last executing test programs: 42.701123315s ago: executing program 0 (id=62): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r4, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r5 = syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26}, 0x20) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000ec0)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x1c, r4, 0x70f, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) syz_open_dev$video4linux(&(0x7f0000000000), 0x1ff, 0x1000) (async) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f00000001c0)={0x4, 0x1, 0x8ad9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980903, 0x4, '\x00', @ptr=0xe}}) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_mreq(r6, 0x29, 0x15, &(0x7f0000000100)={@mcast1}, 0x14) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000008d"], 0x0, 0x26}, 0x20) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071004300000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) 42.694527394s ago: executing program 0 (id=63): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000006380)="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", 0xf27}], 0x1}}], 0x1, 0x20000004) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r6, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r6, 0x5, 0x20, 0x1, 0x9}, &(0x7f00000000c0)=0x18) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x2) getsockopt$ax25_int(r7, 0x101, 0x9, &(0x7f00000001c0), &(0x7f0000000000)=0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x10, 0x4}, 0x94) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x400, 0x0) ioctl$SNDCTL_SEQ_RESET(r9, 0x5100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r8}, 0x18) r10 = socket$caif_stream(0x25, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) 42.471119936s ago: executing program 0 (id=65): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x39, 0x1, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x40) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r2, 0xc2604110, &(0x7f0000000000)={0x0, [[0x7fff, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x0, 0x0, 0xc000, 0x5], [0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0xfffffffe, 0x2]], '\x00', [{}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x5f08, 0x6}, {}, {}, {}, {}, {0x4, 0x8}, {0x0, 0xfffffffc}], '\x00', 0x0, 0x0, 0x0, 0x2}) accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) ioctl$FS_IOC_SETFLAGS(r1, 0x40081271, &(0x7f00000000c0)=0x4) ioctl$BLKRRPART(r1, 0x125f, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x4000) 42.470439521s ago: executing program 0 (id=66): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x9, 0x4403) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000040)) read(r0, &(0x7f0000000080)=""/246, 0xf6) recvfrom$x25(0xffffffffffffffff, &(0x7f0000000180)=""/181, 0xb5, 0x2062, &(0x7f0000000240), 0x12) r1 = accept4$x25(0xffffffffffffffff, &(0x7f0000000280), &(0x7f00000002c0)=0x12, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000340), 0x10000, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, 0x1407, 0x0, 0x70bd2b, 0x25dfdbfe, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x48011) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f0000000500)={&(0x7f0000000440), 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x20, 0x1410, 0x20, 0x70bd26, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008090) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), r3) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x3}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0xfffffffc}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0x2}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x24000004) socket$netlink(0x10, 0x3, 0x2) connect$pppl2tp(r3, &(0x7f00000006c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x4, 0x2, 0x0, 0x4, {0xa, 0x4e20, 0x0, @mcast2}}}, 0x3a) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000700)={{r1}, "9440ed54333ccf0783ef6463bd9140876977720f38cfbbffb9380cc91d6313bce1ed9bacc205d8e5d53fde741ef18941ea079d8668bb627f3c509e80530de4223e40efd763d6d150cc9eaf13c04c77aab3f5f572186d50ec9353a19134371fdd6c1812e33e55f9414e472c979d28442940a57c1fdd09d747ad0b8df2a81b2a641ace2df4f2b858abe3b161d9238bc2acad35606953e1468819d2d52fed534f26e1ae85ad1c79487267c89928e045423247e94c753eaf55dee186cfc2594b4bde68b10cd861460507bd92b731390285497918db294096c7abe354f3466835a2acc5c32311012c4159f7890c071b9f98d1f11b2afebec36f0af1fe96a861fc344b159efa038e4d66b46cf05e82c5b1faac3f4994f7e8529130afa69e0c9971607ebc4f32ca0d35f9b9808795153ba43de8e32c0e54c94a49f37d5e621b8c0762cd726bc26d83cf7a8ff7c0675ea300ae38f1efee132f530a52c2e114aa831125f9cabe41536f721e83b847f7ccddd914cc8ef68b31d8002dfb3b25e61cc2bb979e83a3eb7b8c409f4fd4587897a1333f5f2ac3ef82a8067b010a15ccd7aa58d6c216fa645656f0d901c9c3f56c3d56927817a705882bd135c9d9b2d379c4288e0375ef32425c3d77de7532c5534923c873c2e15a8a28ce40c5f55eb2a1353f4e2465330cf3426997653d419450266a7c5a88f20c221e85de6e1053589bb1989da381199a5feaa2237db1ade25da260180b82f791b7494527ae762e26d461857b7c297ea5d70968e5699a5f010d73b777cbf6a377b1cd18a8cae2f99f486d830e72e6da15b4cc6ad49cfa74eabf950835ba1880d9c805c1ab0a34004a917898f74379de44214ffe5b8e422644d13bc4988f703dce79222a71d7bbc411152ff196f6b92aa24d36b0e6023a1a9a050e4cfc81a5202a5437eec0dc9f73d8cba485557d9f199a53587a5648a0b9298d23220389b70b6c7dc3a7dd6d556a5429a45d33ff902a8a44dd24128310054971a20851cfa9f10e104c338524ea03256d6e7387e341f0d64d42817a24775738d62cf8ecfb59c59c60d588f2b138127081a375915d090da0299b66f74536a97b39e1f4cae58dce8fd80e4081050380703ba9ed3e80bd8ecff2fd4f4de4402d5f60d7e6cef59505a8e56ed113c9be8ea56a4316633d8e1ab579dd0f71a053ee00bbe70554ff8d10d8d4783c74c69a911d4cbbc9544a58128468166b7517fa938310427345368d0ed62c74e02f0a34e033dd429c4255dea307dcaf1be4f25f51da4cba6cd97922c77e6c977fa463609c36270c71196fed678eae23b27db79c07d27bcb53be476d8d2dc9a763cc1929b563ad9f481bcd48f95fdcf0e22b95b44d373103b829c2f51b5b62440b1f4ea9f7220c2c3aa6d573956d9b50ec83597c629ac6a0aed3b1a630727e53be838439432ee22e02ba03f5be1cf351af8abc742d7faed736eea9050e95ccfad030d0f80a2340626ff840d4bf11eb15861ef738c8d3ba5e726100621719f8c13e144243f3cf959f250b3428a2f9eb4f0537510a52decbd4bf71eb2f9b3cd3ffbb7d82f3ac8ab25385a9d6192870c3769bb925747cefc0acd4d5d642e9c9cdad3d1aeb462167e595bef06eb532e5df955a4aca6a35eea794ba6839f85554d5f457e5c6ebff9947d0c9dfbf54387c4bd66c1b9ed74b5ccb30422b32f0c6309370cfbcb2b8e7994b14c3963725b1af7dc802f10e3f6d869f7137d78b0a1673810662bae65ac562672299afe3ec986892132b0d5a6843fc305929bc4cf69deaa48a11c823cd552d3f4bf62c72cb4184caf9aa06233e63d15204318c710f623bdf9b2e1ce027c957230b0b367ed38f5373f00d5340d6417bc548b43ea231e3cf5d1f9bab09fa5d36422ee655a2f138645b793b628b9a7bc9fb8d8c2164fac502ce7442b76f637ad48241661d7af9cfc5d73af701b42b6fe56ba71e6b36a5a8007f03f8a1bca6e5b799aeea54926511dcc71cfa225a19a6813ecc64b485745d1853b1a82308580f9f31bdf7f7f753adcf32e565f738b4ecbb814c25c96cd02d0cf4874a33b530f4971895858d8344742f46ffe6e7b6463cf8dbbe59fa2345fcde235df80d26ef724bc93cb48db62f12f2229ceb54193835121dd3fb13d2ab6b040011b78e6ef79f6b09a27298a9b4844c0e5608c9652a9fd0f9920a3d99fff80a2b2ec6c330d8a210709b1fffd46b6e3e2cc1c6c3d02d5efa5adc35cd2b992ff2977e105bfc37f84ea800ef89b2379f7e2049a2f4276b9423d7f10198fbd363b7b819fdc09ccfc95df7fe478f172316b8547dfefe2b9de229abb82f0f22898f9cbfa76ac7f9be4fb048dba05f3ff6b694160522efd985799f160b0febb6aa7e099d06313d654de83b2064d799dc286d486859e8f92d5a37db74f02fe326938f81ceed63e7ebe43f9f0f07f6fce29540f083904170a7321fb544ec6b5bcf6d0e41dc8419d22ed8ad228e9aaec8af562adc737ea8c2785cdd19df83a5ed860b83e8e67982b14019d27ce3e6b2bb670a28b7da6d2d5665ba536b9b4bcda48870e518bcdd13ba824dc4eae5bc2941634baf75d32e1fd4039e5f4282a873ab0aeadeef458e7bad1e9690c51df38b19bac402c106c28c6bc4403429a7d1bc3c7f4f2244083211c5c27d98d46fcd1d73643c572eb0622020ffffa01b62298bb99e7a5ff5538299df25f4f40635b7eeade2b2dc028cccfaaa9e3b3a14f9fc1a429123c613b3b2b02be936bbbccdfd60b1dcee0fda83d969bcd8e116e4c8ad853c93a22b3cbdaa10585da82eb91cda0da9ddf65867bbc5ef17135bcaaa472e722ca18b96bff37b31fd168deab8632f40fec1e149d65ed7a673ecd459eceef34e343c0d6e7e8d1ca1b11b87fc0ed7d77b9c4134dbb5ce4c70ba662dd453c908af1f8b95171c3e25a0e3865a526b0020d851e9fc9f2b17a3c5ca01be45a0a83eb64d865f29d3d3cb3b46c476e9297e363529da1ddd008c30e395e553a8ad9919065dc425c803d2bd51fb6263ab3dcb1a6965f0049c309b10fb77f0614e9166790bb6735c47825c762650f9a11010b6812860240cb88bb71a466a0d84ef4ee26a851a4712a574809d28f7e2978ae215e885cc7a30a2e75c55a7d8967e5a93adce955b8440a5c7f48099068ca13f0ee30f3c9d5faa5a7fb9bca93cf540d1da724bea2f336c92180e258de8d6620b1286e78db223571facc4166b0a83902c00c3721af7a840ebe7dd8f150cc1d40f7a50c68c2b5caa56d6d77615cf0c526370fe06bba12fd1b5aaa331345c9fa5cde45bbf0491b4cb859bad7f954815a61096586c7ca7bef83e7cb03075f3a2aee1d33a570765a3b13c9c517c8db3a2a190c9ad2324bb355d06c47a0ee223afb7d08b934cd46e68ecdca3700014b7b5b5ce468899bff1d5d51c590daecb7dc4b54b334d90bb6f0122d21ab17c4b29ee59e492b8292c334b02fcfe1a33c764009d490d426d833fde4ad3ab370d09ec3716c031b4d124041c9c74ab196e1b69552e52c960cb42f998db6e562a15a199052dbca1386ec8db17bfa0ae01539bce31e946069260f9cce20f6e1fe409cf2c231077040ea02a1ed5ea6ad25f754154413f4dfafe2423f7e6b81b6ec0474cededd8b9d727d60320cd87e61381e8ce73773b0b7f4b0cb0989888387070924848b76a501412cdeca61c4b8b7917df7dacd5ff5e73c5986a3e8907ce9c5457a461c7fb9bd0c6898b4473122fc9b8f32da93b9eaf67a028c066ef1013d411ebc84851840b9994426b600380091bc911e39b120721cf6661eaa8ee750133fcd378cc3c0955f37203dd42cf2bf5a6e5ecc20fa0d88262c9ee5206502803882ffdc9adb8a84be32749ca4865a74da66988086b50e2538c4c1d361509b8cc0fbc15e50ccaa3c0b9436c82b556e05ecbcd51669a3b163d732361ceede8d04a58c947bda85221382871177b41df8784efbd0c00b2c3aef38ced946ca44e78d2c728064dd7d29bd2fbc99380a8378c8010ef5a4dd98f2de79de7647363ca2806a0cf2a24c3b449157dcb353ce3052ba04695fe7a1faac37dd6fb9f7f10fd3bf8508f82ea003c020022e5e090137e74eeac2c69646636d676ec9653b4e8eec9e8073fcec239fb9f0fae6e5ccaf037a5bbb605454768ee1e68665999d4202c881bb79b5f59f841229e793be309a8a12cf1b26471c61b7b1ddd904b796980f30bc7462373a064b030a12f86eeaa876456ed7d96112178648834df2ffcb73334414bbea67d3fbd211f28dc250b0f0cea2512dabe8792a9c115d70d49ffdb84d729fb0f47187b55f31fa9f69d4f9419efe4cf658b90acbe469c2e7a96f557598bb232bbfcc6f937c883dfa75d12998940c323eb35436fa306256533c60b8d1883a6e2ab2591f353064cce1f0caf3f8b226ad708f36af956adfa50a8dec5021ef3744b8550652a9e3022c78c7726bd55fa680e57c5d0d62b4089fcfe4609d876cb9ae2aff37957523ef0ae9dc29a738270d5dc6aef0e413a74071f5aba1ff562786f152b494e8dffd23e327a33463ff06cb7023296190b2ff7a0956412a62192b06fc9460908d38e1717eea419d6bedc9223d57f39501cdc036098425746549a98772afe685f5a73fd7022c8219b5cbab33e5d14cf891851c542ee8f3d10b4fd82ec580ead3754cfb3170949112641abafcdd0e0fc0a281b2d768273e5ef56e442f36dfe63553e6567917f56c3613dbc01d9589b4305324a191c0f2cc59427a2420dd3df011b503946c6dea89f48c1e4f9e272affc8b2c2e6944bff180db9c275b6dc2a050b1134b77e523c2c05a06e1a5786408925018ed4c23afb420e4ca0ccdcc2f365d13a8a9c61284c592c6b10f024caad2094053e67f268d950136fd3eab7775ac9414d2f5848a85ea90f703fa8e19b6ab29c46d38c24f152e1ab3563d2c640791b5801a4831f8c37b44a2b9a0069f1cf6af6d6e09648d0385f7cebfada57b2b154dfc89187b120e079e22368c3f532e3043afc8499165d67c61f6bc8843cff5f8742981597364bc2a7246b85529749ebc807452d0ed90a754c37ba735b67614f3549d6fd94bcea508618f77bb3b2f70031085cea2ed9b70af527b9472fe4c97ff1883c2536942f83537d4a112c754e7916793c4124e1dd427a87bcc990df4f1b9c877e0204e123b5d4115f58c0c2bd24e31fc6f59e8a660b9b717b39194d83361cf8c88e0712ccb0dc7b96d0bcff1b8657accb6aece2b454bd11fdf35b6e5f7d063fd9359324d45994541c21fa9837f69168d6a7ff0d43264b09315f76fd99e071154629d5a89db8c54d70851a53abbcd628bab5ad22df60a841d19853ae94e0f6f07bfadf9132ac61f6b502f8282e61a238f36fe209b6dc9269385affc547f777ed1ae9b87c4e00ac2a1e7283f46028c11805879f909c8cfd094d869c5f2baa8c554026ae7db34c02b81573a598bf64e43717a7239e411fd4fb6291033662dd8636af8cb131064924aae3648b15b61678830d5889658d23545ecd124fe206395c8bc6377295867e54ee9267b66ded5eec4f1920e96d085204c98fa377f792935a36f61d6eb68fc241bf5d4b56aec73776601d6a2fc815890a1ee5caf18a2d0b980ca05fc75add4e4939203d8182895f35c8f2cfd9df23fc674e2691e8c6b23cf1b2ad9e1641497f2beb674bb6fd3e230572941afc10a3efc711fe4d61dd57118e00a35726c57f388d0362c1cd1e5bb584fc2ee3fd387a82cfd1ca9fca6f82e7a2ff585ba88a586fdc12a8e13c8b300a83cec0970eb"}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001740), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_DEV(r5, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, r6, 0x2, 0x70bd27, 0x25dfdbff, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40400c1}, 0x8040) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f00000018c0)={0x0, &(0x7f0000001840)="3667f07d39ba71124f725c174e9fb068d20102ec8cfa29543fe4f5b69065430024030034384d45dd541a49d57c5f602b11cd09e25d6a3caf7a0fd84f81dc696e75495fba55cc8b84c288c4ce4e0a72480893a2", 0x53}) sendmsg$IEEE802154_ADD_IFACE(r5, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x5c, r6, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40480c4}, 0x8800) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000001b40)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001b00)={&(0x7f0000001ac0)={0x34, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x2}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x920}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x125e}]}, 0x34}, 0x1, 0x0, 0x0, 0x48000}, 0x91) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000001b80)=@arm64) ioctl$EXT4_IOC_GETSTATE(r3, 0x40046629, &(0x7f0000001bc0)) getsockopt(r7, 0x0, 0x4, &(0x7f0000001c00)=""/123, &(0x7f0000001c80)=0x7b) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d00), r7) sendmsg$DEVLINK_CMD_GET(r7, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x30, r9, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@pci={{0x8}, {0x11}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x40) syz_open_dev$usbfs(&(0x7f0000001e00), 0x80000001, 0x101000) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000001e40)={0x0, 0x80000, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SYNCOBJ_RESET(r10, 0xc01064c4, &(0x7f0000002040)={&(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}) 42.398649902s ago: executing program 0 (id=69): arch_prctl$ARCH_GET_UNTAG_MASK(0x4001, &(0x7f0000000000)) 42.339460615s ago: executing program 0 (id=71): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x49, {"0f01ca2e646740c159368266bad004b0bdee66baa100ed640f017c9993660f38816da4470f019d0d000000f3430fc776100f01c3460f013a"}}], 0x49}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) r3 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xbc) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x3}, {0xa}}}}, 0x9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='system.posix_acl_default\x00') ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000140)={r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 27.331185623s ago: executing program 32 (id=71): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000100)={0x0, &(0x7f00000001c0)=[@code={0x1, 0x49, {"0f01ca2e646740c159368266bad004b0bdee66baa100ed640f017c9993660f38816da4470f019d0d000000f3430fc776100f01c3460f013a"}}], 0x49}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000280)) r3 = syz_open_dev$ndb(&(0x7f0000000480), 0x0, 0x0) ioctl$NBD_SET_FLAGS(r3, 0xab0a, 0xbc) mount(&(0x7f0000000300)=@sg0, &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='jfs\x00', 0x0, &(0x7f0000000000)='usrquota') syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{0x3}, {0xa}}}}, 0x9) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) lremovexattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=@known='system.posix_acl_default\x00') ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, &(0x7f0000000140)={r7}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f00000007c0)={0x48, 0x2, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000100)={0x28, 0x4, r6, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x51e}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0xfc, 0xe1, 0x0, 0x6, 0xd9, 0x40, 0x1, 0xfb, 0x8, 0xc, 0x0, 0x0, 0x40, 0x1, 0x5}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x7, 0x8, 0x0, 0x4, 0x0, 0x8001], 0x1, 0x3c4210}) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x101080, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.199842707s ago: executing program 4 (id=709): socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x400000000ec82, 0x0) (async) r0 = syz_io_uring_setup(0x5ce, &(0x7f0000000480)={0x0, 0x9cd6, 0x80, 0x0, 0x34f}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x82e, 0x0, 0x0, 0x4}]}, 0x10) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) openat$ndctl0(0xffffffffffffff9c, 0x0, 0x121000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e1e, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000400)='veno', 0x4) (async) close_range(r3, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0xb2752a96f73d6e14, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3.090724529s ago: executing program 4 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r1, &(0x7f0000000540)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0xfffe, 0x2, 0x0, 0x3, {0xa, 0x4e22, 0x64a, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8}}}, 0x80, 0x0}, 0x10000004) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000200)=@multiplanar_mmap={0x7f, 0x0, 0x4, 0x0, 0x7, {}, {0x5, 0x8, 0x8, 0x35, 0xc7, 0x2, "9ed5e4b6"}, 0x1, 0x1, {&(0x7f00000000c0)=[{0x3d, 0x7fff, {0x3}, 0x5}, {0x8, 0xf0cb, {0x58ae}, 0xfffffffc}]}, 0x6}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000b80)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$inet(r3, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000240), 0x1}}, {{0x0, 0x0, &(0x7f00000004c0)=[{0x0, 0xf00}, {&(0x7f00000002c0)="00000000008542f4cdb9eaa26519373f589fc2eb12c86e15e5d786493663546e514e6ad1b23e97c489", 0x5}], 0x2}}], 0x400000000000039, 0x8004) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0x1c) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$inet6_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "06b72e2dde239a83", "6e0f1b84fa6caf6b5f4821e21a97e82abd6b94a49c5238fc7892dfde28ec6095", "6e3cebd7", "b9ed6dc3992aaa32"}, 0x38) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6}}, './file0\x00'}) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964") r7 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000380)={[0x40000006, 0x9b, 0xfffffffffffffffd, 0x5, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c2, 0xc595, 0x59a, 0x5, 0x7, 0xa, 0x6, 0x200000000c], 0x8080000, 0x2018d3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) 2.967010129s ago: executing program 4 (id=715): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=ANY=[@ANYBLOB="280000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000004000a00020e0000000000000000"], 0x28}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40000d0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETDEBUG(r4, 0x400454c9, &(0x7f0000000180)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) socket(0x9, 0x3, 0x8) close(r3) close(r5) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) ioctl$TUNSETTXFILTER(r4, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="000001"]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x4000084, &(0x7f0000000340)={0x11, 0x0, r8, 0x1, 0xd8, 0x6, @random="e6ab5b54a89b"}, 0x14) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f0000000000)=@generic={0x2, 0x4, 0xfc1}) ptrace$ARCH_MAP_VDSO_64(0x1e, 0xffffffffffffffff, 0x2, 0x2003) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0xfdcd, 