc90daef20a4ae0d10a19d61b02d77e47c27ae28018d3391261b6f99456df4f08ed3913f13cf68153d21467c61d4b483fd9", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000200500"/28], 0x50) 48.993593782s ago: executing program 2 (id=93): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chdir(&(0x7f0000000100)='./file0\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xae) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000080)) (async) creat(&(0x7f00000001c0)='./file0\x00', 0x24) 48.993332442s ago: executing program 2 (id=94): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x165011, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000340)='devpts\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, 0x0, &(0x7f0000000400)) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@xino_auto, 0x3a}], [], 0x2f}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/../file0\x00', 0x240880, 0x100) r2 = syz_io_uring_setup(0x4fe8, &(0x7f0000000d00)={0x0, 0x7db5, 0x8, 0x0, 0x1d8}, &(0x7f0000000d80), &(0x7f0000000dc0)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000001100)={0x1, 0x1, 0x0, &(0x7f0000001080)=[{0x0}], 0x0}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x2a, 0x29, 0x2, {0x4, [{{0x4, 0x1, 0x4}, 0xfffffffffffffff9, 0x40, 0x7, './file1'}]}}, 0x2a) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x2a, 0xb, 0x0, 0x25dfdbff, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @uid}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xc8, 0x0, 0x0, @ipv4=@loopback}]}]}, 0x28}}, 0x800) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000440)="a9f24d70227b566e2d4cc836457cc652a01920788b97bb23a45c27552ad267a7711ac2491442cf24197fc5b58d249b85f21c4d1b0f2eec4caf177dd7cccbc639593293b239223771b292d05da4bc4dd7cf4483c840ec58ae1263e42ac8d14553c3d8ca87de0110b8e258fe0c1a5ae67f2830ec54c03975173b56ee91c0c67646041f0ebb67d73487770f3f0e5ae644914fee74f61ee19ebeb2e984989f31b51b32e75b58856bda", 0xa7) chdir(&(0x7f0000000100)='./file0\x00') r5 = socket$netlink(0x10, 0x3, 0x6) ioctl$FS_IOC_SETVERSION(r5, 0x40087602, &(0x7f0000000080)=0xa7) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, 0x0, &(0x7f0000006c00)) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 48.823527405s ago: executing program 2 (id=98): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000280)={0x0, 0x0, r3, 0x0}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x2d1, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f00000003c0)={r4, 0x0, 0x5, 0x8, 0x2, [], [0x0, 0x0, 0x6], [0xc4c, 0x6, 0x10], [0x8, 0x0, 0x0, 0x1]}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000400)={0x0, 0x5, 0xffffffff, 0x5, 0x0, [0x0, 0x0], [0x2, 0x3, 0x2, 0xe], [0x8, 0x5, 0x2, 0x9], [0x8, 0x2, 0x3, 0x5]}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f0000000340)={0x0, 0x0, r8, 0x0}) r10 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r10, 0xc06864ce, &(0x7f0000000440)={r9, 0x0, 0x0, 0x0, 0x2, [0x0], [0x0, 0x21, 0x271, 0x6], [0x0, 0x4]}) ioctl$DRM_IOCTL_GEM_FLINK(r10, 0xc008640a, &(0x7f0000000000)={r11}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3, 0x2, [0x0, 0x0, 0x0], [0x4, 0x8000, 0x80, 0x8000], [0x6, 0xc, 0x9889, 0x3], [0x10000, 0x8000, 0x6a, 0x20a]}) ioctl$DRM_IOCTL_GEM_OPEN(r0, 0xc010640b, &(0x7f0000000480)={0x0, 0x0}) ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f0000000580)={r4, 0x1000, 0x0, 0x8, 0x1, [r6, r11, r12, r13], [0x1, 0x1, 0x8d, 0xffffffff], [0x800, 0x3, 0x1, 0x4], [0x3, 0xfffffffffffffffe, 0x400, 0x4]}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) r15 = syz_io_uring_setup(0x1114, &(0x7f0000000300), &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r16, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r16, r17, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x8, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r15, 0x47fa, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r15, 0x18, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[0xffffffffffffffff]}, 0x1) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r20 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) ioctl$SIOCRSACCEPT(r20, 0x89e3) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r18}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x601, 0x3, &(0x7f0000000140)=[r18, r14, r19], &(0x7f0000000200), &(0x7f0000000300)=[r21], &(0x7f0000000580)}) 48.613544119s ago: executing program 2 (id=100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x8}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0x2, [{0xb, 0xd, 0x8007}, {0x7, 0x100, 0xffff}, {0x6, 0x2, 0x40}, {0x5, 0x4, 0x64}, {0xd, 0xd05, 0x740}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x8, 0x5, 0x40}, {0x4, 0x0, 0xe}, {0x3, 0x2, 0x7}, {0x2, 0x8, 0x7868}, {0xc, 0x0, 0x8}, {0xd, 0x4, 0x401}]}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/100, 0xcf, 0x64, 0x1, 0x2, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0xf05, 0x8, 0x7, 0x8, 0xffffffffffffffff, 0x8, '\x00', r1, r2, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000200)={0x1, 0x0, {0x7, 0x1000, 0x92}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r4, &(0x7f0000001200)=""/99, 0x63, 0x0) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x3}, 0x8) 48.581624329s ago: executing program 32 (id=100): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0x0, 0x6, 0x8}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb4, 0xb4, 0x3, [@restrict={0x4, 0x0, 0x0, 0xb, 0x1}, @enum64={0x9, 0x5, 0x0, 0x13, 0x0, 0x2, [{0xb, 0xd, 0x8007}, {0x7, 0x100, 0xffff}, {0x6, 0x2, 0x40}, {0x5, 0x4, 0x64}, {0xd, 0xd05, 0x740}]}, @restrict={0x4, 0x0, 0x0, 0xb, 0x4}, @struct={0x7, 0x6, 0x0, 0x4, 0x0, 0x4, [{0x8, 0x5, 0x40}, {0x4, 0x0, 0xe}, {0x3, 0x2, 0x7}, {0x2, 0x8, 0x7868}, {0xc, 0x0, 0x8}, {0xd, 0x4, 0x401}]}]}, {0x0, [0x30]}}, &(0x7f0000000080)=""/100, 0xcf, 0x64, 0x1, 0x2, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x4, 0xf05, 0x8, 0x7, 0x8, 0xffffffffffffffff, 0x8, '\x00', r1, r2, 0x4, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r3, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) ioctl$VIDIOC_SUBDEV_S_CROP(r3, 0xc038563c, &(0x7f0000000200)={0x1, 0x0, {0x7, 0x1000, 0x92}}) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00') pread64(r4, &(0x7f0000001200)=""/99, 0x63, 0x0) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000300)={0x0, 0x3}, 0x8) 2.748263692s ago: executing program 3 (id=591): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20040) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000002c0)) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010102}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f076d6f64653d30303030303030303030303030303030303034303030302c757365725f69643c1d8f6096b36b5ef4ee3705b126f4d881cce62a3a85efab2700355a075b605ea5caf1d0c46b8660e62ac7d91abc8134dd4278ffd642d8941af5e84556b6c3cfe8a284c61ed3450e7dce3d3ae900d0915fa1f086add02bb5198038ce7bdda6ef1581eb1fd318eb578503bb3dc783939a974edd9d138f3b36d2a88387356e82186ceb0a46c78024bc99d275c7453497a21c84f372ccd166be0ed0198d504a67d449cc0e16f96a999d4dc397f8a473c82cb085a3be07ba9053b314b9ab830fc56581852dce1d9ddb", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r4 = syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0xd, 0x1, 0x3, "872290ee01689bee266d8c7a6aa6995c1937025a4754aa9610c55ae1146141bb", 0x5ac79482}) read$FUSE(r3, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r5, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x20040) (async) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r2, 0xc0bc5310, &(0x7f00000002c0)) (async) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f3, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x0, 0xab00, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x3e, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) (async) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e20, @private=0xa010102}, 0x10) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB="2c726f6f076d6f64653d30303030303030303030303030303030303034303030302c757365725f69643c1d8f6096b36b5ef4ee3705b126f4d881cce62a3a85efab2700355a075b605ea5caf1d0c46b8660e62ac7d91abc8134dd4278ffd642d8941af5e84556b6c3cfe8a284c61ed3450e7dce3d3ae900d0915fa1f086add02bb5198038ce7bdda6ef1581eb1fd318eb578503bb3dc783939a974edd9d138f3b36d2a88387356e82186ceb0a46c78024bc99d275c7453497a21c84f372ccd166be0ed0198d504a67d449cc0e16f96a999d4dc397f8a473c82cb085a3be07ba9053b314b9ab830fc56581852dce1d9ddb", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) syz_open_dev$vim2m(&(0x7f0000000040), 0x6, 0x2) (async) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0xd, 0x1, 0x3, "872290ee01689bee266d8c7a6aa6995c1937025a4754aa9610c55ae1146141bb", 0x5ac79482}) (async) read$FUSE(r3, &(0x7f0000006840)={0x2020}, 0x2020) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, r5, &(0x7f0000000040)) (async) 2.583576664s ago: executing program 3 (id=593): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) (async) pipe2(&(0x7f0000000bc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0xe00, 0x0) r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x400001, 0x0) waitid$P_PIDFD(0x2, r1, 0x0, 0x4, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) (async) pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x3c) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0xffff, 0x0, @private1, 0x200000}, 0x1c) sendmsg(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000002c0)="94496f8887c87dc66762715d4984b06def3e09f711a5e797e279b75c024d1a3cf5a718de7cf4651856c28ace7189d024eb94eccc601de3f2925357a90c007c0857f7b0a9e3a11655bfab4268748b5130ced3bc760eba6c7c25377b45631ad0d8f9f9b183f94bd482b4ac932bdb178e1167c5b3006d668b4aa7329f8f8279c41674003251f0fc0df8ff69efc499de79bb827ca60b72cca1ec5d0d6c692e3c2db24daf420f2231a349347255bda5b309f24f", 0xb1}, {&(0x7f0000000380)="b7f9778d2ff201ee9724d67587bd82e891fd32738475737c1b15a692cb9ace0d21a00913ebe38e34655c4c2d4e2a2299f606e5b65775602f286b10cb8ec7f8d46e3dc799d891c373de3d910ed3b62c1106968a1e4fa424d91424a3f9459b95c841e0212774533409b5adcbf285f39cf09941eca1ceadf1787f17fd6e6a1c52c3622357f70cd7b6c5e850d83727b151cf33c3d4c90a8e9c2446396265fb73bc1c640a5b854409d1e6efc776d1448f1e525144d18122172c1d3b76362414d6", 0xbe}, {&(0x7f0000000200)="900e6af204622cd8abe5d129465e7437a3db214b4f145e", 0x17}, {&(0x7f0000000240)="694cd650001f6028388599a8a6ded3bc69", 0x11}, {&(0x7f0000000440)="a52e0b052e0098dcf47e06e054d9ed75f31d03cc6ab07ac19b9db324ea0f80ab0506f374a4044a235e3c6ac479b02b69ef906528f879a29c8ed23d2f8c36aacdc282363a7fd4143f98ccbd7c3a5ab98e63cc92ddeb2aeaf00233f6397b38c3aa2bb72678dd30c317f4cf", 0x6a}, {&(0x7f0000000580)="2cd889f7d18dae3abf80a09338ddbc2b4e5157934fc138164a94fd0f7cbcc61fc406aca0f51b4dcdf0dfab5aea3c2b91623324662bc2bcca0de6ea8e28d1c8b224b20f45793bd84122e7d5c0dd12ebf6ae6bfc43e4e1d0c2e7b6671a6b9f3565104e8630f738dcb3fada742f6a56b32ccb2cb562d27ca8642d7dd2d3b5a8cfd0661612be911a956e75a3f8215f0c8b6861fd8033a236b6e7e4c7021d322f048a3cb7f1785f9a882b667bdd3f0f4eded94d8a706f", 0xb4}], 0x6, &(0x7f00000006c0)=[{0xc0, 0x88, 0x7, "c380196b923e1cd7a3daa5d80180397ae37d5aec9d5e28626866366c4cf9b109ddb63f8f2422988d417e6ed4fa70c9ea9cc9b1956fdc125d7fa795b53de98860158261242fb3a8d032b1ae18a5b30572aec01af5040132af32fcbba8df6f88c51c5e783359d424fad8c9626cc8ea1549e6a0a3a6dbd2a443510fd3c6fa08ba595a0892a3f25b945bd05ac8cbb9df9b6950c416db045a28e547c1e9e5810c309244333d24060944161cc01dc73691ba"}, {0xc0, 0x0, 0x8, "61eb52f34767c41d481ef018852a73b43ce343bb248ee0f682b7e5468266e4a0fd11c83f5bc17187dc1d19e43dfdbbfbf0b5aef2e4a80148195b0943bd311bab42939919b64673f2b0336987ff4d5c788478707e4798fdeed20e37b7bc47b48a6bec016928ea6acd10cae49dba14d6e3c20a0f450a28b6f42b7482e44b945223306935fc74b54e49b65f90e6b461da8d8d1e1a4449d927f8080b1a895499d3b8f2f391ee19dd1f6431db9e"}, {0x80, 0x102, 0x5, "a63392dfe1af6dd8a9383a709520e80244ced84a6c3683c6fc8e335343caff76407d0385c0b81bd08c5772c52906496e0c73f34795a3893e19a886dbf9c6a2ac5b81e9d783ff5c1c53d9132c3dd98e5656c1054c343bbeb0ca8b0c463d2f73f927516c841bda41f4819b2672"}, {0xb8, 0x88, 0x4, "0788d2d2a65246b820f2d861fec60dc0a3b257d01991190e1196a08c007c99e51685b7c203706a723f1f65963b04a8b289f5574c262616696304e4cdc9d152b6292d640d6176b453ccca90fe86d371fbbaaac52742750eb3f2ac1dece27ed3c0b89f0ea9454b528e9bd427cecfd839e2f0d133bbce6f0d65d7bb8924861b92b5ab5bcc9869ef99179947ae358beede465fe33b832e1cf3897584ead26e05d20665eab6a8458f90b2"}, {0x10, 0x10c, 0x9}, {0xd8, 0x11, 0xe2, "a0be0921deceba4ee0bb340d3c9aa5bced4ca54184d9362b7177e0620bddd380162ba2759805c3a3a03d61a9f20f0d62f41b9ae00c37382d52825aff270d36d54f52f5ee3d256c88aa546da7d962dc838e4e49bbb8275f764a6526168504cf52d6bf7375985023d467bed5c0fde456444602d8aa0a6b3587ba5e0f7e1b65785dee6d391270b4070deb1bea2b4f30b6f3b33bf5a46822e73c2fe9e3743c848e6cec7058b70ceb7657cc4eb660aa149a7e024c3828608bbf453fcf3eafce1c34b2676842"}], 0x3a0}, 0x20004080) (async) sendto$inet6(r3, &(0x7f00000001c0)='O', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) (async) shutdown(r3, 0x1) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{}, [@TCA_NETEM_RATE={0x14, 0xd}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x22008044}, 0x0) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 2.582368718s ago: executing program 3 (id=595): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv4_newaddr={0x20, 0x14, 0x509, 0x0, 0x25dfdbfd, {0x2, 0x18, 0xc0, 0xcb, r3}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2e}}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) keyctl$KEYCTL_MOVE(0xc, 0x0, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x7000004, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r4, @ANYBLOB="0a000600080211000001000006006600c78800001c0033"], 0x4c}}, 0x0) 2.512149142s ago: executing program 3 (id=596): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = eventfd2(0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000080)={r2, 0x15, 0x2}) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f00000000c0)) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$inet6(0xa, 0x802, 0x88) setsockopt$inet6_udp_int(r5, 0x11, 0x100000000a, &(0x7f00000003c0)=0x800000001, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x6008800, &(0x7f0000000180)={0xa, 0x4e23, 0x4, @mcast1}, 0x1c) sendto$inet6(r5, &(0x7f0000000000)="17", 0x1, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000480)={0x2020}, 0x2020) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000b40)=ANY=[@ANYBLOB="380100001a0001000000000000000000ac1414aa000000000000000000000000e00000020000000000000000000000004e220002000000000200008000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000000002b000000fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000ffffff03020000009300000000000000480003006c7e7300"/240], 0x138}}, 0x0) 2.313344794s ago: executing program 3 (id=598): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x449fe7aa7287c040, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2400c021, &(0x7f0000000800)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e21, 0x80000, @dev, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000001c0), 0xa}, 0x2004890) write(r3, &(0x7f0000000040)="0d000000010001", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6) rename(&(0x7f0000000c00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001f80)='./bus\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x400448c9, 0x0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r2, 0x0, 0x0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000180)=@o_path={&(0x7f0000000100)='./file0\x00', r2, 0x4000, r0}, 0x18) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000840)={@mcast1, r7}, 0x14) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000a80)=0x2, &(0x7f0000000ac0)=0x4) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r9, 0x1, 0x1, &(0x7f0000000140)={0xf}, 0x4) recvfrom(r8, &(0x7f0000000000)=""/91, 0x5b, 0x10021, &(0x7f0000000080)=@un=@abs={0x1, 0x0, 0x4e24}, 0x80) 2.310850883s ago: executing program 3 (id=599): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x11000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, r1, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x18}}, 0x4000) r2 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_SIZE(r2, 0xab02, 0x8) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$EXT4_IOC_GETSTATE(r0, 0x40046629, &(0x7f0000000180)) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xd8, r1, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0xbc, 0x22, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x9f3f}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x434}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x3}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x88d}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xda3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xfff}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xde}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x33}]}, 0xd8}, 0x1, 0x0, 0x0, 0x10000000}, 0x4004004) openat$cgroup_freezer_state(r0, &(0x7f0000000380), 0x2, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000400)={0x0, @loopback, @loopback}, &(0x7f0000000440)=0xc) r5 = open_tree(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x8901) connect$packet(r5, &(0x7f00000004c0)={0x11, 0x3, r4, 0x1, 0x4, 0x6, @random="97d5b7184395"}, 0x14) r6 = openat$cgroup_freezer_state(r5, &(0x7f0000000500), 0x2, 0x0) write$cgroup_freezer_state(r6, &(0x7f0000000540)='FREEZING\x00', 0x9) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xf7b6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x86e}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000001) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000008c0)={0x2c, &(0x7f00000006c0)={0x0, 0xa, 0x49, {0x49, 0xb146acde99c4aa0b, "7dbaf33c44ca84dcda20724a957c0b38250649afd69fe0f182e537ada4083f8dc985aa0ebca94a78c7898dae27cc8210e950a3da39b287cbd1849c0464069091aa0650adebaabb"}}, &(0x7f0000000740)={0x0, 0x3, 0x86, @string={0x86, 0x3, "e67fb7632c12145cea9d5c92a4c9764df33c8defe480678818030b7a9fcd47acf34397db0f9f31aaeaf7fdfe5b9651545d1820e6a056b1d2661d2a26bd683f22651bec8468d42a900090d2aab0416c0fc32ce9d1a7a4313a2abb627855edafffb14742bf02522c151e7f85839be252fe8fe0ed39e58dadcc125dafc17db764ce8335af4b"}}, &(0x7f0000000800)={0x0, 0xf, 0x36, {0x5, 0xf, 0x36, 0x2, [@ptm_cap={0x3}, @generic={0x2e, 0x10, 0xa, "848c9a2f3250a4d91e65a3987759700badd039bcf319f6f6ec575c5d311a3200c9023316665f0ee4d1bc9b"}]}}, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0xb, 0x3, 0x40, 0xba, "d6d68ee1", "bdb7366c"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6b, 0x60, 0xfa, 0x68, 0x3, 0xc1, 0x8000}}}, &(0x7f0000000d00)={0x84, &(0x7f0000000900)={0x0, 0x11, 0x1b, "3e919abcdcbfdaf10dc13812a62f7e769b8feb3e8e6f29db9a249f"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0x33}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000009c0)={0x20, 0x0, 0x4, {0x3, 0x2}}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x1e0, 0x8}}, &(0x7f0000000a40)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000a80)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000ac0)={0x40, 0xb, 0x2, "73dd"}, &(0x7f0000000b00)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000b40)={0x40, 0x13, 0x6, @random="8dfe150c7b20"}, &(0x7f0000000b80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000bc0)={0x40, 0x19, 0x2, '\x00('}, &(0x7f0000000c00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000c40)={0x40, 0x1c, 0x1}, &(0x7f0000000c80)={0x40, 0x1e, 0x1}, &(0x7f0000000cc0)={0x40, 0x21, 0x1, 0x4b}}) setsockopt$packet_drop_memb(r5, 0x107, 0x2, &(0x7f0000000dc0)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) write$USERIO_CMD_SEND_INTERRUPT(r5, &(0x7f0000000e00)={0x2, 0x6}, 0x2) sendmsg$inet6(r5, &(0x7f0000001380)={&(0x7f0000000e40)={0xa, 0x4e22, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7ff}, 0x1c, &(0x7f0000001240)=[{&(0x7f0000000e80)="12caee2ea73a748ed2f7e6bdeea59fed3e75d60ba4ce7c4ec7ce3a2f1480f38964e3319b8abdbcb5eb27c1135775cc3d96f55daa0eeffa31632e9e8ea1d18d09f40aad6e248928e1a84174a026718d1e5dcfd2702e17885835e47507afb7f7640ce53588c8827cc54727eb06d98622428c7e7277e012fe0b772464f64dc84dc73b967b713e0d5942f8020cb4bc7d4b9e8650a2a177d8696301b8929a55b6e48ca1a20c7362bb3c3d8263082c9885e03b8553f0ffb00c806b9ec6cae1ba3bab5e1bedb400f5bf063f01a0e91db49f3ac99133852f102409a9cc32658a56b05885b048ccef1cae367931", 0xe9}, {&(0x7f0000000f80)="a307501b1f09d0f315f95449bd57646a06e62639d08ac487edea970ddca37faa24770ba5f72e9b00664fe64933df96f8f6da9d3aefdfc8b6457ba40a30ac4d6cedcbb7608be791507c274c2720be372616352c7b3618e543cd0a3b2ce6167bad43add810a33d352def761756438955f9ccc91a85e8304e99a3cd08b7b273760fc38b77d25619a76d9a6fb1fa3ce2b7d64568f54b1d27a311ce373c7a223af5b1e7525851e41810fe4a", 0xa9}, {&(0x7f0000001040)="fb0a268d1015f49ab99352a7147323b07b75c47f1b6ccf8e333a860e879fea5f1d0e9dc1062e1e1b16202363cb1299add295b8fddc2d1929baa68b6ca96550ec218f9eff2a2fc0707fad42886fe3253168bcd6db02d38ecea95204e3fa1e07de1fe5be2edae0da5cc95fb78a476b799b8e1b76bdc266713300979bf5e05fd9da4838da68801f84097adb21c1cfd8f93760507d0bb7f8fe4bd7adabd213a0477c0762f6e3b15b1a87738ce494add98d472d59aaeb4c8603832857a5c0f6092a447e0ee0af309697ebdb926bdc686304e94e2a47449e6cb759fbbf3cf3681f1bcf85eca38a90b614dbb587b5322b57259d", 