last executing test programs: 39.25357093s ago: executing program 2 (id=764): getuid() r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f, {0x0, 0x401, 0x6, 0x566a, 0xfffffff6, 0x6}}) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5000000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e657400"], 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, 0x0}, 0x201}], 0x1, 0x20, 0x0) bind$unix(r2, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x24, 0x40, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x90) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x1000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv4_newnexthop={0x7c, 0x68, 0x4, 0x70bd25, 0x3, {0x2, 0x0, 0x1, 0x0, 0x4}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x2}, @NHA_ENCAP_TYPE={0x6, 0x7, 0xb}, @NHA_GROUP={0x24, 0x2, [{0x2, 0x1}, {0x2, 0x9}, {0x0, 0x1}, {0x2, 0x9}]}, @NHA_RES_GROUP={0x2c, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x298f}, @NHA_RES_GROUP_UNBALANCED_TIMER={0x8}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x81}, @NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x7}, @NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x3}]}]}, 0x7c}}, 0x40804) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}]}}}]}, 0x3c}}, 0x0) 38.697495943s ago: executing program 2 (id=769): r0 = socket(0xa, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00009c0000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000fe8000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fe5000/0x1000)=nil, &(0x7f0000ff4000/0x3000)=nil, 0x0}, 0x68) r1 = socket$kcm(0x21, 0x2, 0x2) syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0x5}, {0x4, 0xc9}}}}, 0xb) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e23, @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r2, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7, 0x6, 0x0, 0x7}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x24041090) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000001}, 0x4000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) fcntl$setlease(r4, 0x400, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) preadv(r5, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4094, 0xffe}], 0x1, 0x33, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setsockopt$sock_int(r3, 0x1, 0x12, &(0x7f0000000080)=0x10000008, 0x4) 37.790380962s ago: executing program 2 (id=784): r0 = socket$pppl2tp(0x18, 0x1, 0x1) close(0x3) getsockopt(r0, 0x5, 0x7c, &(0x7f0000000240), &(0x7f00000002c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800100039040300"/20, @ANYRES32=0x0, @ANYBLOB="01980000031300001800128008000100736974000c0002800600080040000000"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x20000, 0x0) lchown(&(0x7f0000000080)='./file0\x00', 0xee00, 0xee00) socket$inet6_udp(0xa, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') readlinkat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/16, 0x10) 37.775250223s ago: executing program 2 (id=786): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20049815}, 0x4000080) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000200)={0x3a, 'syz0', 0x3a, 'E', 0x3a, 0x5, 0x3a, 'ethtool\x00', 0x3a, 'syz_tun\x00', 0x3a, './file0', 0x3a, [0x50]}, 0x38) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000480)={{0x0, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$unix(0x1, 0x5, 0x0) r8 = dup2(r7, r6) close_range(r8, 0xffffffffffffffff, 0x0) unlinkat(r8, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f0000000340)='./file0\x00', 0x8) poll(&(0x7f00000001c0)=[{r2, 0x1400}, {r2, 0x25}], 0x2, 0x200) 37.717395502s ago: executing program 2 (id=788): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340), 0x84000, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='cdg', 0x3) (async) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x2, 0x204, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x107}, 0x1c) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r3, &(0x7f0000000840)="a6e0775c40424ae2fa17e3edddc8", 0xe, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @remote, 0x8}, 0x1c) (async) pipe(&(0x7f0000000300)) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) shutdown(r0, 0x1) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) (async) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f00000000c0)={'raw\x00', 0x0, [0x2c, 0x8, 0x3, 0x0, 0xdb]}, &(0x7f0000000140)=0x54) (async) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0d86dd60cb653e00283a01fe800000000000000000000000000001fe80000000000000135fb0b2b04ec666be74601dc764c200000000000000ae890090780000000000000000000000000000000000000000200100000000000000000000000000010a71518a7994f2a5eb66003bdd4bf6789fcddf2038aaa7bd7694cdbb053209e5e2c675ed8943b2194fa214124d8afb"], 0x0) 37.409548981s ago: executing program 2 (id=794): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24e, 0xfffffff6, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0x8}]}, 0x78) close(r0) (async) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc02000000dfffffffffffffff0000000000000000000000000000000100000000000000000000000000000000008c0000000000000000000000000000000000000000008001000080000000000000005167f3880000000000000000000101000000000000000000000000000000000000000000000008000000000000040000000600000000040000000200000000000000000000940000000000000000000000ad0400000c0008000800080001b2000079bbb594a619ab3b30e1955e0247f66207338ca4e25bdc0c39822279240a5878aa7dd349d45ab2b5b502805485ad562c7177f5fe17158735332eb654ecf1228cbe7811c25a33b1fc938a5eec4e690000000000000000000000004d347d9992702abde3f588f497600630d5a1a35141cb5122cbc43c9a3621fa10d207ff34844462a206810138be85824cb68cd9663f2fc1e87aff4b945388169c61fd069dc7a593227de1068f443304d37141fa21ce97d910d1ec1c33abcca3f90fe33ecf8d18097ae5a249ead67c89be8462164899e35ca5bed4f398"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 37.325270133s ago: executing program 32 (id=794): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x24, 0x0, 0x95, 0x8002, 0x3, 0x3e, 0x101, 0x294, 0x40, 0x24e, 0xfffffff6, 0x0, 0x38, 0x1, 0xfffd, 0x7f, 0x808}, [{0x3, 0x4, 0x7, 0xa, 0x101, 0x6, 0x7, 0x8}]}, 0x78) close(r0) (async) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000200)=ANY=[@ANYBLOB="04010000160001040000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100000fd100040002020000000c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) 17.860021599s ago: executing program 0 (id=1155): r0 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000003f80), 0x0, 0x0) readv(r0, &(0x7f0000003980)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000001440)=""/20, 0x14}, {&(0x7f0000003680)=""/118, 0x76}, {&(0x7f0000003700)=""/150, 0x96}, {&(0x7f00000037c0)=""/151, 0x97}, {&(0x7f0000004d00)=""/243, 0xf3}], 0x7) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) r2 = eventfd(0x0) poll(&(0x7f00000008c0)=[{r2}], 0x1, 0xc6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000100feffffffffdb7525017c0000040042800c00018006000600800a00000c000280080017800400d8"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) readv(r0, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/239, 0xef}, {&(0x7f0000003a40)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/26, 0x1a}, {&(0x7f00000024c0)=""/243, 0xf3}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000003a00)=""/56, 0x38}], 0x9) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x41, 0x3, 0x1c0, 0x0, 0x50020000, 0x0, 0x98, 0x0, 0x128, 0x1f0, 0x1f0, 0x128, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'syzkaller0\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x35}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x220) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') pread64(r4, &(0x7f0000000140)=""/4094, 0xffe, 0xe8) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200080c0, &(0x7f00000001c0)={0xa, 0x2, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='scalable', 0x8) shutdown(0xffffffffffffffff, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f00000002c0)='./file0\x00', 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef502"], 0xf8) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_REQBUFS(r4, 0xc0086f3c, &(0x7f0000000200)={0x7f, 0x6}) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) mount$fuseblk(&(0x7f0000000340), &(0x7f0000000380)='./file0\x00', &(0x7f0000000440), 0x488, &(0x7f0000004c40)=ANY=[@ANYBLOB="66d598cb1f", @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000400,\x00']) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002c00)={0x2020}, 0x2020) 1.749967661s ago: executing program 0 (id=1159): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$sock_buf(r0, 0x1, 0x3d, 0x0, &(0x7f0000000100)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000140)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r3, 0x0, 0x25, &(0x7f0000000400)={@multicast2, @local}, 0xc) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) listen(0xffffffffffffffff, 