0x0, @wg=@data}}}}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r10) socket$inet6_tcp(0xa, 0x1, 0x0) 2.776230468s ago: executing program 4 (id=719): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000180)={0x0, @bt={0x1, 0xfffffff8, 0x1, 0x1, 0x0, 0x2, 0xa4d, 0xd745, 0x80000000, 0x9, 0xe, 0x6, 0xe4, 0x5, 0x4, 0x10, {0x9, 0xfffffff4}, 0x5, 0x41}}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808d", 0x46}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000800)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c1fedaec3144d1ee66a0eb0750363e346cb930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbdd600fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e32b359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0493121eec3e05eacbe7835e79e74881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd69165358c4cd474639fc13300317b7fed115fb9818b20d177a39157101dbd8e23bc9ed32efed96c410a103d35336fb4ee4000bfb3d32b0181ff3d726a7dc6432a336a42b50b2c6877cb63b410d746b35fc721e5992ba47c3a2bc2d3679abe0794d226b7b0c333c3000fee7adaafb6efd57382eb2a86d71acaae52a154477a5b66757a886f4ad5446607520c17fb81ede0473cd897a34c7c9f41b653d568e4", 0x24a}, {0x0}], 0x2}}], 0x2, 0x2090) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000002c0)={'pcl816\x00', [0x4f27, 0x3, 0x7, 0x401, 0x80001, 0xc88, 0x0, 0x5c952399, 0x5, 0x3ff, 0x40802, 0x1600, 0x7, 0x1, 0x9, 0xe1cb, 0x6, 0xfffffffd, 0x4, 0x395, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x5, 0x4, 0x8000000, 0xdffffffd]}) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x80000000, r0, 0x3}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendto$inet6(r4, &(0x7f0000000240)='x', 0xfc1c, 0x4000050, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) connect$unix(r4, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) 2.570939482s ago: executing program 2 (id=723): r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0xb9) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) close(0x3) chdir(&(0x7f0000000140)='./file0\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) ioctl$I2C_PEC(r0, 0x708, 0x7) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x31, 0x5, &(0x7f0000000000)={0x1a, "a3dd982d0ba2d984c335f78f76704978a2f62f39d29c31372205cd39c53f80d4be"}}) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0xb9) (async) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000080), 0x2000000, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,size=8']) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='cdg', 0x3) (async) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) (async) close(0x3) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) (async) write$binfmt_script(r2, &(0x7f00000000c0)={'#! ', './file0'}, 0xb) (async) ioctl$I2C_PEC(r0, 0x708, 0x7) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000140)={0x0, 0x31, 0x5, &(0x7f0000000000)={0x1a, "a3dd982d0ba2d984c335f78f76704978a2f62f39d29c31372205cd39c53f80d4be"}}) (async) 2.481017102s ago: executing program 2 (id=724): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x6, 0xffff, {{0x37, 0x4, 0x0, 0x3c, 0xdc, 0x66, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x24, 0xf8, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4157}, {@multicast1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@dev={0xac, 0x14, 0x14, 0x34}, 0x4}]}, @end, @generic={0x86, 0xd, "159d95b65ba784e99b3a8f"}, @lsrr={0x83, 0x13, 0xd1, [@local, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xf, 0x42, [@loopback, @remote, @rand_addr=0x64010101]}, @rr={0x7, 0xb, 0xb9, [@loopback, @broadcast]}, @cipso={0x86, 0x24, 0x0, [{0x5, 0x9, "0c9ad87a12097c"}, {0x5, 0x11, "013a0f78f2b4b452c08fa78fb646d1"}, {0x2, 0x4, "9d49"}]}, @cipso={0x86, 0x19, 0x0, [{0x6, 0xc, "8ec1e6c33fe8f732e733"}, {0x1, 0x7, "982e8b34e3"}]}, @lsrr={0x83, 0x27, 0x82, [@rand_addr=0x64010101, @private=0xa010100, @remote, @loopback, @remote, @multicast2, @private=0xa010101, @empty, @local]}, @generic={0x89, 0x5, "c31e48"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x34, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, 0x4d014}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x22004002}, 0x4000810) setsockopt$netlink_NETLINK_CAP_ACK(0xffffffffffffffff, 0x10e, 0xa, &(0x7f00000000c0)=0xbf4, 0x4) 2.43094903s ago: executing program 2 (id=725): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x10800, &(0x7f0000000040)={0xb}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, r2, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x362c, 0x25}}}}, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}]}, 0x30}}, 0x20000041) 2.430709586s ago: executing program 2 (id=726): set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) set_mempolicy(0x0, &(0x7f0000000000)=0x5, 0x2) 2.350320203s ago: executing program 2 (id=727): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) (async) personality(0x5400004) (async) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, &(0x7f0000001e00)=""/102400, &(0x7f0000000040)=0x19000) (async) remap_file_pages(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x1, 0x100000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x321000, &(0x7f00000001c0)='grpquota') (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) linkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x400) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="10002cbd7000fbdbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffff0f175b5e008100"], 0x2c}, 0x1, 0x0, 0x0, 0x40880}, 0x8008) r4 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) (async) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c51000/0x2000)=nil) (async) mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x2031, 0xffffffffffffffff, 0x0) (async) mremap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) (async) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x20, 0x7800, 0x2, 0xffff, {{0xb, 0x4, 0x0, 0x33, 0x2c, 0x67, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@cipso={0x86, 0x6, 0x3}, @ssrr={0x89, 0xf, 0x49, [@remote, @empty, @multicast2]}]}}}}}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340)={0x3, 0x0}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0xc, &(0x7f0000000600)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRESDEC=r6, @ANYRESOCT=0x0, @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r7, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4}, {0x0, [0x0, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x1c, 0xff9, 0x8}, 0x28) (async) write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r5, 0xc0045009, &(0x7f0000000040)=0x80000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000d10f265cfcc8adfe0000006172269baffb8abfe4d648c54baa08220ad7083f73e095d56bf22ff49e22269d4c35206e9db657a7e871049607"], &(0x7f0000000080)='syzkaller\x00', 0x5}, 0x90) 2.347104337s ago: executing program 2 (id=728): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfc, 0x7fff0026}]}) close_range(r2, 0xffffffffffffffff, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000100)={@hyper}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7cb, &(0x7f0000000140)={0x0, 0x0, 0x8}) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)=@v3={0x3000000, [{0x6, 0x3ff}, {0x1, 0x5}], r3}, 0x18, 0x1) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = inotify_init1(0x80800) inotify_add_watch(r5, &(0x7f00000000c0)='./file0\x00', 0x6400000c) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffff70) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x0, 0x0, 0x0, 0x4000007, 0x0, 0x0, 0x41000, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000180)=[{0x5, 0x2, 0x7, 0xc}, {0x4, 0x4, 0x1, 0x1}], 0x10, 0x226}, 0x94) r6 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000200)={"a95500", 0x8, 0x5, 0x0, 0x0, 0x5, '\x00', "037ec42b", "8000", "e9000200", ["e86621d9cc668c395f77c506", "3549ffffffffffffff010800", "006a9cc1f000", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x8, 0x1, "1efcffffffffffff00", 0x0, 0x0, 0x0, 0x27}) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_BASE(r7, 0x4008af12, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x6, 0x6}, 0xab4, [0x5, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x2, 0x1, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) 1.209577924s ago: executing program 1 (id=755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @multicast1}, {0x4e24, 0x17c1, 0x8}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) syz_emit_ethernet(0x5eb, &(0x7f0000001740)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x5f7, 0x3a, 0xff, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], @dest_unreach={0x1, 0x6, 0x0, 0xc, '\x00', {0x2, 0x6, "00efff", 0x8e, 0x16, 0xff, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [@dstopts={0x33, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0xffffffff}, @generic={0x9, 0xf9, "61a3ae19bf6a2b6deb3206dcee7f456b5ba2b638a82e72fc794c4d432a99437685f843d9322d2156b6965d98c7d72dbc9ca342c1ba95409449922ee581a79e0a923ab6bb8da0a6a4dc5295a2510cf4d3c11699fc83323c289a9c9308f8e1ede89442725f9e73b7f51166e25f0ee9edab220b4550ba494b25ef1baca6a8c63af3b3e8f8c0eb6fd3998afe731d2ddef2efbec3e60498540b45bb9c0995811667a8a22f626a3878ad6403156c7d02315f5f1a19ac9fafe687ce3866c9aea2e80b9e38efefc2c4e68525253046a877b0e4988c278cb76354f98b4eb89e9725da8b36d523746ffe1408d8cd7e683a9f78622d240d2b7c7a467fc658"}]}, @fragment={0x2b, 0x0, 0x68, 0x1, 0x0, 0x5, 0x69}, @fragment={0x62, 0x0, 0x84, 0x1, 0x0, 0x0, 0x68}, @fragment={0x2b, 0x0, 0x3, 0x1, 0x0, 0xd, 0x67}, @hopopts={0x62, 0x7a, '\x00', [@generic={0xfe, 0x3cf, "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"}]}], "6190bdffa7df8b21f88a652a39563db9d17767693e24abc0a9c8dbb1217e932472e4edbadb035ca37028771cb76b0d3e1100fcccb0fe0c572631758d977f25fecfc4916b80993a82b7cec10407311a2929596f2f2b2813af0d949710ca049ede1ac69f900ad20c3d86e41963696069f366f25cfb99d7abffa2475bd68b"}}}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "9b6a37b458a8056dd9a87f963d140d7a9d3ac869f3a860917523679abf4579f9cd656422a633a39f0300000000000000000000000100000000000000"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @random="429e82211cf8", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x3, 0x7, 0x28, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @timestamp={0xd, 0x0, 0x0, 0x3, 0x9c, 0x229, 0x4, 0x6}}}}}, 0x0) 1.138254228s ago: executing program 1 (id=756): sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x8070) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=@newqdisc={0xe0, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xf}, {0x0, 0x6}}, [@TCA_STAB={0xbc, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x8, 0x44, 0x101, 0x0, 0x0, 0x6cdc546e, 0x1}}, {0x6, 0x2, [0x7fff]}}, {{0x1c, 0x1, {0x7, 0x2, 0x9, 0x7, 0x1, 0x7f, 0x0, 0xc}}, {0x1c, 0x2, [0x1e7e, 0x1, 0x100, 0xf98c, 0xd, 0x8, 0x7d1, 0x7, 0x8001, 0x7f, 0x60, 0x700]}}, {{0x1c, 0x1, {0x1, 0x6, 0x7, 0x10, 0x1, 0x1, 0x6, 0xa}}, {0x18, 0x2, [0x7, 0x202c, 0x7, 0xfff, 0x4, 0x0, 0x80, 0x3, 0x92, 0x7]}}, {{0x1c, 0x1, {0x3, 0x3, 0x7, 0x0, 0x1, 0x9, 0x6, 0x3}}, {0xa, 0x2, [0x80, 0x5, 0xa]}}]}]}, 0xe0}}, 0x20040084) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x6142c011, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002c80)=@newtaction={0x514, 0x30, 0x8, 0x70bd27, 0x25dfdbff, {}, [{0x500, 0x1, [@m_vlan={0x154, 0x1d, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc21}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PARMS={0x0, 0x2, {{0x2, 0x5, 0x4, 0x9, 0x8}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x3ff, 0xffffffffffffffff, 0x3, 0xae7e}, 0x3}}]}, {0xf3, 0x6, "85bb91bfa465469f56cf8871422095bef07687e01336aa327c45c995ae28bbfaa7e7dd36f4e9ea1809c0020228fa6e27c45720ca312e138c07d74cded0f1aa73ee83f1482e6ff92f524a3312e78ab58d7d4ccac3a6adb27cebc40315365f33d50b854b00a7a303b63932f8249dfa4b71e3fee4d8caeca331cfb9ac94506a2891d5bf55cc4b1ee8bf9b58d8ac71a0bf3a4d94ab30ca5ad79ae28193a53d18b1e9de3ff8c498ac59fa012170487e103a05ffd1c4aaa09d4a8be77e283700e763eb83e1c5c8f770fccad695824bb05a1b7ce780c36594e105ae38349bd62db5b5752ec0eb905b904405da28e2505b8a15"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}, @m_csum={0x10c, 0x0, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400, 0x0, 0x0, 0x8, 0x7b}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9, 0xffffffffffffffff, 0xfffffff7, 0x5}, 0x6}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xba82, 0x0, 0x3, 0x0, 0x9}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1ff, 0x9, 0x0, 0x5, 0x6}, 0x3d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x2, 0x1, 0x1f5, 0x39}, 0x8}}]}, {0x51, 0x6, "c3ed82eff01f52708979af2c89917d7bb564cc3300e35a5a520d2999ff6fa9432b64ae963aeef1960ec69e02ff49e828f676a1838bad54f3baa66a9dda7e5d0cd5a2c5cb5f0f9ef2651097ec08"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbmod={0x0, 0x1a, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_DMAC={0x0, 0x3, @remote}, @TCA_SKBMOD_PARMS={0x0, 0x2, {{0xfff, 0x1, 0x4, 0x10, 0x52}, 0xb}}, @TCA_SKBMOD_DMAC={0x0, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, {0x0, 0x6, "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"}, {0x0, 0x7, {0x0, 0x7e70e59dd6ecd0fa}}, {0x0, 0x8, {0x3, 0x2}}}}, @m_csum={0x13c, 0xf, 0x0, 0x0, {{0x5}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xced0, 0x200, 0xffffffffffffffff, 0xfffffffd}, 0x51}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x5, 0x4, 0x1ffe0, 0x3}, 0x77}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x8, 0x3, 0x7ba, 0x11c}, 0x22}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8001, 0xe9, 0x10000000, 0xf07, 0x1da}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x3, 0x12d, 0x3, 0x5, 0x7fe}, 0x7a}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xd, 0x10000000, 0x5, 0x3}, 0x1}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x80, 0xff, 0x10000000, 0x4, 0x9}, 0x78}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x9, 0x8000, 0x4, 0x7, 0x9}, 0x70}}]}, {0x2d, 0x6, "31a4fb7d641c10db502f3a5c2056038ff092b80f84b3309f317ae3079c53364d824a335d56c0228124"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x514}, 0x1, 0x0, 0x0, 0x4809c}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x29, 0x29, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r10, 0x4008ae93, &(0x7f0000000180)=0x1000) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 980.720354ms ago: executing program 3 (id=761): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="01000000020200000000008000000000", @ANYRES64=0x77359400, @ANYRESHEX, @ANYRES16, @ANYRES64=r1, @ANYBLOB="0e00"], 0x38}}, 0x40000) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = memfd_secret(0xab8bb878600e74e) ioctl$BSG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000000)) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r5}, 0x10) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r0], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 980.412736ms ago: executing program 3 (id=762): setuid(0xee01) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r1, 0x708, 0x8) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0xd, 0x4, &(0x7f00000000c0)={0x13, "0329aedbf37e5ad4a9b6347d1d85ea5c315c660ec032e386e8512900"}}) sendto$inet(r0, 0x0, 0x0, 0x404c802, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000000)="660b8fcf", 0x4, 0x24044084, 0x0, 0x0) 909.664474ms ago: executing program 3 (id=763): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r1 = fsopen(&(0x7f0000000100)='ntfs3\x00', 0x1) syz_open_dev$sndpcmp(&(0x7f0000000080), 0x8001, 0x400002) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) 860.929512ms ago: executing program 3 (id=764): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000300)='\x00\x00\x00', 0x3}], 0x1}}], 0x1, 0x24040890) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0x1, 0x4) cachestat(r0, &(0x7f00000000c0)={0x2, 0x8}, &(0x7f0000000180), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000003d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ff4e53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a1574aefc97d8addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d6822d133bf73b18e509402a4de1c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767562a90a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a9767748ca3522443097c55dc97c09d38485b18ad2cff787338bab324336f50c97b751f2ed2c4281858b428d1b2c1194b06f9bb7ffcc95c1bcf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4e}, 0x48) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) 860.575518ms ago: executing program 3 (id=765): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000040)="dc", 0x1}], 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r3, 0x4) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x1}], 0x1, 0x0, 0x0, 0xc080}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) 721.054792ms ago: executing program 3 (id=766): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r1 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000400)={0x0, &(0x7f0000000300)=[@nested_create_vm={0x12d, 0x18, 0x2}, @out_dx={0x6a, 0x28, {0x9b6b, 0x5, 0x4}}, @code={0xa, 0x58, {"0f20e035800000000f22e0f466baf80cb820217d8fef66bafc0ced6642edb95d0a0000b8bc71d909ba1ef252120f30360fd4a00a00000065460f01c4f30f0636f30f1efb0f01c9"}}, @enable_nested={0x12c, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @control_area=0x6d, 0x1, 0x8, 0x4aef}}], 0xe8}) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text32={0x20, &(0x7f0000000280)="66f30f205b66ba4200ec66baf80cb8e7973c8eef66bafc0cec0f01c81500d06574c4c12971f702b9a8090000b800000000ba000000800f300fc77e0066baf80cb81091248cef66bafc0cb82bb00e7cef66baf80cb8cec04588ef66bafc0cb040ee", 0x61}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000040)={[0x3, 0x8, 0x1000000000000002, 0x8, 0x800, 0x5, 0x4f, 0x0, 0x80, 0xffffffffffffffff, 0x80, 0xa, 0x7f, 0x8, 0x5fbe, 0x7ff], 0x4, 0x200c02}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000240)={0x10}) syz_io_uring_setup(0x2fd, &(0x7f0000000100)={0x0, 0x83b5, 0x20, 0x0, 0x8de, 0x0, r6}, 0x0, 0x0) 260.644757ms ago: executing program 1 (id=767): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x5, 0x8, 0x3, 0x8, 0x800, 0x5, 0x4f, 0x0, 0x80, 0xffffffffffffffff, 0x1080, 0xa, 0x7f, 0x8003, 0x8, 0x7ff], 0x2, 0x201c12}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) sendfile(r2, r4, &(0x7f0000000000)=0x2, 0x3) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000180)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x54, {"0fc7bcaeb20000000f78d0410fc7b23e000000470f01df66b8a1000f00d8b8010000000f01c1b805000000b9009000000f01d9670fc7b25000000066ba4200ec410f07"}}], 0x54}) syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_NESTED_STATE(r6, 0x4080aebf, &(0x7f00000005c0)={{0x1, 0x0, 0x80, {0x6000, 0x2}}, "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", "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"}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 257.596823ms ago: executing program 1 (id=768): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r1, &(0x7f0000000080), 0x10) syz_emit_ethernet(0x1e2, &(0x7f0000002480)={@random="3cf8a5afadad", @local, @void, {@ipv6={0x86dd, @icmpv6={0xe, 0x6, "f22ada", 0x1ac, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @local, {[], @time_exceed={0x3, 0x0, 0x0, 0x1, '\x00', {0x2, 0x6, "40a619", 0x40, 0x2f, 0x0, @mcast1, @loopback, [@srh={0xff, 0x10, 0x4, 0x8, 0x40, 0x48, 0xfff, [@remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @empty, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}]}, @srh={0xbc, 0x12, 0x4, 0x9, 0xff, 