0xf0}, {&(0x7f0000001140)="0e4b11a58c407bd1b101c868a0a9c0c89683745b4c5c91873487735373316faa4cff9d3352698b0381be9dcc5895f07c733713d0db7368c24e9003653287081577482970aa9989970476ca1e10d2368b05c629f554c03617ca7a02a849ee2e435b7d75cd47c1214fb960d84626eafa562c91e75f3070b5c6669e365c8942281256b3bb1c5fafba5e6897c8d7176259fc31f86ec48c20b59790b4e79eda7a31568f07bbe8153cff0b32e6d981c56ac5dad4bc107eaf93a39dc780491a79f89d0b99ea02773a914480fa8d01234b9f91c3b0d173bfd30eecde92ab8e1707e8feb904263c3b8f1a7692d22b4fad37c8e5223d1e3ca6a638", 0xf6}], 0x4, &(0x7f0000001280)=[@rthdr={{0x48, 0x29, 0x39, {0x62, 0x6, 0x0, 0x8, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @private1]}}}, @dstopts={{0xb0, 0x29, 0x37, {0x21, 0x12, '\x00', [@generic={0x7, 0x82, "b725a74ec6547ecc0b003fffaee526f51bd55dbe41fea1153ede5adf3e748dd13d9b653bb345404bc7e773581e7bd96dd034623c45f3a35315bb5370710f86da13c8642d8489c29cae7a71986175926bf7c34d0689967998e0ea1985d1d73380d31d2a7a3175a9ad1b57d95e11987f33ab2240f605d3bf69193080bec82b68c37e88"}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x6}, @generic={0x3, 0x2, "9786"}]}}}], 0xf8}, 0x44) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002500)={0x6, 0xa, &(0x7f00000013c0)=@raw=[@printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @jmp={0x5, 0x1, 0xa, 0x1, 0x9, 0xfffffffffffffff8, 0x4}], &(0x7f0000001440)='GPL\x00', 0x6, 0x1000, &(0x7f0000001480)=""/4096, 0x41100, 0x9, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000002480)=[{0x3, 0x2, 0x5, 0x8}, {0x4, 0x2, 0x5, 0xc}, {0x0, 0x5, 0xe, 0xc}, {0x1, 0x2, 0x3, 0x1}, {0x3, 0x5, 0xb, 0x6}, {0x0, 0x4, 0xa, 0xc}], 0x10, 0x6, @void, @value}, 0x94) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r8, 0x8010671f, &(0x7f0000002600)={&(0x7f00000025c0)=""/14, 0xe}) pidfd_send_signal(r5, 0x1f, &(0x7f0000002640)={0x7, 0xfff, 0x1ff}, 0x0) setsockopt$RDS_GET_MR(r5, 0x114, 0x2, &(0x7f00000036c0)={{&(0x7f00000026c0)=""/4096, 0x1000}, 0xfffffffffffffffe, 0x2}, 0x20) unshare(0x12030000) ioctl$KVM_RUN(r5, 0xae80, 0x0) r9 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000003700)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x56a, 0x44, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x9, 0xe0, 0x0, [{{0x9, 0x4, 0x0, 0xb, 0x1, 0x3, 0x1, 0x1, 0xfb, {0x9, 0x21, 0x5, 0xc, 0x1, {0x22, 0xf18}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x5, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x5, 0x0, 0x7f}}]}}}]}}]}}, &(0x7f00000039c0)={0xa, &(0x7f0000003740)={0xa, 0x6, 0x310, 0x5, 0x3, 0xd4, 0x10, 0x8}, 0x19, &(0x7f0000003780)={0x5, 0xf, 0x19, 0x1, [@ssp_cap={0x14, 0x10, 0xa, 0xb4, 0x2, 0x3ff, 0xf000, 0x3, [0xaa3f679d7c6ef8ac, 0xc0c0]}]}, 0x6, [{0x4, &(0x7f00000037c0)=@lang_id={0x4, 0x3, 0x480a}}, {0x4, &(0x7f0000003800)=@lang_id={0x4, 0x3, 0x3002}}, {0x56, &(0x7f0000003840)=@string={0x56, 0x3, "fe956d96eebeb807cc07c88f77da62d02420648462cfed5ea997e1f5be0ae98f38dfc741c136aed99eae95b8c17dec925b9652a2e90dc37d0fce43ebd752455de2b8e9fa7884594549349b04dcc44b4ee42fe31a"}}, {0x5e, &(0x7f00000038c0)=@string={0x5e, 0x3, "eb063ede51d240e77570aedeaa8b74bc3c6b8cf29df5abb89b28daa16c33942da65598c72da683429b5b56a03a65f288e37f25c895d9785f4afbd3e6c512ce6ed02295158cf566716b833d57a180cd88ceea86bcbaac16c3da4cc706"}}, {0x4, &(0x7f0000003940)=@lang_id={0x4}}, {0x4, &(0x7f0000003980)=@lang_id={0x4, 0x3, 0x4c0a}}]}) syz_usb_control_io$hid(r9, &(0x7f0000003bc0)={0x24, &(0x7f0000003a40)={0x20, 0xd, 0xb5, {0xb5, 0x11, "44e25a3afc439ea403c97319b996b2cd59d2ae64d901471a421c8b7b9e3c5a0504459024edfcbed4dda829528987ec1b775e7491b2c37e4646cd69a14a4b0c2cc09fa8ee68d0b09ba96dd3e828ba3a8dad9f01a6ef1e9103dc51090a668e97289018c2981d29f7d71a02f4a850a79453c1ad80c4086a3fe6e7a2e770a567b371cacd4332b6cd7d62c8e3b9f516ec45f65e3b04f7dba71bae1f5bea39e9c3bbf84b730fb0ec72f83c2e6d1eab46533549cfceac"}}, &(0x7f0000003b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}, &(0x7f0000003b40)={0x0, 0x22, 0x1f, {[@local=@item_4={0x3, 0x2, 0xa, "08d216b3"}, @global=@item_4={0x3, 0x1, 0x8, "ced7f425"}, @main=@item_4={0x3, 0x0, 0xc, "a1908bb6"}, @main=@item_4={0x3, 0x0, 0xd3d6e49d8e304f44, "0b1c98de"}, @main=@item_4={0x3, 0x0, 0x8, "b6bbbc28"}, @local=@item_4={0x3, 0x2, 0x4, "568f11b0"}, @main=@item_012={0x0, 0x0, 0x8}]}}, &(0x7f0000003b80)={0x0, 0x21, 0x9, {0x9, 0x21, 0x9, 0xc, 0x1, {0x22, 0x772}}}}, &(0x7f0000003e80)={0x2c, &(0x7f0000003c00)={0x20, 0x8, 0xe9, "4f38642e6a022cc421c91db8f1ae3d8e74d98f7c6641efa1883c925506b61420da0f73937349a29cd045cb2aa81591e08abe176948f54eb404039f99b4f95b0eaa12c431a6167a5bd47862696eceaef1e0bbff8e0636bc0eb4ec2630c863b0c8a58c356a95ea82848dc7a7c7825c697b3e76080cc8f2cc2ea7cda5888452d7f1ada8a716cd1bb36308d021db2a64fe472656868c09d0238897157839e3db534d80566ff8843ce32e8d2199c70cfeba0ee7cd8e1c5e3f3ce17739e17700272e1b8a28d5962ef0970e35d3e5858f777708c8c247e36212c05a3ba17eddb118672e4e4c68de7291d6f8a1"}, &(0x7f0000003d00)={0x0, 0xa, 0x1, 0xd2}, &(0x7f0000003d40)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000003d80)={0x20, 0x1, 0xa5, "1329e742cbb050a65a633aa56bec1764744a7856f3627ccf775fed50137aac5550eca42decb2ffe5e52cc2733f88daaf8074b041b258be7f123d078d02384e9d9e9dd90def9327a40133f4c3948b0f0a07e429d8e657cd7ff06c5bf8a00147f0f0c1de008071702602ccf8a880081be1adc6d9b6cb80794136a33d7e133dbf1b7447c8294b870d41525916d3595ac6d05dbd4a1d6f01e885c3a90a756c5bf85c92cf5cef6c"}, &(0x7f0000003e40)={0x20, 0x3, 0x1, 0x4}}) 893.582448ms ago: executing program 1 (id=607): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"a2e3ad214fc752f91b3e090987f70e06d038e7ff7fc6e5539b3264078b089b0e083860090890e0878f0f1ac6e7049b334c959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31310d3b5d0936cd3b78070daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5003a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d780231c9c99a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f068bb87af8b90fd8f08876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd7072f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d27df2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeccf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb84bed4b281769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2c1cde360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e51074b41bc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) dup(r0) (async) write$UHID_INPUT(r1, &(0x7f0000000040)={0xc, {"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", 0x1000}}, 0x1006) (async) 843.522767ms ago: executing program 4 (id=608): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x8, 0x2) (async) 793.443724ms ago: executing program 1 (id=609): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r0, &(0x7f0000000580), 0x1000000000000297) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000002440)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000002480)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) r4 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x3, 0x200241) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f00000001c0)) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r1, 0x3ba0, &(0x7f0000002880)={0x48, 0xb, r3}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xd3, &(0x7f0000000080)=""/211, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 792.776179ms ago: executing program 4 (id=610): r0 = socket$alg(0x26, 0x5, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0xb000, 0x3, &(0x7f0000311000/0xb000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x66) (async) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) (async) r2 = accept4(r0, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) 792.29594ms ago: executing program 1 (id=611): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68142, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x68142, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) (async) 733.668203ms ago: executing program 4 (id=612): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000080)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e1f, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r1, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r1, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104) socket$netlink(0x10, 0x3, 0xf) setsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0)={0x9, 0x8, 0x80, 0x4, 0x5, 0x68, 0xfc, 0x5, 0x2, 0xb, 0x0, 0xfb, 0x5, 0x7}, 0xe) 733.216416ms ago: executing program 4 (id=613): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x40a800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x3}, {0x2000, 0x0, 0x1, 0x4}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x3}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r5, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b"]) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 592.62042ms ago: executing program 1 (id=614): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x88, r0, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2e}}}}, [@NL80211_ATTR_QOS_MAP={0x26, 0xc7, {[{0x8, 0x4}, {0x2, 0x1}, {0x8, 0x4}, {0xe0, 0x3}, {0xb1, 0x3}, {0x4, 0x4}, {0x40, 0x3}, {0x20, 0x4}, {0xc, 0x1}, {0x81, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0xa, 0x2}], "2c2fdcbd2ea22f8f"}}, @NL80211_ATTR_QOS_MAP={0x12, 0xc7, {[{0x0, 0x6}, {0x2, 0x7}, {0xfa, 0x1}], "b11a9e559469ac1c"}}, @NL80211_ATTR_QOS_MAP={0x2c, 0xc7, {[{0x8, 0x3}, {0x6}, {0x8}, {0x0, 0x1}, {0xd, 0x3}, {0x1, 0x7}, {0x6, 0x2}, {0xfd, 0x3}, {0x3}, {0x4, 0x2}, {0x4, 0x7}, {0xd}, {0xff, 0x1}, {0xf8, 0x7}, {0x9, 0x5}, {0x80, 0x3}], "f826a1793d74bd8b"}}]}, 0x88}, 0x1, 0x0, 0x0, 0x400c841}, 0x4040801) pipe2$watch_queue(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x160, r2, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x13c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcaf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffff28}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff80000}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x62f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x40010}, 0x40041) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x54, r4, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x17}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xa}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x14}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x54}}, 0x40805) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000006c0), r3) sendmsg$NLBL_CALIPSO_C_LIST(r3, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, r7, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x34}}, 0x800) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000800), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000840)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r3, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r8, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, '&](-['}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'TIPCv2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x40) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000980), r1) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r10, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x28, r11, 0x400, 0x70bd27, 0x25dfdbfc, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x28000001) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ac0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r10, &(0x7f0000000bc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r12, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x4004040) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000c40), r3) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r14, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r15, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r10, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x28, r12, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x4, 0x1f}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x50}, 0x40040e4) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x38, 0x3, 0x7, 0x401, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x24040040) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000001000)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x1c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040044}, 0x4044080) r16 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r16, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r0, 0x400, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x2}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xfffffffe}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x16}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xa}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x365}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8}]]}, 0x64}, 0x1, 0x0, 0x0, 0x20010040}, 0x8000) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001c40)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f00000011c0)={0xa14, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x9e0, 0x8, 0x0, 0x1, [{0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x0, @loopback, 0x6}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "3a665bdde9181415b21761ba5eb8b21e43f48e927fa6b2b596589ddf82b53eec"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "1bada3cb96b38e57923682102f98c533d32968b960321566b98414b0ddcc3978"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d2889e2cf696108542ad309b1ddcc69c46417a9c517db45e0d9d77f8fe7bb27c"}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x8fc, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x71c, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2b}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0xff}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xf}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1c}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "616bf415cc0c9663f244b1afa065feb44e16adaa196a50662eae55bb51d7ef85"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3e}}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x14c, 0x9, 0x0, 0x1, [{0x148, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_IFINDEX={0x8}]}, 0xa14}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) 592.133662ms ago: executing program 4 (id=615): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x5c, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9000000}]}]}, 0x5c}}, 0x0) r5 = dup(r2) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000440)="360f343e64660f3a604300542e0f01c866b8010000000f01c10f20c00f22c066b8debc00000f23d80f21f86635800000700f23f80f01cf26650f01df811bf22f0fc72a", 0x43}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 591.609566ms ago: executing program 1 (id=616): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a4000000000063f0"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4ffe2, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000040)={'wlan1\x00', @random="8dffffffffff"}) 443.616768ms ago: executing program 1 (id=617): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000041c0)=[{&(0x7f0000000300)=@in={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000010c0)="4267141d3d", 0x5}], 0x1, &(0x7f0000001600)=[@prinfo={0x18, 0x84, 0x5, {0x10, 0x4000002}}], 0x18, 0x40004}], 0x1, 0x4008084) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x31) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200), &(0x7f0000000240)={'enc=', 'oaep', ' hash=', {'tgr128\x00'}}, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x14, &(0x7f0000000cc0)={{0x1}, 0x0, 0x0}, 0x20) openat$ocfs2_control(0xffffffffffffff9c, 0x0, 0x2040, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x60c2, 0x146) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x894a, &(0x7f0000000040)={'vlan1\x00', 0x0}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x4000005) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r4, 0x800, 0x70fd2c, 0x6, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000800}, 0x82) 441.313811ms ago: executing program 4 (id=618): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000001340)=@hci={0x1f, 0xa888, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8b28225ea772f0daee8bef70000e05188fb", 0x26}], 0x1}, 0x20000000) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x1f, 0x0, 0x0) r2 = fsopen(&(0x7f00000000c0)='incremental-fs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r3, &(0x7f0000e79000)=[{&(0x7f00000001c0)="5b6e60c6a6ad3622cc9c97721d0105011e19e48632c76cae66db66e229448e75bf57f2ca42de3d30ec9124cf6e2841e438b0f653222569d14c5f7851be67e81799bd94e09c835162e70851a0b54599e042b1ceed24abfa5908989deb56268899acf721d065d9f2f27d4eb3a900256a42a075a21930a06162d781db40d77e", 0x7e}], 0x1, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000100)=0x7) 372.425651ms ago: executing program 0 (id=620): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000009f00), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f000000a340)={0x0, 0x0, &(0x7f000000a300)={&(0x7f000000a180)={0x80, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x60, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xa6b7}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x371f}, @NL802154_DEVKEY_ATTR_ID={0x1c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}]}]}, 0x80}}, 0x4000050) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000f2", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000"], 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x4000800) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0xffffffffffffffc9}}, 0x0) 371.974401ms ago: executing program 0 (id=621): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x29, 0x9, 0x9, 0x80000001, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x8000, 0x7, 0x3, 0xca0}}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@random="99177fa54f29", @random="ece65b5c8d9b", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r3, &(0x7f0000000200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002062, 0x0) setsockopt$sock_int(r1, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r1, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bridge_slave_1\x00', 0x0}) r5 = add_key$user(&(0x7f0000000080), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000240)="bc7f1f0dd5de0382bd02a80651149bf067e2a24da1caad34b48c65b51f127b81c92714e2f76b04773c07ff9344d171f073f0649ec43706bf41b1ca", 0x3b, 0x0) r6 = add_key$user(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x2}, &(0x7f0000000300)="f0f93a664ffd8e9fb1c4671fecdd1e7972e09f0d7633c13955cb7fb13633294f746b353f62278f13c15b48d65045630ae83d9fce2e07a1aa10386febf2d3476e00e927716bd14faaab06", 0x4a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000380)={r5, 0x0, r6}, &(0x7f00000003c0)=""/115, 0x73, 0x0) r7 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) getpeername$l2tp(r7, &(0x7f00000004c0)={0x2, 0x0, @local}, &(0x7f0000000500)=0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001d00070f000000000000000007000000", @ANYRES32=r4], 0x1c}}, 0x0) 319.613315ms ago: executing program 0 (id=622): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaa270005d70000fe080600010800060400012aaaaaaaaa2aac1414bbaaaaaaaaaa00ac"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) r2 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000040)=0xd0) ioctl$CEC_S_MODE(r2, 0x40046109, &(0x7f0000000340)) r3 = socket(0x10, 0x3, 0x0) sendto$packet(r0, &(0x7f0000000240)="28b4604574eaebe57318e084c1867a105c8eb6f540779cbc91d0bb506eb2a05dce6d405d8bfd203085ed44c5d49181d050b945e86d18020d8702de5c5d0c26dbbf042f477beb0185abf230f87c44e0a7ce25344f6778e81be60791a04f4733fb96f352de319cb2c749", 0x69, 0x4001, &(0x7f00000002c0)={0x11, 0x10, 0x0, 0x1, 0x86, 0x6, @broadcast}, 0x14) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x0, &(0x7f0000000180)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r6) sendmsg$NLBL_CALIPSO_C_ADD(r6, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x24, r7, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044054}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) close(r4) 211.349459ms ago: executing program 0 (id=623): r0 = syz_open_dev$sg(&(0x7f0000000140), 0x8, 0x40000) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000180)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00') syz_clone(0x4000000, &(0x7f0000000000)="a7e89207a84de508bbcc1361f42cd42d2d8149349adc08e57fe8bc04e3b2e1abb17e9e9e62f97632ed4763bc36d5b6b18e682c", 0x33, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0)="793732589d25a457639df71298ff33fce73fe9566f5b1bb1f089049c8fac67211d1401ab78094217fa33c3364b2febfa803026d40841b33d8de575b9d636b4c87f978ffd01d536ad169bba147adc678b2cacc2e91d") 210.120192ms ago: executing program 0 (id=624): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r4}]}, 0x3c}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{0x0, 0x1, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "5ca66cfe8a5f8dbb"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x805) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'sit0\x00'}) sendmsg$nl_route(r7, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006804010000000000fddbdf25020000000000000006000700030000000600030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4402}, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x1a, 0x0, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x89b1, &(0x7f0000000000)={'vlan1\x00', @ifru_mtu=0x401}) ioctl$KVM_NMI(r8, 0xae9a) ioctl$KVM_RUN(r8, 0xae80, 0x0) 0s ago: executing program 0 (id=625): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000010000800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c050000020400000000000000000000000000100800010001000000"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0xa0, 0x1, 0x3, 0x101, 0x0, 0x0, {0x7, 0x0, 0x808}, [@NFQA_PAYLOAD={0x8c, 0xa, "f53bf8971b6cfadb2260889828b000153d4367ecd6f3373523e11a5f644ce76964e3c6d3ee1d9c33605217c8ae59f5630f9263b2f62e01e4c38bbbfdde64f308a8a9d8ace877207316f6a91d9e0211c2b73bc978df73137b2e403654a627aad2a06f727c52a5ed8563cbc47edf51944b3eb11aaaeed2e4d46f3e3065e29501c40de36eb5722b840f"}]}, 0xa0}}, 0x4004844) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, &(0x7f00000000c0)="0f01bd00800f22a78332d8b800008ed0f3f00fb1028f005dd2f30fd6ffb800008eab0fae4560", 0x26}], 0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) io_submit(0x0, 0x0, &(0x7f0000000440)) (async) io_submit(0x0, 0x0, &(0x7f0000000440)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x1}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000330007010900000000000000017c0000"], 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000330007010900000000000000017c0000"], 0x14}, 0x1, 0x0, 0x0, 0x28804}, 0x40000) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28000}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x28000}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) (async) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r6, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 4 (id=629): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB='=\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x40) open(&(0x7f0000000080)='./file0/file0\x00', 0x440, 0x28) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): '. [ 48.599249][ T9] usb 8-1: USB disconnect, device number 2 [ 48.608602][ T9] usblp0: removed [ 48.983911][ T6082] dvmrp8: entered allmulticast mode [ 48.987286][ T6080] dvmrp8: left allmulticast mode [ 49.132360][ T6085] netlink: 56 bytes leftover after parsing attributes in process `syz.3.28'. [ 49.173364][ T39] kauditd_printk_skb: 92 callbacks suppressed [ 49.173378][ T39] audit: type=1400 audit(1737066291.170:207): avc: denied { read } for pid=6090 comm="syz.0.30" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 49.184938][ T39] audit: type=1400 audit(1737066291.170:208): avc: denied { open } for pid=6090 comm="syz.0.30" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 49.194875][ T39] audit: type=1400 audit(1737066291.190:209): avc: denied { create } for pid=6086 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.203172][ T39] audit: type=1400 audit(1737066291.190:210): avc: denied { write } for pid=6086 comm="syz.3.29" path="socket:[7110]" dev="sockfs" ino=7110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.212509][ T39] audit: type=1400 audit(1737066291.190:211): avc: denied { nlmsg_write } for pid=6086 comm="syz.3.