0x7f) r5 = socket$inet(0x2, 0x2, 0x2) getsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000000180)={@rand_addr, @broadcast}, &(0x7f0000000540)=0x8) ioctl$KVM_GET_MSRS_cpu(r4, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{0x40000022, 0x0, 0x1}]}) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0) keyctl$set_timeout(0xf, 0x0, 0xfff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r7, &(0x7f0000000080)=[{&(0x7f0000000000)="a137f5b87731e51b2540", 0xa}], 0x1) write$dsp(r6, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) r8 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r8, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000800000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r9, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r6, 0xc058671e, &(0x7f0000000080)={{'\x00', 0x1}, {0x4}, 0x183, 0x0, 0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)="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", 0x131, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1c5}) 1.743343497s ago: executing program 0 (id=1165): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000200), &(0x7f00000006c0)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x54}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000114600)={0x0, 0x0, "d6489547eaf99bec524c7ca0b20e980cf51ebbff3028997e9aba6f9ac1aafd0898492926393e861a57963f165f12d8b4dc3c3f5a789fbf1b805b74e063dae88a047533bc0f12bef0a1594bb285fed3b363237885797bab279d7c451925c21fc866f6e10afd906ad910f89ef9f4a9b156b8620ad6735984cfd6d0772a349d2e41be022f3784a0de65b43202a29780c1f4368b82070a47e1833207a27ae50ef8ca9e87c88310949fe66ffa1b510c494bf6e6eb1027233b67e7fb8ed8a6ea5ff0565154b3fcb2b0ac683c2aa6ac3510976cb8027aa344a562fa5d55055ca16662252c5e7fbbaa912d987f337f867dad6b8ee8f7d6ace464b932a481bf4dbdfbd32b", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f0000115600)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0xd, "7c97d0176c5a8f"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000116600)={0x0, 0x0, "f3735688eba559897c4c89a74debbda6d7966c0065b138bffaf9b355a3132408bd41add1353c5542f496fdd2d6ab65c495eb47afa22fcb5cfcac6f43b6ed2fbf9b6572bf651901c3784b783ca67b845cbc5023945ffd5511bda256f575a53e6716ea125c04491c951aabdd63cd63c69c2c05c9b343d571456e2ec4f0efc0eb093bc031b54e77c42c5d4696d3cd8ce5039bde044c55985336e9a7211f37428ccebbfc5bb4dffd242a2eae8f3369fe377f8089d478060b5472ff8c4fa0eb2627396768863e289d22f17b115ddbbc20d151e65e2a79f1560639829e5ea24ae1be7107b12c2044cae9a775ea8a389e129824749a1e8e4c2699f29a541a82a4079ec6", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000117600)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000118600)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "a0a98baf91dde0"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000119600)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f0000119800)={0xf96, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r4, r5}, {r6, r7}, {r8, r9}], 0x3, "2cf0757248f64e"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x8041, 0x0) write$dsp(r12, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r12, 0x5001, 0x0) r13 = gettid() ioctl$SNDCTL_DSP_SPEED(r12, 0xc0045002, &(0x7f0000000000)=0x8001) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r13}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x14, 0x3a, 0x1, 0x270bd24, 0x25dfdbf8, {0xf}}, 0x14}}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r10, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x808) openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="e8000000", @ANYRES16=r15, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.40762165s ago: executing program 1 (id=1178): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4000000010000104fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000f1baf53d28546b4b800b0001006272696467650000100002800c0021eef4f92b99ef00f7ff684ac7ce9e02ac13dbbb5559f1d9e30b113b2fa5d2ddca1784158277a669db72fc01"], 0x40}, 0x1, 0x0, 0x0, 0x8100}, 0x4080) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8041}, 0x4000000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000006c0), 0x4) write$binfmt_aout(r1, &(0x7f0000000300)=ANY=[], 0xff2e) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000040)={0xfffffffd, 0x5, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000000)={0x10001, 0x101, 0x4, 0x9, 0x18, "c7cd7401df4253d75d58ff65f9641f450868fb"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x54, r4, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}}, 0x0) r5 = syz_open_pts(r1, 0x80) r6 = dup3(r5, r1, 0x80000) read$watch_queue(r6, &(0x7f0000002d40)=""/4095, 0xfff) 1.213112856s ago: executing program 3 (id=1186): syz_emit_vhci(&(0x7f0000001100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_auth_payload_to={{0x5}, {0x4, 0xc9}}}}, 0xb) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/address_bits', 0x0, 0x0) lseek(r0, 0x0, 0x3) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100000, 0x0) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f0000000040)) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000080)={0x28, 0x18, 0x17, 0x12, 0x5, 0x1000000, 0x5, 0x16, 0x1}) 1.128474669s ago: executing program 3 (id=1187): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xfc, r1, 0x300, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x4b}}}}, [@NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x5b, 0xac, "d14846a49a8fbf2506c54736dbf9f246190fdb66e309e8462499d7952721a28f108cd80b48cb1848e4f3b720fd0a1ca86de66a73d50ba2aed715f817592b6dc9b94cd6354190bea9ed02c69097b295c69bd434ddbaa8b3"}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x2}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5f, 0xbe, "079656de4813fde0716a7f27b7086e1a73a67b5abd05d118e924797c3178bbb29d2a5f8b41d33bc9c719c7679d58469a370ef8552f254c13bbb53ba890fdb9eec0002ae0b536843291283af9fd5dfe2fd258ae3bb85d152536f962"}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x350}]}, 0xfc}}, 0x84) ioctl(r0, 0x6, &(0x7f0000000200)="dd0181fb70a01418b1e0e26ed6d10cad9a0e288af325c349fc899f5551c59d8c16ed77a37ca5e4da8526d4516320cd8920d9f10b965fe35ca31857") r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = openat$nci(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) write$nci(r4, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x6}, 0x4) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000480)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000440)="b913bb23d6", 0x5, r4}, 0x68) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = signalfd(r5, &(0x7f0000000500), 0x8) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_RINGS_GET(r7, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r8, 0x700, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x68}}, 0x400c0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000700)={0xffffffffffffffff}) getsockopt$WPAN_SECURITY(r7, 0x0, 0x1, &(0x7f0000000740), &(0x7f0000000780)=0x4) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f00000007c0)={0x2}) ioctl$KVM_GET_DEBUGREGS(r7, 0x8080aea1, &(0x7f0000000800)) ioctl$VIDIOC_REQBUFS(r7, 0xc0145608, &(0x7f0000000880)={0x6b0, 0xa, 0x2, 0x0, 0x4}) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f00000008c0)={0x0, 0x0, 0x0, [0xff, 0x3, 0x3, 0x0, 0x7], [0x0, 0xb, 0x4, 0x5, 0x29, 0x40, 0x9, 0x10000, 0x5, 0x2, 0xa000000000, 0xdb, 0x1, 0x8000, 0xff, 0x9, 0x7, 0x7, 0x21b, 0x18, 0x8000000000000000, 0x3, 0x100000001, 0xffffffffffff7fff, 0x3, 0x3, 0x6bf2, 0x8000, 0x3ff, 0x9, 0x7, 0x2, 0x8001, 0xf8, 0x4197, 0x2, 0x6, 0x6, 0x9, 0x1, 0xff, 0x0, 0x8, 0x88, 0x8, 0x81, 0x6, 0x9, 0x7, 0x7, 0x6, 0xf, 0xfff, 0x2, 0x9, 0x52d, 0x7ff, 0x4db, 0x9, 0xd07f, 0x7f, 0xc5c6, 0x4, 0x0, 0x7, 0x3, 0x3, 0x9, 0xfffffffffffffffd, 0x7, 0x6, 0x229, 0x10, 0xac, 0x6, 0x1, 0x0, 0xfffffffeffffffff, 0x4, 0x2ba, 0x1, 0x2, 0x6, 0x6, 0x8, 0x6, 0x7, 0x2, 0x9, 0x4, 0x1, 0x7e, 0x80, 0x400, 0x8, 0x4, 0xffff, 0x1, 0x0, 0x3, 0x4, 0x563, 0xd0d3, 0x6, 0x5f, 0x1, 0x4, 0x3, 0xffff, 0x83, 0x5, 0x2, 0x2, 0x0, 0x9173, 0x8, 0x1, 0xfff, 0x2, 0x32ee, 0x4]}) write$FUSE_NOTIFY_POLL(r7, &(0x7f0000000d00)={0x18, 0x1, 0x0, {0x7}}, 0x18) sendmsg$NL80211_CMD_GET_STATION(r7, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r1, 0x200, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5f}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x70}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r7, &(0x7f0000001d40)={&(0x7f0000000e40), 0xc, &(0x7f0000001d00)={&(0x7f0000000ec0)={0xe1c, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x0, 0x1e}}}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffa}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x68, 0xf, [@random_vendor={0xdd, 0x62, "4a829559689b3ab617be5429099b7466ddd17b5fbfde7d344066fd8614c666f029a347b2fa008e1591eb1a8be8347eb524164f3c7fcae99d5ed349181bc2cb9f2212449f8c488732524947ac567bec338b50f4825dfed51ff9f896ea284f4e8be94f"}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x180, 