0x30, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @private2, @remote, @rand_addr=' \x01\x00', @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @remote, @dev={0xfe, 0x80, '\x00', 0x1c}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @routing={0x3c, 0x4, 0xc6528aadc3876da8, 0x7, 0x0, [@private0, @mcast1]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x9, 0x18, 0xff}, @hopopts={0x3b, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}, @fragment={0x6c, 0x0, 0xb, 0x1, 0x0, 0xa, 0x64}, @fragment={0x2b, 0x0, 0x6, 0x1, 0x0, 0x3, 0x68}], "2b2888be6783937f22d39b28"}}}}}}}, 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$KVM_RUN(r0, 0xae80, 0x0) 200.942962ms ago: executing program 4 (id=769): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x35) ioctl$KVM_CAP_VM_TYPES(r1, 0x4068aea3, &(0x7f00000000c0)={0xeb, 0x0, 0x5}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f00005b6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="400f01c80f00000f001e48b8feb65a0d000000000f23d00f21f835200000000f23f8be252e8a094d36420f705626002e660f3a176a4b00b9800000c00f3267420f01c30f5966b8f80cb8c087678eef66bac60fc72a45c194710a000000058a3bc4827dbcae009008f2", 0x69}], 0xaaaaaaaaaaaa7f2, 0x58, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 200.027699ms ago: executing program 1 (id=770): mknod(&(0x7f0000000140)='./file0\x00', 0x20, 0x10001) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r2, 0xc0046d00, &(0x7f0000000240)=0x1) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0x1, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xffffffffffffffd4, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0x6, 0x1, 0x8}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x3, &(0x7f0000000100)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000340)={r4, &(0x7f0000000240)=""/211}) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040)='xfs\x00', 0x10410, &(0x7f00000000c0)='norecovery') 118.1979ms ago: executing program 1 (id=771): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0x2b}, @mcast1, @private0, 0x80000001, 0x7, 0x0, 0x100, 0x100000001, 0x21100e6, r0}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r5}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000040)={0x0, &(0x7f0000000080)=""/38, &(0x7f00000001c0), &(0x7f0000000040), 0xfffffffe, r5}, 0x38) arch_prctl$ARCH_GET_XCOMP_GUEST_PERM(0x1024, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r6, 0x0, 0x4}, 0x18) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 0s ago: executing program 4 (id=772): r0 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000e00)={0xc, {"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", 0x1000}}, 0x1006) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0xa0000, 0x0) ioctl$BSG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)) (async) ioctl$BSG_SET_COMMAND_Q(r1, 0x2271, &(0x7f0000000040)) writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1) kernel console output (not intermixed with test programs): would solve the problem. [ 63.707216][ T5948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.740454][ T5948] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.742794][ T5948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.752931][ T5948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.840618][ T5948] hsr_slave_0: entered promiscuous mode [ 63.844164][ T5948] hsr_slave_1: entered promiscuous mode [ 63.847965][ T5948] debugfs: 'hsr0' already exists in 'hsr' [ 63.850286][ T5948] Cannot create hsr debugfs directory [ 64.011814][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.033664][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.052515][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.080504][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 64.133303][ T5936] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 64.140724][ T5936] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 64.148888][ T5936] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 64.166530][ T5936] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 64.211037][ T5940] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.218908][ T5940] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.225573][ T5940] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.236121][ T5940] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.292028][ T5948] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.297290][ T5948] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.311182][ T5948] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.314717][ T5947] Bluetooth: hci0: command tx timeout [ 64.314788][ T5942] Bluetooth: hci2: command tx timeout [ 64.314849][ T5946] Bluetooth: hci1: command tx timeout [ 64.324421][ T5948] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.381215][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.394410][ T5942] Bluetooth: hci3: command tx timeout [ 64.424382][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.433330][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.435995][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.445902][ T5936] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.457712][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.460135][ T1245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.469017][ T5936] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.488061][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.490352][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.497489][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.509190][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.512215][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.540279][ T5948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.545279][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.568920][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.571962][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.594943][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.597503][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.602279][ T5948] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.615881][ T40] audit: type=1400 audit(1764460337.207:89): avc: denied { sys_module } for pid=5943 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 64.621652][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.625678][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.638139][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.641376][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.711799][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.749879][ T5943] veth0_vlan: entered promiscuous mode [ 64.760876][ T5943] veth1_vlan: entered promiscuous mode [ 64.788826][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.793769][ T5943] veth0_macvtap: entered promiscuous mode [ 64.807470][ T5943] veth1_macvtap: entered promiscuous mode [ 64.828653][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.846792][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.863342][ T73] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.869195][ T73] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.879472][ T73] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.882393][ T73] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.892380][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.912030][ T5936] veth0_vlan: entered promiscuous mode [ 64.929580][ T5948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.941589][ T5936] veth1_vlan: entered promiscuous mode [ 64.986026][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.989947][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.022708][ T5940] veth0_vlan: entered promiscuous mode [ 65.048359][ T5940] veth1_vlan: entered promiscuous mode [ 65.053512][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.054437][ T5948] veth0_vlan: entered promiscuous mode [ 65.056534][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.061902][ T5936] veth0_macvtap: entered promiscuous mode [ 65.071458][ T5936] veth1_macvtap: entered promiscuous mode [ 65.089419][ T5948] veth1_vlan: entered promiscuous mode [ 65.107039][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.109155][ T5943] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.113987][ T5936] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.129285][ T5940] veth0_macvtap: entered promiscuous mode [ 65.132980][ T46] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.137464][ T46] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.149138][ T5940] veth1_macvtap: entered promiscuous mode [ 65.153036][ T46] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.157031][ T46] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.175343][ T5948] veth0_macvtap: entered promiscuous mode [ 65.190634][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.199352][ T5948] veth1_macvtap: entered promiscuous mode [ 65.210564][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.223370][ T73] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.228437][ T73] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.246126][ T73] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.247590][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 65.253311][ T73] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.262470][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.263193][ T5942] Bluetooth: hci2: ISO packet too small [ 65.267914][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.281286][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.308084][ T5948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.324635][ T46] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.329835][ T94] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.333152][ T94] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.340328][ T46] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.344256][ T46] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.362570][ T46] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.385153][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.388468][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.431004][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.432129][ T6031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.433797][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.448920][ T73] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.451431][ T73] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.483565][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.487106][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.598361][ T6046] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 65.601764][ T6046] netlink: 'syz.3.6': attribute type 2 has an invalid length. [ 65.860721][ T6069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12'. [ 66.166149][ T6080] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.373715][ T6089] cgroup: Name too long [ 66.386470][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 66.394447][ T5942] Bluetooth: hci2: command tx timeout [ 66.395305][ T5947] Bluetooth: hci0: command tx timeout [ 66.404017][ T5947] Bluetooth: hci1: command tx timeout [ 66.430418][ T6089] team0: Port device team_slave_0 removed [ 66.474641][ T5947] Bluetooth: hci3: command tx timeout [ 66.477526][ T6047] syz.0.1 (6047) used greatest stack depth: 20008 bytes left [ 66.555541][ T6098] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 66.770029][ T6106] comedi comedi0: Minor 3 could not be opened [ 66.870672][ T6110] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 66.873172][ T6110] netlink: 228 bytes leftover after parsing attributes in process `syz.0.26'. [ 66.883529][ T6110] Cannot find add_set index 65532 as target [ 67.000549][ T6120] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 67.014117][ T6120] netlink: 52 bytes leftover after parsing attributes in process `syz.2.29'. [ 67.109965][ T6124] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.160365][ T40] kauditd_printk_skb: 98 callbacks suppressed [ 67.160380][ T40] audit: type=1400 audit(1764460339.747:188): avc: denied { create } for pid=6127 comm="syz.0.33" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.163173][ T6128] syz.0.33 (6128): /proc/6127/oom_adj is deprecated, please use /proc/6127/oom_score_adj instead. [ 67.166246][ T6126] sit0: entered promiscuous mode [ 67.182017][ T6126] netlink: 'syz.2.32': attribute type 1 has an invalid length. [ 67.188155][ T6126] netlink: 1 bytes leftover after parsing attributes in process `syz.2.32'. [ 67.191865][ T6128] warning: `syz.0.33' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.199478][ T40] audit: type=1400 audit(1764460339.787:189): avc: denied { mounton } for pid=6127 comm="syz.0.33" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.199553][ T6128] fuse: Bad value for 'max_read' [ 67.217598][ T40] audit: type=1400 audit(1764460339.807:190): avc: denied { write } for pid=6127 comm="syz.0.33" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.228326][ T40] audit: type=1400 audit(1764460339.807:191): avc: denied { open } for pid=6127 comm="syz.0.33" path="/7/file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.243467][ T6080] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.255929][ T40] audit: type=1400 audit(1764460339.847:192): avc: denied { unlink } for pid=5940 comm="syz-executor" name="file0" dev="tmpfs" ino=56 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 67.288484][ T40] audit: type=1400 audit(1764460339.877:193): avc: denied { mounton } for pid=6133 comm="syz.0.35" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 67.299380][ T6134] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 67.407118][ T40] audit: type=1400 audit(1764460339.997:194): avc: denied { create } for pid=6137 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.416510][ T40] audit: type=1400 audit(1764460339.997:195): avc: denied { setopt } for pid=6137 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.450405][ T40] audit: type=1400 audit(1764460340.037:196): avc: denied { bind } for pid=6137 comm="syz.0.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 67.503378][ T6140] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.568155][ T40] audit: type=1400 audit(1764460340.157:197): avc: denied { create } for pid=6143 comm="syz.0.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 67.570074][ T6146] capability: warning: `syz.2.39' uses deprecated v2 capabilities in a way that may be insecure [ 67.608051][ T6151] Cannot find set identified by id 0 to match [ 67.722344][ T6163] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 67.734514][ T6163] CIFS: Unable to determine destination address [ 67.745003][ T6163] ipvlan3: entered allmulticast mode [ 67.747401][ T6163] team0: entered allmulticast mode [ 67.749700][ T6163] team_slave_0: entered allmulticast mode [ 67.752107][ T6163] team_slave_1: entered allmulticast mode [ 67.757155][ T6163] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 67.812996][ T6165] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 67.817106][ T6165] netlink: 228 bytes leftover after parsing attributes in process `syz.0.45'. [ 67.870303][ T6170] Bluetooth: MGMT ver 1.23 [ 67.875805][ T6170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 67.885162][ T6170] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 67.913572][ T6172] netlink: 72 bytes leftover after parsing attributes in process `syz.2.48'. [ 67.981265][ T6186] netlink: 'syz.2.51': attribute type 19 has an invalid length. [ 67.987023][ T6186] netlink: 4 bytes leftover after parsing attributes in process `syz.2.51'. [ 68.003101][ T94] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.013969][ T94] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.018184][ T6186] netlink: 'syz.2.51': attribute type 19 has an invalid length. [ 68.022116][ T94] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.031057][ T94] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.035517][ T6186] Zero length message leads to an empty skb [ 68.112947][ T6200] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.117997][ T6201] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 68.133880][ T6201] overlayfs: missing 'workdir' [ 68.134780][ T6200] overlayfs: missing 'workdir' [ 68.393917][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.414236][ T6211] nbd0: detected capacity change from 0 to 127 [ 68.421131][ T5947] block nbd0: Receive control failed (result -104) [ 68.474171][ T5947] Bluetooth: hci1: command tx timeout [ 68.474205][ T5942] Bluetooth: hci2: command tx timeout [ 68.476602][ T5947] Bluetooth: hci0: command tx timeout [ 68.555080][ T5947] Bluetooth: hci3: command tx timeout [ 68.556251][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 68.562860][ T34] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 68.568144][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 68.572452][ T34] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.579523][ T34] usb 7-1: config 0 descriptor?? [ 68.592679][ T6228] sctp: [Deprecated]: syz.0.63 (pid 6228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 68.592679][ T6228] Use struct sctp_sack_info instead [ 68.721908][ T6080] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.815297][ T34] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 68.833148][ T34] usb 7-1: USB disconnect, device number 2 [ 68.854362][ T6080] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.894773][ T6250] tipc: MTU too low for tipc bearer [ 68.897793][ T6250] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=6250 comm=syz.2.70 [ 68.977980][ T6259] /dev/sg0: Can't lookup blockdev [ 69.006978][ T1245] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.024821][ T73] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042710][ T73] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.053159][ T6266] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 69.063408][ T61] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.254338][ T6282] netlink: 'syz.3.79': attribute type 3 has an invalid length. [ 70.290632][ T6315] netlink: 'syz.2.89': attribute type 10 has an invalid length. [ 70.292176][ T6316] __nla_validate_parse: 4 callbacks suppressed [ 70.292190][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.90'. [ 70.311934][ T6315] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 70.321854][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.325658][ T6315] batadv_slave_0: entered promiscuous mode [ 70.327962][ T6315] batadv_slave_0: entered allmulticast mode [ 70.390438][ T6322] rdma_op ffff888052b199f0 conn xmit_rdma 0000000000000000 [ 70.470738][ T6326] binder: 6325:6326 ioctl c00c620f 200000000000 returned -22 [ 70.494776][ T5984] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 70.554928][ T5947] Bluetooth: hci2: command tx timeout [ 70.644123][ T5947] Bluetooth: hci3: command tx timeout [ 70.654530][ T5984] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 70.658629][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.662126][ T5984] usb 6-1: Product: syz [ 70.664817][ T5984] usb 6-1: Manufacturer: syz [ 70.666866][ T5984] usb 6-1: SerialNumber: syz [ 70.674219][ T5984] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 70.707361][ T9] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 70.773549][ T6338] random: crng reseeded on system resumption [ 70.921904][ T6312] netlink: 128 bytes leftover after parsing attributes