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 49.226675][ T39] audit: type=1400 audit(1737066291.220:212): avc: denied { create } for pid=6090 comm="syz.0.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 49.234765][ T39] audit: type=1400 audit(1737066291.230:213): avc: denied { open } for pid=6090 comm="syz.0.30" path="/dev/ttyq5" dev="devtmpfs" ino=388 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 49.278182][ T39] audit: type=1400 audit(1737066291.270:214): avc: denied { connect } for pid=6095 comm="syz.0.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 49.282213][ T6095] TCP: out of memory -- consider tuning tcp_mem [ 49.319243][ T39] audit: type=1400 audit(1737066291.310:215): avc: denied { create } for pid=6097 comm="syz.3.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 49.329673][ T39] audit: type=1400 audit(1737066291.320:216): avc: denied { ioctl } for pid=6099 comm="syz.2.32" path="socket:[7115]" dev="sockfs" ino=7115 ioctlcmd=0x9361 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 49.372347][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 49.376120][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 49.379813][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 49.384120][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.35'. [ 49.811087][ T5286] Bluetooth: hci3: command tx timeout [ 50.236779][ T6125] program syz.0.41 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.506901][ T6129] kvm: emulating exchange as write [ 50.612957][ T5286] Bluetooth: hci0: command tx timeout [ 50.612986][ T5943] Bluetooth: hci1: command tx timeout [ 50.617364][ T5945] Bluetooth: hci2: command tx timeout [ 51.339655][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.492578][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.496829][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.500374][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.502901][ T6149] binder: 6148:6149 ioctl 4008f50a 20000000 returned -22 [ 51.504605][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 51.510141][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.511537][ T9] usb 5-1: config 0 descriptor?? [ 51.773534][ T6158] netlink: 'syz.1.49': attribute type 5 has an invalid length. [ 51.775858][ T6158] netlink: 'syz.1.49': attribute type 5 has an invalid length. [ 51.892060][ T5945] Bluetooth: hci3: command tx timeout [ 51.925199][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.927679][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.931418][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.934726][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.937447][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.940231][ T9] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 51.943155][ T9] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 51.953426][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 51.981833][ T6165] input: syz0 as /devices/virtual/input/input6 [ 52.137365][ T6171] __nla_validate_parse: 62 callbacks suppressed [ 52.137381][ T6171] netlink: 132 bytes leftover after parsing attributes in process `syz.3.55'. [ 52.346931][ T6174] syz.2.56 uses obsolete (PF_INET,SOCK_PACKET) [ 52.399516][ T8] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 52.557525][ T8] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 52.560958][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.563258][ T8] usb 8-1: Product: syz [ 52.564492][ T8] usb 8-1: Manufacturer: syz [ 52.565860][ T8] usb 8-1: SerialNumber: syz [ 52.571757][ T8] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 52.584807][ T56] usb 5-1: USB disconnect, device number 2 [ 52.598642][ T9] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 52.689532][ T5945] Bluetooth: hci2: command tx timeout [ 52.699692][ T5945] Bluetooth: hci1: command tx timeout [ 52.699708][ T5943] Bluetooth: hci0: command tx timeout [ 52.967362][ T56] usb 8-1: USB disconnect, device number 3 [ 53.018618][ T6212] netfs: Couldn't get user pages (rc=-14) [ 53.111715][ T6214] capability: warning: `syz.3.65' uses deprecated v2 capabilities in a way that may be insecure [ 53.117279][ T6216] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 53.151909][ T6221] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 53.154739][ T6221] netlink: 67 bytes leftover after parsing attributes in process `syz.0.67'. [ 53.353521][ T6236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.70'. [ 53.363405][ T6236] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 53.411012][ T6238] fuse: Bad value for 'fd' [ 53.478661][ T6247] 9pnet_fd: Insufficient options for proto=fd [ 53.478682][ T6248] 9pnet_fd: Insufficient options for proto=fd [ 53.554555][ T6250] syz.3.74 (6250) used greatest stack depth: 20096 bytes left [ 53.575709][ T6254] x_tables: duplicate underflow at hook 2 [ 53.651864][ T9] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 53.654416][ T9] ath9k_htc: Failed to initialize the device [ 53.657430][ T56] usb 8-1: ath9k_htc: USB layer deinitialized [ 53.693132][ T6270] Driver unsupported XDP return value 0 on prog (id 14) dev N/A, expect packet loss! [ 53.726856][ T6273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=6273 comm=syz.3.79 [ 53.797526][ T6278] : entered promiscuous mode [ 54.080548][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 54.180847][ T39] kauditd_printk_skb: 310 callbacks suppressed [ 54.180857][ T39] audit: type=1400 audit(1737066296.180:527): avc: denied { create } for pid=6311 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.185094][ T6312] netlink: 'syz.2.91': attribute type 29 has an invalid length. [ 54.188979][ T39] audit: type=1400 audit(1737066296.180:528): avc: denied { setopt } for pid=6311 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 54.199078][ T39] audit: type=1400 audit(1737066296.190:529): avc: denied { connect } for pid=6311 comm="syz.2.91" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 54.204896][ T39] audit: type=1400 audit(1737066296.190:530): avc: denied { watch watch_reads } for pid=6311 comm="syz.2.91" path="/17" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 54.209575][ T9] usb 8-1: device descriptor read/64, error -71 [ 54.246565][ T39] audit: type=1400 audit(1737066296.240:531): avc: denied { create } for pid=6313 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 54.253796][ T39] audit: type=1400 audit(1737066296.240:532): avc: denied { bind } for pid=6313 comm="syz.2.92" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 54.275597][ T39] audit: type=1326 audit(1737066296.270:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.93" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ad585d29 code=0x7ffc0000 [ 54.282671][ T39] audit: type=1326 audit(1737066296.270:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.93" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ad585d29 code=0x7ffc0000 [ 54.289067][ T39] audit: type=1326 audit(1737066296.280:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.93" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f07ad585d29 code=0x7ffc0000 [ 54.295603][ T39] audit: type=1326 audit(1737066296.280:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6315 comm="syz.2.93" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f07ad585d29 code=0x7ffc0000 [ 54.381882][ T6320] mmap: syz.1.95 (6320) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 54.399317][ T6323] overlay: Bad value for 'xino' [ 54.409322][ T6323] netlink: 'syz.2.94': attribute type 1 has an invalid length. [ 54.411916][ T6323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 54.462748][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 54.619569][ T9] usb 8-1: device descriptor read/64, error -71 [ 54.730755][ T9] usb usb8-port1: attempt power cycle [ 54.830607][ T5943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.833514][ T5943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.836484][ T5943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.839311][ T5943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.841780][ T5943] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.844029][ T5943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.900191][ T62] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 54.915784][ T6336] chnl_net:caif_netlink_parms(): no params data found [ 54.957519][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.959892][ T6336] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.962868][ T6336] bridge_slave_0: entered allmulticast mode [ 54.965149][ T6336] bridge_slave_0: entered promiscuous mode [ 54.968339][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.971171][ T6336] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.973640][ T6336] bridge_slave_1: entered allmulticast mode [ 54.975806][ T6336] bridge_slave_1: entered promiscuous mode [ 54.995957][ T6336] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.001800][ T6336] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.024304][ T6336] team0: Port device team_slave_0 added [ 55.027512][ T6336] team0: Port device team_slave_1 added [ 55.029547][ T62] usb 6-1: device descriptor read/64, error -71 [ 55.046354][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.048418][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.055880][ T6336] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.060189][ T6336] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.062220][ T6336] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.070685][ T6336] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.079648][ T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 55.094871][ T6336] hsr_slave_0: entered promiscuous mode [ 55.096981][ T6336] hsr_slave_1: entered promiscuous mode [ 55.098923][ T6336] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.100202][ T9] usb 8-1: device descriptor read/8, error -71 [ 55.105216][ T6336] Cannot create hsr debugfs directory [ 55.182062][ T6336] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 55.185954][ T6336] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 55.189579][ T6336] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 55.193449][ T6336] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 55.202721][ T6336] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.205282][ T6336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.208220][ T6336] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.210899][ T6336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.236267][ T6336] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.243720][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.247062][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.258688][ T6336] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.264415][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.267172][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.273069][ T62] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 55.275733][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.278234][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.359495][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 55.371588][ T6336] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.380847][ T9] usb 8-1: device descriptor read/8, error -71 [ 55.409614][ T62] usb 6-1: device descriptor read/64, error -71 [ 55.480006][ T6336] veth0_vlan: entered promiscuous mode [ 55.483997][ T6336] veth1_vlan: entered promiscuous mode [ 55.494841][ T6336] veth0_macvtap: entered promiscuous mode [ 55.498829][ T6336] veth1_macvtap: entered promiscuous mode [ 55.500809][ T9] usb usb8-port1: unable to enumerate USB device [ 55.506183][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.509716][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.512509][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.516209][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.519307][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.522417][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.525327][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 55.528283][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.529648][ T62] usb usb6-port1: attempt power cycle [ 55.531889][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.538210][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.541253][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.544206][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.547152][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.550114][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.553071][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.555876][ T6336] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 55.558850][ T6336] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 55.563092][ T6336] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.567633][ T6336] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.571374][ T6336] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.574670][ T6336] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.577886][ T6336] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.600843][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.624294][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.626770][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.629490][ T5810] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 55.643684][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.646247][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.679951][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.690070][ T6356] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 55.692644][ T6356] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 55.741132][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.779593][ T5810] usb 8-1: device descriptor read/64, error -71 [ 55.797672][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.879646][ T62] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 55.900200][ T62] usb 6-1: device descriptor read/8, error -71 [ 55.932540][ T11] bridge_slave_1: left allmulticast mode [ 55.934966][ T11] bridge_slave_1: left promiscuous mode [ 55.938126][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.946986][ T11] bridge_slave_0: left allmulticast mode [ 55.949193][ T11] bridge_slave_0: left promiscuous mode [ 55.953599][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.029548][ T5810] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 56.149599][ T62] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 56.159994][ T5810] usb 8-1: device descriptor read/64, error -71 [ 56.180108][ T62] usb 6-1: device descriptor read/8, error -71 [ 56.196574][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 56.201574][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 56.205225][ T11] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 56.213969][ T11] bond0 (unregistering): Released all slaves [ 56.272562][ T5810] usb usb8-port1: attempt power cycle [ 56.290126][ T62] usb usb6-port1: unable to enumerate USB device [ 56.512835][ T11] hsr_slave_0: left promiscuous mode [ 56.515638][ T11] hsr_slave_1: left promiscuous mode [ 56.518280][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.521173][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.525301][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.527455][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.535864][ T6358] netdevsim netdevsim4: Direct firmware load for  failed with error -2 [ 56.538337][ T6358] netdevsim netdevsim4: Falling back to sysfs fallback for:  [ 56.547554][ T11] veth1_macvtap: left promiscuous mode [ 56.551595][ T11] veth0_macvtap: left promiscuous mode [ 56.553793][ T11] veth1_vlan: left promiscuous mode [ 56.555435][ T11] veth0_vlan: left promiscuous mode [ 56.623378][ T5810] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 56.640639][ T5810] usb 8-1: device descriptor read/8, error -71 [ 56.879585][ T6383] netlink: 156 bytes leftover after parsing attributes in process `syz.3.103'. [ 56.891937][ T6384] netlink: 156 bytes leftover after parsing attributes in process `syz.3.103'. [ 56.901843][ T5810] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 56.931622][ T5943] Bluetooth: hci0: command tx timeout [ 57.064362][ T11] team0 (unregistering): Port device team_slave_1 removed [ 57.111075][ T5810] usb 8-1: device not accepting address 11, error -71 [ 57.113252][ T5810] usb usb8-port1: unable to enumerate USB device [ 57.134346][ T11] team0 (unregistering): Port device team_slave_0 removed [ 57.399541][ T5810] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 57.549501][ T5810] usb 8-1: Using ep0 maxpacket: 32 [ 57.551427][ T5810] usb 8-1: too many configurations: 213, using maximum allowed: 8 [ 57.554770][ T5810] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 57.556777][ T6378] gtp0: entered allmulticast mode [ 57.556953][ T5810] usb 8-1: can't read configurations, error -61 [ 57.682212][ T6392] bridge_slave_0: default FDB implementation only supports local addresses [ 57.689649][ T5810] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 57.739085][ T6397] netlink: 'syz.1.106': attribute type 178 has an invalid length. [ 57.839507][ T5810] usb 8-1: Using ep0 maxpacket: 32 [ 57.843047][ T5810] usb 8-1: too many configurations: 213, using maximum allowed: 8 [ 57.849169][ T5810] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 57.852387][ T5810] usb 8-1: can't read configurations, error -61 [ 57.854830][ T5810] usb usb8-port1: attempt power cycle [ 57.956807][ T6418] netlink: 'syz.1.109': attribute type 19 has an invalid length. [ 58.189512][ T5810] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 58.210475][ T5810] usb 8-1: Using ep0 maxpacket: 32 [ 58.218656][ T5810] usb 8-1: too many configurations: 213, using maximum allowed: 8 [ 58.225328][ T5810] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 58.227489][ T5810] usb 8-1: can't read configurations, error -61 [ 58.359715][ T5810] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 58.380540][ T5810] usb 8-1: Using ep0 maxpacket: 32 [ 58.382515][ T5810] usb 8-1: too many configurations: 213, using maximum allowed: 8 [ 58.386682][ T5810] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 58.388935][ T5810] usb 8-1: can't read configurations, error -61 [ 58.389726][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.391968][ T5810] usb usb8-port1: unable to enumerate USB device [ 58.414832][ T6453] process 'syz.0.112' launched './file0' with NULL argv: empty string added [ 58.439641][ T5973] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 58.480133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 58.580939][ T5973] usb 9-1: device descriptor read/64, error -71 [ 58.829588][ T5973] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 58.845127][ T6466] program syz.1.115 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.959680][ T5973] usb 9-1: device descriptor read/64, error -71 [ 58.994154][ T6474] Bluetooth: MGMT ver 1.23 [ 59.002227][ T6474] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6474 comm=syz.1.118 [ 59.011935][ T5943] Bluetooth: hci0: command tx timeout [ 59.069860][ T5973] usb usb9-port1: attempt power cycle [ 59.329732][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.354995][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 59.355010][ T39] audit: type=1400 audit(1737066301.350:574): avc: denied { ioctl } for pid=6486 comm="syz.1.122" path="socket:[13488]" dev="sockfs" ino=13488 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.389114][ T39] audit: type=1400 audit(1737066301.380:575): avc: denied { shutdown } for pid=6486 comm="syz.1.122" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.432920][ T5973] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 59.456614][ T5973] usb 9-1: device descriptor read/8, error -71 [ 59.465643][ T39] audit: type=1400 audit(1737066301.460:576): avc: denied { watch } for pid=6492 comm="syz.0.124" path="/21" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.472300][ T39] audit: type=1400 audit(1737066301.460:577): avc: denied { watch_sb } for pid=6492 comm="syz.0.124" path="/21" dev="tmpfs" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 59.478591][ T39] audit: type=1400 audit(1737066301.460:578): avc: denied { write } for pid=6492 comm="syz.0.124" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 59.516537][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.551988][ T39] audit: type=1400 audit(1737066301.550:579): avc: denied { append } for pid=6504 comm="syz.0.128" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.590027][ T39] audit: type=1400 audit(1737066301.590:580): avc: denied { write } for pid=6506 comm="syz.1.