0x80, [@random_vendor={0xdd, 0x41, "05d9904e38945ccea4e61a8c5d0c87382a86646154b87ebd91aa1f392a0a75a11e97776850a2056604eb3b6cd94171db6aa9b95e8e51f98a44846f3a9932b2fe08"}, @supported_rates, @measure_req={0x26, 0x81, {0x2, 0x6, 0xa, "1dcf05631934c09112bb4eaedf55bcf026e533aec26d8a9782d21792c43697de0d57d389b31963d78ce547dad0b1c7c514717d85f8cbdcfb8c89f929052800ccb980ff5cde8dde32d9563dfb751c592b675aff023347627d94cb09b78dc457b8c6b5c38d0b74e52262b5027bb597c66a24e808c49cfa493f76f92347978c"}}, @sec_chan_ofs={0x3e, 0x1, 0x2}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9c, 0x1}}, @rann={0x7e, 0x15, {{0x1, 0x27}, 0x77, 0xe, @broadcast, 0x8, 0x9, 0x10000}}, @mesh_id={0x72, 0x6}, @ibss={0x6, 0x2, 0x81}, @random={0x6, 0x83, "1642e30c01e2a9c22ce261726e883c610a4d1d12f90699fc6cdf0deb827afef519185b26ad9d47240f47bc76d852510478eb775b14b33207e240cd7871c8ed2ee2b77d2a6fa5ec68845381ef87cf1377ed9389c1f412900e16046f9827424df4601db8955af2ea707e867e6c489af7cdbf4bd42ae1abc225a4b4652fce7b6dd1b44e54"}]}, @NL80211_ATTR_IE_PROBE_RESP={0x53, 0x7f, [@random={0x74, 0xc, "7d426f79c7623e25b59e5bf0"}, @peer_mgmt={0x75, 0x6, {0x1, 0xf4a0, @val=0x9, @void, @void}}, @rann={0x7e, 0x15, {{0x0, 0x3}, 0x0, 0x80, @device_b, 0x6, 0x7, 0xe}}, @link_id={0x65, 0x12, {@initial, @broadcast}}, @chsw_timing={0x68, 0x4, {0x0, 0x5}}, @ssid={0x0, 0x6, @default_ibss_ssid}]}, @NL80211_ATTR_BEACON_HEAD={0x5e4, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x6}, @device_a, @device_a, @from_mac=@broadcast, {0xa, 0xff}, @value=@ver_80211n={0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x1, @random=0x3, 0x500, @void, @val={0x1, 0x3, [{0x6, 0x1}, {0xc, 0x1}, {0x1, 0x1}]}, @void, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @void, @void, @void, @val={0x76, 0x6, {0x4, 0x1, 0x26, 0x4}}, [{0xdd, 0xb6, "cc69a2cc8b3ef16f1f5b4d72ff3e0e6c7379ac8dc368d19485c2cb98c3d6afe227fd8d62923e2c2e1c0ce840b23897907c19e77a099c4f5dd79bc4a5d9d5dc0637a6ec10f8bc71f146c7a9418629101a0488d8e0ff2ba2b29cba07caf110f4869acc044ce14198a57b94d5e18780496066168ed864f59682f2fd7965241065fa12ed6b55de1a9f78eea74e024baef46a6a16f79c3892e735c6725c8292aa503c04eaa8785d6d5ed07e48e8de0256e49c119c73c1238e"}, {0xdd, 0xc1, "30289c333dd00dcb0481c900b89556b4eb06f833a3f06f65b8eeea81f098153a2b6bb39fff176e91bd81dbd5b38cae73f816f3ddcd12f36b5f1a85e15cc5fb0ab4f7d892d75d2cb4baacf7d340fcd2f6ebd4db1a9c176a18e26e1165b2813f637f7806075a31f9ddf2ff2af90c03c961440ea0c2a5817207cbb2f39261ba9900d15a3caa7188a82c8f214d737429132a3777ec8356184c80fe082a35ae5bcde2da3a0a1d19474cca1c2fe7862b57657c01367bfc3f6de85d709aebbf48a7e100b0"}, {0xdd, 0xdb, "b54760cc2b8863bd9ce42982fcdc0502b34fe89f8b5a7a38092e7244846e839ed2c50e0bc731ebc6a45e7f31fb51c89a01c3796179d9e9a5782f1414c91ed7505cf60f69cc2f6bef49bf41566b53101075f1dc5371363cbbc25fb3efe49a3a30d1fa04909a4f535ccec7cc93edd62e2effd7bf2c57ec600fb3dc8105de75eda5a5bb07974eac040cb85cdfe2c3db33c6f7e035cb1b48f504ed93dd8bd10c7ec5f1056279f579db2f7cf79291bbf8cb7f2ec7de33fc51db64567c84f5ddc6c7ff8409ff4bbe349ef0a03d8cd95b39c2f4eabcbe01a373da7a33f328"}, {0xdd, 0x51, "20f05d60e4b522cb9369261d7a282f4d39482c85bac676aaf34f58c0dc28489afa52ac2194e6ead22d2aeb77c4eee9f1855fec46c37ab3a691ff0cf9bbc446a2b6dadfba868e8b9b5236aafa753aeec6f4"}, {0xdd, 0x82, "ca97e3a730166957fa3a38c643d98f885e4665c5ba2a3e1daaa8e9aaa5589abd5d25f7a4936086cbb13ecfd17721757004cabec714565b3a4d5a3de7e6e9243c651a883687e644038e3eef6f68d87f3bdcaad4cf49ce6e845ac9eebc78448941cda30b10d0937c2700100b5f0e719604ac394de548ad9a4348c991c93f22b5606b1a"}, {0xdd, 0xd3, "ccc89231bdfd6e97ca969c589cb4d8268ff104ef7d0bd1a3941277755f664316fab69c4841d134cc9952177179ad9a461a7605e9142959acbc07c879c723343045ea6580f9a03555947a2562adc6a0a4ff5222222136e85ca0d41e286099dd648fe485779548269bf7e89572539b001906291f24f33c32250cf22b3a8597b6d1019177dc4f74f8e40ef4fcb7e7c6ca2e5c6eced3fc70b4c3824677e5cee1518403d2201e5b7b11005b9ffa8989ad5b613044b04dae1bd4d32b705e0f8f2538ff1e85cd7fd2c9c085b8ae33472c4b73fd2c45c3"}, {0xdd, 0x27, "b80a699cf89c5583be75c2fe829824e7c60dd53b99aa99d276001952bd7e6c631c70846373581e"}, {0xdd, 0x7e, "0a0d4d322d63ccf9111dbaf0056abb3cc99394251f932b9c97a256c9b08814e7da6b730acef2f9774850190fc40b6a50ce57967f0b1d05fac37a87e38dc1a39f33ae5390bb21a71e9dc26a416f40ff64ad3d7df73bf16cb4835b59595ffea105fa7bd61700e8fde8e0a9d36ae79437ce05cc715ed3ce0a1a86b4a79615c6"}, {0xdd, 0xf9, "fa5274a2845c23836dd7e15d502b1ff81e0c9f0c9dae411193afc22d91ba1a861c4bf61b966b066fa4da5ecfa10e7b707a960e074c0171eca163753d2f3f5a6e29ff749350d2afb3e6f7ed9b2b776fa918fa076d98be6d35a579ca2bd47c8a668440fe6d50d29199f1fb3e021a3de8b4dfa82a82cf8d1ea89299bea13e66d686e504fc4d3ddb3de6f4673d17e585e1fc445aa86f1449b51e4d82d4783cf2a281cd21d3158ffc041bd27f009d80d2e3555ec53cf98a6b3e018a1ebd1ad5dbfdccf657a68a6b2b7690c826c1307209513a77f71c228560cad4fd2d85a94f3ccb2c3f6e3bf5aa89374a20b4f50d372530f7fe6b5323d18c92fb58"}]}}, @NL80211_ATTR_IE={0xa, 0x2a, [@supported_rates={0x1, 0x4, [{0x6}, {}, {0x6}, {0x60}]}]}, @NL80211_ATTR_BEACON_HEAD={0x2f9, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}, {0x7ffc}, @device_b, @device_b, @initial, {0x4, 0xa}}, 0x1, @default, 0x1402, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x5, [{0x3}, {0x1, 0x1}, {0x5, 0x1}, {0x16}, {0x30, 0x1}]}, @void, @val={0x4, 0x6, {0x6, 0x94, 0x2, 0x2}}, @void, @void, @val={0x25, 0x3, {0x0, 0xb6, 0x6b}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x7f, "8c055fc1648ecf214721d9a1e9657e221fff9b6a0939461d48d5e31468e33e3a7b79891c2120d035025e1ef481b2e2e750413e44e39f87441acddb958e56df05f62eae8756daf7acf5769e1490555b2ad4303544c13e552aedd4b5adf8b4cf2e7c0b6ad154c5fb62486ead01182a7d85b99640d602f0770ee9fa4c79c17ece"}, {0xdd, 0xd5, "970dc001e72aa88e5f11f38af24b1089f5432c73d3da2782fab16fa66b2fcf10bc51e40551a805bc8922175a52ac570ec01babc603ead2c5eda6329f22dabf8ebc60d131c52f9dcfa7dd1bc0839d76a1a228436efc365e32579c5371efc144ab748a0379b9b2de40d31359d6f6f6675bda5486c101e5e5c2a44141372bb79c0f59b82f1939caa49dbf6963676fe1070dd281947a1dcb2562f359a187e65005755e61a702c4b25c4a5f01d183b919384870e1c2ac8cfbac932645b5b224ec388ab836610524e80eeecb091b37a51bd1236e1dc24b84"}, {0xdd, 0x9a, "96530a9d8c815bcb2fa198e410e2bde82cd5e0c8e07a6002ae808484cd9606b50cd2225ddb8a16aae9243c9feca82714463318c6104f207a5336130043da6c63c6556f7c5928057e3233b15978c6e60210c7ec665472cd2f05af7e3b3339a15f3e9ed928989bf2dc9c0e0e5c8c79c974a40d23b6f01f53c1afb2aa4e9843fb0001043eacb685756ed6fa65b2900f8c36432d6673c58f02ff8072"}, {0xdd, 0xb7, "899a9de3ef36c6d3968c83920d079ee412ec9307a738a487105a02d91de5a149d4cc08ee54188454aa00ef52d42df848b631c677632d24e2dce4e64d554ccbc15df2d6e494b962148e0f88d2e4a5cc5468ab8597478ae76d37019612625be1f4a45af67dba3c0a9d312130e4d2ab916ccba2bde17fb888bfab80f73538dbdf0259b7a0fd95b91e035bf3e91ed0a054bad0f424a98d8405442bcb54efccc3c4e3067503aad489f7cb077ece01a9100bad39500a7856aacb"}]}}, @NL80211_ATTR_FTM_RESPONDER={0x134, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0xa, 0x2, "84659b9caf08"}, @NL80211_FTM_RESP_ATTR_LCI={0x3b, 0x2, "015a75799d7ba74f6157c856ae513232b29eff866b767315ee658cf1666114ebce70b3927840d25b12f58e31f8c60f6ab2036e388db792"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xe3, 0x3, "52134524bffb4988722ba44d9f3ed30a88b6d8d93939475a7f479f1663ab4fabd0e7a474e60a149b22ca4ba3179643292ea6e98862cad41de62787597050cf067ea09ec5ea3e6bb0587ceae9dd58a6a6b2392a4fc6d97eb69e09475a4f427b94ac9841195fe122aceca43ef3b1794dc85c922e961683069fd8c520de59dc3aa0915ea317a1cf1872383ca463cae17c2d5066641b695f3fa9f17db6838a51d2e8acf2f5410cc50c2f139d2aecebc3f5958d9179e65e82f3374c02f887dc5ad882e9414ec77190d15c35f4d32cb885df420fa430b32184b4a3e0c4fc1b56ef3d"}]}], @acl_policy=[@NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa, 0x6, @device_b}, {0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x58, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x34, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}]}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15f4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x35}]]}, 0xe1c}, 0x1, 0x0, 0x0, 0x845}, 0x40) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001dc0), r6) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r12, &(0x7f0000001e80)={&(0x7f0000001d80)={0x10, 0x0, 0x0, 0x840080}, 0xc, &(0x7f0000001e40)={&(0x7f0000001e00)={0x14, r13, 0x800, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) 1.126066563s ago: executing program 3 (id=1189): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) close_range(r0, r1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xfff, 0x8}, 0xc) (async) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0xfff, 