in process `syz.1.88'. [ 70.926732][ T6312] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 70.937708][ T6355] 9pnet_virtio: no channels available for device 127.0.0.1 [ 71.035174][ T5984] usb 6-1: USB disconnect, device number 2 [ 71.176199][ T6375] tmpfs: Bad value for 'mpol' [ 71.252246][ T6386] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6386 comm=syz.2.109 [ 71.291849][ T6392] No control pipe specified [ 71.332152][ T6395] validate_nla: 1 callbacks suppressed [ 71.332164][ T6395] netlink: 'syz.2.112': attribute type 12 has an invalid length. [ 71.336231][ T6395] netlink: 248 bytes leftover after parsing attributes in process `syz.2.112'. [ 71.604254][ T6012] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 71.634163][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 71.754024][ T9] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 71.757450][ T9] ath9k_htc: Failed to initialize the device [ 71.762132][ T5984] usb 6-1: ath9k_htc: USB layer deinitialized [ 71.778952][ T6012] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 71.782559][ T6012] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.783960][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 71.788554][ T6012] usb 7-1: config 0 interface 0 has no altsetting 0 [ 71.793033][ T10] usb 8-1: config 57 has an invalid interface number: 45 but max is 3 [ 71.796030][ T6012] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.796756][ T10] usb 8-1: config 57 contains an unexpected descriptor of type 0x2, skipping [ 71.800512][ T6012] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 71.800535][ T6012] usb 7-1: Product: syz [ 71.800548][ T6012] usb 7-1: Manufacturer: syz [ 71.800560][ T6012] usb 7-1: SerialNumber: syz [ 71.802693][ T6012] usb 7-1: config 0 descriptor?? [ 71.805954][ T10] usb 8-1: config 57 has an invalid interface number: 230 but max is 3 [ 71.809058][ T6012] hub 7-1:0.0: bad descriptor, ignoring hub [ 71.809719][ T10] usb 8-1: config 57 has an invalid interface number: 147 but max is 3 [ 71.811261][ T6012] hub 7-1:0.0: probe with driver hub failed with error -5 [ 71.813387][ T10] usb 8-1: config 57 has an invalid interface number: 179 but max is 3 [ 71.818283][ T6012] usb 7-1: selecting invalid altsetting 0 [ 71.819133][ T10] usb 8-1: config 57 has an invalid descriptor of length 1, skipping remainder of the config [ 71.839545][ T10] usb 8-1: config 57 has 5 interfaces, different from the descriptor's value: 4 [ 71.844193][ T10] usb 8-1: config 57 has no interface number 0 [ 71.847050][ T10] usb 8-1: config 57 has no interface number 1 [ 71.849896][ T10] usb 8-1: config 57 has no interface number 3 [ 71.852552][ T10] usb 8-1: config 57 has no interface number 4 [ 71.856137][ T10] usb 8-1: config 57 interface 45 altsetting 234 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 71.861555][ T10] usb 8-1: config 57 interface 45 altsetting 234 endpoint 0x3 has an invalid bInterval 45, changing to 7 [ 71.866757][ T10] usb 8-1: config 57 interface 45 altsetting 234 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 71.874114][ T10] usb 8-1: config 57 interface 45 altsetting 234 bulk endpoint 0x2 has invalid maxpacket 32 [ 71.878306][ T10] usb 8-1: config 57 interface 45 altsetting 234 bulk endpoint 0x4 has invalid maxpacket 1023 [ 71.882756][ T10] usb 8-1: config 57 interface 45 altsetting 234 endpoint 0x1 has invalid maxpacket 1096, setting to 64 [ 71.888256][ T10] usb 8-1: config 57 interface 230 altsetting 4 has a duplicate endpoint with address 0x7, skipping [ 71.892877][ T10] usb 8-1: config 57 interface 230 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 71.898718][ T10] usb 8-1: config 57 interface 230 altsetting 4 has a duplicate endpoint with address 0xF, skipping [ 71.903480][ T10] usb 8-1: config 57 interface 230 altsetting 4 endpoint 0xB has invalid maxpacket 39189, setting to 64 [ 71.908912][ T10] usb 8-1: config 57 interface 230 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 71.913364][ T10] usb 8-1: config 57 interface 230 altsetting 4 has 6 endpoint descriptors, different from the interface descriptor's value: 5 [ 71.919244][ T10] usb 8-1: config 57 interface 147 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 13 [ 71.925147][ T10] usb 8-1: too many endpoints for config 57 interface 2 altsetting 6: 189, using maximum allowed: 30 [ 71.930184][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0xF, skipping [ 71.936438][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 71.941335][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 71.946144][ T10] usb 8-1: config 57 interface 2 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 71.951206][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 71.955958][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0x3, skipping [ 71.960919][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 71.965494][ T10] usb 8-1: config 57 interface 2 altsetting 6 has an endpoint descriptor with address 0x28, changing to 0x8 [ 71.970351][ T10] usb 8-1: config 57 interface 2 altsetting 6 has a duplicate endpoint with address 0x8, skipping [ 71.974873][ T10] usb 8-1: config 57 interface 2 altsetting 6 has 8 endpoint descriptors, different from the interface descriptor's value: 189 [ 71.980388][ T10] usb 8-1: config 57 interface 179 altsetting 1 has a duplicate endpoint with address 0xB, skipping [ 71.984781][ T10] usb 8-1: config 57 interface 179 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 71.989144][ T10] usb 8-1: config 57 interface 179 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 71.993622][ T10] usb 8-1: config 57 interface 179 altsetting 1 has a duplicate endpoint with address 0x4, skipping [ 71.998425][ T10] usb 8-1: config 57 interface 179 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 72.002947][ T10] usb 8-1: config 57 interface 179 altsetting 1 has 6 endpoint descriptors, different from the interface descriptor's value: 8 [ 72.008809][ T10] usb 8-1: config 57 interface 45 has no altsetting 0 [ 72.011641][ T10] usb 8-1: config 57 interface 230 has no altsetting 0 [ 72.014580][ T10] usb 8-1: config 57 interface 147 has no altsetting 0 [ 72.017496][ T10] usb 8-1: config 57 interface 2 has no altsetting 0 [ 72.020346][ T10] usb 8-1: config 57 interface 179 has no altsetting 0 [ 72.027714][ T10] usb 8-1: New USB device found, idVendor=f201, idProduct=5370, bcdDevice=18.d5 [ 72.030792][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.033753][ T10] usb 8-1: Product: 槰刕몙愻䂻︴늰癋ㅣꀌ킳ᖙí´å‚³é¡ å‘²çº»æ¬˜ã«æ®ï©‡ç ”ä…䋾퇒勹譨คꌷï¨ì¾¹ã‘­ç¾å´•ì·†ä·¨ï™»î‹à£™èŠá½°í…榳ç€>摯◻⭃쇡㒲ï…갎冻귪ﳜ׉è¼ìµ„䔲넉á›â²¿Â–㦱㞷 [ 72.040635][ T10] usb 8-1: Manufacturer: ê”₼쵔龮댽﯀뿨캈鶀ë„ä©„é·ï±¼äœá‚´î…딺궹Ȧ앿Ћ䒻ꧾ킺芴昆ç›ê³ºì•Ží› âƒéŠªé¦á¸¤ìš›à¶Ÿê¼‚à¤ë™²è¯¢â‹¦ê…­è­¶ã¸á“½è‹íŒ‘á°ê„­à²»äŸ›ã²ªç™´è—³äŸ´æ¬¼ã‡šì™²æ™¸âŽ‚繤䆸爈ëŸï¤•ê»ïµê¿»êšŸïŒ·à£ê«Ÿï¤°ì¸¹ëŠî»©Ñ¸â®µî®¦é¸»î‰£ä©£ïŸç†‘墕햊ω令섻⾂ㄠ帀㗴嫗밹䚲ଟ뻈ﻟ [ 72.051581][ T10] usb 8-1: SerialNumber: Б [ 72.066208][ T6398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 72.068967][ T6398] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 72.275528][ T40] kauditd_printk_skb: 76 callbacks suppressed [ 72.275543][ T40] audit: type=1400 audit(1764460344.867:274): avc: denied { create } for pid=6396 comm="syz.3.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 72.303240][ T10] usb 8-1: USB disconnect, device number 2 [ 72.350195][ T40] audit: type=1400 audit(1764460344.937:275): avc: denied { getopt } for pid=6423 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 72.358933][ T40] audit: type=1400 audit(1764460344.947:276): avc: denied { ioctl } for pid=6423 comm="syz.1.121" path="socket:[12586]" dev="sockfs" ino=12586 ioctlcmd=0x7436 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 72.370217][ T40] audit: type=1400 audit(1764460344.947:277): avc: denied { bind } for pid=6423 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 72.414924][ T6399] usb 7-1: reset high-speed USB device number 3 using dummy_hcd [ 72.538743][ T40] audit: type=1400 audit(1764460345.127:278): avc: denied { append } for pid=6428 comm="syz.1.123" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 72.545319][ T6429] program syz.1.123 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.582232][ T6399] usb 7-1: device firmware changed [ 72.586103][ T55] usb 7-1: USB disconnect, device number 3 [ 72.743931][ T55] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 72.752017][ T6434] netlink: 32 bytes leftover after parsing attributes in process `syz.1.125'. [ 72.791381][ T6437] program syz.1.126 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 72.795655][ T6437] ata1.00: invalid command format 0 [ 72.799473][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.126'. [ 72.837849][ T6440] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 72.897689][ T40] audit: type=1400 audit(1764460345.487:279): avc: denied { append } for pid=6443 comm="syz.1.130" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 72.905912][ T55] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 72.910944][ T40] audit: type=1400 audit(1764460345.487:280): avc: denied { create } for pid=6442 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.911769][ T55] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 72.920000][ T40] audit: type=1400 audit(1764460345.487:281): avc: denied { accept } for pid=6442 comm="syz.3.129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 72.936758][ T55] usb 7-1: config 0 interface 0 has no altsetting 0 [ 72.942401][ T55] usb 7-1: language id specifier not provided by device, defaulting to English [ 72.955031][ T55] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 72.959028][ T55] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 72.962509][ T55] usb 7-1: Product: syz [ 72.966953][ T55] usb 7-1: config 0 descriptor?? [ 72.975636][ T55] hub 7-1:0.0: bad descriptor, ignoring hub [ 72.978249][ T55] hub 7-1:0.0: probe with driver hub failed with error -5 [ 72.983649][ T55] usb 7-1: selecting invalid altsetting 0 [ 73.177009][ T6399] random: crng reseeded on system resumption [ 73.184701][ T40] audit: type=1400 audit(1764460345.767:282): avc: denied { write } for pid=6397 comm="syz.2.114" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 73.198008][ T6399] Restarting kernel threads ... [ 73.201686][ T6399] Done restarting kernel threads. [ 73.205547][ T6399] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 73.216305][ T10] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 73.221982][ T6397] [U] ^Z [ 73.286279][ T6452] netlink: 57 bytes leftover after parsing attributes in process `syz.1.132'. [ 73.364325][ T1030] usb 7-1: USB disconnect, device number 4 [ 73.365981][ T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.371209][ T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.376789][ T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.380551][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.592593][ T10] usb 8-1: GET_CAPABILITIES returned 0 [ 73.595826][ T10] usbtmc 8-1:16.0: can't read capabilities [ 73.681894][ T40] audit: type=1400 audit(1764460346.267:283): avc: denied { mount } for pid=6470 comm="syz.1.137" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 73.785545][ T6473] program syz.2.138 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.796069][ T1030] usb 8-1: USB disconnect, device number 3 [ 73.908720][ T6477] fuse: Bad value for 'group_id' [ 73.910866][ T6477] fuse: Bad value for 'group_id' [ 74.020678][ T6479] netlink: 4 bytes leftover after parsing attributes in process `syz.1.140'. [ 74.378999][ T6486] [U] [ 74.380503][ T6486] [U] [ 74.381812][ T6486] [U] [ 74.383123][ T6486] [U] [ 74.385963][ T6486] [U] [ 74.387298][ T6486] [U] [ 74.388553][ T6486] [U] [ 74.389890][ T6486] [U] [ 74.391996][ T6486] [U] [ 74.393330][ T6486] [U] [ 74.394623][ T6486] [U] [ 74.395926][ T6486] [U] [ 74.397387][ T6486] [U] [ 74.398804][ T6486] [U] [ 74.400233][ T6486] [U] [ 74.401748][ T6486] [U] [ 74.410891][ T6485] [U] [ 74.621501][ T6494] geneve2: entered promiscuous mode [ 74.624420][ T6494] geneve2: entered allmulticast mode [ 74.813919][ T6475] comedi comedi0: reset error (fatal) [ 74.850290][ T6503] netlink: 'syz.2.149': attribute type 7 has an invalid length. [ 74.853052][ T6503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 74.941398][ T6509] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 75.005607][ T6512] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 75.009099][ T6512] netlink: 224 bytes leftover after parsing attributes in process `syz.2.152'. [ 75.013736][ T6512] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 75.472168][ T6514] IPVS: set_ctl: invalid protocol: 157 172.20.20.22:20002 [ 75.620722][ T6522] No control pipe specified [ 75.624012][ T6522] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 75.627660][ T6522] overlayfs: missing 'lowerdir' [ 75.680172][ T6528] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.678278][ T6545] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65527 sclass=netlink_route_socket pid=6545 comm=syz.2.163 [ 76.718174][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.720595][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.762218][ T6550] comedi: valid board names for 8255 driver are: [ 76.764324][ T6550] 8255 [ 76.765237][ T6550] comedi: valid board names for vmk80xx driver are: [ 76.767393][ T6550] vmk80xx [ 76.768436][ T6550] comedi: valid board names for usbduxsigma driver are: [ 76.770675][ T6550] usbduxsigma [ 76.771792][ T6550] comedi: valid board names for usbduxfast driver are: [ 76.774308][ T6550] usbduxfast [ 76.775433][ T6550] comedi: valid board names for usbdux driver are: [ 76.777402][ T6550] usbdux [ 76.778367][ T6550] comedi: valid board names for ni6501 driver are: [ 76.780451][ T6550] ni6501 [ 76.781387][ T6550] comedi: valid board names for dt9812 driver are: [ 76.783459][ T6550] dt9812 [ 76.785171][ T6550] comedi: valid board names for ni_labpc_cs driver are: [ 76.787318][ T6550] ni_labpc_cs [ 76.788375][ T6550] comedi: valid board names for ni_daq_700 driver are: [ 76.790459][ T6550] ni_daq_700 [ 76.791488][ T6550] comedi: valid board names for labpc_pci driver are: [ 76.793606][ T6550] labpc_pci [ 76.794785][ T6550] comedi: valid board names for adl_pci9118 driver are: [ 76.797877][ T6550] pci9118dg [ 76.799542][ T6550] pci9118hg [ 76.801069][ T6550] pci9118hr [ 76.802632][ T6550] comedi: valid board names for 8255_pci driver are: [ 76.805617][ T6550] 8255_pci [ 76.807037][ T6550] comedi: valid board names for s526 driver are: [ 76.810191][ T6550] s526 [ 76.811650][ T6550] comedi: valid board names for multiq3 driver are: [ 76.814651][ T6550] multiq3 [ 76.816184][ T6550] comedi: valid board names for pcmuio driver are: [ 76.819077][ T6550] pcmuio48 [ 76.820589][ T6550] pcmuio96 [ 76.822198][ T6550] comedi: valid board names for pcmmio driver are: [ 76.825288][ T6550] pcmmio [ 76.826788][ T6550] comedi: valid board names for pcmda12 driver are: [ 76.830060][ T6550] pcmda12 [ 76.831474][ T6550] comedi: valid board names for pcmad driver are: [ 76.834396][ T6550] pcmad12 [ 76.835792][ T6550] pcmad16 [ 76.837242][ T6550] comedi: valid board names for ni_labpc driver are: [ 76.840191][ T6550] lab-pc-1200 [ 76.841760][ T6550] lab-pc-1200ai [ 76.843405][ T6550] lab-pc+ [ 76.845549][ T6550] comedi: valid board names for atmio16 driver are: [ 76.848531][ T6550] atmio16 [ 76.850020][ T6550] atmio16d [ 76.851488][ T6550] comedi: valid board names for ni_at_ao driver are: [ 76.854451][ T6550] at-ao-6 [ 76.855903][ T6550] at-ao-10 [ 76.857374][ T6550] comedi: valid board names for ni_at_a2150 driver are: [ 76.860479][ T6550] ni_at_a2150 [ 76.862000][ T6550] comedi: valid board names for adq12b driver are: [ 76.865283][ T6550] adq12b [ 76.866881][ T6550] comedi: valid board names for mpc624 driver are: [ 76.869881][ T6550] mpc624 [ 76.871302][ T6550] comedi: valid board names for c6xdigio driver are: [ 76.874861][ T6550] c6xdigio [ 76.876439][ T6550] comedi: valid board names for aio_iiro_16 driver are: [ 76.879582][ T6550] aio_iiro_16 [ 76.881093][ T6550] comedi: valid board names for aio_aio12_8 driver are: [ 76.884208][ T6550] aio_aio12_8 [ 76.885757][ T6550] aio_ai12_8 [ 76.887257][ T6550] aio_ao12_4 [ 76.888776][ T6550] comedi: valid board names for fl512 driver are: [ 76.891670][ T6550] fl512 [ 76.892935][ T6550] comedi: valid board names for dmm32at driver are: [ 76.896038][ T6550] dmm32at [ 76.897473][ T6550] comedi: valid board names for dt282x driver are: [ 76.900329][ T6550] dt2821 [ 76.901678][ T6550] dt2821-f [ 76.903111][ T6550] dt2821-g [ 76.905050][ T6550] dt2823 [ 76.906556][ T6550] dt2824-pgh [ 76.908207][ T6550] dt2824-pgl [ 76.909721][ T6550] dt2825 [ 76.911111][ T6550] dt2827 [ 76.912422][ T6550] dt2828 [ 76.913757][ T6550] dt2829 [ 76.915201][ T6550] dt21-ez [ 76.916572][ T6550] dt23-ez [ 76.917965][ T6550] dt24-ez [ 76.919415][ T6550] dt24-ez-pgl [ 76.921017][ T6550] comedi: valid board names for dt2817 driver are: [ 76.924730][ T6550] dt2817 [ 76.926227][ T6550] comedi: valid board names for dt2815 driver are: [ 76.929317][ T6550] dt2815 [ 76.930642][ T6550] comedi: valid board names for dt2814 driver are: [ 76.933526][ T6550] dt2814 [ 76.935089][ T6550] comedi: valid board names for dt2811 driver are: [ 76.938102][ T6550] dt2811-pgh [ 76.939677][ T6550] dt2811-pgl [ 76.941560][ T6550] comedi: valid board names for dt2801 driver are: [ 76.944928][ T6550] dt2801 [ 76.946499][ T6550] comedi: valid board names for das6402 driver are: [ 76.950365][ T6550] das6402-12 [ 76.951911][ T6550] das6402-16 [ 76.953433][ T6550] comedi: valid board names for das1800 driver are: [ 76.956730][ T6550] das-1701st [ 76.958238][ T6550] das-1701st-da [ 76.959901][ T6550] das-1702st [ 76.961403][ T6550] das-1702st-da [ 76.963162][ T6550] das-1702hr [ 76.964913][ T6550] das-1702hr-da [ 76.966942][ T6550] das-1701ao [ 76.968691][ T6550] das-1702ao [ 76.970478][ T6550] das-1801st [ 76.972068][ T6550] das-1801st-da [ 76.973693][ T6550] das-1802st [ 76.975315][ T6550] das-1802st-da [ 76.976922][ T6550] das-1802hr [ 76.978428][ T6550] das-1802hr-da [ 76.980073][ T6550] das-1801hc [ 76.981579][ T6550] das-1802hc [ 76.983079][ T6550] das-1801ao [ 76.984684][ T6550] das-1802ao [ 76.986422][ T6550] comedi: valid board names for das800 driver are: [ 76.989338][ T6550] das-800 [ 76.990785][ T6550] cio-das800 [ 76.992316][ T6550] das-801 [ 76.993780][ T6550] cio-das801 [ 76.995490][ T6550] das-802 [ 76.996874][ T6550] cio-das802 [ 76.998420][ T6550] cio-das802/16 [ 77.000101][ T6550] comedi: valid board names for isa-das08 driver are: [ 77.003393][ T6550] isa-das08 [ 77.005083][ T6550] das08-pgm [ 77.006483][ T6550] das08-pgh [ 77.008020][ T6550] das08-pgl [ 77.009589][ T6550] das08-aoh [ 77.011086][ T6550] das08-aol [ 77.012556][ T6550] das08-aom [ 77.014103][ T6550] das08/jr-ao [ 77.015638][ T6550] das08jr-16-ao [ 77.017352][ T6550] pc104-das08 [ 77.019004][ T6550] das08jr/16 [ 77.020460][ T6550] comedi: valid board names for das16m1 driver are: [ 77.023109][ T6550] das16m1 [ 77.024479][ T6550] comedi: valid board names for dac02 driver are: [ 77.027248][ T6550] dac02 [ 77.028719][ T6550] comedi: valid board names for rti802 driver are: [ 77.031741][ T6550] rti802 [ 77.033170][ T6550] comedi: valid board names for rti800 driver are: [ 77.036415][ T6550] rti800 [ 77.037814][ T6550] rti815 [ 77.039286][ T6550] comedi: valid board names for pcm3724 driver are: [ 77.041948][ T6550] pcm3724 [ 77.043294][ C1] vcan0: j1939_tp_rxtimer: 0xffff888053686800: rx timeout, send abort [ 77.043617][ T6550] comedi: valid board names for pcl818 driver are: [ 77.048858][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888053686800: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 77.051478][ T6550] pcl818l [ 77.059165][ T6550] pcl818h [ 77.060884][ T6550] pcl818hd [ 77.062637][ T6550] pcl818hg [ 77.064367][ T6550] pcl818 [ 77.065927][ T6550] pcl718 [ 77.067307][ T6550] pcm3718 [ 77.068992][ T6550] comedi: valid board names for pcl816 driver are: [ 77.072079][ T6550] pcl816 [ 77.073592][ T6550] pcl814b [ 77.075342][ T6550] comedi: valid board names for pcl812 driver are: [ 77.078259][ T6550] pcl812 [ 77.079938][ T6550] pcl812pg [ 77.081512][ T6550] acl8112pg [ 77.083116][ T6550] acl8112dg [ 77.084878][ T6550] acl8112hg [ 77.086634][ T6550] a821pgl [ 77.088287][ T6550] a821pglnda [ 77.090352][ T6550] a821pgh [ 77.092132][ T6550] a822pgl [ 77.093704][ T6550] a822pgh [ 77.095684][ T6550] a823pgl [ 77.097207][ T6550] a823pgh [ 77.098770][ T6550] pcl813 [ 77.100431][ T6550] pcl813b [ 77.101882][ T6550] acl8113 [ 77.103367][ T6550] iso813 [ 77.104840][ T6550] acl8216 [ 77.107659][ T6550] a826pg [ 77.110100][ T6550] comedi: valid board names for pcl730 driver are: [ 77.114421][ T6550] pcl730 [ 77.116091][ T6550] iso730 [ 77.117936][ T6550] acl7130 [ 77.119906][ T6550] pcm3730 [ 77.121544][ T6550] pcl725 [ 77.123043][ T6550] p8r8dio [ 77.124827][ T6550] acl7225b [ 77.126416][ T6550] p16r16dio [ 77.128130][ T6550] pcl733 [ 77.129682][ T6550] pcl734 [ 77.131414][ T6550] opmm-1616-xt [ 77.133195][ T6550] pearl-mm-p [ 77.134935][ T6550] ir104-pbf [ 77.136717][ T6550] comedi: valid board names for pcl726 driver are: [ 77.140037][ T6550] pcl726 [ 77.141545][ T6550] pcl727 [ 77.143034][ T6550] pcl728 [ 77.144642][ T6550] acl6126 [ 77.146160][ T6550] acl6128 [ 77.147683][ T6550] comedi: valid board names for pcl724 driver are: [ 77.150886][ T6550] pcl724 [ 77.152610][ T6550] pcl722 [ 77.155534][ T6550] pcl731 [ 77.157870][ T6550] acl7122 [ 77.159766][ T6550] acl7124 [ 77.161267][ T6550] pet48dio [ 77.162789][ T6550] pcmio48 [ 77.164293][ T6550] onyx-mm-dio [ 77.165825][ T6550] comedi: valid board names for pcl711 driver are: [ 77.168772][ T6550] pcl711 [ 77.170150][ T6550] pcl711b [ 77.171741][ T6550] acl8112hg [ 77.173172][ T6550] acl8112dg [ 77.174863][ T6550] comedi: valid board names for amplc_pc263 driver are: [ 77.178162][ T6550] pc263 [ 77.179591][ T6550] comedi: valid board names for amplc_pc236 driver are: [ 77.183008][ T6550] pc36at [ 77.184488][ T6550] comedi: valid board names for amplc_dio200 driver are: [ 77.187710][ T6550] pc212e [ 77.189064][ T6550] pc214e [ 77.190496][ T6550] pc215e [ 77.191959][ T6550] pc218e [ 77.193558][ T6550] pc272e [ 77.195260][ T6550] comedi: valid board names for comedi_parport driver are: [ 77.198789][ T6550] comedi_parport [ 77.200486][ T6550] comedi: valid board names for comedi_test driver are: [ 77.203944][ T6550] comedi_test [ 77.206040][ T6550] comedi: valid board names for comedi_bond driver are: [ 77.209259][ T6550] comedi_bond [ 77.211938][ T6550] comedi: valid board names for 8255 driver are: [ 77.214841][ T6550] 8255 [ 77.215857][ T6550] comedi: valid board names for vmk80xx driver are: [ 77.218691][ T6550] vmk80xx [ 77.220421][ T6550] comedi: valid board names for usbduxsigma driver are: [ 77.224250][ T6550] usbduxsigma [ 77.225369][ T6550] comedi: valid board names for usbduxfast driver are: [ 77.227920][ T6550] usbduxfast [ 77.229370][ T6550] comedi: valid board names for usbdux driver are: [ 77.231600][ T6550] usbdux [ 77.232787][ T6550] comedi: valid board names for ni6501 driver are: [ 77.236917][ T6550] ni6501 [ 77.237873][ T6550] comedi: valid board names for dt9812 driver are: [ 77.240644][ T6550] dt9812 [ 77.241857][ T6550] comedi: valid board names for ni_labpc_cs driver are: [ 77.244211][ T6550] ni_labpc_cs [ 77.245703][ T6550] comedi: valid board names for ni_daq_700 driver are: [ 77.248851][ T6550] ni_daq_700 [ 77.250425][ T6550] comedi: valid board names for labpc_pci driver are: [ 77.254125][ T6550] labpc_pci [ 77.256030][ T6550] comedi: valid board names for adl_pci9118 driver are: [ 77.259553][ T6550] pci9118dg [ 77.260938][ T6550] pci9118hg [ 77.262342][ T6550] pci9118hr [ 77.263774][ T6550] comedi: valid board names for 8255_pci driver are: [ 77.267005][ T6550] 8255_pci [ 77.268404][ T6550] comedi: valid board names for s526 driver are: [ 77.271394][ T6550] s526 [ 77.272704][ T6550] comedi: valid board names for multiq3 driver are: [ 77.276868][ T6550] multiq3 [ 77.278919][ T6550] comedi: valid board names for pcmuio driver are: [ 77.281992][ T6550] pcmuio48 [ 77.283452][ T6550] pcmuio96 [ 77.287619][ T6570] sp0: Synchronizing with TNC [ 77.297984][ T6550] comedi: valid board names for pcmmio driver are: [ 77.301617][ T6550] pcmmio [ 77.302985][ T6550] comedi: valid board names for pcmda12 driver are: [ 77.306891][ T6550] pcmda12 [ 77.308557][ T6550] comedi: valid board names for pcmad driver are: [ 77.311708][ T6550] pcmad12 [ 77.313240][ T6550] pcmad16 [ 77.315056][ T6550] comedi: valid board names for ni_labpc driver are: [ 77.318223][ T6550] lab-pc-1200 [ 77.319935][ T6550] lab-pc-1200ai [ 77.321674][ T6550] lab-pc+ [ 77.323113][ T6550] comedi: valid board names for atmio16 driver are: [ 77.326778][ T6550] atmio16 [ 77.328631][ T6550] atmio16d [ 77.330359][ T6550] comedi: valid board names for ni_at_ao driver are: [ 77.333413][ T6550] at-ao-6 [ 77.335063][ T6550] at-ao-10 [ 77.336596][ T6550] comedi: valid board names for ni_at_a2150 driver are: [ 77.339898][ T6550] ni_at_a2150 [ 77.341526][ T6550] comedi: valid board names for adq12b driver are: [ 77.344701][ T6550] adq12b [ 77.346253][ T6550] comedi: valid board names for mpc624 driver are: [ 77.349422][ T6550] mpc624 [ 77.351009][ T6550] comedi: valid board names for c6xdigio driver are: [ 77.360726][ T6550] c6xdigio [ 77.362042][ T6550] comedi: valid board names for aio_iiro_16 driver are: [ 77.367185][ T6550] aio_iiro_16 [ 77.368725][ T6550] comedi: valid board names for aio_aio12_8 driver are: [ 77.371487][ T6550] aio_aio12_8 [ 77.372802][ T6550] aio_ai12_8 [ 77.374630][ T6550] aio_ao12_4 [ 77.376043][ T6550] comedi: valid board names for fl512 driver are: [ 77.379160][ T6550] fl512 [ 77.380722][ T6550] comedi: valid board names for dmm32at driver are: [ 77.383579][ T6550] dmm32at [ 77.384903][ T6550] comedi: valid board names for dt282x driver are: [ 77.387442][ T6550] dt2821 [ 77.388646][ T6550] dt2821-f [ 77.389931][ T6550] dt2821-g [ 77.391411][ T6550] dt2823 [ 77.392607][ T6550] dt2824-pgh [ 77.393966][ T6550] dt2824-pgl [ 77.395321][ T6550] dt2825 [ 77.396524][ T6550] dt2827 [ 77.397771][ T6550] dt2828 [ 77.398985][ T6550] dt2829 [ 77.400694][ T6550] dt21-ez [ 77.402297][ T6550] dt23-ez [ 77.403633][ T40] kauditd_printk_skb: 29 callbacks suppressed [ 77.403645][ T40] audit: type=1400 audit(1764460349.987:313): avc: denied { setopt } for pid=6569 comm="syz.1.169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 77.404874][ T6550] dt24-ez [ 77.404884][ T6550] dt24-ez-pgl [ 77.404891][ T6550] comedi: valid board names for dt2817 driver are: [ 77.404898][ T6550] dt2817 [ 77.404904][ T6550] comedi: valid board names for dt2815 driver are: [ 77.404911][ T6550] dt2815 [ 77.404916][ T6550] comedi: valid board names for dt2814 driver are: [ 77.404923][ T6550] dt2814 [ 77.404928][ T6550] comedi: valid board names for dt2811 driver are: [ 77.404935][ T6550] dt2811-pgh [ 77.433745][ T6550] dt2811-pgl [ 77.435215][ T6550] comedi: valid board names for dt2801 driver are: [ 77.437869][ T6550] dt2801 [ 77.439525][ T6550] comedi: valid board names for das6402 driver are: [ 77.444155][ T6550] das6402-12 [ 77.445760][ T6550] das6402-16 [ 77.447267][ T6550] comedi: valid board names for das1800 driver are: [ 77.450327][ T6550] das-1701st [ 77.451860][ T6550] das-1701st-da [ 77.453468][ T6550] das-1702st [ 77.455452][ T6550] das-1702st-da [ 77.457079][ T6550] das-1702hr [ 77.458496][ T6550] das-1702hr-da [ 77.460952][ T6550] das-1701ao [ 77.462475][ T6550] das-1702ao [ 77.464710][ T6550] das-1801st [ 77.466360][ T6550] das-1801st-da [ 77.468015][ T6550] das-1802st [ 77.469654][ T6550] das-1802st-da [ 77.471306][ T6550] das-1802hr [ 77.472819][ T6550] das-1802hr-da [ 77.472876][ T40] audit: type=1400 audit(1764460350.057:314): avc: denied { append } for pid=6574 comm="syz.1.170" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 77.475392][ T6550] das-1801hc [ 77.487492][ T6550] das-1802hc [ 77.489278][ T6550] das-1801ao [ 77.490968][ T6550] das-1802ao [ 77.492624][ T6550] comedi: valid board names for das800 driver are: [ 77.495952][ T6550] das-800 [ 77.497504][ T6550] cio-das800 [ 77.499081][ T6550] das-801 [ 77.500727][ T6550] cio-das801 [ 77.502363][ T6550] das-802 [ 77.503991][ T6550] cio-das802 [ 77.505480][ T6550] cio-das802/16 [ 77.507068][ T6550] comedi: valid board names for isa-das08 driver are: [ 77.510087][ T6550] isa-das08 [ 77.511789][ T6550] das08-pgm [ 77.513704][ T6550] das08-pgh [ 77.515823][ T6550] das08-pgl [ 77.517600][ T6550] das08-aoh [ 77.519298][ T6550] das08-aol [ 77.520919][ T6550] das08-aom [ 77.522519][ T6550] das08/jr-ao [ 77.524178][ T6550] das08jr-16-ao [ 77.526339][ T6550] pc104-das08 [ 77.528010][ T6550] das08jr/16 [ 77.529691][ T6550] comedi: valid board names for das16m1 driver are: [ 77.532701][ T6550] das16m1 [ 77.534222][ T6550] comedi: valid board names for dac02 driver are: [ 77.537083][ T6550] dac02 [ 77.538465][ T6550] comedi: valid board names for rti802 driver are: [ 77.541524][ T6550] rti802 [ 77.542957][ T6550] comedi: valid board names for rti800 driver are: [ 77.546056][ T6550] rti800 [ 77.547382][ T6550] rti815 [ 77.548645][ T6550] comedi: valid board names for pcm3724 driver are: [ 77.551684][ T6550] pcm3724 [ 77.553147][ T6550] comedi: valid board names for pcl818 driver are: [ 77.556065][ T6550] pcl818l [ 77.557435][ T6550] pcl818h [ 77.558784][ T6550] pcl818hd [ 77.560185][ T6550] pcl818hg [ 77.562451][ T6550] pcl818 [ 77.563898][ T6550] pcl718 [ 77.565204][ T6550] pcm3718 [ 77.566603][ T6550] comedi: valid board names for pcl816 driver are: [ 77.569594][ T6550] pcl816 [ 77.570962][ T6550] pcl814b [ 77.572399][ T6550] comedi: valid board names for pcl812 driver are: [ 77.575389][ T6550] pcl812 [ 77.576721][ T6550] pcl812pg [ 77.578158][ T6550] acl8112pg [ 77.579645][ T6550] acl8112dg [ 77.581090][ T6550] acl8112hg [ 77.582555][ T6550] a821pgl [ 77.584756][ T6550] a821pglnda [ 77.586456][ T6550] a821pgh [ 77.588968][ T6550] a822pgl [ 77.590410][ T6550] a822pgh [ 77.591768][ T6550] a823pgl [ 77.593149][ T6550] a823pgh [ 77.595281][ T6550] pcl813 [ 77.596617][ T6550] pcl813b [ 77.598018][ T6550] acl8113 [ 77.599476][ T6550] iso813 [ 77.600819][ T6550] acl8216 [ 77.602365][ T6550] a826pg [ 77.604300][ T6550] comedi: valid board names for pcl730 driver are: [ 77.607299][ T6550] pcl730 [ 77.608634][ T6550] iso730 [ 77.610025][ T6550] acl7130 [ 77.611465][ T6550] pcm3730 [ 77.612892][ T6550] pcl725 [ 77.614463][ T6550] p8r8dio [ 77.616004][ T6550] acl7225b [ 77.617513][ T6550] p16r16dio [ 77.619086][ T6550] pcl733 [ 77.620555][ T6550] pcl734 [ 77.622036][ T6550] opmm-1616-xt [ 77.623765][ T6550] pearl-mm-p [ 77.625803][ T6550] ir104-pbf [ 77.627362][ T6550] comedi: valid board names for pcl726 driver are: [ 77.630208][ T6550] pcl726 [ 77.631544][ T6550] pcl727 [ 77.632903][ T6550] pcl728 [ 77.634355][ T6550] acl6126 [ 77.635681][ T6550] acl6128 [ 77.636967][ T6550] comedi: valid board names for pcl724 driver are: [ 77.640201][ T6550] pcl724 [ 77.641517][ T6550] pcl722 [ 77.642889][ T6550] pcl731 [ 77.644535][ T6550] acl7122 [ 77.646178][ T6550] acl7124 [ 77.647716][ T6550] pet48dio [ 77.649177][ T6550] pcmio48 [ 77.650583][ T6550] onyx-mm-dio [ 77.652126][ T6550] comedi: valid board names for pcl711 driver are: [ 77.655057][ T6550] pcl711 [ 77.656646][ T6550] pcl711b [ 77.658165][ T6550] acl8112hg [ 77.659681][ T6550] acl8112dg [ 77.661180][ T6550] comedi: valid board names for amplc_pc263 driver are: [ 77.665154][ T6550] pc263 [ 77.666484][ T6550] comedi: valid board names for amplc_pc236 driver are: [ 77.669609][ T6550] pc36at [ 77.670899][ T6550] comedi: valid board names for amplc_dio200 driver are: [ 77.674064][ T6550] pc212e [ 77.675690][ T6550] pc214e [ 77.676984][ T6550] pc215e [ 77.678339][ T6550] pc218e [ 77.679666][ T6550] pc272e [ 77.680976][ T6550] comedi: valid board names for comedi_parport driver are: [ 77.684173][ T6550] comedi_parport [ 77.685721][ T6550] comedi: valid board names for comedi_test driver are: [ 77.688671][ T6550] comedi_test [ 77.690234][ T6550] comedi: valid board names for comedi_bond driver are: [ 77.693221][ T6550] comedi_bond [ 77.764828][ T6584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=27 sclass=netlink_route_socket pid=6584 comm=syz.2.173 [ 77.773065][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.173'. [ 77.778761][ T6584] netlink: 23 bytes leftover after parsing attributes in process `syz.2.173'. [ 77.811089][ T40] audit: type=1400 audit(1764460350.397:315): avc: denied { create } for pid=6586 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.817332][ T40] audit: type=1400 audit(1764460350.397:316): avc: denied { write } for pid=6586 comm="syz.1.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 77.884533][ T40] audit: type=1400 audit(1764460350.467:317): avc: denied { map } for pid=6588 comm="syz.2.175" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.896159][ T40] audit: type=1400 audit(1764460350.467:318): avc: denied { execute } for pid=6588 comm="syz.2.175" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 77.943938][ T6593] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.176' sets config #1 [ 78.147157][ T40] audit: type=1400 audit(1764460350.737:319): avc: denied { write } for pid=6609 comm="syz.1.182" path="socket:[12096]" dev="sockfs" ino=12096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 78.196277][ T40] audit: type=1400 audit(1764460350.787:320): avc: denied { read } for pid=6615 comm="syz.1.184" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.207071][ T40] audit: type=1400 audit(1764460350.787:321): avc: denied { open } for pid=6615 comm="syz.1.184" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 78.218328][ T40] audit: type=1400 audit(1764460350.797:322): avc: denied { getopt } for pid=6608 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 78.277215][ T6622] bridge1: entered promiscuous mode [ 78.404026][ T6635] tipc: Enabling of bearer rejected, media not registered [ 78.518176][ T6645] i2c i2c-1: Invalid block write size 34 [ 78.548328][ T6645] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.564029][ T6645] overlayfs: failed to set xattr on upper [ 78.566076][ T6645] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.568268][ T6645] overlayfs: ...falling back to index=off. [ 78.570318][ T6645] overlayfs: ...falling back to uuid=null. [ 78.623746][ T6654] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6654 comm=syz.1.193 [ 78.734268][ T6660] process 'syz.1.195' launched './file0' with NULL argv: empty string added [ 78.816112][ T6670] bond0: (slave bond_slave_0): Error: Device is in use and cannot be enslaved [ 78.825054][ T6670] netlink: 216 bytes leftover after parsing attributes in process `syz.2.198'. [ 78.873298][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 78.896058][ T6672] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 78.941355][ T6674] netlink: 'syz.2.200': attribute type 30 has an invalid length. [ 78.958355][ T6674] bond1: option arp_missed_max: invalid value (0) [ 78.960795][ T6674] bond1: option arp_missed_max: allowed values 1 - 255 [ 78.966946][ T6674] bond1 (unregistering): Released all slaves [ 79.013987][ T1030] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 79.076264][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.201'. [ 79.131025][ T6682] Driver unsupported XDP return value 0 on prog (id 100) dev N/A, expect packet loss! [ 79.163966][ T1030] usb 6-1: Using ep0 maxpacket: 8 [ 79.168835][ T1030] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 79.172339][ T1030] usb 6-1: config 179 has no interface number 0 [ 79.175039][ T1030] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 79.179542][ T1030] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 79.185547][ T1030] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 79.190094][ T1030] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 79.194440][ T1030] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 79.199253][ T1030] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 79.203417][ T1030] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.209420][ T6668] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.383982][ T10] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 79.427549][ T34] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input8 [ 79.535401][ T10] usb 7-1: not running at top speed; connect to a high speed hub [ 79.540380][ T10] usb 7-1: config 1 interface 0 has no altsetting 0 [ 79.546961][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 79.551030][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.554642][ T10] usb 7-1: Product: ж [ 79.556610][ T10] usb 7-1: Manufacturer: ꩻ⡦┽蔀É뻄Ꮃ컊ã¾é¸¼ç¬£è™íŽ¢ã¡è«„䀤硨鉣ᦶ뚳凘ꮟ者㗔ਹ⿤벞Ⓕ䕗鉶媉쀸㙢哇뀂鴣䇞퀈쒃î·á€ˆå©ƒï…켮떑áŠëˆ’ì ‰á˜à¡½ä§¢ç¾·â¢Žá·—̽ྴè›éš¹ì•¾æ¹á¬”✞탘煨핯栔伬鄡䊓瘿愫у防煾입㟺둋磷 [ 79.568208][ T10] usb 7-1: SerialNumber: І [ 79.624894][ T6684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 79.629703][ T6684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 79.652116][ T9] usb 6-1: USB disconnect, device number 3 [ 79.652252][ C3] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 79.658117][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 79.696928][ T6688] binder: BINDER_SET_CONTEXT_MGR already set [ 79.700286][ T6688] binder: 6686:6688 ioctl 4018620d 200000000100 returned -16 [ 79.703376][ T6688] binder: BINDER_SET_CONTEXT_MGR already set [ 79.706406][ T6688] binder: 6686:6688 ioctl 4018620d 200000000100 returned -16 [ 79.709215][ T6687] binder: BINDER_SET_CONTEXT_MGR already set [ 79.712604][ T6687] binder: 6686:6687 ioctl 4018620d 2000000002c0 returned -16 [ 79.713567][ T6688] binder: BINDER_SET_CONTEXT_MGR already set [ 79.722041][ T6688] binder: 6686:6688 ioctl 4018620d 200000000100 returned -16 [ 79.795913][ T10] usb 7-1: USB disconnect, device number 5 [ 79.834118][ T6694] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 79.850493][ T6694] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.342381][ T6715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 80.346466][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.1.209'. [ 80.397107][ T6721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 80.427331][ T6721] macvlan2: entered promiscuous mode [ 80.430857][ T6721] macvlan2: entered allmulticast mode [ 80.434645][ T6721] bond3: entered promiscuous mode [ 80.437563][ T6721] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 80.443625][ T6721] bond3: left promiscuous mode [ 80.475057][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.1.211'. [ 80.609274][ T6730] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 81.808947][ T6832] gfs2: not a GFS2 filesystem [ 81.812068][ T6832] gfs2: not a GFS2 filesystem [ 81.816875][ T6832] gfs2: not a GFS2 filesystem [ 81.819076][ T6832] gfs2: not a GFS2 filesystem [ 81.968623][ T6839] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=6839 comm=syz.2.225 [ 82.276795][ T6856] netlink: 48 bytes leftover after parsing attributes in process `syz.2.228'. [ 82.322049][ T6861] program syz.2.