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 59.591224][ T6507] ieee802154 phy0 wpan0: encryption failed: -22 [ 59.619702][ T39] audit: type=1400 audit(1737066301.620:581): avc: denied { setopt } for pid=6513 comm="syz.0.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 59.628728][ T6507] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 59.631849][ T6507] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 59.655874][ T39] audit: type=1400 audit(1737066301.650:582): avc: denied { getopt } for pid=6515 comm="syz.0.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 59.710121][ T5973] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 59.717698][ T6518] netlink: 'syz.0.132': attribute type 10 has an invalid length. [ 59.728872][ T6518] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 59.740132][ T5973] usb 9-1: device descriptor read/8, error -71 [ 59.794190][ T39] audit: type=1400 audit(1737066301.790:583): avc: denied { create } for pid=6521 comm="syz.0.133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 59.859742][ T5973] usb usb9-port1: unable to enumerate USB device [ 60.028731][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.033302][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.036060][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.038777][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.042027][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.045718][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.049233][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.053366][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.056775][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.059392][ T6539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.137'. [ 60.103547][ T6546] (syz.0.138,6546,0):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 60.108037][ T6546] (syz.0.138,6546,0):ocfs2_fill_super:1178 ERROR: status = -22 [ 60.123670][ T6546] xt_cgroup: xt_cgroup: no path or classid specified [ 60.459991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 60.478120][ T6577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.487732][ T6577] bond0: (slave rose0): Enslaving as an active interface with an up link [ 61.089583][ T5943] Bluetooth: hci0: command tx timeout [ 61.396935][ T6634] Bluetooth: MGMT ver 1.23 [ 61.592420][ T6640] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 61.594452][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.599349][ T6640] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 61.603715][ T6640] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 61.605485][ T6640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.607970][ T6640] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 61.610838][ T6640] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 61.612657][ T6640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.615390][ T6640] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 61.620026][ T6640] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 61.622234][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.624920][ T6640] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 61.889514][ T35] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 61.925420][ T6657] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 62.039501][ T35] usb 8-1: device descriptor read/64, error -71 [ 62.290128][ T35] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 62.429726][ T35] usb 8-1: device descriptor read/64, error -71 [ 62.549731][ T35] usb usb8-port1: attempt power cycle [ 62.623144][ T6681] loop7: detected capacity change from 0 to 16384 [ 62.686822][ T6655] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 62.690542][ T6680] loop7: detected capacity change from 16384 to 16383 [ 62.698527][ T6680] I/O error, dev loop7, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.701819][ T6680] Buffer I/O error on dev loop7, logical block 1, async page read [ 62.704134][ T6680] Dev loop7: unable to read RDB block 8 [ 62.706182][ T6680] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 62.708972][ T6680] Buffer I/O error on dev loop7, logical block 3, async page read [ 62.711707][ T6680] loop7: unable to read partition table [ 62.714527][ T6680] loop_reread_partitions: partition scan of loop7 (R%0T$7)]W?18;9C?-z׌ 97d) failed (rc=-5) [ 62.763831][ T6686] binder: 6685:6686 ioctl c0306201 20000580 returned -14 [ 62.889592][ T35] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 62.908325][ T6703] gretap0: default FDB implementation only supports local addresses [ 62.912417][ T35] usb 8-1: device descriptor read/8, error -71 [ 62.962257][ T6711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65145 sclass=netlink_route_socket pid=6711 comm=syz.4.177 [ 62.993751][ T6713] loop2: detected capacity change from 0 to 524287999 [ 63.001168][ T6075] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 63.042678][ T6720] tmpfs: Bad value for 'mpol' [ 63.149590][ T6075] usb 5-1: Using ep0 maxpacket: 8 [ 63.149657][ T35] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 63.153269][ T6075] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 63.157702][ T6075] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 63.160311][ T6075] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.164061][ T6075] usb 5-1: config 0 descriptor?? [ 63.169894][ T35] usb 8-1: device descriptor read/8, error -71 [ 63.282753][ T35] usb usb8-port1: unable to enumerate USB device [ 63.373719][ T6075] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 63.579531][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 63.616238][ T6739] netlink: 'syz.1.186': attribute type 10 has an invalid length. [ 63.619358][ T6739] vlan0: entered allmulticast mode [ 63.623309][ T6739] veth0_vlan: entered allmulticast mode [ 63.629263][ T6739] team0: Port device vlan0 added [ 63.632149][ T6739] netlink: 'syz.1.186': attribute type 28 has an invalid length. [ 63.633022][ T6740] netlink: 'syz.1.186': attribute type 28 has an invalid length. [ 63.634451][ T6739] netlink: 'syz.1.186': attribute type 3 has an invalid length. [ 63.637417][ T6740] netlink: 'syz.1.186': attribute type 3 has an invalid length. [ 63.659547][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 63.662133][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout [ 63.664382][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 63.779513][ T6688] fuse: Unknown parameter '0xffffffffffffffff0x0000000000000007' [ 63.796006][ T6688] netlink: 'syz.0.168': attribute type 27 has an invalid length. [ 63.800838][ T1339] usb 5-1: USB disconnect, device number 3 [ 64.043081][ T6775] syzkaller0: entered promiscuous mode [ 64.044846][ T6775] syzkaller0: entered allmulticast mode [ 64.443863][ T39] kauditd_printk_skb: 49 callbacks suppressed [ 64.443873][ T39] audit: type=1400 audit(1737066306.440:633): avc: denied { create } for pid=6798 comm="syz.4.203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 64.498888][ T39] audit: type=1400 audit(1737066306.490:634): avc: denied { append } for pid=6811 comm="syz.0.208" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 64.520217][ T39] audit: type=1400 audit(1737066306.520:635): avc: denied { create } for pid=6808 comm="syz.4.209" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.534800][ T39] audit: type=1400 audit(1737066306.520:636): avc: denied { mounton } for pid=6808 comm="syz.4.209" path="/20/file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.542164][ T39] audit: type=1400 audit(1737066306.540:637): avc: denied { mount } for pid=6822 comm="syz.0.211" name="/" dev="autofs" ino=14564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 64.550175][ T39] audit: type=1400 audit(1737066306.540:638): avc: denied { append } for pid=6822 comm="syz.0.211" name="hidraw0" dev="devtmpfs" ino=1299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 64.561625][ T39] audit: type=1400 audit(1737066306.560:639): avc: denied { unlink } for pid=6336 comm="syz-executor" name="file0" dev="tmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 64.580909][ T39] audit: type=1400 audit(1737066306.580:640): avc: denied { remount } for pid=6825 comm="syz.4.212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 64.612279][ T39] audit: type=1400 audit(1737066306.610:641): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 64.729839][ T6843] netlink: 'syz.4.219': attribute type 18 has an invalid length. [ 64.762345][ T39] audit: type=1400 audit(1737066306.760:642): avc: denied { bind } for pid=6844 comm="syz.4.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.939533][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 65.079521][ T35] usb 5-1: device descriptor read/64, error -71 [ 65.180527][ T6851] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ܻ}rءÑV§jPb [ 65.319593][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 65.385154][ T6870] overlayfs: failed to resolve './file0': -2 [ 65.450038][ T35] usb 5-1: device descriptor read/64, error -71 [ 65.510405][ T6878] loop2: detected capacity change from 0 to 7 [ 65.513501][ T6878] Dev loop2: unable to read RDB block 7 [ 65.515180][ T6878] loop2: unable to read partition table [ 65.516886][ T6878] loop2: partition table beyond EOD, truncated [ 65.518690][ T6878] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 65.559655][ T35] usb usb5-port1: attempt power cycle [ 65.629499][ T1339] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 65.641366][ T6883] trusted_key: syz.4.229 sent an empty control message without MSG_MORE. [ 65.645468][ T6883] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 65.649562][ T5286] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.668788][ T6888] __nla_validate_parse: 37 callbacks suppressed [ 65.668798][ T6888] netlink: 172 bytes leftover after parsing attributes in process `syz.4.230'. [ 65.729728][ T5286] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.729779][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 65.729806][ T5945] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.790866][ T1339] usb 6-1: config 7 has an invalid interface number: 162 but max is 0 [ 65.793129][ T1339] usb 6-1: config 7 has no interface number 0 [ 65.796701][ T1339] usb 6-1: config 7 interface 162 altsetting 6 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 65.800241][ T56] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 65.802288][ T1339] usb 6-1: config 7 interface 162 altsetting 6 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 65.805738][ T1339] usb 6-1: config 7 interface 162 altsetting 6 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 65.808804][ T1339] usb 6-1: config 7 interface 162 altsetting 6 endpoint 0x9 has invalid wMaxPacketSize 0 [ 65.815628][ T1339] usb 6-1: config 7 interface 162 altsetting 6 has a duplicate endpoint with address 0x5, skipping [ 65.818649][ T1339] usb 6-1: config 7 interface 162 altsetting 6 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 65.821818][ T1339] usb 6-1: config 7 interface 162 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 65.824843][ T1339] usb 6-1: config 7 interface 162 altsetting 6 has a duplicate endpoint with address 0xE, skipping [ 65.827909][ T1339] usb 6-1: config 7 interface 162 has no altsetting 0 [ 65.832445][ T1339] usb 6-1: New USB device found, idVendor=0bb4, idProduct=0a29, bcdDevice=da.4f [ 65.835351][ T1339] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.838303][ T1339] usb 6-1: Product: 㧳堺擥핷愍놚㸴폻〲筙䡀簪㧯╅Ꝓ養䫸椞渄쫴擟ﳑ됨鷷鄸㉘桤헢䈴⺈딻葢傳覽ꂺ䗷Ө濐ᘘ⹛䩷䕻壁熯䳻夠伨ᦗ玂╩彍Ⅰ웓彜뱴艧抣凉룦돢▨誓绝㠿ﵩ펿ㄏ [ 65.845241][ T1339] usb 6-1: Manufacturer: 〉 [ 65.847524][ T1339] usb 6-1: SerialNumber: ᠊ [ 65.919662][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 65.940268][ T35] usb 5-1: device descriptor read/8, error -71 [ 65.961286][ T56] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 65.965508][ T56] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 65.971237][ T56] usb 8-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 65.974647][ T56] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.979244][ T56] usb 8-1: config 0 descriptor?? [ 66.006227][ T6919] netlink: 36 bytes leftover after parsing attributes in process `syz.4.238'. [ 66.055822][ T6864] netlink: 'syz.1.223': attribute type 2 has an invalid length. [ 66.058188][ T6864] netlink: 'syz.1.223': attribute type 1 has an invalid length. [ 66.068921][ T1339] usb 6-1: USB disconnect, device number 6 [ 66.179880][ T35] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 66.186762][ T56] usbhid 8-1:0.0: can't add hid device: -71 [ 66.189097][ T56] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 66.193692][ T56] usb 8-1: USB disconnect, device number 20 [ 66.200668][ T35] usb 5-1: device descriptor read/8, error -71 [ 66.309732][ T35] usb usb5-port1: unable to enumerate USB device [ 66.379395][ T6944] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:0 [ 66.517408][ T6951] dlm: no locking on control device [ 66.530136][ T6952] dlm: no locking on control device [ 66.868365][ T6981] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6981 comm=syz.3.257 [ 66.978685][ T6989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.260'. [ 66.983662][ T6989] netlink: 44 bytes leftover after parsing attributes in process `syz.3.260'. [ 67.048989][ T6995] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 67.092273][ T6998] 9pnet_virtio: no channels available for device syz [ 67.182101][ T7004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.263'. [ 67.185533][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 67.188123][ T7004] tipc: MTU too low for tipc bearer [ 67.191672][ T7004] netlink: 52 bytes leftover after parsing attributes in process `syz.3.263'. [ 67.192817][ T7002] netlink: 187320 bytes leftover after parsing attributes in process `syz.1.264'. [ 67.194341][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.3.263'. [ 67.197835][ T7002] netlink: zone id is out of range [ 67.200628][ T7004] tipc: MTU too low for tipc bearer [ 67.202136][ T7002] netlink: zone id is out of range [ 67.205192][ T7002] netlink: zone id is out of range [ 67.207140][ T7002] netlink: zone id is out of range [ 67.209159][ T7002] netlink: zone id is out of range [ 67.211609][ T7002] netlink: zone id is out of range [ 67.238560][ T7010] netlink: 'syz.3.265': attribute type 10 has an invalid length. [ 67.242159][ T7010] bond0: (slave wlan1): Opening slave failed [ 67.252920][ T7009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.301994][ T7013] netlink: 44 bytes leftover after parsing attributes in process `syz.1.266'. [ 67.740032][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.761254][ T7039] syz.0.275[7039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.761305][ T7039] syz.0.275[7039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.764717][ T7039] syz.0.275[7039] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 67.809595][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 67.809676][ T5286] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.814372][ T5943] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.916996][ T7062] x_tables: duplicate underflow at hook 2 [ 67.969719][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.119540][ T35] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 68.194503][ T7097] capability: warning: `syz.1.289' uses 32-bit capabilities (legacy support in use) [ 68.249813][ T35] usb 8-1: device descriptor read/64, error -71 [ 68.344395][ T7104] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 68.496589][ T35] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 68.517211][ T7137] netlink: 'syz.0.299': attribute type 10 has an invalid length. [ 68.522851][ T7137] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 68.608655][ T7144] mkiss: ax0: crc mode is auto. [ 68.616625][ T7144] xt_TPROXY: Can be used only with -p tcp or -p udp [ 68.619680][ T35] usb 8-1: device descriptor read/64, error -71 [ 68.729625][ T35] usb usb8-port1: attempt power cycle [ 68.748319][ T7151] cgroup: fork rejected by pids controller in /syz0 [ 69.069498][ T35] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 69.089905][ T35] usb 8-1: device descriptor read/8, error -71 [ 69.213754][ T7127] overlayfs: statfs failed on './file0' [ 69.339493][ T35] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 69.359873][ T35] usb 8-1: device descriptor read/8, error -71 [ 69.458601][ T39] kauditd_printk_skb: 30 callbacks suppressed [ 69.458611][ T39] audit: type=1400 audit(1737066311.450:673): avc: denied { read } for pid=7164 comm="syz.1.308" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.466776][ T39] audit: type=1400 audit(1737066311.450:674): avc: denied { lock } for pid=7164 comm="syz.1.308" path="socket:[17016]" dev="sockfs" ino=17016 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 69.473879][ T39] audit: type=1400 audit(1737066311.470:675): avc: denied { open } for pid=7164 comm="syz.1.308" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 69.481436][ T35] usb usb8-port1: unable to enumerate USB device [ 69.483940][ T39] audit: type=1400 audit(1737066311.480:676): avc: denied { mounton } for pid=7164 comm="syz.1.308" path="/proc/317/task" dev="proc" ino=14164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 69.490042][ T5973] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 69.681987][ T5973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 69.685884][ T5973] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 69.689866][ T5973] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.693776][ T5973] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.696498][ T5973] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.700923][ T5973] usb 9-1: config 0 descriptor?? [ 69.728405][ T7186] binder: Bad value for 'max' [ 69.728405][ T39] audit: type=1400 audit(1737066311.720:677): avc: denied { mounton } for pid=7183 comm="syz.1.310" path="/107/file0" dev="tmpfs" ino=592 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 69.889686][ T5945] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.889899][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 69.978951][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.981976][ T39] audit: type=1400 audit(1737066311.980:678): avc: denied { create } for pid=7194 comm="syz.1.