0x8}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000100)="52101395dcfd9534a2804107d28056ed876f39de6036e1d8ea8538aa7540b975d1841f15adbf93939e33fae6770c7cbad64a2d53c583b150b3fbcde11ac128a7866b3c8776ea35b322050a5010534e7c21a5561f2d42adc57b7d86e9f9f448a762884f3a2b2402e6e197f13e3595e4adeda71df46866924d01afb6d111bac184cf6812f7a8fb14cb65972af7b71568ad3eb24ddf083f45af2aed069e6d74c295f42bdcc4b4988e09e1"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000100)="52101395dcfd9534a2804107d28056ed876f39de6036e1d8ea8538aa7540b975d1841f15adbf93939e33fae6770c7cbad64a2d53c583b150b3fbcde11ac128a7866b3c8776ea35b322050a5010534e7c21a5561f2d42adc57b7d86e9f9f448a762884f3a2b2402e6e197f13e3595e4adeda71df46866924d01afb6d111bac184cf6812f7a8fb14cb65972af7b71568ad3eb24ddf083f45af2aed069e6d74c295f42bdcc4b4988e09e1"}, 0x20) r3 = getpgrp(0x0) syz_open_procfs(r3, &(0x7f0000000200)='comm\x00') (async) r4 = syz_open_procfs(r3, &(0x7f0000000200)='comm\x00') r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xdc, 0x1, 0x3, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFQA_PAYLOAD={0x7b, 0xa, "81a455a8196df9629d4edc9a6a0cb4877437caa0d1ae2f680fab143f0768ee1440a2b831f0aaede8098f179b4b052e61d38d23c2e203404715c8ac3d25b5133419eba0f6965cf3b9e3a769c4654f54f93025c3227426b16bfd82f2f657582f760ce817114f334c9c919e2a9ba1edf8e3984d01bf39097e"}, @NFQA_EXP={0x38, 0xf, 0x0, 0x1, [@CTA_EXPECT_HELP_NAME={0x5, 0x6, '\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'snmp\x00'}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}, @CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x2}]}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x3}}, @NFQA_MARK={0x8}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4000801}, 0x20000000) getsockname$packet(r4, &(0x7f0000000580), &(0x7f00000005c0)=0x14) (async) getsockname$packet(r4, &(0x7f0000000580)={0x11, 0x0, 0x0}, &(0x7f00000005c0)=0x14) sendmmsg$inet6(r5, &(0x7f0000001080)=[{{&(0x7f0000000400)={0xa, 0x4e20, 0x2, @private0, 0x4}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000440)="1c12be212766a07f4e8679f03017e66a3357076bfe0705515983cf0b3d85d7f9f026155f7a92cdfba456864fdd19aa42c7193399e0b95e802c590ef83e6b0604685c5d", 0x43}, {&(0x7f00000004c0)="98770a15e1cbd33618c11a4e2107ed0fca0a6edb0f40f66b72ce21a9ee9264ec48e22a8f2591b836eea12d2ba644ecbbf8f35a797a1e7893218a72d3e404477dacb583d5e12d82a43f7b1151058e4d070a283f124d30eff5181b816ad940f8d933fc0cfed714", 0x66}], 0x2, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback, r6}}}, @tclass={{0x14, 0x29, 0x43, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}, @tclass={{0x14, 0x29, 0x43, 0x7}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}, @dontfrag={{0x14, 0x29, 0x3e, 0xff}}, @dstopts={{0x20, 0x29, 0x37, {0x88, 0x0, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}]}}}, @dstopts={{0x80, 0x29, 0x37, {0x0, 0xc, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x1, 0x400, [0xfffffffffffeffff, 0x2, 0xffff, 0x3, 0x8000000000000001]}}, @jumbo={0xc2, 0x4, 0xd079}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x8, {0x1, 0x0, 0x8, 0x800}}, @pad1, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @remote}, @enc_lim={0x4, 0x1, 0x5}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x200}}], 0x180}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000780)="a681f07f65e80fd9", 0x8}, {&(0x7f00000007c0)="f8cb2dcef9fd6a9fc7ef328ae51e093cd6bb83f423e7089b1b324f693e0f727c62fba09383db16566204f064a87fc32719b1cc72bd1e5d59fded2786520bd5651242045d2887f53c239b37d4294d6068e61c0828c5fb68f87a88b9ad8ba1165b6bf031f8f681b82f2348244e0004f9c406b5b6eaeadc82a8795dd3f6a0f4265f3a5cc855d026132510b057cad4cff1508fc98786d48f95b10a26b58a50ab22312ce4efd0f83315f87efba5d76473bc065290abe59f4dfff2a61340a649c3", 0xbe}, {&(0x7f0000000880)="4317ae5c4a0901f78aa8f79a10f689c9ba67b2298fc37d034025cc8efff97d394e9aee13cca549583902d9d60084b58a860653c7baf181925f1eb12e26d3474e23b34b43612a51fbbdebbf09c991451e725efac99e54f1efa509dcccac373dd6b674e274504017945a9e556da66ccfdce962", 0x72}, {&(0x7f0000000900)="f0f721353a0926c2cee52e06c1967d2cf96c99f359995473b5c3f8762f4d4053171acedcd22575577907add2d8011b2074e316f21bda37fe75fa60b36edead7957995ca6ed63ca1155ff5354bdc01229eed0d96853eb12215fff9f3236fc51dd24eb3970b3f4be3f331b6260365378c1210659687e09041a78e8c782ed78a58f0a5c5d93f22a4df01af1214d1ad5", 0x8e}], 0x4, &(0x7f0000000a00)=[@tclass={{0x14}}], 0x18}}, {{&(0x7f0000000a40)={0xa, 0x4e21, 0x3, @empty, 0x60e6fd4a}, 0x1c, &(0x7f0000000f40)=[{&(0x7f0000000a80)="45d9e1a71eea537c5b4f71376ea6dbe9cc6ec661deb311d3acdb59eb1f422611b74032b9239f37c79e105016e62d596e45af10dcb717727ffd9245d659a37d112fcd54419d2e3a326c6c1ef9cc5bad07b7d4bded82c76410ca708f31cea2122f1ffeedf92d8566a5f39175f8c93dff1c79d2810332048432ae8f2545284babf2df0a0167b7437f934fc230c7", 0x8c}, {&(0x7f0000000b40)="bb9016655c5aeaa97ad7f60046f1bac3cfb99e4d0b95e38d396fb01fc67bdf7083ecbd00", 0x24}, {&(0x7f0000000b80)="e7877142a4905e84461948867044dd421ea81a386a88fc4ee1b99b8f121509ab1b76e3d8f97ae3fa5ebe2ea581e2f22f46b521a7d73705b2d4a228af06b07c345980b5ffbc41ed14bd259d064792ae5abda519f41610cbbaf095976b8e6bf8ca0c84a83f3e4230a2bcd367c7139ec6526f18263d863e8b6c4118b7ca81d903e7ec1239e128fe7230365a66d0580877c70efc49b8f9f700e866fb156ff321d09c27b76cbb070c0c9800f65ff1d696c4824b199a5176e3f8889494c27e1d9e275359adf31645c03b2a67501836bd410cfb96ca5021ed1f0ec79f9de28513de34637bbc6a0637123b4c283b50eab4bac900567956c0583850", 0xf7}, {&(0x7f0000000c80)="f1efd8563157b272677572b644a7d8dd1cdf1699421aadab7fe871f1d1b19c61e8255996ba34bb2655ed106ba41cc3c4d08eaaed4c072015d69647d8275c51f71bd492e4ac048446087565984a2ea0a47b9103f1c29e945920e735b992ca38a85f0eba3b51ed8dd9077a2b69898cdbf7eeffe998701242f44c2b2cb6e8c0ac1830fbba3debb66c613974585c90851c934b71a7c10c24628f0625fe15a873be8c4a2eaae3d4cc51398bd3ae2452e475acd4f617110b23198306def2", 0xbb}, {&(0x7f0000000d40)="82cc642653b549d656f8f5f43c95251f9a4bd4f538413e5e1af8be442d2bee9599adff291374597e7a945c95f746c28cd8ce6a36c6b10c6e96e82988ff046ee853e00f0dd837822e1021e9e5f226db63afcabadee905dc98fda503dd6e3cf343c351af9ee2499ec74d5c3aa42d9a3c7ca47b6be98c10da39c70be886b40c54c8d853db35ea04d7f681f80cd6dc3892eb2c0b9569df28c8393ef3f7283ce077bbb28c627c7faae9aa25069bc478943dd9e4812fd052977e7095a711720227b76a4676860114f3448b8825cd46a610b1467fdabeb2ddac6c326b8d0910ac5d0e64274443512223f666", 0xe8}, {&(0x7f0000000e40)="c266ec2966985c9392c1593d92726b2da1e47ade42790c1863620fdc18a8c2c24520231870bce99477c51907b9ee7c357c33c8016737521655ce3c282a7054dae642a05c24efff7e58318a3b687ac44c568df72f2988ee3e5d58964d342502a331950c9d6edeb3d1e5a39dbacd48ab7260c9ebaf6ff77149d77d10593646f0bc499eaa665b93dc876cdfef443591", 0x8e}, {&(0x7f0000000f00)="c43c62dc1986017ec7c07456f632112098ef597c04283e8ff0b3052d70d8b9650e2db83ca71dfb", 0x27}], 0x7, &(0x7f0000000fc0)=[@hoplimit={{0x14, 0x29, 0x34, 0xfffffff7}}, @rthdr={{0x78, 0x29, 0x39, {0x2, 0xc, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x22}, @dev={0xfe, 0x80, '\x00', 0x34}, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, @empty]}}}, @tclass={{0x14, 0x29, 0x43, 0x7817ce09}}, @hoplimit={{0x14, 0x29, 0x34, 0x51ec}}], 0xc0}}], 0x3, 0x110) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000001140), 0x1, 0x0) write$khugepaged_scan(r7, &(0x7f00000011c0), 0x8) r8 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x34) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000001200)={0xd5, 0x0, 0x56}) (async) ioctl$KVM_CAP_DISABLE_QUIRKS2(r8, 0x4068aea3, &(0x7f0000001200)={0xd5, 0x0, 0x56}) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r4) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r4) sendmsg$NL80211_CMD_LEAVE_OCB(r5, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x20, r9, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x400c041}, 0x44) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_FT_IES(r10, &(0x7f0000001940)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001900)={&(0x7f0000001400)={0x4c4, r9, 0x10, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x63, 0x2a, [@preq={0x82, 0x57, {{0x1, 0x0, 0x0, 0x0, 0x1}, 0x4, 0x6, 0x6, @device_b, 0xb3, @value=@device_b, 0x7, 0x52b, 0x5, [{{0x0, 0x0, 0x1}, @device_a, 0x4}, {{0x1, 0x0, 0x1}, @device_b, 0xfffffffe}, {{0x1, 0x0, 0x1}, @broadcast, 0x9}, {{0x0, 0x0, 0x1}, @device_b, 0x1}, {{}, @device_a, 0x81}]}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x6, 0xb8, 0x1}}]}, @NL80211_ATTR_IE={0x134, 0x2a, [@challenge={0x10, 0x1, 0x11}, @random_vendor={0xdd, 0x61, "602ef9dab481402ac2c0ba87963b5988d9503878f5cdd3f06edbf921820c2e572829b54d3e06ea1ab071b80c590acfdf7156247ef30d963cc656a00a3887af73450c9a3ca33bf3c854161344c605ed60b60942c4a0f9d970954fd97bbfd7704b0d"}, @perr={0x84, 0xb6, {0x13, 0xc, [{{0x0, 0x1}, @broadcast, 0x7, @value=@broadcast, 0x38}, {{}, @device_a, 0x10, @void, 0xb}, {{}, @device_b, 0x9, @void, 0x38}, {{}, @device_b, 0x3, @void, 0x4}, {{}, @broadcast, 0x9, @void, 0x3}, {{}, @device_a, 0x6, @void, 0x1e}, {{0x0, 0x1}, @broadcast, 0x40, @value=@broadcast, 0x2d}, {{0x0, 0x1}, @device_a, 0xeb3e, @value=@broadcast, 0x3}, {{}, @broadcast, 0x9, @void, 0x35}, {{}, @device_b, 0x7, @void, 0x34}, {{0x0, 0x1}, @broadcast, 0xfff, @value, 0x1e}, {{}, @broadcast, 0x7, @void, 0x3b}]}}, @mic={0x8c, 0x10, {0xad2, "b2eeb6614b77", @short="7f4e832311947bf7"}}]}, @NL80211_ATTR_IE={0x131, 0x2a, [@preq={0x82, 0x36, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x5, 