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.844596][ T6866] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 82.848743][ T6866] IPv6: NLM_F_CREATE should be set when creating new route [ 82.881400][ T6870] IPv6: addrconf: prefix option has invalid lifetime [ 83.068462][ T40] kauditd_printk_skb: 36 callbacks suppressed [ 83.068477][ T40] audit: type=1400 audit(1764460355.657:359): avc: denied { ioctl } for pid=6875 comm="syz.1.234" path="socket:[14119]" dev="sockfs" ino=14119 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 83.073255][ T6876] loop4: detected capacity change from 0 to 524288000 [ 83.165521][ T40] audit: type=1400 audit(1764460355.757:360): avc: denied { append } for pid=6877 comm="syz.1.235" name="001" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 83.168111][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.1.235'. [ 83.226069][ T40] audit: type=1400 audit(1764460355.817:361): avc: denied { bind } for pid=6879 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 83.239276][ T40] audit: type=1400 audit(1764460355.817:362): avc: denied { create } for pid=6879 comm="syz.2.237" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.447879][ T40] audit: type=1400 audit(1764460356.037:363): avc: denied { read write } for pid=6898 comm="syz.2.242" name="rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.450320][ T6899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.242'. [ 83.464483][ T40] audit: type=1400 audit(1764460356.037:364): avc: denied { open } for pid=6898 comm="syz.2.242" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1294 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 83.464532][ T40] audit: type=1400 audit(1764460356.037:365): avc: denied { connect } for pid=6898 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 83.775010][ T40] audit: type=1400 audit(1764460356.367:366): avc: denied { ioctl } for pid=6912 comm="syz.3.247" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 83.775802][ T6913] netlink: 'syz.3.247': attribute type 1 has an invalid length. [ 83.799860][ T6913] 8021q: adding VLAN 0 to HW filter on device bond1 [ 83.807753][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.3.247'. [ 83.822771][ T6913] bond1: (slave geneve2): making interface the new active one [ 83.827271][ T6913] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 83.856497][ T40] audit: type=1400 audit(1764460356.447:367): avc: denied { append } for pid=6915 comm="syz.1.248" name="loop7" dev="devtmpfs" ino=665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 83.872787][ T40] audit: type=1400 audit(1764460356.457:368): avc: denied { append } for pid=6917 comm="syz.3.249" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 83.946749][ T6923] binder: 6922:6923 ioctl c0306201 0 returned -14 [ 83.975489][ T6925] nfs4: Unknown parameter '' [ 84.123445][ T5946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.130679][ T5946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.134944][ T5946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.140189][ T5946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.144704][ T5946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.199927][ T6949] netlink: 'syz.2.257': attribute type 58 has an invalid length. [ 84.204224][ T6949] netlink: 4 bytes leftover after parsing attributes in process `syz.2.257'. [ 84.244752][ T6942] netlink: 'syz.3.255': attribute type 16 has an invalid length. [ 84.247294][ T6942] netlink: 'syz.3.255': attribute type 2 has an invalid length. [ 84.249706][ T6942] netlink: 64086 bytes leftover after parsing attributes in process `syz.3.255'. [ 84.292801][ T6939] chnl_net:caif_netlink_parms(): no params data found [ 84.346132][ T6939] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.348583][ T6939] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.351196][ T6939] bridge_slave_0: entered allmulticast mode [ 84.354376][ T6939] bridge_slave_0: entered promiscuous mode [ 84.358014][ T6939] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.360582][ T6939] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.362974][ T6939] bridge_slave_1: entered allmulticast mode [ 84.370767][ T6939] bridge_slave_1: entered promiscuous mode [ 84.397968][ T6939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.411175][ T6939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.415574][ T6963] netlink: 32 bytes leftover after parsing attributes in process `syz.3.259'. [ 84.447539][ T6939] team0: Port device team_slave_0 added [ 84.454792][ T6939] team0: Port device team_slave_1 added [ 84.478653][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.480998][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.490415][ T6939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.495468][ T6939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.497968][ T6939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.506990][ T6939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.560996][ T6939] hsr_slave_0: entered promiscuous mode [ 84.563612][ T6939] hsr_slave_1: entered promiscuous mode [ 84.567180][ T6939] debugfs: 'hsr0' already exists in 'hsr' [ 84.569572][ T6939] Cannot create hsr debugfs directory [ 84.601292][ T6974] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.766344][ T6939] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.777518][ T6939] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.827156][ T6939] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.833413][ T6939] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.858512][ T6987] netlink: 'syz.1.267': attribute type 21 has an invalid length. [ 84.861856][ T6987] netlink: 156 bytes leftover after parsing attributes in process `syz.1.267'. [ 84.891859][ T6994] (syz.3.268,6994,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 84.898229][ T6994] (syz.3.268,6994,1):ocfs2_sb_probe:753 ERROR: status = -5 [ 84.901365][ T6994] (syz.3.268,6994,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 84.907779][ T6994] (syz.3.268,6994,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 84.917932][ T6998] No source specified [ 84.926926][ T6998] netlink: 'syz.2.269': attribute type 27 has an invalid length. [ 84.957923][ T6998] sit0: left promiscuous mode [ 85.021449][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.066531][ T7007] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 85.095986][ T6998] batadv_slave_0: left promiscuous mode [ 85.097903][ T6998] batadv_slave_0: left allmulticast mode [ 85.102567][ T6998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.152862][ T7011] loop4: detected capacity change from 0 to 7 [ 85.163645][ T7011] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 85.167402][ T7011] loop4: partition table partially beyond EOD, truncated [ 85.170127][ T7011] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 85.199749][ T5953] udevd[5953]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 85.245676][ T7001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.249456][ T7001] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.254790][ T7001] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 85.265730][ T46] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.269442][ T46] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.273201][ T46] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.278789][ T46] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.289910][ T6939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.293767][ T46] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.299160][ T46] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.303050][ T46] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.307130][ T46] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.322778][ T6939] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.328404][ T227] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.331593][ T227] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.346550][ T227] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.349716][ T227] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.471157][ T7029] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 85.474143][ T7029] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.480361][ T7029] vhci_hcd vhci_hcd.0: Device attached [ 85.489808][ T7029] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 85.492602][ T7029] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 85.496874][ T7029] vhci_hcd vhci_hcd.0: Device attached [ 85.501370][ T7033] vhci_hcd: connection closed [ 85.501712][ T7030] vhci_hcd: connection closed [ 85.503482][ T73] vhci_hcd: stop threads [ 85.515371][ T73] vhci_hcd: release socket [ 85.517476][ T73] vhci_hcd: disconnect device [ 85.519909][ T73] vhci_hcd: stop threads [ 85.521750][ T73] vhci_hcd: release socket [ 85.526667][ T73] vhci_hcd: disconnect device [ 85.548412][ T6939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.573674][ T7022] ptrace attach of "/syz-executor exec"[7041] was attempted by "/syz-executor exec"[7022] [ 85.584143][ T6012] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 85.686414][ T7050] genirq: Flags mismatch irq 4. 00200000 (pcl818) vs. 00200080 (ttyS0) [ 85.738287][ T6012] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.743425][ T6012] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 85.749277][ T7053] netlink: 12 bytes leftover after parsing attributes in process `syz.1.284'. [ 85.757399][ T6012] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 85.764039][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.770422][ T6012] usb 7-1: config 0 descriptor?? [ 85.778820][ T6012] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 85.782590][ T6012] dvb-usb: bulk message failed: -22 (3/0) [ 85.790348][ T7053] macvlan2: entered promiscuous mode [ 85.792151][ T7053] macvlan2: entered allmulticast mode [ 85.795208][ T7053] bond4: entered promiscuous mode [ 85.796604][ T6012] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 85.797101][ T7053] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.801146][ T6012] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 85.807916][ T6012] usb 7-1: media controller created [ 85.811877][ T7053] bond4: left promiscuous mode [ 85.813420][ T6012] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 85.835802][ T6012] dvb-usb: bulk message failed: -22 (6/0) [ 85.836614][ T6939] veth0_vlan: entered promiscuous mode [ 85.838520][ T6012] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 85.848335][ T6939] veth1_vlan: entered promiscuous mode [ 85.849143][ T6012] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input10 [ 85.859619][ T6012] dvb-usb: schedule remote query interval to 150 msecs. [ 85.862630][ T6012] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 85.875692][ T6939] veth0_macvtap: entered promiscuous mode [ 85.882884][ T6939] veth1_macvtap: entered promiscuous mode [ 85.897429][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.902256][ T6939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.912654][ T227] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.917799][ T227] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.926256][ T227] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.930608][ T227] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.981567][ T227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.985387][ T227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.013212][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.015355][ T55] dvb-usb: bulk message failed: -22 (1/0) [ 86.017056][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.034058][ T55] dvb-usb: error while querying for an remote control event. [ 86.131587][ T6022] usb 7-1: USB disconnect, device number 6 [ 86.148910][ T7071] tmpfs: Bad value for 'mpol' [ 86.154097][ T5946] Bluetooth: hci4: command tx timeout [ 86.171742][ T7079] netlink: 'syz.1.290': attribute type 21 has an invalid length. [ 86.172229][ T7071] bridge1: entered promiscuous mode [ 86.175218][ T6022] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 86.176135][ T7079] netlink: 128 bytes leftover after parsing attributes in process `syz.1.290'. [ 86.194240][ T7079] netlink: 'syz.1.290': attribute type 4 has an invalid length. [ 86.197662][ T7079] netlink: 'syz.1.290': attribute type 5 has an invalid length. [ 86.200951][ T7079] netlink: 3 bytes leftover after parsing attributes in process `syz.1.290'. [ 86.340236][ T7087] netlink: 'syz.2.292': attribute type 18 has an invalid length. [ 86.399808][ T7091] delete_channel: no stack [ 86.470933][ T7105] netlink: 'syz.3.298': attribute type 16 has an invalid length. [ 86.697734][ T7114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 86.954119][ T5946] Bluetooth: hci0: command tx timeout [ 86.958264][ T842] cfg80211: failed to load regulatory.db [ 87.217199][ T7154] could not allocate digest TFM handle sha256-generic [ 87.674511][ T6022] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 87.805875][ T6012] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 87.975630][ T6012] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 87.978728][ T6012] usb 7-1: config 179 has no interface number 0 [ 87.981052][ T6012] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 87.985280][ T6012] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 87.989350][ T6012] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 87.993354][ T6012] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 87.999737][ T6012] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 88.002957][ T6012] usb 7-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 88.006459][ T6012] usb 7-1: Product: syz [ 88.011269][ T7198] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.219548][ T6012] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:179.65/input/input12 [ 88.234163][ T5947] Bluetooth: hci4: command tx timeout [ 88.693125][ T7220] ieee802154 phy0 wpan0: encryption failed: -22 [ 88.694340][ T40] kauditd_printk_skb: 32 callbacks suppressed [ 88.694353][ T40] audit: type=1400 audit(1764460361.287:401): avc: denied { map } for pid=7221 comm="syz.1.335" path="/proc/362/clear_refs" dev="proc" ino=15146 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 88.708232][ T40] audit: type=1400 audit(1764460361.287:402): avc: denied { watch_reads } for pid=7219 comm="syz.3.336" path="/73/file0" dev="tmpfs" ino=426 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.749348][ T40] audit: type=1400 audit(1764460361.337:403): avc: denied { create } for pid=7225 comm="syz.4.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 88.751769][ T7228] deleting an unspecified loop device is not supported. [ 88.764751][ T7228] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.766435][ T40] audit: type=1400 audit(1764460361.337:404): avc: denied { read } for pid=7221 comm="syz.1.335" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.780975][ T40] audit: type=1400 audit(1764460361.337:405): avc: denied { open } for pid=7221 comm="syz.1.335" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.791858][ T40] audit: type=1400 audit(1764460361.337:406): avc: denied { ioctl } for pid=7221 comm="syz.1.335" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 88.952147][ T40] audit: type=1326 audit(1764460361.537:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1934b8f7c9 code=0x7ffc0000 [ 88.962483][ T40] audit: type=1326 audit(1764460361.547:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.341" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1934b8f7c9 code=0x7ffc0000 [ 88.973514][ T40] audit: type=1326 audit(1764460361.547:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1934b8f7c9 code=0x7ffc0000 [ 88.980357][ T40] audit: type=1326 audit(1764460361.547:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7233 comm="syz.4.341" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1934b8f7c9 code=0x7ffc0000 [ 89.203305][ T7253] sctp: [Deprecated]: syz.3.348 (pid 7253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.203305][ T7253] Use struct sctp_sack_info instead [ 89.265520][ T7255] binder: 7254:7255 ioctl c018620c 200000000300 returned -22 [ 89.334510][ T55] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 89.483991][ T55] usb 9-1: Using ep0 maxpacket: 8 [ 89.487658][ T55] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.490988][ T55] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.493718][ T55] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.498277][ T55] usb 9-1: config 0 descriptor?? [ 89.564068][ T6012] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 89.568908][ T7260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7260 comm=syz.1.351 [ 89.574750][ T7260] __nla_validate_parse: 6 callbacks suppressed [ 89.574760][ T7260] netlink: 20 bytes leftover after parsing attributes in process `syz.1.351'. [ 89.706334][ T55] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.715762][ T6012] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 89.718710][ T6012] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 89.722013][ T6012] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 89.725006][ T6012] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 89.728957][ T6012] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 89.732457][ T6012] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 89.737542][ T6012] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 89.740818][ T6012] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 89.743253][ T6012] usb 8-1: Product: syz [ 89.744821][ T6012] usb 8-1: Manufacturer: syz [ 89.748941][ T7258] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 89.752511][ T6012] cdc_wdm 8-1:1.0: skipping garbage [ 89.754201][ T6012] cdc_wdm 8-1:1.0: skipping garbage [ 89.757245][ T6012] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 89.759065][ T6012] cdc_wdm 8-1:1.0: Unknown control protocol [ 89.904185][ T6012] usb 9-1: USB disconnect, device number 2 [ 89.953506][ T55] usb 8-1: USB disconnect, device number 4 [ 90.298914][ T7287] af_packet: tpacket_rcv: packet too big, clamped from 144 to 4294967272. macoff=96 [ 90.314126][ T5947] Bluetooth: hci4: command tx timeout [ 90.342854][ T7291] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 90.345328][ T7291] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 90.348673][ T7291] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 90.461257][ T7301] evm: overlay not supported [ 90.550841][ T842] usb 7-1: USB disconnect, device number 7 [ 90.550905][ C2] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 90.555211][ C2] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 90.580419][ T7310] syzkaller0: entered promiscuous mode [ 90.582192][ T7310] syzkaller0: entered allmulticast mode [ 90.726892][ T7321] netlink: 16 bytes leftover after parsing attributes in process `syz.1.369'. [ 90.744424][ T227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.748586][ T227] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.749880][ T7321] binder_alloc: 7320: pid 7320 spamming oneway? 