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 70.018965][ T39] audit: type=1400 audit(1737066312.010:679): avc: denied { execute } for pid=7196 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.025749][ T39] audit: type=1400 audit(1737066312.010:680): avc: denied { execute_no_trans } for pid=7196 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 70.072101][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.073780][ T7202] ebt_limit: overflow, try lower: 570423552/2483027968 [ 70.081342][ T7202] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=40 sclass=netlink_tcpdiag_socket pid=7202 comm=syz.1.314 [ 70.108122][ T5945] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.111544][ T5945] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.114265][ T5945] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.114567][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.116955][ T5945] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.118468][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.120828][ T5945] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.120945][ T5945] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.127784][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.130046][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.132164][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.139112][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.141485][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.142444][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.143702][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.148733][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.151002][ T5973] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 70.153465][ T5973] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 70.158272][ T5973] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 70.202823][ T69] bond0: (slave netdevsim0): Releasing backup interface [ 70.206148][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.261717][ T7203] chnl_net:caif_netlink_parms(): no params data found [ 70.334132][ T7203] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.336924][ T7203] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.340054][ T7203] bridge_slave_0: entered allmulticast mode [ 70.343061][ T7203] bridge_slave_0: entered promiscuous mode [ 70.348083][ T7203] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.351059][ T7203] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.353811][ T7203] bridge_slave_1: entered allmulticast mode [ 70.356857][ T7203] bridge_slave_1: entered promiscuous mode [ 70.377963][ T25] usb 9-1: USB disconnect, device number 6 [ 70.415424][ T7203] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.421802][ T7203] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.431817][ T69] bridge_slave_1: left allmulticast mode [ 70.433518][ T69] bridge_slave_1: left promiscuous mode [ 70.435244][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.440993][ T69] bridge_slave_0: left allmulticast mode [ 70.443328][ T69] bridge_slave_0: left promiscuous mode [ 70.445605][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.778553][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 70.783750][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 70.788559][ T69] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 70.792603][ T69] bond0 (unregistering): Released all slaves [ 70.822244][ T7203] team0: Port device team_slave_0 added [ 70.826991][ T7203] team0: Port device team_slave_1 added [ 70.855947][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.857959][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.865843][ T7203] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.870078][ T7203] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.872781][ T7203] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.883716][ T7203] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.956158][ T7203] hsr_slave_0: entered promiscuous mode [ 70.958438][ T7203] hsr_slave_1: entered promiscuous mode [ 71.097716][ T7226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=7226 comm=syz.3.316 [ 71.176313][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.178868][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.206501][ T69] hsr_slave_0: left promiscuous mode [ 71.209195][ T69] hsr_slave_1: left promiscuous mode [ 71.212494][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.215410][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 71.218949][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.223033][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 71.248203][ T69] veth1_macvtap: left promiscuous mode [ 71.250513][ T69] veth0_macvtap: left promiscuous mode [ 71.252691][ T69] veth1_vlan: left promiscuous mode [ 71.254272][ T69] veth0_vlan: left promiscuous mode [ 71.849911][ T69] team0 (unregistering): Port device team_slave_1 removed [ 71.915801][ T69] team0 (unregistering): Port device team_slave_0 removed [ 72.130535][ T5943] Bluetooth: hci1: command tx timeout [ 72.588804][ T7203] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.592630][ T7203] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.595620][ T7203] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.599403][ T7203] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 72.625164][ T7203] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.642279][ T7203] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.649845][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.651961][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.658906][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.661041][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.734276][ T7203] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.754814][ T7203] veth0_vlan: entered promiscuous mode [ 72.761751][ T7203] veth1_vlan: entered promiscuous mode [ 72.777591][ T7203] veth0_macvtap: entered promiscuous mode [ 72.783606][ T7203] veth1_macvtap: entered promiscuous mode [ 72.791761][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.795462][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.798950][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.804186][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.807856][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.811950][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.815547][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.822638][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.825649][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.828460][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.831510][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.834282][ T7203] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 72.837273][ T7203] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.841027][ T7203] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.847899][ T7203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.850485][ T7203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.853024][ T7203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.855515][ T7203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.874659][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.905449][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.907713][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.919298][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.922069][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.961506][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.057584][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 73.060759][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.131967][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.279530][ T69] bridge_slave_1: left allmulticast mode [ 73.281857][ T69] bridge_slave_1: left promiscuous mode [ 73.284123][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.288707][ T69] bridge_slave_0: left allmulticast mode [ 73.290838][ T69] bridge_slave_0: left promiscuous mode [ 73.292524][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.508538][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 73.514255][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 73.517947][ T69] bond0 (unregistering): Released all slaves [ 73.782624][ T69] hsr_slave_0: left promiscuous mode [ 73.785074][ T69] hsr_slave_1: left promiscuous mode [ 73.787743][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.791065][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.794927][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.798802][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.824020][ T69] veth1_macvtap: left promiscuous mode [ 73.825926][ T69] veth0_macvtap: left promiscuous mode [ 73.828081][ T69] veth1_vlan: left promiscuous mode [ 73.832349][ T69] veth0_vlan: left allmulticast mode [ 73.834383][ T69] veth0_vlan: left promiscuous mode [ 74.011433][ T69] team0 (unregistering): Port device vlan0 removed [ 74.212613][ T5943] Bluetooth: hci1: command tx timeout [ 74.418847][ T69] team0 (unregistering): Port device team_slave_1 removed [ 74.476732][ T69] team0 (unregistering): Port device team_slave_0 removed [ 74.781381][ T69] team0 (unregistering): Port device batadv0 removed [ 76.290158][ T5943] Bluetooth: hci1: command tx timeout [ 78.369743][ T5943] Bluetooth: hci1: command tx timeout [ 81.411521][ T1323] cfg80211: failed to load regulatory.db [ 82.281173][ T39] audit: type=1400 audit(1737066324.280:681): avc: denied { write } for pid=7358 comm="syz.4.320" path="socket:[17636]" dev="sockfs" ino=17636 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 82.285572][ T7363] binder: 7362:7363 ioctl d000943d 2010d840 returned -22 [ 82.298566][ T7363] binder: 7362:7363 ioctl d000943e 20110840 returned -22 [ 82.305495][ T7363] binder: 7362:7363 ioctl d000943d 20111a40 returned -22 [ 82.309154][ T7363] binder: 7362:7363 ioctl d000943d 20112a40 returned -22 [ 82.313353][ T39] audit: type=1400 audit(1737066324.310:682): avc: denied { map } for pid=7362 comm="syz.0.318" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.314880][ T7363] binder_alloc: 7362: binder_alloc_buf size 4096 failed, no address space [ 82.324151][ T7363] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 4088 (num: 1 largest: 4088) [ 82.331864][ T7363] __nla_validate_parse: 5 callbacks suppressed [ 82.331873][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'. [ 82.336206][ T7363] netlink: 28 bytes leftover after parsing attributes in process `syz.0.318'. [ 82.336940][ T39] audit: type=1400 audit(1737066324.310:683): avc: denied { call } for pid=7362 comm="syz.0.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 82.387095][ T5945] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.392141][ T5945] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.395780][ T5945] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 82.399650][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 82.402861][ T5945] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 82.406273][ T5945] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.477820][ T7367] chnl_net:caif_netlink_parms(): no params data found [ 82.480027][ T7373] affs: No valid root block on device nullb0 [ 82.550435][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.552555][ T7367] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.554614][ T7367] bridge_slave_0: entered allmulticast mode [ 82.556821][ T7367] bridge_slave_0: entered promiscuous mode [ 82.560763][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.562783][ T7367] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.564793][ T7367] bridge_slave_1: entered allmulticast mode [ 82.566867][ T7367] bridge_slave_1: entered promiscuous mode [ 82.587375][ T7367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.591642][ T7367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.606972][ T39] audit: type=1400 audit(1737066324.600:684): avc: denied { shutdown } for pid=7365 comm="syz.4.322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 82.632148][ T7367] team0: Port device team_slave_0 added [ 82.635607][ T7367] team0: Port device team_slave_1 added [ 82.663925][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.665872][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.673835][ T7367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.677740][ T7367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.680000][ T7367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.687170][ T7367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.721839][ T7367] hsr_slave_0: entered promiscuous mode [ 82.724063][ T7367] hsr_slave_1: entered promiscuous mode [ 82.726233][ T7367] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.728439][ T7367] Cannot create hsr debugfs directory [ 82.959623][ T5991] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 82.963529][ T39] audit: type=1400 audit(1737066324.960:685): avc: denied { execute } for pid=7397 comm="syz.0.326" path="/sys/kernel/debug/binder/transactions" dev="debugfs" ino=5650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=file permissive=1 [ 83.004929][ T7403] af_packet: tpacket_rcv: packet too big, clamped from 65532 to 4294967272. macoff=96 [ 83.009653][ T7403] IPv4: Oversized IP packet from 127.202.26.0 [ 83.082950][ T7412] tipc: Started in network mode [ 83.084686][ T7412] tipc: Node identity cac4cb8b9f5b, cluster identity 4711 [ 83.087366][ T7412] tipc: Enabled bearer , priority 0 [ 83.091908][ T7409] tipc: Disabling bearer [ 83.111983][ T5991] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.115336][ T5991] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 83.121121][ T5991] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.123806][ T5991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.126159][ T5991] usb 9-1: Product: syz [ 83.127385][ T5991] usb 9-1: Manufacturer: syz [ 83.128714][ T5991] usb 9-1: SerialNumber: syz [ 83.286895][ T39] audit: type=1400 audit(1737066325.280:686): avc: denied { write } for pid=7424 comm="syz.0.330" name="packet" dev="proc" ino=4026533117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 83.312908][ T7367] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.317067][ T7367] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.320940][ T7367] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.324801][ T7367] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.346828][ T7367] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.349216][ T5991] usb 9-1: USB disconnect, device number 7 [ 83.349361][ T7367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.353239][ T7367] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.355273][ T7367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.380354][ T7367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.387711][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.394592][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.417341][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.333'. [ 83.427825][ T7367] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.430789][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.332'. [ 83.434257][ T7437] netlink: 16 bytes leftover after parsing attributes in process `syz.3.332'. [ 83.436899][ T1141] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.437611][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.332'. [ 83.439703][ T1141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.442488][ T1141] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.443893][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.3.332'. [ 83.445859][ T1141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.485796][ T39] audit: type=1400 audit(1737066325.480:687): avc: denied { ioctl } for pid=7447 comm="syz.0.334" path="socket:[18776]" dev="sockfs" ino=18776 ioctlcmd=0x89ef scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 83.580911][ T7367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.599666][ T7367] veth0_vlan: entered promiscuous mode [ 83.606225][ T7367] veth1_vlan: entered promiscuous mode [ 83.624339][ T7367] veth0_macvtap: entered promiscuous mode [ 83.628786][ T7367] veth1_macvtap: entered promiscuous mode [ 83.636267][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.639375][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.643890][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.647357][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.651046][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.654327][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.661728][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.675063][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.678045][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.681225][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.684160][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.687039][ T7367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.690652][ T7367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.695423][ T7367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.701355][ T7367] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.704941][ T7367] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.708467][ T7367] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.712182][ T7367] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.753421][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.756301][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.756328][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.338'. [ 83.761744][ T7476] netlink: 'syz.3.338': attribute type 22 has an invalid length. [ 83.763996][ T7476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.338'. [ 83.776854][ T7476] 9pnet_fd: p9_fd_create_unix (7476): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 83.783347][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.790032][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.805524][ T5991] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 83.820411][ T39] audit: type=1400 audit(1737066325.820:688): avc: denied { setopt } for pid=7475 comm="syz.3.338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 83.960282][ T5991] usb 9-1: Using ep0 maxpacket: 8 [ 83.963134][ T5991] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 83.965495][ T5991] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 83.969066][ T5991] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 83.969530][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.980053][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 83.982930][ T5991] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 83.987342][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 83.992806][ T5991] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.993099][ T7501] virtio-fs: tag <(null)> not found [ 83.996483][ T5991] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 83.996500][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.998279][ T5991] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 84.125119][ T7519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.344'. [ 84.318068][ T7532] program syz.0.