0x1, 0x8, @device_a, 0x2e, @value, 0x5, 0x7, 0x2, [{{0x0, 0x0, 0x1}, @device_b}, {{0x1}, @device_b, 0xffffff01}]}}, @rann={0x7e, 0x15, {{0x1, 0x51}, 0x81, 0x39, @device_a, 0x9, 0x3, 0x5}}, @ibss={0x6, 0x2, 0x9}, @channel_switch={0x25, 0x3, {0x1, 0x2d, 0x2}}, @random={0x9, 0x9a, "ea80b5da91376f891e022036e6a7cde221e475758f921a44090be01b4f3f5df00bbed765e9b3279449c94ea553c444756e6446457bd25a7627b7aed1868886c8943b8056d7e3efaf1402dd9b58db88df4644fb2be384353be5d41a39aa8b7cda4b3b4ac836acd3bb79292fe2f61b0366fb3ed69db16d054d0c223a448755ae712718abecc96310a3c118c1846042f77cbcc8a4c67e0c6e823248"}, @link_id={0x65, 0x12, {@from_mac, @device_b, @broadcast}}, @mesh_config={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x40}}, @ht={0x2d, 0x1a, {0x0, 0x0, 0x1, 0x0, {0x6005c9ee, 0x9, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x300, 0xfa, 0x80}}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x2}, @NL80211_ATTR_IE={0x1c9, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x2}, @tim={0x5, 0x9c, {0x6, 0xa5, 0x1d, "6937c3cf8e151eff74f61776728d11f9619c3387164c5f47c63730899a88e66c97b3c579ffe14ee27287c45e0f577619617eca2a5c2aefd386dbaa8d8a0055988abaf8a33c0d9b4fb551c6d4d961b3b7afeb3e6fb75b27c98367a34b70251586dc84253e73265546f6c1b8ed47d6cc618dea68a1b6c5087970383ba90bf1fb524ebed8dca1369a3c41a2277d4a91f627dd8a4bfd4f35071164"}}, @gcr_ga={0xbd, 0x6, @broadcast}, @ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0xe7, {0x0, 0xb2, 0xd, "aeb6a7a39a60ba43e0bd40cb733b81914a29ea60b8e564d00d7b57cd5e1f9f8bb9b65fe96818d6b4022c8ce335b041c6e2f5d7d4cba42d6d97d734378e648f56a09f7cacfe7b18fc5f29083afa4195d24836b70ec652ea07615ebe5d54b779aa204d8d8893f938ad5935dfdb8281a9fca6df798cd04211a5eac8445ca3729ddfe8947676bc501303631bbb8ed0e21070d8fc494aad92585f1088db611ff679fa13f08bffca54a36f323c3b97f630399a9ae05c05693bbe851ab0916127bf6f06a9d3290170eae8cf3df2d0c889293f3e67320ec77c5a76ed9247a9c375d784c86b9aaadf"}}, @mesh_id={0x72, 0x6}, @link_id={0x65, 0x12, {@from_mac}}, @mesh_id={0x72, 0x6}, @chsw_timing={0x68, 0x4, {0x5, 0x9}}, @supported_rates={0x1, 0x3, [{0x5, 0x1}, {0xc, 0x1}, {0xb, 0x1}]}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}]}, 0x4c4}, 0x1, 0x0, 0x0, 0x84}, 0x80) preadv(r10, &(0x7f0000002ac0)=[{&(0x7f0000001980)=""/156, 0x9c}, {&(0x7f0000001a40)=""/4096, 0x1000}, {&(0x7f0000002a40)=""/122, 0x7a}], 0x3, 0x3, 0x7) sendmsg$nl_generic(r4, &(0x7f0000002bc0)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002b80)={&(0x7f0000002b40)={0x1c, 0x22, 0x614, 0x70bd27, 0x25dfdbfc, {0x1e}, [@typed={0x8, 0xbc, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x404c010) r11 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000002c00)={0x0, 0x6, 0x6, 0x2, 0x3, 0x4}, &(0x7f0000002c40)=0x14) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000002c00)={0x0, 0x6, 0x6, 0x2, 0x3, 0x4}, &(0x7f0000002c40)=0x14) getpid() (async) r12 = getpid() rt_tgsigqueueinfo(r12, r3, 0x15, &(0x7f0000002c80)={0x41, 0x8, 0x1}) lseek(r2, 0x7fffffff, 0x0) ioctl$F2FS_IOC_DEFRAGMENT(r7, 0xc010f508, &(0x7f0000002d00)={0x2, 0x7}) getsockopt$inet_mreqn(r11, 0x0, 0x20, &(0x7f0000002d40)={@remote, @private}, &(0x7f0000002d80)=0xc) bind$alg(r4, &(0x7f0000002dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000002dc0)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) sendfile(r1, r11, 0x0, 0x7ff) (async) sendfile(r1, r11, 0x0, 0x7ff) 1.069779921s ago: executing program 3 (id=1190): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCGPTLCK(r0, 0x80045439, &(0x7f0000000040)) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000000)) (async) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x34400, 0x0) ioctl$PIO_SCRNMAP(r3, 0x4b41, &(0x7f0000000280)="27630698ed8f2d6186196227946eaf88880d5cd0b961a3d96da212a1b17eb496132c481b5b42c0fc7cded706b6c09d80587381d04047e9fac2aa6d8294aae91ef61c733aa77aa940b346cc5b3ea10f2030442ab05bfb61b62eb21f9fed5a4149a4f2d6ae10d204f926014da67ff65d6057d0b4ffb17a2db947d11659011d2cd421c3adc3b816ddf3cb5430be2c146021ce2450a7d21d6507df45e2fb3074a2214a4a0f69e21ff90957ffedf1d34e66b65137047d6bdf") r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0xd, &(0x7f0000000040)=0x7, 0x4) (async) getsockopt$inet_opts(r5, 0x0, 0x9, 0x0, &(0x7f0000000200)) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000200)={0x44, r6, 0xd55319eec59dfa33, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x1a}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x67}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'team_slave_0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0xc6010) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x1, @empty, 0x1e1}, @in={0x2, 0x4e20, @remote}, @in6={0xa, 0x4e21, 0x81, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x10}], 0x48) (async) r8 = socket$inet_sctp(0x2, 0x1, 0x84) openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x401, 0x0) (async, rerun: 32) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) (rerun: 32) 1.069502223s ago: executing program 3 (id=1191): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) r1 = syz_open_dev$sg(&(0x7f0000000040), 0x20000, 0x400000) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="000000001f0000001d"]) 999.096507ms ago: executing program 3 (id=1192): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) timer_gettime(r0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6040850}, 0x20000040) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001a00010028bd70000000000002202000ff000007", @ANYRES32, @ANYBLOB="08000100ac141433080002000a010100080019"], 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0xea5bc50b6199d77e) 868.769448ms ago: executing program 0 (id=1194): creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)={0x24, r3, 0x1, 0x70bd2d, 0x27dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x20004000) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000400)={'trans=virtio,', {[{@access_uid={'access', 0x3d, r1}}]}}) 770.32771ms ago: executing program 0 (id=1195): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ocfs2\x00', 0x0, &(0x7f0000000380)='acl') r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) r3 = syz_clone(0x8284180, 0x0, 0xfffffffffffffcc3, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f00000005c0)='maps\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) ioctl$KVM_GET_SUPPORTED_HV_CPUID_sys(r4, 0xc008aec1, &(0x7f00000002c0)={0x900}) r5 = getpid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_open_dev$sg(&(0x7f0000000100), 0x9, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="21000000000000002c00128009000100626f6e64000000001c00028005002100010400080500010004"], 0x4c}}, 0x0) 549.617973ms ago: executing program 1 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8a59}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) close(r1) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e009a3c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180872"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x6}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x8a59}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x2) (async) close(r1) (async) socket$unix(0x1, 0x2, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="af75355d1696"}) (async) socket$kcm(0x11, 0x3, 0x0) (async) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x4) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000740)=@xdp={0x2c, 0x0, r6, 0x42}, 0x80, &(0x7f0000000cc0)=[{&(0x7f00000002c0)="27030200dc0f24000e009a3c000c00000000ff840000000200000003125ce882cbf490d908f1523f000000032d9c2740e260a09c6911cda856d5141bffc6", 0x3e}], 0x1}, 0x8bb3a321ef809a) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180872"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b0001006772657461700000", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x00\x00\b\x00?'], 0x4c}}, 0x0) (async) 488.600408ms ago: executing program 1 (id=1198): r0 = syz_open_dev$media(&(0x7f00000006c0), 0x400b, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r1, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0x7c80, 0x0) 488.147996ms ago: executing program 4 (id=1199): r0 = userfaultfd(0x80001) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="360a0000000000007910480000000000610410000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) acct(&(0x7f0000000080)='./file1\x00') acct(&(0x7f00000002c0)='./file1\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbmon(&(0x7f0000000180), 0x3, 0x125401) syz_open_dev$vim2m(&(0x7f0000000000), 0x1fffffffff, 0x2) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x1c) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5, 0x26, 0x1}]}}}]}, 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000140)={'wg0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@getqdisc={0x34, 0x26, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x3}, {0xf, 0x1}, {0x7, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004}, 0x801) 419.943782ms