1 buffers allocated for a total size of 4120 [ 90.758219][ T7283] syz.3.350 (7283) used greatest stack depth: 19224 bytes left [ 90.764500][ T29] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 90.874486][ C1] sd 0:0:0:0: [sda] tag#2 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 90.879403][ C1] sd 0:0:0:0: [sda] tag#2 CDB: Test Unit Ready [ 91.084423][ T6022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.187836][ T7362] bond2: Removing last arp target with arp_interval on [ 91.194346][ T29] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 91.214125][ T6022] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 91.272161][ T7367] tipc: Started in network mode [ 91.274097][ T7367] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 91.276558][ T7367] tipc: Enabled bearer , priority 0 [ 91.343554][ T7371] netlink: 20 bytes leftover after parsing attributes in process `syz.3.384'. [ 91.349053][ T7372] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.384'. [ 91.356884][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.361500][ T29] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.373934][ T29] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 91.377748][ T29] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.384882][ T29] usb 6-1: config 0 descriptor?? [ 91.390761][ T7374] cgroup: Unknown subsys name 'cpuset' [ 91.390768][ T7375] cgroup: Unknown subsys name 'cpuset' [ 91.446115][ T7377] netlink: 'syz.3.386': attribute type 25 has an invalid length. [ 91.449575][ T7377] netlink: 'syz.3.386': attribute type 7 has an invalid length. [ 91.452904][ T7377] netlink: 164 bytes leftover after parsing attributes in process `syz.3.386'. [ 91.535293][ T7379] fuseblk: Unknown parameter 'discard' [ 91.545693][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.548277][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.550755][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.553172][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.556520][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.559181][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.561501][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.564069][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.566408][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.568756][ T842] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 91.575094][ T842] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.03 Device [syz1] on syz1 [ 91.595131][ T29] keytouch 0003:0926:3333.0003: fixing up Keytouch IEC report descriptor [ 91.615718][ T29] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0926:3333.0003/input/input13 [ 91.619461][ T7380] fido_id[7380]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 91.697896][ T29] keytouch 0003:0926:3333.0003: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 91.705509][ T7390] SELinux: security policydb version 17 (MLS) not backwards compatible [ 91.708378][ T7390] SELinux: failed to load policy [ 91.724699][ T29] usb 6-1: USB disconnect, device number 4 [ 91.748741][ T7391] fido_id[7391]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/6-1/report_descriptor': No such file or directory [ 91.944971][ T7407] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.019974][ T7415] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 92.031944][ T7415] netlink: 'syz.2.396': attribute type 4 has an invalid length. [ 92.041854][ T7415] comedi comedi3: comedi_config --init_data is deprecated [ 92.108111][ T7425] binder: 7424:7425 ioctl 40046205 0 returned -22 [ 92.295679][ T34] tipc: Node number set to 11578026 [ 92.351442][ T7443] overlayfs: missing 'lowerdir' [ 92.403940][ T5947] Bluetooth: hci4: command tx timeout [ 92.689701][ T7466] netlink: 'syz.3.412': attribute type 4 has an invalid length. [ 92.913916][ T34] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 93.028034][ T7476] netlink: 376 bytes leftover after parsing attributes in process `syz.3.415'. [ 93.095750][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 93.099249][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.103712][ T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.108939][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.115492][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.127773][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 93.134372][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.139152][ T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.144775][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.149756][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.157785][ T34] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 93.161889][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 93.167264][ T34] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 93.174453][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 93.191990][ T34] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 93.204339][ T34] usb 6-1: string descriptor 0 read error: -22 [ 93.207592][ T34] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 93.212228][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.225237][ T34] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 93.345350][ T7490] Cannot find del_set index 4 as target [ 93.357284][ T7491] openvswitch: netlink: IP tunnel dst address not specified [ 93.424664][ T34] usb 6-1: USB disconnect, device number 5 [ 93.447261][ T7501] fuse: Unknown parameter 'vD' [ 93.512607][ T7503] loop9: detected capacity change from 0 to 7 [ 93.518063][ T7503] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 93.520108][ T7503] loop9: partition table partially beyond EOD, truncated [ 93.522466][ T7503] loop9: p1 size 2437361653 extends beyond EOD, truncated [ 93.644369][ T1030] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 93.747598][ T7515] binder: BINDER_SET_CONTEXT_MGR already set [ 93.749612][ T7515] binder: 7514:7515 ioctl 4018620d 200000000040 returned -16 [ 93.806807][ T1030] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.812931][ T1030] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.818393][ T1030] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.821991][ T1030] usb 9-1: Product: syz [ 93.823925][ T1030] usb 9-1: Manufacturer: syz [ 93.825948][ T1030] usb 9-1: SerialNumber: syz [ 93.833622][ T1030] usb 9-1: config 0 descriptor?? [ 93.959047][ T7519] netlink: 'syz.3.429': attribute type 23 has an invalid length. [ 93.963715][ T40] kauditd_printk_skb: 40 callbacks suppressed [ 93.963731][ T40] audit: type=1400 audit(1764460366.547:451): avc: denied { nlmsg_read } for pid=7518 comm="syz.3.429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 94.178883][ T40] audit: type=1400 audit(1764460366.767:452): avc: denied { mount } for pid=7525 comm="syz.3.431" name="/" dev="autofs" ino=17303 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.217287][ T40] audit: type=1400 audit(1764460366.807:453): avc: denied { unmount } for pid=5948 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 94.282502][ T40] audit: type=1400 audit(1764460366.867:454): avc: denied { ioctl } for pid=7527 comm="syz.1.432" path="socket:[18372]" dev="sockfs" ino=18372 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 94.758366][ T1030] usb 9-1: USB disconnect, device number 3 [ 94.781830][ T7536] mmap: syz.3.434 (7536) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 94.794000][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 94.798140][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz.4.435'. [ 95.049088][ T40] audit: type=1400 audit(1764460367.637:455): avc: denied { append } for pid=7555 comm="syz.4.440" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.062269][ T40] audit: type=1400 audit(1764460367.637:456): avc: denied { bind } for pid=7555 comm="syz.4.440" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 95.162078][ T40] audit: type=1400 audit(1764460367.747:457): avc: denied { ioctl } for pid=7555 comm="syz.4.440" path="pid:[4026533799]" dev="nsfs" ino=4026533799 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.162563][ T7569] team0: Device xfrm1 is of different type [ 95.208140][ T7573] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=7573 comm=syz.3.443 [ 95.394139][ T6012] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 95.432811][ T40] audit: type=1400 audit(1764460368.017:458): avc: denied { ioctl } for pid=7577 comm="syz.3.446" path="socket:[20513]" dev="sockfs" ino=20513 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.554726][ T6012] usb 6-1: Using ep0 maxpacket: 32 [ 95.563003][ T6012] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 95.570090][ T6012] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 95.575270][ T6012] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 95.578715][ T6012] usb 6-1: Product: syz [ 95.580548][ T6012] usb 6-1: Manufacturer: syz [ 95.582539][ T6012] usb 6-1: SerialNumber: syz [ 95.587811][ T6012] usb 6-1: config 0 descriptor?? [ 95.590856][ T7571] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 95.625089][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.630849][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.636361][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.640844][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.645146][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.649394][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.653901][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.658255][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.662220][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.667136][ T7587] overlayfs: failed lookup in lower (newroot/121, name='bus', err=-40): overlapping layers [ 95.674909][ T40] audit: type=1400 audit(1764460368.257:459): avc: denied { link } for pid=7585 comm="syz.3.449" name="#12" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.683042][ T40] audit: type=1400 audit(1764460368.267:460): avc: denied { rename } for pid=7585 comm="syz.3.449" name="#13" dev="tmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 95.778923][ T7592] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 95.805699][ T1030] usb 6-1: USB disconnect, device number 6 [ 96.037406][ T7571] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 96.214029][ T53] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 96.220092][ T7610] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 96.226193][ T7610] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 96.230431][ T7610] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 96.364402][ T53] usb 9-1: Using ep0 maxpacket: 16 [ 96.367584][ T53] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 96.370557][ T53] usb 9-1: config 0 has no interface number 0 [ 96.372983][ T53] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.377164][ T53] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.383409][ T53] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 96.388093][ T53] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 96.393224][ T53] usb 9-1: Product: syz [ 96.396209][ T53] usb 9-1: SerialNumber: syz [ 96.403686][ T53] usb 9-1: config 0 descriptor?? [ 96.411849][ T53] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 96.417015][ T53] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input14 [ 96.612904][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 96.829164][ T7601] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.832868][ T7601] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 96.838047][ T7601] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 96.843792][ T7601] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 96.849400][ T7634] netlink: 'syz.1.467': attribute type 9 has an invalid length. [ 96.852641][ T7634] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.467'. [ 96.859040][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.863790][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.867289][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.871259][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.875302][ T53] usb 9-1: USB disconnect, device number 4 [ 96.878118][ C1] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 96.878143][ C1] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 96.894730][ T53] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 96.965543][ T7648] xfs: Unknown parameter 'discard' [ 97.225939][ T7657] MINIX-fs: unable to read superblock [ 97.306218][ T34] IPVS: starting estimator thread 0... [ 97.394073][ T7666] IPVS: using max 43 ests per chain, 103200 per kthread [ 97.406897][ T7671] netlink: 8 bytes leftover after parsing attributes in process `syz.4.478'. [ 97.467353][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 97.475095][ T73] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.478572][ T73] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.482245][ T73] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.496858][ T7679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'. [ 97.500217][ T73] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.566788][ T7688] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 97.604394][ T7694] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 97.607222][ T7694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.485'. [ 97.610155][ T7694] netlink: 'syz.2.485': attribute type 6 has an invalid length. [ 97.755243][ T7701] netlink: 'syz.2.488': attribute type 39 has an invalid length. [ 97.790629][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.1.489'. [ 97.885660][ T7710] qnx4: no qnx4 filesystem (no root dir). [ 98.061095][ T7722] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:0 [ 98.065019][ T34] IPVS: starting estimator thread 0... [ 98.164046][ T7727] IPVS: using max 43 ests per chain, 103200 per kthread [ 98.276915][ T7747] netlink: 8 bytes leftover after parsing attributes in process `syz.4.503'. [ 98.482972][ T150] block nbd0: Possible stuck request ffff888027735080: control (read@0,1024B). Runtime 30 seconds [ 98.487716][ T150] block nbd0: Possible stuck request ffff888027735240: control (read@1024,1024B). Runtime 30 seconds [ 98.491392][ T150] block nbd0: Possible stuck request ffff888027735400: control (read@2048,1024B). Runtime 30 seconds [ 98.495007][ T150] block nbd0: Possible stuck request ffff8880277355c0: control (read@3072,1024B). Runtime 30 seconds [ 98.564398][ T7713] delete_channel: no stack [ 98.873736][ T7790] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 98.943980][ T55] delete_channel: no stack [ 99.012962][ T7796] ipvlan2: entered allmulticast mode [ 99.021170][ T7796] team0: entered allmulticast mode [ 99.023575][ T7796] team_slave_1: entered allmulticast mode [ 99.027171][ T7796] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 99.281149][ T7804] netlink: 'syz.3.522': attribute type 10 has an invalid length. [ 99.568789][ T7810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.575388][ T7810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.581604][ T7810] bond0 (unregistering): Released all slaves [ 99.727982][ T7814] veth0_to_bridge: entered promiscuous mode [ 99.731758][ T7814] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=46 sclass=netlink_tcpdiag_socket pid=7814 comm=syz.3.527 [ 99.742050][ T7813] veth0_to_bridge: left promiscuous mode [ 99.807522][ T7819] overlay: ./file0 is not a directory [ 100.094583][ T7824] __nla_validate_parse: 5 callbacks suppressed [ 100.094595][ T7824] netlink: 32 bytes leftover after parsing attributes in process `syz.3.529'. [ 100.180804][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.530'. [ 100.244272][ T7831] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=7831 comm=syz.1.530 [ 100.533401][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 100.533417][ T40] audit: type=1400 audit(1764460373.117:474): avc: denied { setopt } for pid=7846 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.547061][ T40] audit: type=1400 audit(1764460373.117:475): avc: denied { ioctl } for pid=7846 comm="syz.3.533" path="socket:[20842]" dev="sockfs" ino=20842 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 100.758269][ T7866] IPVS: set_ctl: invalid protocol: 60 172.20.20.52:20003 [ 100.809228][ T7871] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.854239][ T40] audit: type=1400 audit(1764460373.447:476): avc: denied { read } for pid=7865 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 100.903326][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.907417][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.911565][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.966755][ T7881] netlink: 8 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.970972][ T7881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.975163][ T7881] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 100.985542][ T7890] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 100.998224][ T7890] tun0: tun_chr_ioctl cmd 1074025675 [ 101.000029][ T7890] tun0: persist enabled [ 101.001762][ T7890] tun0: tun_chr_ioctl cmd 1074025675 [ 101.003499][ T7890] tun0: persist disabled [ 101.152676][ T7899] sch_tbf: burst 1099 is lower than device lo mtu (11337746) ! [ 101.220036][ T40] audit: type=1400 audit(1764460373.807:477): avc: denied { name_bind } for pid=7898 comm="syz.2.545" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 101.434810][ T40] audit: type=1400 audit(1764460374.027:478): avc: denied { write } for pid=7913 comm="syz.1.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.436575][ T7914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 101.493166][ T7920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.552'. [ 101.566282][ T40] audit: type=1400 audit(1764460374.157:479): avc: denied { accept } for pid=7923 comm="syz.1.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 101.594422][ T40] audit: type=1400 audit(1764460374.177:480): avc: denied { execute } for pid=7925 comm="syz.1.555" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=19414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 101.733993][ T55] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 101.894025][ T55] usb 7-1: Using ep0 maxpacket: 8 [ 101.897826][ T55] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 101.901313][ T55] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 101.906262][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 101.907884][ T7937] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20004 [ 101.910291][ T55] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 101.910316][ T55] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 101.923214][ T55] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.927566][ T55] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.963755][ T7944] siw: device registration error -23 [ 101.972094][ T7942] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.987263][ T7942] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 102.109367][ T7956] tipc: Enabling of bearer rejected, failed to enable media [ 102.134701][ T55] usb 7-1: usb_control_msg returned -32 [ 102.136798][ T55] usbtmc 7-1:16.0: can't read capabilities [ 102.151286][ T29] usb 7-1: USB disconnect, device number 8 [ 102.191147][ T7966] netlink: 'syz.2.567': attribute type 4 has an invalid length. [ 102.220434][ T7971] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 102.478307][ T7985] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 102.481830][ T7986] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 102.486436][ T40] audit: type=1400 audit(1764460375.077:481): avc: denied { name_bind } for pid=7984 comm="syz.2.574" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 102.963993][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 102.983046][ T7989] fuse: Bad value for 'fd' [ 103.065595][ T40] audit: type=1400 audit(1764460375.657:482): avc: denied { accept } for pid=7992 comm="syz.4.