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 84.450234][ T5945] Bluetooth: hci2: command tx timeout [ 84.551959][ T7548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.557460][ T7548] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.925487][ T7557] netlink: 'syz.3.347': attribute type 1 has an invalid length. [ 84.987326][ T7561] netlink: 'syz.3.349': attribute type 3 has an invalid length. [ 84.990296][ T7561] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 84.993066][ T7562] netlink: 'syz.3.349': attribute type 3 has an invalid length. [ 84.997656][ T7562] netlink: 'syz.3.349': attribute type 2 has an invalid length. [ 85.036774][ T7564] netlink: 'syz.3.350': attribute type 16 has an invalid length. [ 85.151452][ T39] audit: type=1400 audit(1737066327.150:689): avc: denied { associate } for pid=7571 comm="syz.0.352" name="cgroup.kill" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 85.172244][ T7572] netfs: Couldn't get user pages (rc=-14) [ 85.179109][ T7575] XFS (nullb0): Invalid superblock magic number [ 85.251275][ T7583] xt_l2tp: missing protocol rule (udp|l2tpip) [ 85.260360][ T39] audit: type=1400 audit(1737066327.260:690): avc: denied { getopt } for pid=7582 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 85.486796][ T7607] program syz.3.361 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 85.537388][ T7610] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.626029][ T7620] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.631356][ T7620] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.724103][ T9] usb 9-1: USB disconnect, device number 8 [ 85.891159][ T7657] tap0: tun_chr_ioctl cmd 1074025675 [ 85.893352][ T7657] tap0: persist enabled [ 85.895207][ T7657] tap0: tun_chr_ioctl cmd 1074025675 [ 85.897441][ T7657] tap0: persist disabled [ 85.905739][ T7658] netlink: 'syz.1.376': attribute type 10 has an invalid length. [ 85.910995][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.913859][ T7658] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.916919][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.919800][ T7658] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.930988][ T7658] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 85.939629][ T7658] bridge_slave_1: left allmulticast mode [ 85.941325][ T7658] bridge_slave_1: left promiscuous mode [ 85.943095][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.947488][ T7658] bridge_slave_0: left allmulticast mode [ 85.949834][ T7658] bridge_slave_0: left promiscuous mode [ 85.952084][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.971431][ T7658] bond0: (slave bridge0): Releasing backup interface [ 86.042441][ T7659] lo speed is unknown, defaulting to 1000 [ 86.048030][ T7659] lo speed is unknown, defaulting to 1000 [ 86.052746][ T7659] lo speed is unknown, defaulting to 1000 [ 86.060161][ T7666] lo speed is unknown, defaulting to 1000 [ 86.062480][ T7666] lo speed is unknown, defaulting to 1000 [ 86.065984][ T7666] lo speed is unknown, defaulting to 1000 [ 86.073202][ T7666] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.079765][ T7666] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.099295][ T7666] lo speed is unknown, defaulting to 1000 [ 86.104230][ T7666] lo speed is unknown, defaulting to 1000 [ 86.106513][ T7666] lo speed is unknown, defaulting to 1000 [ 86.108655][ T7666] lo speed is unknown, defaulting to 1000 [ 86.127387][ T7659] infiniband sz1: set active [ 86.129820][ T7659] infiniband sz1: added lo [ 86.138641][ T1339] lo speed is unknown, defaulting to 1000 [ 86.154667][ T7659] RDS/IB: sz1: added [ 86.156879][ T7659] smc: adding ib device sz1 with port count 1 [ 86.158760][ T7659] smc: ib device sz1 port 1 has pnetid [ 86.171664][ T7659] lo speed is unknown, defaulting to 1000 [ 86.179957][ T9] lo speed is unknown, defaulting to 1000 [ 86.229483][ T7659] lo speed is unknown, defaulting to 1000 [ 86.284451][ T7659] lo speed is unknown, defaulting to 1000 [ 86.366044][ T7659] lo speed is unknown, defaulting to 1000 [ 86.490572][ T7678] binder: 7677:7678 ioctl 40286608 20000280 returned -22 [ 86.530699][ T5945] Bluetooth: hci2: command tx timeout [ 86.539533][ T1339] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 86.625689][ T7681] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1860330540 (14882644320 ns) > initial count (2647239504 ns). Using initial count to start timer. [ 86.702804][ T1339] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 86.705739][ T1339] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 86.710770][ T1339] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 86.713414][ T1339] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.716347][ T1339] usb 9-1: Product: syz [ 86.717677][ T1339] usb 9-1: Manufacturer: syz [ 86.719648][ T1339] usb 9-1: SerialNumber: syz [ 86.732702][ T7684] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 86.818698][ T7686] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1549 sclass=netlink_route_socket pid=7686 comm=syz.3.387 [ 86.866086][ T7692] program syz.0.388 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 86.928323][ T7696] netlink: 'syz.3.389': attribute type 11 has an invalid length. [ 86.937354][ T1339] usb 9-1: USB disconnect, device number 9 [ 87.028645][ T7701] xt_ipcomp: unknown flags 12 [ 87.067857][ T7706] netlink: 'syz.3.392': attribute type 10 has an invalid length. [ 87.071090][ T7706] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.074867][ T7706] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.080623][ T7706] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.082783][ T7706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.085582][ T7706] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.088322][ T7706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.092961][ T7706] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 87.379619][ T5991] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 87.529579][ T5991] usb 9-1: Using ep0 maxpacket: 8 [ 87.533040][ T5991] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 87.535881][ T5991] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 87.539903][ T5991] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.542709][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.546329][ T5991] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 87.550381][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 87.554319][ T5991] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.559385][ T5991] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 87.563016][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.569703][ T5991] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 87.778149][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 87.778165][ T39] audit: type=1400 audit(1737066329.770:707): avc: denied { bind } for pid=7731 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 87.782189][ T7732] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 88.120642][ T7735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.124588][ T7735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.414554][ T7744] __nla_validate_parse: 18 callbacks suppressed [ 88.414570][ T7744] netlink: 16 bytes leftover after parsing attributes in process `syz.3.402'. [ 88.415214][ T7742] ip6t_rpfilter: unknown options [ 88.455961][ T39] audit: type=1400 audit(1737066330.450:708): avc: denied { nlmsg_write } for pid=7745 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 88.465324][ T7746] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.511428][ T7751] pimreg: entered allmulticast mode [ 88.514448][ T7751] pimreg: left allmulticast mode [ 88.610188][ T5945] Bluetooth: hci2: command tx timeout [ 88.626398][ T39] audit: type=1400 audit(1737066330.620:709): avc: denied { unmount } for pid=7367 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 88.665487][ T39] audit: type=1400 audit(1737066330.660:710): avc: denied { setattr } for pid=7760 comm="syz.3.409" name="RAWv6" dev="sockfs" ino=21061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 88.702034][ T7754] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 88.709523][ T7754] overlayfs: missing 'lowerdir' [ 88.719177][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.408'. [ 88.724681][ T7766] program syz.1.408 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.883164][ T7771] team0 (unregistering): Port device team_slave_0 removed [ 88.887194][ T7771] team0 (unregistering): Port device team_slave_1 removed [ 88.943823][ T7775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.412'. [ 88.956500][ T7775] fuse: Bad value for 'fd' [ 89.047823][ T7779] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 89.319515][ T1339] usb 9-1: USB disconnect, device number 10 [ 89.400091][ T7793] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14 sclass=netlink_route_socket pid=7793 comm=syz.3.419 [ 89.451619][ T39] audit: type=1400 audit(1737066331.450:711): avc: denied { connect } for pid=7796 comm="syz.3.421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.462262][ T5974] hid-generic 0005:7FFF:0008.0004: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on aa:aa:aa:aa:aa:aa [ 89.518116][ T7800] netlink: 12 bytes leftover after parsing attributes in process `syz.3.422'. [ 89.757447][ T39] audit: type=1400 audit(1737066331.750:712): avc: denied { read } for pid=7822 comm="syz.3.429" path="socket:[18110]" dev="sockfs" ino=18110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.809566][ T39] audit: type=1400 audit(1737066331.800:713): avc: denied { ioctl } for pid=7822 comm="syz.3.429" path="socket:[18111]" dev="sockfs" ino=18111 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 89.819677][ T9] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 89.881939][ T7827] input: syz1 as /devices/virtual/input/input8 [ 89.882016][ T7828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.430'. [ 89.947761][ T39] audit: type=1400 audit(1737066331.940:714): avc: denied { read } for pid=7835 comm="syz.3.433" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.956954][ T39] audit: type=1400 audit(1737066331.940:715): avc: denied { open } for pid=7835 comm="syz.3.433" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.958185][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 89.966044][ T39] audit: type=1400 audit(1737066331.950:716): avc: denied { ioctl } for pid=7835 comm="syz.3.433" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 89.976283][ T7837] program syz.0.432 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.000631][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.003564][ T9] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 90.007593][ T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 90.010334][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.012646][ T9] usb 9-1: Product: syz [ 90.013875][ T9] usb 9-1: Manufacturer: syz [ 90.015244][ T9] usb 9-1: SerialNumber: syz [ 90.222775][ T9] usb 9-1: USB disconnect, device number 11 [ 90.548696][ T7853] futex_wake_op: syz.1.438 tries to shift op by -1; fix this program [ 90.659528][ T5974] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 90.690387][ T5945] Bluetooth: hci2: command tx timeout [ 90.825370][ T7862] tmpfs: Unknown parameter 'si<' [ 90.829595][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 90.832858][ T5974] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 90.835792][ T5974] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 90.839329][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 90.842986][ T5974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 90.846680][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 90.851103][ T5974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 90.854424][ T5974] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 90.858786][ T5974] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 90.862823][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.870653][ T5974] usbtmc 9-1:16.0: probe with driver usbtmc failed with error -22 [ 90.906206][ T5945] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 90.910593][ T5945] CPU: 2 UID: 0 PID: 5945 Comm: kworker/u33:6 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 90.914094][ T5945] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.917284][ T5945] Workqueue: hci1 hci_rx_work [ 90.918862][ T5945] Call Trace: [ 90.919871][ T5945] [ 90.920793][ T5945] dump_stack_lvl+0x16c/0x1f0 [ 90.922259][ T5945] sysfs_warn_dup+0x7f/0xa0 [ 90.923782][ T5945] sysfs_create_dir_ns+0x24d/0x2b0 [ 90.925481][ T5945] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 90.927240][ T5945] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 90.929069][ T5945] ? kobject_add_internal+0x12d/0x990 [ 90.930706][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 90.932407][ T5945] kobject_add_internal+0x2c8/0x990 [ 90.934003][ T5945] kobject_add+0x16f/0x240 [ 90.935373][ T5945] ? __pfx_kobject_add+0x10/0x10 [ 90.936837][ T5945] ? class_to_subsys+0x3e/0x160 [ 90.938286][ T5945] ? do_raw_spin_unlock+0x172/0x230 [ 90.939786][ T5945] ? kobject_put+0xab/0x5a0 [ 90.941118][ T5945] device_add+0x289/0x1a70 [ 90.942418][ T5945] ? __pfx_dev_set_name+0x10/0x10 [ 90.943925][ T5945] ? __pfx_device_add+0x10/0x10 [ 90.945347][ T5945] ? mgmt_send_event_skb+0x2f2/0x460 [ 90.946874][ T5945] hci_conn_add_sysfs+0x17e/0x230 [ 90.948380][ T5945] le_conn_complete_evt+0x107f/0x1da0 [ 90.949931][ T5945] ? __pfx_lock_release+0x10/0x10 [ 90.951517][ T5945] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 90.953167][ T5945] ? trace_contention_end+0xee/0x140 [ 90.954701][ T5945] ? __mutex_lock+0x1cc/0xa60 [ 90.956077][ T5945] hci_le_conn_complete_evt+0x23c/0x370 [ 90.957699][ T5945] hci_le_meta_evt+0x2e2/0x5d0 [ 90.959091][ T5945] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 90.960851][ T5945] hci_event_packet+0x666/0x1180 [ 90.962301][ T5945] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 90.963839][ T5945] ? __pfx_hci_event_packet+0x10/0x10 [ 90.965414][ T5945] ? mark_held_locks+0x9f/0xe0 [ 90.966809][ T5945] ? kcov_remote_start+0x3cf/0x6e0 [ 90.968312][ T5945] ? lockdep_hardirqs_on+0x7c/0x110 [ 90.969843][ T5945] hci_rx_work+0x2c5/0x16b0 [ 90.971184][ T5945] ? process_one_work+0x921/0x1ba0 [ 90.972686][ T5945] process_one_work+0x9c5/0x1ba0 [ 90.974038][ T5945] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 90.975612][ T5945] ? __pfx_process_one_work+0x10/0x10 [ 90.977136][ T5945] ? rcu_is_watching+0x12/0xc0 [ 90.978509][ T5945] ? assign_work+0x1a0/0x250 [ 90.979798][ T5945] worker_thread+0x6c8/0xf00 [ 90.981135][ T5945] ? __pfx_worker_thread+0x10/0x10 [ 90.982612][ T5945] kthread+0x2c1/0x3a0 [ 90.983794][ T5945] ? _raw_spin_unlock_irq+0x23/0x50 [ 90.985300][ T5945] ? __pfx_kthread+0x10/0x10 [ 90.986641][ T5945] ret_from_fork+0x45/0x80 [ 90.987948][ T5945] ? __pfx_kthread+0x10/0x10 [ 90.989302][ T5945] ret_from_fork_asm+0x1a/0x30 [ 90.990700][ T5945] [ 90.991712][ C2] vkms_vblank_simulate: vblank timer overrun [ 90.999478][ T5945] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 91.003405][ T5945] Bluetooth: hci1: failed to register connection device [ 91.018296][ T7871] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.052224][ T7881] affs: No valid root block on device nullb0 [ 91.133752][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 91.138112][ T7895] program syz.3.447 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 91.158178][ T7899] macvtap0: entered promiscuous mode [ 91.161841][ T7899] macvtap0: left promiscuous mode [ 91.248599][ T7906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.450'. [ 91.251690][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.0.450'. [ 91.256258][ T7906] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.258469][ T7906] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.416297][ T7924] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 91.421845][ T7924] kvm: requested 62857 ns i8254 timer period limited to 200000 ns [ 91.424985][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.428116][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.555321][ T7931] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 91.570337][ T1323] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 91.644069][ T7936] vlan2: entered promiscuous mode [ 91.645707][ T7936] vlan2: entered allmulticast mode [ 91.647208][ T7936] hsr_slave_1: entered allmulticast mode [ 91.726380][ T7936] hsr_slave_1 (unregistering): left allmulticast mode [ 91.730809][ T1323] usb 6-1: config index 0 descriptor too short (expected 26395, got 27) [ 91.733470][ T1323] usb 6-1: config 130 has 1 interface, different from the descriptor's value: 20 [ 91.736374][ T1323] usb 6-1: config 130 interface 0 has no altsetting 0 [ 91.740075][ T1323] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 91.742672][ T1323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.745106][ T1323] usb 6-1: Product: syz [ 91.746313][ T1323] usb 6-1: Manufacturer: syz [ 91.747779][ T1323] usb 6-1: SerialNumber: syz [ 91.749341][ T7936] hsr_slave_1 (unregistering): left promiscuous mode [ 91.876932][ T7950] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 92.159534][ T5973] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 92.165586][ T7915] tmpfs: Bad value for 'mpol' [ 92.167443][ T1323] usblp 6-1:130.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 245 proto 1 vid 0x0525 pid 0xA4A8 [ 92.178295][ T7915] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.179065][ T1323] usb 6-1: USB disconnect, device number 7 [ 92.187964][ T1323] usblp0: removed [ 92.202713][ T7915] evm: overlay not supported [ 92.333132][ T5973] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 92.336063][ T5973] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 92.338622][ T5973] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 92.341667][ T5973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.345218][ T5973] usb 5-1: config 0 descriptor?? [ 92.348588][ T5973] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 92.351175][ T5973] dvb-usb: bulk message failed: -22 (3/0) [ 92.356881][ T5973] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 92.359730][ T5973] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 92.361860][ T5973] usb 5-1: media controller created [ 92.364975][ T5973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 92.371936][ T5973] dvb-usb: bulk message failed: -22 (6/0) [ 92.373734][ T5973] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 92.376873][ T5973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input9 [ 92.383378][ T5973] dvb-usb: schedule remote query interval to 150 msecs. [ 92.385425][ T5973] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 92.445837][ T7985] [U] [ 92.446866][ T7985] [U] [ 92.447728][ T7985] [U] [ 92.448573][ T7985] [U] [ 92.450312][ T7985] [U] [ 92.451389][ T7985] [U] [ 92.452428][ T7985] [U] [ 92.453240][ T7985] [U] [ 92.454080][ T7985] [U] [ 92.454887][ T7985] [U] [ 92.455701][ T7985] [U] [ 92.456532][ T7985] [U] [ 92.457349][ T7985] [U] [ 92.458168][ T7985] [U] [ 92.458976][ T7985] [U] [ 92.459810][ T7985] [U] [ 92.460985][ T7985] [U] [ 92.461829][ T7985] [U] [ 92.462643][ T7985] [U] [ 92.463541][ T7985] [U] [ 92.464371][ T7985] [U] [ 92.465182][ T7985] [U] [ 92.466032][ T7985] [U] [ 92.466839][ T7985] [U] [ 92.467777][ T7985] [U] [ 92.468570][ T7985] [U] [ 92.469446][ T7985] [U] [ 92.470255][ T7985] [U] [ 92.471187][ T7985] [U] [ 92.472031][ T7985] [U] [ 92.473012][ T7985] [U] [ 92.473800][ T7985] [U] [ 92.474617][ T7985] [U] [ 92.475423][ T7985] [U] [ 92.476228][ T7985] [U] [ 92.477044][ T7985] [U] [ 92.477890][ T7985] [U] [ 92.478692][ T7985] [U] [ 92.479508][ T7985] [U] [ 92.480312][ T7985] [U] [ 92.482122][ T7985] [U] [ 92.483070][ T7985] [U] [ 92.483877][ T7985] [U] [ 92.484699][ T7985] [U] [ 92.485511][ T7985] [U] [ 92.486319][ T7985] [U] [ 92.487130][ T7985] [U] [ 92.487936][ T7985] [U] [ 92.488769][ T7985] [U] [ 92.489592][ T7985] [U] [ 92.490400][ T7985] [U] [ 92.491220][ T7985] [U] [ 92.492141][ T7985] [U] [ 92.492964][ T7985] [U] [ 92.493777][ T7985] [U] [ 92.494582][ T7985] [U] [ 92.495401][ T7985] [U] [ 92.496211][ T7985] [U] [ 92.497027][ T7985] [U] [ 92.497828][ T7985] [U] [ 92.498073][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 92.498627][ T7985] [U] [ 92.498657][ T7985] [U] [ 92.498671][ T7985] [U] [ 92.504234][ T7985] [U] [ 92.504862][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 92.505197][ T7985] [U] [ 92.508748][ T7985] [U] [ 92.509566][ T7985] [U] [ 92.510369][ T7985] [U] [ 92.511385][ T7985] [U] [ 92.512202][ T7985] [U] [ 92.513016][ T7985] [U] [ 92.513821][ T7985] [U] [ 92.514650][ T7985] [U] [ 92.515449][ T7985] [U] [ 92.516252][ T7985] [U] [ 92.517071][ T7985] [U] [ 92.517883][ T7985] [U] [ 92.518685][ T7985] [U] [ 92.519503][ T7985] [U] [ 92.520309][ T7985] [U] [ 92.521289][ T7985] [U] [ 92.522097][ T7985] [U] [ 92.522898][ T7985] [U] [ 92.523702][ T7985] [U] [ 92.524521][ T7985] [U] [ 92.525331][ T7985] [U] [ 92.526137][ T7985] [U] [ 92.526937][ T7985] [U] [ 92.527769][ T7985] [U] [ 92.528583][ T7985] [U] [ 92.529391][ T7985] [U] [ 92.530256][ T7985] [U] [ 92.531327][ T7985] [U] [ 92.532142][ T7985] [U] [ 92.532955][ T7985] [U] [ 92.533765][ T7985] [U] [ 92.534589][ T7985] [U] [ 92.535403][ T7985] [U] [ 92.536208][ T7985] [U] [ 92.537018][ T7985] [U] [ 92.537856][ T7985] [U] [ 92.538660][ T7985] [U] [ 92.539476][ T7985] [U] [ 92.540284][ T7985] [U] [ 92.541235][ T7985] [U] [ 92.542048][ T7985] [U] [ 92.542597][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 92.542840][ T7985] [U] [ 92.544660][ T5973] dvb-usb: error while querying for an remote control event. [ 92.545448][ T7985] [U] [ 92.548448][ T7985] [U] [ 92.549251][ T7985] [U] [ 92.550065][ T7985] [U] [ 92.550881][ T7985] [U] [ 92.551762][ T7985] [U] [ 92.552577][ T7985] [U] [ 92.552735][ T7953] dibusb: i2c wr: len=61 is too big! [ 92.552735][ T7953] [ 92.553372][ T7985] [U] [ 92.553388][ T7985] [U] [ 92.557903][ T7985] [U] [ 92.558714][ T7985] [U] [ 92.559532][ T7985] [U] [ 92.560343][ T7985] [U] [ 92.561493][ T7985] [U] [ 92.562311][ T7985] [U] [ 92.563347][ T7985] [U] [ 92.564396][ T7985] [U] [ 92.565438][ T7985] [U] [ 92.566482][ T7985] [U] [ 92.567517][ T7985] [U] [ 92.576743][ T8] usb 9-1: USB disconnect, device number 12 [ 92.640008][ T7992] program syz.3.471 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.709517][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 92.711225][ T5973] dvb-usb: error while querying for an remote control event. [ 92.729501][ T1323] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 92.869574][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 92.871438][ T5973] dvb-usb: error while querying for an remote control event. [ 92.903085][ T1323] usb 6-1: config 1 has an invalid interface number: 13 but max is 0 [ 92.905588][ T1323] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 92.908232][ T1323] usb 6-1: config 1 has no interface number 0 [ 92.910250][ T1323] usb 6-1: config 1 interface 13 altsetting 5 endpoint 0x4 has invalid maxpacket 32, setting to 8 [ 92.913353][ T1323] usb 6-1: config 1 interface 13 altsetting 5 endpoint 0x8A has invalid maxpacket 1023, setting to 8 [ 92.916493][ T1323] usb 6-1: config 1 interface 13 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 92.919731][ T1323] usb 6-1: config 1 interface 13 has no altsetting 0 [ 92.923309][ T1323] usb 6-1: New USB device found, idVendor=1410, idProduct=9010, bcdDevice=f1.e8 [ 92.926030][ T1323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.928389][ T1323] usb 6-1: Product: ၜ㟌䕶而쏍ꔩᕨল荿ｗ痊늸䇘沭㢟抑ᯫ곻໦ꮤ塻䄉홽࠴怿⥃㓺ퟶ榏暷雥耓鹣ᇸ▋쟸ꧽ싐﬊ᆃW胁沱闏ⱉ놨￡狃堎豆㈑ᚢ꺑箕ꖅ䀠케Ẅ듿ʳީ༳ [ 92.934931][ T1323] usb 6-1: SerialNumber: ᒋ嵺Თ笋홇᛻⾖빻橭⑽䱑版㐑뒍ꦇ纵왈︶祇⹀ᵃ핽목⬚㺌耍顙ꑿ菐邎鬞ꒅ銱㷵 [ 93.032147][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 93.034569][ T5973] dvb-usb: error while querying for an remote control event. [ 93.143362][ T7984] [U] [ 93.147627][ T1323] option 6-1:1.13: GSM modem (1-port) converter detected [ 93.161827][ T1323] usb 6-1: USB disconnect, device number 8 [ 93.165880][ T1323] option 6-1:1.13: device disconnected [ 93.199529][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 93.201322][ T5991] dvb-usb: error while querying for an remote control event. [ 93.359498][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 93.361199][ T5991] dvb-usb: error while querying for an remote control event. [ 93.451936][ T8013] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 93.515185][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 93.515197][ T39] audit: type=1400 audit(1737066335.510:731): avc: denied { getopt } for pid=8018 comm="syz.3.479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 93.519591][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 93.525854][ T5991] dvb-usb: error while querying for an remote control event. [ 93.612905][ T39] audit: type=1400 audit(1737066335.610:732): avc: denied { read } for pid=5332 comm="acpid" name="mouse9" dev="devtmpfs" ino=2874 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 93.619202][ T39] audit: type=1400 audit(1737066335.610:733): avc: denied { open } for pid=5332 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=2874 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 93.625847][ T39] audit: type=1400 audit(1737066335.610:734): avc: denied { ioctl } for pid=5332 comm="acpid" path="/dev/input/mouse9" dev="devtmpfs" ino=2874 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 93.633907][ T39] audit: type=1400 audit(1737066335.610:735): avc: denied { create } for pid=8022 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.639874][ T39] audit: type=1400 audit(1737066335.610:736): avc: denied { getopt } for pid=8022 comm="syz.3.