ago: executing program 1 (id=1200): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) bind$netlink(r4, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x4}, 0xc) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0x10}, {}, {0xe, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3a8, 0x7fffffff, 0x1, 0xfffffff0, 0x200, 0xa, 0x6, 0x1, 0x40, 0x1, 0x140, 0xfff, 0x4, 0x6, 0x7000, 0x8, 0x7569, 0x9, 0x779e8886, 0xc00, 0x1, 0x2, 0xff, 0x0, 0x3, 0xffffffde, 0x3ff, 0x3, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x4, 0xbd, 0x8, 0x6, 0xce4b, 0xb, 0x1, 0x5, 0xf, 0x401, 0x8, 0x401, 0x1000, 0xf391, 0x1000, 0xb7, 0x97e, 0x8001, 0x401, 0x9, 0xa6d, 0xfff, 0x3, 0xfff, 0x0, 0x9f, 0xa1, 0x7fff, 0xfffffff1, 0x603b654e, 0x101, 0x10000, 0x2, 0x8, 0x5, 0x0, 0x5, 0x9, 0x9, 0x4, 0x3, 0x2, 0x1, 0x80000001, 0xec, 0x9, 0xe76, 0x3, 0x4, 0x400000, 0x9de1, 0xfff, 0xb41, 0x1ff, 0x3, 0x1000, 0x8, 0x7, 0x0, 0x4, 0x38, 0xb, 0x101, 0xdd0, 0x4aaa, 0x6, 0x5, 0x2, 0x4, 0x3, 0x5, 0x8b3, 0x3, 0x1, 0x5, 0x80000001, 0x5, 0x7, 0xb5, 0x7, 0xff, 0x3, 0x4, 0x7, 0x9, 0x8, 0x8, 0x0, 0xcc1a, 0x4, 0x0, 0x7, 0x10001, 0x80000001, 0x1000, 0x200, 0x2, 0x7, 0x3, 0xd5e, 0x3ff, 0xc87b, 0x2f, 0x1, 0x1, 0xffffff83, 0x4d0, 0x0, 0x1000, 0x0, 0x0, 0x7f, 0x7, 0x1, 0x7ff, 0x1, 0xe6, 0x2, 0x4, 0xfff, 0x3, 0xfffffffd, 0x4, 0xfffffffe, 0xfffffff8, 0x3d, 0x10000, 0x0, 0x0, 0x8, 0x5, 0x100000, 0x7, 0x6, 0x2, 0x5, 0x4, 0x200, 0xffff, 0x3, 0x5, 0x5, 0xfffffff9, 0x4, 0x4, 0x2, 0xb291, 0xc, 0x0, 0x7ff, 0x1, 0x6, 0x6, 0x0, 0x2, 0x3ff, 0x9, 0x5, 0x9, 0x8, 0x4, 0xe, 0x0, 0x7, 0x1, 0x0, 0x2e04, 0xe0bf, 0x80000001, 0xfffffff9, 0x9, 0x3, 0x4, 0x8, 0xf, 0x6, 0x5, 0x8, 0x2, 0x8000, 0x3, 0xb8000000, 0x1649445e, 0x8, 0xffffffd4, 0x7ff, 0x6, 0x65d, 0xb, 0x3, 0x80000000, 0x4242, 0x0, 0x0, 0x9, 0x6, 0x8, 0xffff, 0xffffffff, 0x894, 0xd, 0x4e3c, 0x5, 0x0, 0xfffffff9, 0x8, 0x4, 0x1, 0x3, 0x1, 0x0, 0x9, 0x0, 0x8, 0x3, 0x10001, 0x3, 0x7, 0x7f, 0xa, 0x4, 0x7, 0xafd9]}, @TCA_TBF_RTAB={0x404, 0x2, [0x9, 0x7, 0xb, 0x7fff, 0x5, 0x4, 0x5, 0xfffffff8, 0x0, 0x36, 0x3410, 0xb, 0x6, 0x9, 0x7, 0x6, 0xfffffffb, 0x4, 0x400, 0x3b080, 0xf9bc, 0x7ff, 0xe2, 0x4, 0x10, 0x7, 0x6fb2, 0x9565, 0x4, 0x2, 0xfff, 0x9, 0x9, 0x0, 0x7, 0x7, 0x7, 0x4, 0x6, 0x6, 0x401, 0xb, 0x40, 0xffffffff, 0x8, 0xcc, 0x8, 0x853c, 0x0, 0x2, 0xd698, 0x2, 0x304, 0x94ab, 0x7fffffff, 0x63d5, 0x9, 0x4, 0x5, 0x986, 0x7fffffff, 0x6, 0x9, 0x5, 0x10001, 0x81, 0x101, 0x9, 0x5, 0x2, 0x14, 0x4, 0x3, 0x1c000, 0x3, 0x6, 0xb2, 0x55, 0x400, 0x2, 0x401, 0x2, 0x1cb, 0x8001, 0xffff, 0x7, 0x6, 0x4, 0x8, 0x0, 0x10001, 0x40, 0x3, 0x8, 0x7ff, 0x4, 0x9, 0xfffffffc, 0xd, 0x40, 0x5, 0x3, 0x7fff, 0x4, 0x5, 0x100, 0x8, 0x3ce, 0x2, 0x8, 0xffffffff, 0x4c, 0x0, 0x0, 0xfff, 0xf, 0xd, 0x1000, 0x6, 0x3, 0xaee4, 0xffff30bd, 0x800005, 0x4, 0x3, 0x3, 0x2, 0x1, 0x80000000, 0x5, 0x3ff, 0x3, 0x4, 0x6, 0xf71f, 0x4, 0x6, 0x3, 0xc, 0x62a, 0x8000, 0x2ff, 0x219, 0x43f, 0x1, 0x5, 0x3, 0x7, 0x8, 0xfffffffb, 0xa327, 0x10000, 0x7f, 0x7, 0x6, 0x6, 0x1000, 0x9, 0x9, 0x1, 0xe, 0x7, 0x6, 0x38b62e7e, 0xb3e, 0x2, 0x0, 0x120000, 0x4, 0x3ff, 0x6, 0x1000, 0x9, 0x6, 0x0, 0x7, 0x5, 0x8000, 0x100, 0x6, 0x12c3c0, 0x6, 0x7f, 0x200, 0x800, 0x5, 0xfffffff7, 0xef21, 0x4, 0x0, 0x2fb5, 0x56b0, 0x6, 0x6, 0xa175, 0x9, 0x0, 0x8, 0x2, 0x0, 0x3, 0x4, 0x1, 0xb, 0x1, 0x4, 0xb, 0x9, 0xa60, 0xa44, 0x7, 0x2, 0x7, 0x4665, 0x0, 0xbac3, 0x7, 0x0, 0x8001, 0x200, 0x1, 0x5, 0xbc3, 0xad722e4, 0xa30, 0x1, 0x6, 0x8, 0x1, 0x8, 0x7, 0x3, 0x8, 0x3, 0x9e, 0x0, 0x954, 0x8001, 0xffff0001, 0x7ff, 0x8, 0xffffffc0, 0x8, 0x1000, 0x9, 0x8, 0x1, 0xb, 0x1, 0x80000001, 0x5, 0xffff7fff, 0x9, 0x6, 0xfffffff8, 0x10000]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x2e288501978821b, 0x80) r10 = dup3(r2, r1, 0x0) recvmmsg$unix(r10, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000005140)=""/4111, 0x100f}], 0x1}}], 0x1, 0x58ca22e2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private0}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @remote}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e23}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 339.906945ms ago: executing program 4 (id=1201): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0x235}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x422000, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r3, 0x4c80, r4) 338.193748ms ago: executing program 4 (id=1202): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@my=0x1, 0x9}, @host, 0x1, 0x100000, 0x244c, 0x4000000000000007, 0x101, 0xffffffff, 0xfffffffe}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f00000006c0)={0x105000, 0x48, 0x8}, 0x18) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r0, 0x7ab, &(0x7f0000000200)={&(0x7f0000000280)={{@hyper, 0x3}, {@host}, 0x400, "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"}, 0x418, 0x5}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdf25010000001c000180060001000200000008000300ac1414bb080006002b"], 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cffb93b201}, 0x10) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000050900020073797a32000000001c000480180001800d00010073796e70726f787900c72b00040002800900010073797a310000000014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) close(r0) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd604dd30800140601fe800000000000000000000000000038fe8000000000000000000000000000aa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000490780040"], 0x0) 259.166106ms ago: executing program 1 (id=1203): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000000)='debugfs\x00', 0x0, &(0x7f0000003cc0)='gid=1\x00nk]e') dup2(r0, r1) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x439, 0x70bd2b, 0xffffffe2, {0x0, 0x0, 0xe403, 0x0, 0x243, 0x71dcb}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x84}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x8804) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="60000000100039040000000001000000000000002da2dec07fdfcdf215e631c21dc741aea20a65d753ea72bec44fab8f28815ab659f0c5d0554cda7fdec78646639fe7c33f142da9d005bbde8211aa6d90e910e068547b1a113e93b0250ad1f04213373a77f33cd7302aff025c1c2efcee7e03caa26a285201af8c03b3df0a5e81b835752891b44e0f6fe016d9474425c4bcde7a9489a928fd50a061c7a9b1bd5d79065b2f54a4591bf35b1e31c6a09424089f074366a444e0e952", @ANYRES32=r4, @ANYBLOB="01980000031300001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r4, @ANYBLOB="24000e00120000000000000000100000000000000100000000000000a70b6d0a00000000"], 0x60}}, 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) 258.805728ms ago: executing program 4 (id=1204): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000001340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000080)={0x0, 0x10, 0x4, 0x0, 0xc, "a500000500", 0xe7, 0x2}) 198.325926ms ago: executing program 0 (id=1205): syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100200086dd60e400ff00403a00fe88000000000000005c396c44f09b21410207d8d3fc000001fe80f33f8f370d6a00000008000000000000000000aa02009078000000006000000000801100fc02000000000000000000000000000000000000000000000000ffffac14140017c11d00000000"], 0x0) 197.387747ms ago: executing program 1 (id=1206): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@textreal={0x8, &(0x7f00000003c0)="0f326635004000000f300f00d636808a0d0001ba4300b80b00eb66b88c5000000f23d02a3ff866352000000e0f23f80f01c30f789deb32660f3a21cf220f2bb00058660f1bde", 0x46}], 0x1, 0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) syz_io_uring_setup(0x56d6, &(0x7f0000000440)={0x0, 0xabf4, 0x8, 0x4, 0x24f}, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000000)={0x980915, 0x8}) r7 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r7, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x7, 0x4, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133dce", 0x0, 0x0, 0x10012, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e08057b0c04dc000000"], 0xb) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet_int(r8, 0x0, 0xe, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 69.836435ms ago: executing program 4 (id=1207): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000800030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc4}, 0x890) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="14000000100001e456b8aa00000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}}, 0x4000010) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4000040) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x1c, 0x13, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}}, 0x4000040) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x19, 0x0, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) (async) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setresuid(0x0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x8000, &(0x7f00000024c0)=ANY=[@ANYBLOB='quota']) r5 = openat(0xffffffffffffff9c, &(0x7f0000001040)='./file1\x00', 0x250942, 0x50) quotactl_fd$Q_GETNEXTQUOTA(r5, 