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 103.114297][ T40] audit: type=1400 audit(1764460375.697:483): avc: denied { setopt } for pid=7994 comm="syz.4.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 103.344426][ T8011] ======================================================= [ 103.344426][ T8011] WARNING: The mand mount option has been deprecated and [ 103.344426][ T8011] and is ignored by this kernel. Remove the mand [ 103.344426][ T8011] option from the mount to silence this warning. [ 103.344426][ T8011] ======================================================= [ 103.367240][ T8013] random: crng reseeded on system resumption [ 103.385080][ T8013] nbd: must specify an index to disconnect [ 103.535925][ T8024] IPVS: set_ctl: invalid protocol: 103 172.20.20.64:20003 [ 103.734808][ T8051] geneve3: entered promiscuous mode [ 103.737185][ T8051] geneve3: entered allmulticast mode [ 103.857664][ T8060] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.862248][ T8060] TCP: tcp_parse_options: Illegal window scaling value 64 > 14 received [ 104.000406][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880326e9000: rx timeout, send abort [ 104.008335][ T8069] netlink: 'syz.3.603': attribute type 10 has an invalid length. [ 104.166733][ T8073] nfs4: Unknown parameter 'tcpd0' [ 104.264890][ T8076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.504096][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880326e9000: abort rx timeout. Force session deactivation [ 104.929071][ T8107] netlink: 'syz.3.615': attribute type 12 has an invalid length. [ 105.051003][ T8116] netlink: 'syz.4.617': attribute type 10 has an invalid length. [ 105.076392][ T8116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.081211][ T8116] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 105.242522][ T8131] overlayfs: failed to clone upperpath [ 105.257333][ T8135] netlink: zone id is out of range [ 105.259416][ T8135] netlink: zone id is out of range [ 105.261646][ T8135] netlink: zone id is out of range [ 105.265807][ T8135] netlink: zone id is out of range [ 105.271596][ T8135] netlink: zone id is out of range [ 105.274245][ T8135] netlink: zone id is out of range [ 105.276682][ T8135] netlink: set zone limit has 8 unknown bytes [ 105.350963][ T8150] netlink: 'syz.4.626': attribute type 8 has an invalid length. [ 105.358108][ T8150] __nla_validate_parse: 13 callbacks suppressed [ 105.358120][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.626'. [ 105.381680][ T8150] afs: Unknown parameter '1(nÞ' [ 105.406363][ T8156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.632'. [ 105.410453][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.3.632'. [ 105.415866][ T8156] netlink: 'syz.3.632': attribute type 6 has an invalid length. [ 105.445834][ T8162] ip6t_srh: unknown srh match flags 4000 [ 105.449426][ T8162] netlink: 344 bytes leftover after parsing attributes in process `syz.2.634'. [ 105.450097][ T8160] fuse: Bad value for 'user_id' [ 105.455185][ T8160] fuse: Bad value for 'user_id' [ 105.738310][ T8182] nbd: must specify a size in bytes for the device [ 105.837913][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 105.837929][ T40] audit: type=1400 audit(1764460378.427:505): avc: denied { mount } for pid=8187 comm="syz.3.643" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 105.839893][ T8188] overlay: Unknown parameter 'appraise_type' [ 105.962229][ T8202] vxfs: unable to read disk superblock at 1 [ 105.966279][ T8202] vxfs: unable to read disk superblock at 8 [ 105.967972][ T40] audit: type=1400 audit(1764460378.557:506): avc: denied { getopt } for pid=8203 comm="syz.1.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 105.968930][ T8202] vxfs: can't find superblock. [ 106.053250][ T8208] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 106.109866][ T8219] kernel read not supported for file /blkio.bfq.io_wait_time_recursive (pid: 8219 comm: syz.3.653) [ 106.118005][ T40] audit: type=1800 audit(1764460378.707:507): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.653" name="blkio.bfq.io_wait_time_recursive" dev="mqueue" ino=22842 res=0 errno=0 [ 106.119255][ T8219] netlink: 16 bytes leftover after parsing attributes in process `syz.3.653'. [ 106.186522][ T8229] netlink: 'syz.1.658': attribute type 12 has an invalid length. [ 106.189145][ T8229] netlink: 'syz.1.658': attribute type 29 has an invalid length. [ 106.191637][ T8229] netlink: 148 bytes leftover after parsing attributes in process `syz.1.658'. [ 106.195353][ T8229] netlink: 'syz.1.658': attribute type 2 has an invalid length. [ 106.198127][ T8229] netlink: 'syz.1.658': attribute type 3 has an invalid length. [ 106.201690][ T8229] netlink: 15 bytes leftover after parsing attributes in process `syz.1.658'. [ 106.311009][ T40] audit: type=1400 audit(1764460378.897:508): avc: denied { execmod } for pid=8236 comm="syz.3.660" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=21104 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 106.332979][ T40] audit: type=1400 audit(1764460378.917:509): avc: denied { execmem } for pid=8236 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 106.383160][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.2.666'. [ 106.386965][ T8264] netlink: 44 bytes leftover after parsing attributes in process `syz.4.665'. [ 106.391521][ T8262] bond0: entered promiscuous mode [ 106.393190][ T8262] bond_slave_0: entered promiscuous mode [ 106.396953][ T8262] bond_slave_1: entered promiscuous mode [ 106.399884][ T8262] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 106.404593][ T8262] gretap0: entered promiscuous mode [ 106.408027][ T8262] bond0: left promiscuous mode [ 106.409704][ T8262] bond_slave_0: left promiscuous mode [ 106.411626][ T8262] bond_slave_1: left promiscuous mode [ 106.413480][ T8262] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 106.420652][ T8262] gretap0: left promiscuous mode [ 106.447106][ T40] audit: type=1400 audit(1764460379.037:510): avc: denied { nlmsg_read } for pid=8266 comm="syz.3.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 106.473193][ T8280] netlink: 48 bytes leftover after parsing attributes in process `syz.1.671'. [ 106.567392][ T40] audit: type=1400 audit(1764460379.157:511): avc: denied { create } for pid=8296 comm="syz.3.676" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.602734][ T40] audit: type=1400 audit(1764460379.187:512): avc: denied { read write } for pid=8303 comm="syz.4.678" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.607210][ T8304] loop6: detected capacity change from 0 to 2640 [ 106.611568][ T40] audit: type=1400 audit(1764460379.187:513): avc: denied { open } for pid=8303 comm="syz.4.678" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 106.617671][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.625246][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.628809][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.632148][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.635630][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.639412][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.643656][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.648211][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.651919][ T8103] ldm_validate_partition_table(): Disk read failed. [ 106.654930][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.659927][ T8103] Buffer I/O error on dev loop6, logical block 0, async page read [ 106.663637][ T8103] Dev loop6: unable to read RDB block 0 [ 106.666978][ T8103] loop6: unable to read partition table [ 106.672915][ T8304] ldm_validate_partition_table(): Disk read failed. [ 106.676715][ T8304] Dev loop6: unable to read RDB block 0 [ 106.679544][ T8304] loop6: unable to read partition table [ 106.682132][ T8304] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 106.693902][ T40] audit: type=1400 audit(1764460379.277:514): avc: denied { ioctl } for pid=8308 comm="syz.2.679" path="socket:[22279]" dev="sockfs" ino=22279 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 106.795338][ T8323] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.886948][ T8332] bond1: entered allmulticast mode [ 106.891230][ T8332] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.909957][ T8332] bond2: entered allmulticast mode [ 106.912480][ T8332] 8021q: adding VLAN 0 to HW filter on device bond2 [ 106.932921][ T8332] bond3: entered allmulticast mode [ 106.936021][ T8332] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.948170][ T8332] bond4: entered allmulticast mode [ 106.950088][ T8332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 106.960863][ T8332] bond5: entered allmulticast mode [ 106.963634][ T8332] 8021q: adding VLAN 0 to HW filter on device bond5 [ 106.977334][ T8332] bond6: entered allmulticast mode [ 106.979401][ T8332] 8021q: adding VLAN 0 to HW filter on device bond6 [ 106.990293][ T8332] bond7: entered allmulticast mode [ 106.992272][ T8332] 8021q: adding VLAN 0 to HW filter on device bond7 [ 107.004671][ T8332] bond8: entered allmulticast mode [ 107.007179][ T8332] 8021q: adding VLAN 0 to HW filter on device bond8 [ 107.019278][ T8332] bond9: entered allmulticast mode [ 107.021827][ T8332] 8021q: adding VLAN 0 to HW filter on device bond9 [ 107.037920][ T8332] bond10: entered allmulticast mode [ 107.040543][ T8332] 8021q: adding VLAN 0 to HW filter on device bond10 [ 107.090847][ T8332] bond11: entered allmulticast mode [ 107.093046][ T8332] 8021q: adding VLAN 0 to HW filter on device bond11 [ 107.123709][ T8332] bond12: entered allmulticast mode [ 107.126518][ T8332] 8021q: adding VLAN 0 to HW filter on device bond12 [ 107.145954][ T8332] bond13: entered allmulticast mode [ 107.148616][ T8332] 8021q: adding VLAN 0 to HW filter on device bond13 [ 107.178060][ T8332] bond14: entered allmulticast mode [ 107.180879][ T8332] 8021q: adding VLAN 0 to HW filter on device bond14 [ 107.200249][ T8332] bond15: entered allmulticast mode [ 107.202924][ T8332] 8021q: adding VLAN 0 to HW filter on device bond15 [ 107.206766][ T8372] sit0: entered promiscuous mode [ 107.219882][ T8372] validate_nla: 5 callbacks suppressed [ 107.219900][ T8372] netlink: 'syz.2.694': attribute type 1 has an invalid length. [ 107.241428][ T8332] bond16: entered allmulticast mode [ 107.245642][ T8332] 8021q: adding VLAN 0 to HW filter on device bond16 [ 107.266027][ T8332] bond17: entered allmulticast mode [ 107.268564][ T8332] 8021q: adding VLAN 0 to HW filter on device bond17 [ 107.289919][ T8332] bond18: entered allmulticast mode [ 107.290091][ T8382] Cannot find del_set index 4 as target [ 107.292330][ T8332] 8021q: adding VLAN 0 to HW filter on device bond18 [ 107.298456][ T8382] sch_tbf: burst 19920 is lower than device lo mtu (11337746) ! [ 107.318086][ T8332] bond19: entered allmulticast mode [ 107.320773][ T8332] 8021q: adding VLAN 0 to HW filter on device bond19 [ 107.324297][ T8383] sch_tbf: burst 19920 is lower than device lo mtu (11337746) ! [ 107.343312][ T8332] bond20: entered allmulticast mode [ 107.345952][ T8332] 8021q: adding VLAN 0 to HW filter on device bond20 [ 107.358918][ T8332] bond21: entered allmulticast mode [ 107.361051][ T8332] 8021q: adding VLAN 0 to HW filter on device bond21 [ 107.380941][ T8332] bond22: entered allmulticast mode [ 107.383709][ T8332] 8021q: adding VLAN 0 to HW filter on device bond22 [ 107.400397][ T8390] block nbd2: NBD_DISCONNECT [ 107.402399][ T8332] bond23: entered allmulticast mode [ 107.405971][ T8332] 8021q: adding VLAN 0 to HW filter on device bond23 [ 107.425266][ T8332] bond24: entered allmulticast mode [ 107.429674][ T8332] 8021q: adding VLAN 0 to HW filter on device bond24 [ 107.452989][ T8332] bond25: entered allmulticast mode [ 107.456040][ T8332] 8021q: adding VLAN 0 to HW filter on device bond25 [ 107.477782][ T8332] bond26: entered allmulticast mode [ 107.480500][ T8332] 8021q: adding VLAN 0 to HW filter on device bond26 [ 107.499120][ T8332] bond27: entered allmulticast mode [ 107.501956][ T8332] 8021q: adding VLAN 0 to HW filter on device bond27 [ 107.521731][ T8332] bond28: entered allmulticast mode [ 107.524548][ T8332] 8021q: adding VLAN 0 to HW filter on device bond28 [ 107.537958][ T8332] bond29: entered allmulticast mode [ 107.539967][ T8332] 8021q: adding VLAN 0 to HW filter on device bond29 [ 107.553233][ T8332] bond30: entered allmulticast mode [ 107.556388][ T8332] 8021q: adding VLAN 0 to HW filter on device bond30 [ 107.573499][ T8332] bond31: entered allmulticast mode [ 107.575674][ T8332] 8021q: adding VLAN 0 to HW filter on device bond31 [ 107.588702][ T8332] bond32: entered allmulticast mode [ 107.591378][ T8332] 8021q: adding VLAN 0 to HW filter on device bond32 [ 107.611704][ T8332] bond33: entered allmulticast mode [ 107.614403][ T8332] 8021q: adding VLAN 0 to HW filter on device bond33 [ 107.972439][ T8436] program syz.4.707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.977238][ T8436] ata1.00: non-matching transfer count (32/2304) [ 107.982151][ T8438] tipc: Started in network mode [ 107.984639][ T8438] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 107.988294][ T8438] tipc: Enabling of bearer rejected, failed to enable media [ 108.163295][ T8455] tmpfs: Bad value for 'mpol' [ 108.290705][ T8466] syzkaller0: entered promiscuous mode [ 108.293342][ T8466] syzkaller0: entered allmulticast mode [ 108.301319][ T8466] syzkaller0: tun_net_xmit 14 [ 108.441576][ T8476] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 109.967779][ T8599] openvswitch: netlink: Multiple metadata blocks provided [ 110.005425][ T8602] vti0: entered allmulticast mode [ 110.319274][ T8641] kAFS: unable to lookup cell '(,c¾ûL' [ 111.043156][ T8658] __nla_validate_parse: 46 callbacks suppressed [ 111.043174][ T8658] netlink: 28 bytes leftover after parsing attributes in process `syz.1.770'. [ 111.119906][ T8656] kvm: MONITOR instruction emulated as NOP! [ 111.237799][ T8664] netlink: 'syz.4.772': attribute type 63 has an invalid length. [ 111.241103][ T8664] netlink: 5 bytes leftover after parsing attributes in process `syz.4.772'. [ 111.246122][ T8664] gretap0: entered allmulticast mode [ 111.249170][ T8664] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 111.287220][ T5947] ------------[ cut here ]------------ [ 111.289943][ T5947] WARNING: CPU: 2 PID: 5947 at net/bluetooth/hci_conn.c:567 hci_conn_timeout+0x11a/0x210 [ 111.294799][ T5947] Modules linked in: [ 111.296943][ T5947] CPU: 2 UID: 0 PID: 5947 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 111.301058][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.305951][ T5947] Workqueue: hci2 hci_conn_timeout [ 111.308181][ T5947] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 111.310574][ T5947] Code: 00 e8 4a 6b 63 f7 4c 89 f1 4c 89 e2 48 c7 c6 20 64 d7 8c 48 c7 c7 e8 bc 7d 90 e8 d1 e9 7d fa e9 4d ff ff ff e8 27 6b 63 f7 90 <0f> 0b 90 e8 1e 6b 63 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 111.318933][ T5947] RSP: 0018:ffffc900033afc20 EFLAGS: 00010293 [ 111.321480][ T5947] RAX: 0000000000000000 RBX: ffff888027e34948 RCX: ffffffff8a597c0f [ 111.325079][ T5947] RDX: ffff888026ff8000 RSI: ffffffff8a597cb9 RDI: 0000000000000005 [ 111.328527][ T5947] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 111.331917][ T5947] R10: 00000000ffffffff R11: 0000000000002b81 R12: ffff888027e34000 [ 111.335635][ T5947] R13: 0000000000000000 R14: ffffffff90824e54 R15: ffffc900033afd00 [ 111.339011][ T5947] FS: 0000000000000000(0000) GS:ffff8880d6c05000(0000) knlGS:0000000000000000 [ 111.342763][ T5947] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.345802][ T5947] CR2: 00007f1935a71f98 CR3: 0000000025813000 CR4: 0000000000352ef0 [ 111.349394][ T5947] Call Trace: [ 111.350881][ T5947] [ 111.352160][ T5947] process_one_work+0x9cf/0x1b70 [ 111.354650][ T5947] ? __pfx_process_one_work+0x10/0x10 [ 111.357063][ T5947] ? assign_work+0x1a0/0x250 [ 111.359078][ T5947] worker_thread+0x6c8/0xf10 [ 111.361214][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 111.363510][ T5947] kthread+0x3c5/0x780 [ 111.365439][ T5947] ? __pfx_kthread+0x10/0x10 [ 111.367480][ T5947] ? rcu_is_watching+0x12/0xc0 [ 111.369565][ T5947] ? __pfx_kthread+0x10/0x10 [ 111.371639][ T5947] ret_from_fork+0x675/0x7d0 [ 111.373744][ T5947] ? __pfx_kthread+0x10/0x10 [ 111.376078][ T5947] ret_from_fork_asm+0x1a/0x30 [ 111.378220][ T5947] [ 111.379612][ T5947] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 111.382814][ T5947] CPU: 2 UID: 0 PID: 5947 Comm: kworker/u33:6 Not tainted syzkaller #0 PREEMPT(full) [ 111.387014][ T5947] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.391749][ T5947] Workqueue: hci2 hci_conn_timeout [ 111.394179][ T5947] Call Trace: [ 111.395638][ T5947] [ 111.396917][ T5947] dump_stack_lvl+0x3d/0x1f0 [ 111.398730][ T5947] vpanic+0x640/0x6f0 [ 111.400622][ T5947] ? hci_conn_timeout+0x11a/0x210 [ 111.402729][ T5947] panic+0xca/0xd0 [ 111.404363][ T5947] ? __pfx_panic+0x10/0x10 [ 111.406256][ T5947] ? check_panic_on_warn+0x1f/0xb0 [ 111.408467][ T5947] check_panic_on_warn+0xab/0xb0 [ 111.410578][ T5947] __warn+0xf6/0x3c0 [ 111.412285][ T5947] ? hci_conn_timeout+0x11a/0x210 [ 111.414416][ T5947] report_bug+0x3c3/0x580 [ 111.416323][ T5947] ? hci_conn_timeout+0x11a/0x210 [ 111.418468][ T5947] handle_bug+0x184/0x210 [ 111.420473][ T5947] exc_invalid_op+0x17/0x50 [ 111.422556][ T5947] asm_exc_invalid_op+0x1a/0x20 [ 111.424721][ T5947] RIP: 0010:hci_conn_timeout+0x11a/0x210 [ 111.427196][ T5947] Code: 00 e8 4a 6b 63 f7 4c 89 f1 4c 89 e2 48 c7 c6 20 64 d7 8c 48 c7 c7 e8 bc 7d 90 e8 d1 e9 7d fa e9 4d ff ff ff e8 27 6b 63 f7 90 <0f> 0b 90 e8 1e 6b 63 f7 48 8d bb f5 f6 ff ff 48 b8 00 00 00 00 00 [ 111.435905][ T5947] RSP: 0018:ffffc900033afc20 EFLAGS: 00010293 [ 111.438505][ T5947] RAX: 0000000000000000 RBX: ffff888027e34948 RCX: ffffffff8a597c0f [ 111.441873][ T5947] RDX: ffff888026ff8000 RSI: ffffffff8a597cb9 RDI: 0000000000000005 [ 111.445466][ T5947] RBP: 00000000ffffffff R08: 0000000000000005 R09: 0000000000000000 [ 111.448950][ T5947] R10: 00000000ffffffff R11: 0000000000002b81 R12: ffff888027e34000 [ 111.452369][ T5947] R13: 0000000000000000 R14: ffffffff90824e54 R15: ffffc900033afd00 [ 111.455740][ T5947] ? hci_conn_timeout+0x6f/0x210 [ 111.457877][ T5947] ? hci_conn_timeout+0x119/0x210 [ 111.460348][ T5947] process_one_work+0x9cf/0x1b70 [ 111.462494][ T5947] ? __pfx_process_one_work+0x10/0x10 [ 111.464784][ T5947] ? assign_work+0x1a0/0x250 [ 111.466760][ T5947] worker_thread+0x6c8/0xf10 [ 111.468852][ T5947] ? __pfx_worker_thread+0x10/0x10 [ 111.471200][ T5947] kthread+0x3c5/0x780 [ 111.473008][ T5947] ? __pfx_kthread+0x10/0x10 [ 111.475132][ T5947] ? rcu_is_watching+0x12/0xc0 [ 111.477171][ T5947] ? __pfx_kthread+0x10/0x10 [ 111.479189][ T5947] ret_from_fork+0x675/0x7d0 [ 111.481188][ T5947] ? __pfx_kthread+0x10/0x10 [ 111.483266][ T5947] ret_from_fork_asm+0x1a/0x30 [ 111.485312][ T5947] [ 111.487564][ T5947] Kernel Offset: disabled [ 111.489615][ T5947] Rebooting in 86400 seconds..