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 93.679572][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 93.681300][ T5991] dvb-usb: error while querying for an remote control event. [ 93.746694][ T8029] __nla_validate_parse: 3 callbacks suppressed [ 93.746704][ T8029] netlink: 24 bytes leftover after parsing attributes in process `syz.1.482'. [ 93.839499][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 93.841270][ T5991] dvb-usb: error while querying for an remote control event. [ 93.874952][ T8033] netlink: 'syz.1.483': attribute type 1 has an invalid length. [ 93.879549][ T1323] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 93.973225][ T8041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.485'. [ 93.976869][ T8041] program syz.1.485 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.999691][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 94.001416][ T5991] dvb-usb: error while querying for an remote control event. [ 94.032555][ T1323] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.036200][ T1323] usb 8-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 94.040694][ T1323] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.043361][ T1323] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.045743][ T1323] usb 8-1: Product: syz [ 94.047002][ T1323] usb 8-1: Manufacturer: syz [ 94.048424][ T1323] usb 8-1: SerialNumber: syz [ 94.160641][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 94.162897][ T5991] dvb-usb: error while querying for an remote control event. [ 94.257191][ T1323] usb 8-1: USB disconnect, device number 25 [ 94.319566][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 94.322306][ T5991] dvb-usb: error while querying for an remote control event. [ 94.479598][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 94.481646][ T5991] dvb-usb: error while querying for an remote control event. [ 94.639601][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 94.641412][ T5973] dvb-usb: error while querying for an remote control event. [ 94.689546][ T1323] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 94.788178][ T8059] gre1: entered promiscuous mode [ 94.799533][ T5991] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 94.801858][ T5973] dvb-usb: bulk message failed: -22 (1/0) [ 94.803651][ T5973] dvb-usb: error while querying for an remote control event. [ 94.839485][ T1323] usb 8-1: Using ep0 maxpacket: 8 [ 94.842311][ T1323] usb 8-1: config index 0 descriptor too short (expected 301, got 72) [ 94.844735][ T1323] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 94.847706][ T1323] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.851201][ T1323] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.854065][ T1323] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1184, setting to 1024 [ 94.857320][ T1323] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 94.860569][ T1323] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.863412][ T1323] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 94.866070][ T1323] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.927550][ T8] usb 5-1: USB disconnect, device number 8 [ 94.949583][ T5991] usb 9-1: Using ep0 maxpacket: 8 [ 94.950547][ T8] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 94.952863][ T5991] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 94.957578][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 94.961214][ T39] audit: type=1400 audit(1737066336.960:737): avc: denied { append } for pid=8065 comm="syz.0.492" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 94.961669][ T5991] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 94.972225][ T5991] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.978808][ T5991] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 94.982949][ T5991] usb 9-1: New USB device strings: Mfr=0, Product=7, SerialNumber=0 [ 94.986146][ T5991] usb 9-1: Product: syz [ 95.072634][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.075153][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.077455][ T1323] usb 8-1: usb_control_msg returned -32 [ 95.079068][ T1323] usbtmc 8-1:16.0: can't read capabilities [ 95.086819][ T1323] usb 8-1: USB disconnect, device number 26 [ 95.099606][ T5974] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 95.194487][ T5991] usb 9-1: GET_CAPABILITIES returned 0 [ 95.196091][ T5991] usbtmc 9-1:16.0: can't read capabilities [ 95.260751][ T5974] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 95.263198][ T5974] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.266040][ T5974] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 95.268581][ T5974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.271826][ T5974] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.275843][ T5974] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 95.278441][ T5974] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 95.280787][ T5974] usb 6-1: Product: syz [ 95.281987][ T5974] usb 6-1: Manufacturer: syz [ 95.285141][ T5974] cdc_wdm 6-1:1.0: skipping garbage [ 95.286643][ T5974] cdc_wdm 6-1:1.0: skipping garbage [ 95.289841][ T5974] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 95.291574][ T5974] cdc_wdm 6-1:1.0: Unknown control protocol [ 95.403478][ T1323] usb 9-1: USB disconnect, device number 13 [ 95.489970][ T5991] usb 6-1: USB disconnect, device number 9 [ 95.607056][ T8077] fuse: Bad value for 'user_id' [ 95.608530][ T8077] fuse: Bad value for 'user_id' [ 95.655085][ T39] audit: type=1400 audit(1737066337.650:738): avc: denied { setopt } for pid=8079 comm="syz.3.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 95.685145][ T39] audit: type=1400 audit(1737066337.680:739): avc: denied { read } for pid=8081 comm="syz.3.497" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.692165][ T39] audit: type=1400 audit(1737066337.680:740): avc: denied { open } for pid=8081 comm="syz.3.497" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 95.880888][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.3.500'. [ 96.028262][ T8105] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 96.191051][ T8112] netlink: 'syz.1.505': attribute type 4 has an invalid length. [ 96.193292][ T8112] netlink: 17 bytes leftover after parsing attributes in process `syz.1.505'. [ 96.209539][ T5974] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 96.362194][ T8131] fuse: blksize only supported for fuseblk [ 96.372734][ T5974] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.376539][ T5974] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 96.381460][ T5974] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 96.384358][ T5974] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.386631][ T5974] usb 9-1: Product: syz [ 96.387852][ T5974] usb 9-1: Manufacturer: syz [ 96.389350][ T5974] usb 9-1: SerialNumber: syz [ 96.600621][ T5974] usb 9-1: USB disconnect, device number 14 [ 96.799514][ T8138] overlayfs: failed to decode file handle (len=5, type=2, flags=0, err=-22) [ 96.812152][ T5991] IPVS: starting estimator thread 0... [ 96.898975][ T8146] openvswitch: netlink: IPv4 frag type 224 is out of range max 2 [ 96.902579][ T8146] netlink: 8 bytes leftover after parsing attributes in process `syz.3.514'. [ 96.919660][ T8139] IPVS: using max 39 ests per chain, 93600 per kthread [ 96.988194][ T8150] SELinux: Context system_u:object_r:hostname_exec_t:s0 is not valid (left unmapped). [ 97.065002][ T5974] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 97.219509][ T5974] usb 9-1: Using ep0 maxpacket: 8 [ 97.222455][ T5974] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 97.224882][ T5974] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 97.227791][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.230932][ T5974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 97.233964][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1184, setting to 1024 [ 97.237154][ T5974] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 97.240164][ T5974] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.242974][ T5974] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 97.245654][ T5974] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.274593][ T8172] program syz.1.521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.280402][ T8174] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 97.293576][ T8174] syz.3.522: attempt to access beyond end of device [ 97.293576][ T8174] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 97.297842][ T8174] MINIX-fs: unable to read superblock [ 97.306289][ T8176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.523'. [ 97.340497][ T8180] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 97.342708][ T8180] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 97.450255][ T5974] usb 9-1: usb_control_msg returned -32 [ 97.451939][ T5974] usbtmc 9-1:16.0: can't read capabilities [ 97.453917][ T8102] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.457741][ T8102] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.463149][ T5974] usb 9-1: USB disconnect, device number 15 [ 98.083828][ T8206] kvm: pic: non byte write [ 98.101633][ T8208] netlink: 84 bytes leftover after parsing attributes in process `syz.0.532'. [ 98.174538][ T8213] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.445489][ T8218] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.520640][ T8218] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.586378][ T8218] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.657173][ T8218] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.735851][ T8218] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.744718][ T8218] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.750706][ T8218] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.756701][ T8218] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.811184][ T8223] $H: renamed from bond0 (while UP) [ 98.816352][ T8223] $H: entered promiscuous mode [ 98.817908][ T8223] bond_slave_0: entered promiscuous mode [ 98.819819][ T8223] bond_slave_1: entered promiscuous mode [ 98.821589][ T8223] bridge0: entered promiscuous mode [ 98.895517][ T39] kauditd_printk_skb: 19 callbacks suppressed [ 98.895527][ T39] audit: type=1400 audit(1737066340.890:760): avc: denied { watch watch_reads } for pid=8230 comm="syz.3.541" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 99.022733][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.4.545'. [ 99.085328][ T39] audit: type=1400 audit(1737066341.080:761): avc: denied { ioctl } for pid=8247 comm="syz.4.546" path="cgroup:[4026532882]" dev="nsfs" ino=4026532882 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 99.097160][ T39] audit: type=1400 audit(1737066341.080:762): avc: denied { append } for pid=8242 comm="syz.3.544" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 99.097184][ T39] audit: type=1400 audit(1737066341.090:763): avc: denied { ioctl } for pid=8251 comm="syz.0.547" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 99.163198][ T8254] kvm: user requested TSC rate below hardware speed [ 99.165782][ T8254] kvm: vcpu 0: requested 8 ns lapic timer period limited to 200000 ns [ 99.196767][ T39] audit: type=1400 audit(1737066341.190:764): avc: denied { create } for pid=8256 comm="syz.0.549" name="#1f" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.203554][ T39] audit: type=1400 audit(1737066341.190:765): avc: denied { link } for pid=8256 comm="syz.0.549" name="#1f" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.210014][ T39] audit: type=1400 audit(1737066341.190:766): avc: denied { rename } for pid=8256 comm="syz.0.549" name="#20" dev="tmpfs" ino=360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.252800][ T39] audit: type=1400 audit(1737066341.250:767): avc: denied { read } for pid=8261 comm="syz.4.550" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.259585][ T39] audit: type=1400 audit(1737066341.250:768): avc: denied { open } for pid=8261 comm="syz.4.550" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.266168][ T39] audit: type=1400 audit(1737066341.250:769): avc: denied { ioctl } for pid=8261 comm="syz.4.550" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 99.315587][ T8269] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 99.374025][ T8275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.513049][ T8291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.557'. [ 99.516557][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.557'. [ 99.521899][ T8291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.557'. [ 99.551243][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 99.575923][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 99.595147][ T8301] overlay: Unknown parameter './file0/file0' [ 99.677401][ T8312] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 99.679427][ T8312] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 99.683794][ T8312] vhci_hcd vhci_hcd.0: Device attached [ 99.687046][ T8313] vhci_hcd: connection closed [ 99.688611][ T1136] vhci_hcd: stop threads [ 99.692126][ T1136] vhci_hcd: release socket [ 99.693536][ T1136] vhci_hcd: disconnect device [ 99.754070][ T8319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.565'. [ 99.806869][ T8324] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.809038][ T8324] overlayfs: failed to set xattr on upper [ 99.814549][ T8324] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.816692][ T8324] overlayfs: ...falling back to index=off. [ 99.818882][ T8324] overlayfs: ...falling back to uuid=null. [ 99.883126][ T8333] ======================================================= [ 99.883126][ T8333] WARNING: The mand mount option has been deprecated and [ 99.883126][ T8333] and is ignored by this kernel. Remove the mand [ 99.883126][ T8333] option from the mount to silence this warning. [ 99.883126][ T8333] ======================================================= [ 99.902411][ T8336] ALSA: mixer_oss: invalid OSS volume '' [ 100.145663][ T8353] lo speed is unknown, defaulting to 1000 [ 100.190559][ T8353] lo speed is unknown, defaulting to 1000 [ 100.246865][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 100.251023][ T8360] netlink: 4 bytes leftover after parsing attributes in process `syz.3.578'. [ 100.262873][ T8360] netlink: 32 bytes leftover after parsing attributes in process `syz.3.578'. [ 100.274321][ T8371] sch_tbf: peakrate 64 is lower than or equals to rate 256 ! [ 100.393301][ T8384] 9pnet_virtio: no channels available for device [ 100.438454][ T8389] tun0: tun_chr_ioctl cmd 1074025672 [ 100.440583][ T8389] tun0: ignored: set checksum enabled [ 100.505183][ T8393] ip6t_srh: unknown srh match flags 4000 [ 100.544213][ T8397] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8397 comm=syz.4.590 [ 100.781319][ T63] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 100.861561][ T8425] block device autoloading is deprecated and will be removed. [ 100.941028][ T63] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 100.944957][ T63] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 100.948478][ T63] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.951264][ T63] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.955374][ T8387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 100.962708][ T63] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.050067][ T8432] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1549 sclass=netlink_xfrm_socket pid=8432 comm=syz.1.601 [ 101.123339][ T8441] IPVS: persistence engine module ip_vs_pe_" not found [ 101.139617][ T8442] IPVS: persistence engine module ip_vs_pe_" not found [ 101.160055][ T25] usb 5-1: USB disconnect, device number 9 [ 101.389600][ T5974] usb 8-1: new low-speed USB device number 27 using dummy_hcd [ 101.419886][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 101.499535][ T63] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 101.519544][ T5974] usb 8-1: device descriptor read/64, error -71 [ 101.570744][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 101.573376][ T35] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 101.575448][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.578584][ T35] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.581941][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.584930][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.588686][ T35] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 101.590975][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.594116][ T35] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.597421][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.600596][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.604445][ T35] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 101.606541][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 101.609738][ T35] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.613008][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 101.616071][ T35] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 101.621479][ T35] usb 6-1: string descriptor 0 read error: -22 [ 101.623383][ T35] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.625839][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.631137][ T35] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.659680][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 101.663985][ T63] usb 9-1: config index 0 descriptor too short (expected 26978, got 36) [ 101.667528][ T63] usb 9-1: config 115 has too many interfaces: 116, using maximum allowed: 32 [ 101.671542][ T63] usb 9-1: config 115 has an invalid descriptor of length 0, skipping remainder of the config [ 101.675419][ T63] usb 9-1: config 115 has 0 interfaces, different from the descriptor's value: 116 [ 101.679232][ T63] usb 9-1: New USB device found, idVendor=046d, idProduct=ffff, bcdDevice= 0.00 [ 101.682476][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.769601][ T5974] usb 8-1: new low-speed USB device number 28 using dummy_hcd [ 101.833322][ T25] usb 6-1: USB disconnect, device number 10 [ 101.894609][ T63] usb 9-1: USB disconnect, device number 16 [ 101.899688][ T5974] usb 8-1: device descriptor read/64, error -71 [ 102.009838][ T5974] usb usb8-port1: attempt power cycle [ 102.024712][ T8452] futex_wake_op: syz.0.606 tries to shift op by -1; fix this program [ 102.349510][ T5974] usb 8-1: new low-speed USB device number 29 using dummy_hcd [ 102.382477][ T5974] usb 8-1: device descriptor read/8, error -71 [ 102.619545][ T5974] usb 8-1: new low-speed USB device number 30 using dummy_hcd [ 102.639940][ T5974] usb 8-1: device descriptor read/8, error -71 [ 102.749736][ T5974] usb usb8-port1: unable to enumerate USB device [ 102.832244][ T8497] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 102.834314][ T8497] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 102.888757][ T8506] 8021q: adding VLAN 0 to HW filter on device bond3 [ 103.111647][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1128 sclass=netlink_route_socket pid=8522 comm=syz.0.624 [ 103.282815][ T8525] infiniband sz1: set active [ 103.301901][ T8526] infiniband sz1: set active [ 103.303835][ T9] lo speed is unknown, defaulting to 1000 [ 103.307225][ T5991] lo speed is unknown, defaulting to 1000 [ 103.841919][ T8535] fuse: Bad value for 'user_id' [ 103.843388][ T8535] fuse: Bad value for 'user_id' [ 104.142415][ T8543] __nla_validate_parse: 2 callbacks suppressed [ 104.142430][ T8543] netlink: 16 bytes leftover after parsing attributes in process `syz.3.631'. [ 104.674279][ T8535] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.676771][ T8535] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 104.679161][ T8535] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.682332][ T8535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.687265][ T8535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.692762][ T8535] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.695201][ T8535] ================================================================== [ 104.698145][ T8535] BUG: KASAN: slab-use-after-free in __list_del_entry_valid_or_report+0x1a6/0x1c0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 104.701579][ T8535] Read of size 8 at addr ffff888033c1e550 by task syz.4.629/8535 [ 104.706670][ T8535] [ 104.707671][ T8535] CPU: 2 UID: 0 PID: 8535 Comm: syz.4.629 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 104.711598][ T8535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.715624][ T8535] Call Trace: [ 104.717025][ T8535] [ 104.718113][ T8535] dump_stack_lvl+0x116/0x1f0 [ 104.719932][ T8535] print_report+0xc3/0x620 [ 104.721659][ T8535] ? __virt_addr_valid+0x5e/0x590 [ 104.723581][ T8535] ? __phys_addr+0xc6/0x150 [ 104.725140][ T8535] kasan_report+0xd9/0x110 [ 104.726409][ T8535] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 104.728857][ T8535] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 104.731496][ T8535] __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 104.733805][ T8535] bt_accept_unlink+0x34/0x2e0 [ 104.735606][ T8535] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 104.737680][ T8535] l2cap_chan_del+0xba/0x8f0 [ 104.739446][ T8535] l2cap_conn_del+0x37c/0x730 [ 104.741264][ T8535] l2cap_connect_cfm+0x7aa/0xf10 [ 104.743101][ T8535] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 104.745126][ T8535] ? hci_cb_lookup+0x319/0x4e0 [ 104.747012][ T8535] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 104.749099][ T8535] hci_conn_failed+0x225/0x3e0 [ 104.750490][ T8535] ? __pfx_hci_conn_failed+0x10/0x10 [ 104.752017][ T8535] ? lock_acquire+0x2f/0xb0 [ 104.753361][ T8535] ? hci_abort_conn_sync+0x170/0xfe0 [ 104.755421][ T8535] hci_abort_conn_sync+0x91c/0xfe0 [ 104.757455][ T8535] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 104.759062][ T8535] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 104.760934][ T8535] ? __pfx_lock_release+0x10/0x10 [ 104.762363][ T8535] ? trace_lock_acquire+0x14e/0x1f0 [ 104.763950][ T8535] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 104.766292][ T8535] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 104.768150][ T8535] hci_suspend_sync+0x772/0xab0 [ 104.769545][ T8535] ? __pfx_hci_suspend_sync+0x10/0x10 [ 104.770986][ T8535] ? hci_send_monitor_ctrl_event+0x4e0/0x5b0 [ 104.772675][ T8535] ? __pfx_mgmt_suspending+0x10/0x10 [ 104.774393][ T8535] hci_suspend_dev+0x30a/0x510 [ 104.776233][ T8535] ? __pfx_hci_suspend_dev+0x10/0x10 [ 104.777948][ T8535] ? rcu_barrier+0x344/0x700 [ 104.779230][ T8535] ? kobject_get+0xbb/0x150 [ 104.780483][ T8535] hci_suspend_notifier+0x28d/0x2f0 [ 104.781932][ T8535] notifier_call_chain+0xb7/0x410 [ 104.783331][ T8535] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 104.784943][ T8535] blocking_notifier_call_chain_robust+0xc9/0x170 [ 104.786750][ T8535] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 104.788743][ T8535] pm_notifier_call_chain_robust+0x27/0x60 [ 104.790376][ T8535] snapshot_open+0x189/0x2b0 [ 104.791688][ T8535] ? __pfx_snapshot_open+0x10/0x10 [ 104.793150][ T8535] misc_open+0x35a/0x420 [ 104.794631][ T8535] ? __pfx_misc_open+0x10/0x10 [ 104.796537][ T8535] chrdev_open+0x237/0x6a0 [ 104.798374][ T8535] ? __pfx_chrdev_open+0x10/0x10 [ 104.799986][ T8535] do_dentry_open+0xf59/0x1ea0 [ 104.801663][ T8535] ? __pfx_chrdev_open+0x10/0x10 [ 104.803448][ T8535] ? inode_permission+0xdd/0x5f0 [ 104.805365][ T8535] vfs_open+0x82/0x3f0 [ 104.806987][ T8535] ? may_open+0x1f2/0x400 [ 104.808494][ T8535] path_openat+0x1e6a/0x2d60 [ 104.809810][ T8535] ? __pfx_path_openat+0x10/0x10 [ 104.811242][ T8535] ? __pfx___lock_acquire+0x10/0x10 [ 104.813049][ T8535] ? lock_acquire.part.0+0x11b/0x380 [ 104.814913][ T8535] ? find_held_lock+0x2d/0x110 [ 104.816579][ T8535] do_filp_open+0x20c/0x470 [ 104.818412][ T8535] ? __pfx_do_filp_open+0x10/0x10 [ 104.820405][ T8535] ? find_held_lock+0x2d/0x110 [ 104.822242][ T8535] ? alloc_fd+0x41f/0x760 [ 104.823951][ T8535] do_sys_openat2+0x17a/0x1e0 [ 104.825704][ T8535] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.827732][ T8535] __x64_sys_openat+0x175/0x210 [ 104.829675][ T8535] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.831724][ T8535] ? ksys_write+0x1ba/0x250 [ 104.833503][ T8535] do_syscall_64+0xcd/0x250 [ 104.835293][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.837659][ T8535] RIP: 0033:0x7fdda2d85d29 [ 104.839317][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.844946][ T8535] RSP: 002b:00007fdda3c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 104.848097][ T8535] RAX: ffffffffffffffda RBX: 00007fdda2f75fa0 RCX: 00007fdda2d85d29 [ 104.851070][ T8535] RDX: 0000000000000200 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 104.854027][ T8535] RBP: 00007fdda2e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 104.857144][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.859441][ T8535] R13: 0000000000000000 R14: 00007fdda2f75fa0 R15: 00007ffc8f983628 [ 104.861631][ T8535] [ 104.862498][ T8535] [ 104.863171][ T8535] Allocated by task 5336: [ 104.864790][ T8535] kasan_save_stack+0x33/0x60 [ 104.866734][ T8535] kasan_save_track+0x14/0x30 [ 104.868489][ T8535] __kasan_kmalloc+0xaa/0xb0 [ 104.869863][ T8535] syslog_print+0xf9/0x5d0 [ 104.871192][ T8535] do_syslog+0x3e1/0x6c0 [ 104.872420][ T8535] __x64_sys_syslog+0x74/0xb0 [ 104.874008][ T8535] do_syscall_64+0xcd/0x250 [ 104.875861][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.878125][ T8535] [ 104.878829][ T8535] Freed by task 5336: [ 104.879968][ T8535] kasan_save_stack+0x33/0x60 [ 104.881335][ T8535] kasan_save_track+0x14/0x30 [ 104.882688][ T8535] kasan_save_free_info+0x3b/0x60 [ 104.884390][ T8535] __kasan_slab_free+0x51/0x70 [ 104.886004][ T8535] kfree+0x14f/0x4b0 [ 104.887513][ T8535] syslog_print+0x2bb/0x5d0 [ 104.889076][ T8535] do_syslog+0x3e1/0x6c0 [ 104.890330][ T8535] __x64_sys_syslog+0x74/0xb0 [ 104.891727][ T8535] do_syscall_64+0xcd/0x250 [ 104.893108][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.895309][ T8535] [ 104.896288][ T8535] The buggy address belongs to the object at ffff888033c1e000 [ 104.896288][ T8535] which belongs to the cache kmalloc-2k of size 2048 [ 104.901210][ T8535] The buggy address is located 1360 bytes inside of [ 104.901210][ T8535] freed 2048-byte region [ffff888033c1e000, ffff888033c1e800) [ 104.905045][ T8535] [ 104.905727][ T8535] The buggy address belongs to the physical page: [ 104.907560][ T8535] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888033c1e000 pfn:0x33c18 [ 104.910401][ T8535] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 104.912803][ T8535] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 104.915035][ T8535] page_type: f5(slab) [ 104.916182][ T8535] raw: 00fff00000000040 ffff88801b042f00 0000000000000000 dead000000000001 [ 104.918635][ T8535] raw: ffff888033c1e000 0000000000080007 00000001f5000000 0000000000000000 [ 104.921072][ T8535] head: 00fff00000000040 ffff88801b042f00 0000000000000000 dead000000000001 [ 104.923524][ T8535] head: ffff888033c1e000 0000000000080007 00000001f5000000 0000000000000000 [ 104.926008][ T8535] head: 00fff00000000003 ffffea0000cf0601 ffffffffffffffff 0000000000000000 [ 104.928504][ T8535] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 104.930967][ T8535] page dumped because: kasan: bad access detected [ 104.932795][ T8535] page_owner tracks the page as allocated [ 104.934356][ T8535] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5933, tgid 5933 (syz-executor), ts 46764733889, free_ts 46744818246 [ 104.940086][ T8535] post_alloc_hook+0x2d1/0x350 [ 104.941523][ T8535] get_page_from_freelist+0xfce/0x2f80 [ 104.943049][ T8535] __alloc_pages_noprof+0x223/0x25b0 [ 104.944523][ T8535] alloc_pages_mpol_noprof+0x2c8/0x620 [ 104.946064][ T8535] new_slab+0x2c9/0x410 [ 104.947302][ T8535] ___slab_alloc+0xd7d/0x17a0 [ 104.948684][ T8535] __slab_alloc.constprop.0+0x56/0xb0 [ 104.950207][ T8535] __kmalloc_noprof+0x2ec/0x510 [ 104.951628][ T8535] ieee80211_register_hw+0x1590/0x41a0 [ 104.953229][ T8535] mac80211_hwsim_new_radio+0x304e/0x54d0 [ 104.954877][ T8535] hwsim_new_radio_nl+0xb42/0x12b0 [ 104.956349][ T8535] genl_family_rcv_msg_doit+0x202/0x2f0 [ 104.957897][ T8535] genl_rcv_msg+0x565/0x800 [ 104.959165][ T8535] netlink_rcv_skb+0x16b/0x440 [ 104.960512][ T8535] genl_rcv+0x28/0x40 [ 104.961622][ T8535] netlink_unicast+0x53c/0x7f0 [ 104.962991][ T8535] page last free pid 5924 tgid 5924 stack trace: [ 104.964712][ T8535] free_unref_page+0x661/0x1080 [ 104.966057][ T8535] __put_partials+0x14c/0x170 [ 104.967362][ T8535] qlist_free_all+0x4e/0x120 [ 104.968659][ T8535] kasan_quarantine_reduce+0x195/0x1e0 [ 104.970166][ T8535] __kasan_slab_alloc+0x69/0x90 [ 104.971575][ T8535] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 104.973242][ T8535] __alloc_skb+0x2b1/0x380 [ 104.974484][ T8535] netlink_alloc_large_skb+0x69/0x130 [ 104.975968][ T8535] netlink_sendmsg+0x689/0xd70 [ 104.977303][ T8535] ____sys_sendmsg+0xaaf/0xc90 [ 104.978630][ T8535] ___sys_sendmsg+0x135/0x1e0 [ 104.979916][ T8535] __sys_sendmsg+0x16e/0x220 [ 104.981218][ T8535] do_syscall_64+0xcd/0x250 [ 104.982500][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.984140][ T8535] [ 104.984819][ T8535] Memory state around the buggy address: [ 104.986366][ T8535] ffff888033c1e400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.988578][ T8535] ffff888033c1e480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.990817][ T8535] >ffff888033c1e500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.993052][ T8535] ^ [ 104.994859][ T8535] ffff888033c1e580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.997001][ T8535] ffff888033c1e600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.999238][ T8535] ================================================================== [ 105.001870][ T8535] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.003932][ T8535] CPU: 2 UID: 0 PID: 8535 Comm: syz.4.629 Not tainted 6.13.0-rc7-syzkaller-00102-gce69b4019001 #0 [ 105.006919][ T8535] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 105.009976][ T8535] Call Trace: [ 105.010939][ T8535] [ 105.011783][ T8535] dump_stack_lvl+0x3d/0x1f0 [ 105.013111][ T8535] panic+0x71d/0x800 [ 105.014213][ T8535] ? __pfx_panic+0x10/0x10 [ 105.015485][ T8535] ? preempt_schedule_thunk+0x1a/0x30 [ 105.017020][ T8535] ? preempt_schedule_common+0x44/0xc0 [ 105.018588][ T8535] check_panic_on_warn+0xab/0xb0 [ 105.020000][ T8535] end_report+0x117/0x180 [ 105.021256][ T8535] kasan_report+0xe9/0x110 [ 105.022533][ T8535] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 105.024348][ T8535] ? __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 105.026179][ T8535] __list_del_entry_valid_or_report+0x1a6/0x1c0 [ 105.027969][ T8535] bt_accept_unlink+0x34/0x2e0 [ 105.029362][ T8535] l2cap_sock_teardown_cb+0x1a3/0x3c0 [ 105.030934][ T8535] l2cap_chan_del+0xba/0x8f0 [ 105.032277][ T8535] l2cap_conn_del+0x37c/0x730 [ 105.033631][ T8535] l2cap_connect_cfm+0x7aa/0xf10 [ 105.035071][ T8535] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 105.036634][ T8535] ? hci_cb_lookup+0x319/0x4e0 [ 105.038013][ T8535] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 105.039568][ T8535] hci_conn_failed+0x225/0x3e0 [ 105.040954][ T8535] ? __pfx_hci_conn_failed+0x10/0x10 [ 105.042474][ T8535] ? lock_acquire+0x2f/0xb0 [ 105.043785][ T8535] ? hci_abort_conn_sync+0x170/0xfe0 [ 105.045321][ T8535] hci_abort_conn_sync+0x91c/0xfe0 [ 105.046782][ T8535] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 105.048412][ T8535] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 105.050299][ T8535] ? __pfx_lock_release+0x10/0x10 [ 105.051772][ T8535] ? trace_lock_acquire+0x14e/0x1f0 [ 105.053287][ T8535] ? hci_disconnect_all_sync.constprop.0+0x77/0x3c0 [ 105.055170][ T8535] hci_disconnect_all_sync.constprop.0+0x104/0x3c0 [ 105.057014][ T8535] hci_suspend_sync+0x772/0xab0 [ 105.058403][ T8535] ? __pfx_hci_suspend_sync+0x10/0x10 [ 105.059945][ T8535] ? hci_send_monitor_ctrl_event+0x4e0/0x5b0 [ 105.061669][ T8535] ? __pfx_mgmt_suspending+0x10/0x10 [ 105.063194][ T8535] hci_suspend_dev+0x30a/0x510 [ 105.064593][ T8535] ? __pfx_hci_suspend_dev+0x10/0x10 [ 105.066129][ T8535] ? rcu_barrier+0x344/0x700 [ 105.067489][ T8535] ? kobject_get+0xbb/0x150 [ 105.068814][ T8535] hci_suspend_notifier+0x28d/0x2f0 [ 105.070322][ T8535] notifier_call_chain+0xb7/0x410 [ 105.071784][ T8535] ? __pfx_hci_suspend_notifier+0x10/0x10 [ 105.073423][ T8535] blocking_notifier_call_chain_robust+0xc9/0x170 [ 105.075256][ T8535] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 105.077259][ T8535] pm_notifier_call_chain_robust+0x27/0x60 [ 105.078932][ T8535] snapshot_open+0x189/0x2b0 [ 105.080269][ T8535] ? __pfx_snapshot_open+0x10/0x10 [ 105.081739][ T8535] misc_open+0x35a/0x420 [ 105.082968][ T8535] ? __pfx_misc_open+0x10/0x10 [ 105.084354][ T8535] chrdev_open+0x237/0x6a0 [ 105.085646][ T8535] ? __pfx_chrdev_open+0x10/0x10 [ 105.087072][ T8535] do_dentry_open+0xf59/0x1ea0 [ 105.088461][ T8535] ? __pfx_chrdev_open+0x10/0x10 [ 105.089890][ T8535] ? inode_permission+0xdd/0x5f0 [ 105.091337][ T8535] vfs_open+0x82/0x3f0 [ 105.092537][ T8535] ? may_open+0x1f2/0x400 [ 105.093792][ T8535] path_openat+0x1e6a/0x2d60 [ 105.095142][ T8535] ? __pfx_path_openat+0x10/0x10 [ 105.096581][ T8535] ? __pfx___lock_acquire+0x10/0x10 [ 105.098080][ T8535] ? lock_acquire.part.0+0x11b/0x380 [ 105.099599][ T8535] ? find_held_lock+0x2d/0x110 [ 105.100993][ T8535] do_filp_open+0x20c/0x470 [ 105.102298][ T8535] ? __pfx_do_filp_open+0x10/0x10 [ 105.103751][ T8535] ? find_held_lock+0x2d/0x110 [ 105.105153][ T8535] ? alloc_fd+0x41f/0x760 [ 105.106404][ T8535] do_sys_openat2+0x17a/0x1e0 [ 105.107780][ T8535] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.109292][ T8535] __x64_sys_openat+0x175/0x210 [ 105.110709][ T8535] ? __pfx___x64_sys_openat+0x10/0x10 [ 105.112255][ T8535] ? ksys_write+0x1ba/0x250 [ 105.113569][ T8535] do_syscall_64+0xcd/0x250 [ 105.114890][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.116577][ T8535] RIP: 0033:0x7fdda2d85d29 [ 105.117879][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.123403][ T8535] RSP: 002b:00007fdda3c3f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.125794][ T8535] RAX: ffffffffffffffda RBX: 00007fdda2f75fa0 RCX: 00007fdda2d85d29 [ 105.128077][ T8535] RDX: 0000000000000200 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 105.130339][ T8535] RBP: 00007fdda2e01b08 R08: 0000000000000000 R09: 0000000000000000 [ 105.132620][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.134871][ T8535] R13: 0000000000000000 R14: 00007fdda2f75fa0 R15: 00007ffc8f983628 [ 105.137136][ T8535] [ 105.138633][ T8535] Kernel Offset: disabled [ 105.139881][ T8535] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:25:46 Registers: info registers vcpu 0 CPU#0 RAX=00000000001320f5 RBX=0000000000000000 RCX=ffffffff8b2a17c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f496256bac0 CR3=000000004ee4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdd3037ca0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbede02a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbede02aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbede02aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbede02ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbede02b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbbede02c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000080000000 RBX=0000000029c0e495 RCX=ffffffff8185f1ef RDX=ffff88802298a440 RSI=ffffffff8185f1f9 RDI=0000000000000007 RBP=000000006789876a RSP=ffffc9000479f9f8 R8 =0000000000000007 R9 =0000000000000000 R10=0000000029c0e495 R11=0000000000000001 R12=ffffc9000479fa98 R13=ffffc9000479fa98 R14=ffff888030f04934 R15=ffff888030f04800 RIP=ffffffff819a24db RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055557bc53500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff3cea7da8 CR3=000000002ab0e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=2fe54f092fe54f09 2fe54f092fe54f09 2fe54f092fe54f09 2fe54f092fe54f09 2fe54f092fe54f09 2fe54f092fe54f09 2fe54f092fe54f09 2fe54f092fe54f09 ZMM22=4eaf36c84eaf36c8 4eaf36c84eaf36c8 4eaf36c84eaf36c8 4eaf36c84eaf36c8 4eaf36c84eaf36c8 4eaf36c84eaf36c8 4eaf36c84eaf36c8 4eaf36c84eaf36c8 ZMM23=45aa378c45aa378c 45aa378c45aa378c 45aa378c45aa378c 45aa378c45aa378c 45aa378c45aa378c 45aa378c45aa378c 45aa378c45aa378c 45aa378c45aa378c ZMM24=5c95b5485c95b548 5c95b5485c95b548 5c95b5485c95b548 5c95b5485c95b548 5c95b5485c95b548 5c95b5485c95b548 5c95b5485c95b548 5c95b5485c95b548 ZMM25=f6aef859f6aef859 f6aef859f6aef859 f6aef859f6aef859 f6aef859f6aef859 f6aef859f6aef859 f6aef859f6aef859 f6aef859f6aef859 f6aef859f6aef859 ZMM26=ca05674dca05674d ca05674dca05674d ca05674dca05674d ca05674dca05674d ca05674dca05674d ca05674dca05674d ca05674dca05674d ca05674dca05674d ZMM27=8c01e4938c01e493 8c01e4938c01e493 8c01e4938c01e493 8c01e4938c01e493 8c01e4938c01e493 8c01e4938c01e493 8c01e4938c01e493 8c01e4938c01e493 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=1b0600001b060000 1b0600001b060000 1b0600001b060000 1b0600001b060000 1b0600001b060000 1b0600001b060000 1b0600001b060000 1b0600001b060000 info registers vcpu 2 CPU#2 RAX=0000000000000074 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0ed5 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000319ec38 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000074 R14=ffffffff851c0e70 R15=0000000000000000 RIP=ffffffff851c0eff RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fdda3c3f6c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2fb20220 CR3=000000004895c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000001000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd93bf2090 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f6e3a6d5e007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4b1f485e005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 635f6d6361692035 3333313d6f3d6920 2273666f63732037 32223976303d2022 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000bbd4d RBX=0000000000000003 RCX=ffffffff8b2a17c9 RDX=0000000000000000 RSI=ffffffff8b6cd9e0 RDI=ffffffff8bd1ef20 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f8ed1d7dafa7749f d961864e66d28525 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0e3fcf87a22de39 9bc70207060e842c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1c401eb8dde217 6231a7a7d25fd088 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 07c65ca9794cf6d2 fbc6f438493f9dce ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000060 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000020 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fc8dd1eead448e66 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 78e3b68600000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 20a5430173e6410b 8562d54e20fcf029 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000004fb14486 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 600769c1d729a274 812d6492ed68d281 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c218d130f55a5e35 b678aa5fdeb7f81d ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f503174b488 00007f503174b480 00007f503174b478 00007f503174b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50322ad100 00007f503174b440 00007f503174b458 00007f503174b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f503174b498 00007f503174b490 00007f503174b488 00007f503174b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000001d0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000