0xffffffff80000900, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000231a00010026bd70dce19c35052e960000", @ANYRES32=0x0, @ANYBLOB="000000000800020001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 0s ago: executing program 4 (id=1208): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@e={0xff, 0x9, 0x0, 0x0, @SEQ_NOTEON=@special}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='scalable', 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r3, 0x4020ae76, &(0x7f0000000040)={r4, 0xd1}) close_range(r2, r3, 0x0) r5 = socket(0x10, 0x803, 0x0) write(r5, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000d9bffc), 0x4) sendto(r5, &(0x7f0000000080)="120000001200e7ef007b00000000000000a1", 0x12, 0x90, 0x0, 0x0) recvmmsg(r5, 0x0, 0x0, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) kernel console output (not intermixed with test programs): for Wi-Fi 7 hardware; use nl80211 [ 59.806642][ T5930] Bluetooth: hci2: command tx timeout [ 59.807088][ T5941] Bluetooth: hci0: command tx timeout [ 59.808832][ T5930] Bluetooth: hci1: command tx timeout [ 59.886636][ T5930] Bluetooth: hci3: command tx timeout [ 59.946118][ T5996] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 60.101215][ T5996] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 60.104349][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.109339][ T5996] usb 7-1: Product: syz [ 60.111245][ T5996] usb 7-1: Manufacturer: syz [ 60.112844][ T5996] usb 7-1: SerialNumber: syz [ 60.125504][ T5996] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 60.145310][ T50] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 60.229297][ T6192] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.272171][ T6194] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.316296][ T54] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 60.360948][ T24] usb 7-1: USB disconnect, device number 2 [ 60.362026][ T6196] program syz.3.59 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.369250][ T6196] ata1.00: invalid command format 0 [ 60.380754][ T6198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6198 comm=syz.1.60 [ 60.473981][ T6206] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 60.478972][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 60.481775][ T6209] netlink: 'syz.1.64': attribute type 1 has an invalid length. [ 60.483391][ T54] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 60.489705][ T6211] overlay: filesystem on ./file0 not supported as upperdir [ 60.489739][ T54] usb 5-1: config 0 has no interface number 0 [ 60.495318][ T54] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 60.498823][ T54] usb 5-1: config 0 interface 196 altsetting 1 has a duplicate endpoint with address 0x82, skipping [ 60.502502][ T54] usb 5-1: config 0 interface 196 has no altsetting 0 [ 60.507320][ T54] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 60.510196][ T54] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 60.512797][ T54] usb 5-1: Product: syz [ 60.514165][ T54] usb 5-1: Manufacturer: syz [ 60.521079][ T54] usb 5-1: SerialNumber: syz [ 60.531768][ T54] usb 5-1: config 0 descriptor?? [ 60.536918][ T6190] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 60.558242][ T6216] xt_hashlimit: size too large, truncated to 1048576 [ 60.571333][ T6218] netlink: 'syz.1.66': attribute type 21 has an invalid length. [ 60.643167][ T6226] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 60.750651][ T6190] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 60.753670][ T6190] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 60.762985][ T6190] vhci_hcd vhci_hcd.0: Device attached [ 60.770556][ T40] kauditd_printk_skb: 129 callbacks suppressed [ 60.770572][ T40] audit: type=1400 audit(1774514439.508:230): avc: denied { create } for pid=6239 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.780313][ T40] audit: type=1400 audit(1774514439.508:231): avc: denied { getopt } for pid=6239 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 60.781449][ T6235] vhci_hcd: connection closed [ 60.790715][ T54] ipheth 5-1:0.196: Unable to find endpoints [ 60.799083][ T1148] vhci_hcd vhci_hcd.0: stop threads [ 60.800489][ T54] usb 5-1: USB disconnect, device number 2 [ 60.801608][ T1148] vhci_hcd vhci_hcd.0: release socket [ 60.805447][ T1148] vhci_hcd vhci_hcd.0: disconnect device [ 60.816429][ T40] audit: type=1400 audit(1774514439.548:232): avc: denied { write } for pid=6239 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.824102][ T40] audit: type=1400 audit(1774514439.548:233): avc: denied { connect } for pid=6239 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 60.841890][ T40] audit: type=1400 audit(1774514439.578:234): avc: denied { create } for pid=6239 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.852483][ T40] audit: type=1400 audit(1774514439.578:235): avc: denied { write } for pid=6239 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 60.905529][ T40] audit: type=1400 audit(1774514439.638:236): avc: denied { write } for pid=6249 comm="syz.0.73" name="001" dev="devtmpfs" ino=764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.916188][ T40] audit: type=1400 audit(1774514439.648:237): avc: denied { create } for pid=6249 comm="syz.0.73" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.924194][ T40] audit: type=1400 audit(1774514439.648:238): avc: denied { mounton } for pid=6249 comm="syz.0.73" path="/18/file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 60.934478][ T40] audit: type=1400 audit(1774514439.648:239): avc: denied { name_bind } for pid=6249 comm="syz.0.73" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 60.959741][ T6256] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan1, syncid = 4, id = 0 [ 60.959982][ T6254] IPVS: stopping backup sync thread 6256 ... [ 60.976184][ T6254] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.979099][ T6254] UDF-fs: Scanning with blocksize 2048 failed [ 60.982445][ T6254] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 60.984822][ T6254] UDF-fs: Scanning with blocksize 4096 failed [ 61.166099][ T50] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 61.169439][ T50] ath9k_htc: Failed to initialize the device [ 61.173493][ T24] usb 7-1: ath9k_htc: USB layer deinitialized [ 61.611283][ T6279] --map-set only usable from mangle table [ 61.643519][ T6282] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 61.700327][ T6286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 61.886217][ T5930] Bluetooth: hci1: command tx timeout [ 61.886244][ T5941] Bluetooth: hci0: command tx timeout [ 61.888548][ T5930] Bluetooth: hci2: command tx timeout [ 61.893766][ T24] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 61.938986][ T6304] overlayfs: conflicting lowerdir path [ 61.966886][ T5930] Bluetooth: hci3: command tx timeout [ 62.051899][ T24] usb 6-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 62.057246][ T24] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 62.060738][ T24] usb 6-1: Product: syz [ 62.062640][ T24] usb 6-1: Manufacturer: syz [ 62.065152][ T24] usb 6-1: SerialNumber: syz [ 62.071099][ T24] usb 6-1: config 0 descriptor?? [ 62.257554][ T6321] __nla_validate_parse: 8 callbacks suppressed [ 62.257572][ T6321] netlink: 72 bytes leftover after parsing attributes in process `syz.3.95'. [ 62.663694][ T6331] fuse: Unknown parameter '' [ 62.772998][ T6337] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 62.800008][ T9] usb 6-1: USB disconnect, device number 2 [ 62.903449][ T6348] netlink: 28 bytes leftover after parsing attributes in process `syz.2.104'. [ 62.985590][ T6363] netlink: 'syz.3.108': attribute type 2 has an invalid length. [ 63.032745][ T6372] netlink: 4 bytes leftover after parsing attributes in process `syz.3.111'. [ 63.059846][ T6372] team0: Port device team_slave_0 removed [ 63.088360][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.110'. [ 63.103574][ T6368] netlink: 132 bytes leftover after parsing attributes in process `syz.2.110'. [ 63.215046][ T6381] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 63.288988][ T6397] netlink: 'syz.0.120': attribute type 1 has an invalid length. [ 63.308346][ T6397] 8021q: adding VLAN 0 to HW filter on device bond1 [ 63.315902][ T6397] bond1: entered allmulticast mode [ 63.389682][ T6407] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 63.392389][ T6407] netlink: 228 bytes leftover after parsing attributes in process `syz.2.122'. [ 63.407248][ T6407] overlay: Bad value for 'workdir' [ 63.411214][ T6405] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.521182][ T6405] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.572292][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.128'. [ 63.577578][ T6427] netlink: 48 bytes leftover after parsing attributes in process `syz.3.128'. [ 63.657375][ T6405] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.687072][ T6434] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 63.753133][ T6440] xt_hashlimit: overflow, rate too high: 0 [ 63.796706][ T6405] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.985177][ T6454] netlink: 12 bytes leftover after parsing attributes in process `syz.2.135'. [ 64.007582][ T6454] netlink: 60 bytes leftover after parsing attributes in process `syz.2.135'. [ 64.046724][ T80] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.069196][ T470] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.078581][ T1148] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.107973][ T470] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.773594][ T9] IPVS: starting estimator thread 0... [ 64.896832][ T6488] IPVS: using max 42 ests per chain, 100800 per kthread [ 65.177820][ T470] netdevsim netdevsim3 : set [0, 0] type 1 family 0 port 8472 - 0 [ 65.188017][ T470] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.196811][ T470] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.200514][ T470] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 65.378560][ T6540] mkiss: ax0: crc mode is auto. [ 65.405227][ T6534] afs: Unknown parameter 'dyn' [ 65.554135][ T6558] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1281 sclass=netlink_tcpdiag_socket pid=6558 comm=syz.2.167 [ 65.779572][ T40] kauditd_printk_skb: 3897 callbacks suppressed [ 65.779582][ T40] audit: type=1400 audit(1774514444.518:4137): avc: denied { setopt } for pid=6562 comm="syz.0.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 65.811407][ T6590] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 65.833533][ T40] audit: type=1400 audit(1774514444.568:4138): avc: denied { read write } for pid=6592 comm="syz.2.177" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.866015][ T40] audit: type=1400 audit(1774514444.568:4139): avc: denied { open } for pid=6592 comm="syz.2.177" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.873517][ T40] audit: type=1400 audit(1774514444.588:4140): avc: denied { map } for pid=6592 comm="syz.2.177" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.909361][ T40] audit: type=1400 audit(1774514444.648:4141): avc: denied { ioctl } for pid=6592 comm="syz.2.177" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 65.935309][ T40] audit: type=1400 audit(1774514444.668:4142): avc: denied { map } for pid=6602 comm="syz.0.181" path="pipe:[14395]" dev="pipefs" ino=14395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 65.958322][ T6611] netlink: 'syz.3.182': attribute type 1 has an invalid length. [ 65.976521][ T40] audit: type=1400 audit(1774514444.718:4143): avc: denied { write } for pid=6612 comm="syz.1.183" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.003157][ T40] audit: type=1400 audit(1774514444.738:4144): avc: denied { mount } for pid=6612 comm="syz.1.183" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 66.024447][ T40] audit: type=1400 audit(1774514444.758:4145): avc: denied { sqpoll } for pid=6618 comm="syz.3.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 66.186042][ T40] audit: type=1400 audit(1774514444.908:4146): avc: denied { read } for pid=6643 comm="syz.1.191" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 66.297515][ T6654] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 66.346689][ T841] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 66.409539][ T6665] MINIX-fs: blocksize too small for device [ 66.426610][ T6668] process 'syz.0.199' launched '/dev/fd/6' with NULL argv: empty string added [ 66.476081][ T841] usb 8-1: device descriptor read/64, error -71 [ 66.615793][ T6679] overlayfs: missing 'workdir' [ 66.667869][ T6681] tmpfs: Bad value for 'gid' [ 66.669576][ T6681] tmpfs: Bad value for 'gid' [ 66.716171][ T841] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.846063][ T841] usb 8-1: device descriptor read/64, error -71 [ 66.958400][ T841] usb usb8-port1: attempt power cycle [ 67.214481][ T6698] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.296123][ T841] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.317601][ T841] usb 8-1: device descriptor read/8, error -71 [ 67.556082][ T841] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.564496][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.570691][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.589362][ T6719] sctp: [Deprecated]: syz.0.217 (pid 6719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.589362][ T6719] Use struct sctp_sack_info instead [ 67.644341][ T6719] sctp: [Deprecated]: syz.0.217 (pid 6719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 67.644341][ T6719] Use struct sctp_sack_info instead [ 67.812631][ T6734] binder: BINDER_SET_CONTEXT_MGR already set [ 67.814686][ T6734] binder: 6733:6734 ioctl 4018620d 200000000180 returned -16 [ 67.848840][ T6738] __nla_validate_parse: 8 callbacks suppressed [ 67.848853][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 67.866712][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.223'. [ 68.011243][ T6745] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 68.102209][ T841] usb 8-1: device descriptor read/8, error -71 [ 68.223690][ T841] usb usb8-port1: unable to enumerate USB device [ 68.325392][ T6803] netlink: 'syz.3.230': attribute type 1 has an invalid length. [ 68.338620][ T6803] 8021q: adding VLAN 0 to HW filter on device bond1 [ 68.344153][ T6803] bond1: entered allmulticast mode [ 68.364945][ T6803] bond1: (slave ip6gretap1): making interface the new active one [ 68.367475][ T6803] ip6gretap1: entered allmulticast mode [ 68.369853][ T6803] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 68.418753][ T6815] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 68.532158][ T6827] Cannot find add_set index 46338 as target [ 68.542929][ T6827] syzkaller0: entered promiscuous mode [ 68.544755][ T6827] syzkaller0: entered allmulticast mode [ 68.566457][ T71] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 68.726453][ T71] usb 7-1: Using ep0 maxpacket: 8 [ 68.734903][ T71] usb 7-1: config 0 has an invalid interface number: 186 but max is 1 [ 68.738355][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 68.738873][ T71] usb 7-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 68.746268][ T71] usb 7-1: config 0 has an invalid interface number: 134 but max is 1 [ 68.747622][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.243'. [ 68.749288][ T71] usb 7-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 68.767055][ T6842] tipc: Started in network mode [ 68.769191][ T6842] tipc: Node identity 624aafdd4937, cluster identity 4711 [ 68.772302][ T6842] tipc: Enabled bearer , priority 0 [ 68.773574][ T71] usb 7-1: config 0 has no interface number 0 [ 68.775250][ T6842] syzkaller0: entered promiscuous mode [ 68.779956][ T6842] syzkaller0: entered allmulticast mode [ 68.780596][ T71] usb 7-1: config 0 has no interface number 1 [ 68.784029][ T71] usb 7-1: config 0 interface 186 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 68.802756][ T71] usb 7-1: config 0 interface 186 altsetting 2 endpoint 0x6 has invalid wMaxPacketSize 0 [ 68.806046][ T6842] tipc: Resetting bearer [ 68.807572][ T71] usb 7-1: config 0 interface 186 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 68.812581][ T71] usb 7-1: config 0 interface 186 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 68.826040][ T71] usb 7-1: config 0 interface 134 altsetting 250 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 68.830470][ T71] usb 7-1: config 0 interface 134 altsetting 250 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 68.834682][ T71] usb 7-1: config 0 interface 134 altsetting 250 bulk endpoint 0x1 has invalid maxpacket 528 [ 68.846014][ T71] usb 7-1: config 0 interface 134 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 68.849943][ T71] usb 7-1: config 0 interface 134 altsetting 250 has an invalid descriptor for endpoint zero, skipping [ 68.854142][ T71] usb 7-1: config 0 interface 186 has no altsetting 0 [ 68.859724][ T71] usb 7-1: config 0 interface 134 has no altsetting 0 [ 68.864367][ T71] usb 7-1: New USB device found, idVendor=148f, idProduct=2573, bcdDevice=26.2b [ 68.867915][ T71] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.869256][ T6855] netlink: 56 bytes leftover after parsing attributes in process `syz.1.248'. [ 68.870946][ T71] usb 7-1: Product: 䱑 [ 68.876628][ T71] usb 7-1: Manufacturer: 畟묧嗀赀跎ᘉ䜀鷧였錼㐺뢳籈쎃캝甄䈠串䜃鮷웗ك룂뙖㰧呝휘ﵫặ툣㯹탹警圧炼ﶣ悍〵輷튆㫚圣蒆㋦锰궥⻧氕簼ᬻ텱⸁籆絆愍맙鷭⼦쭪嬻ꕗ艇橓Ⱥ렯⦗⯢ᦰ䧹 [ 68.883822][ T71] usb 7-1: SerialNumber: syz [ 68.887821][ T71] usb 7-1: config 0 descriptor?? [ 68.897387][ T6854] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 68.904682][ T6859] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.978053][ T6859] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.981310][ T6859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.052022][ T6870] ata1.00: invalid cdb length 1 [ 69.093837][ T6805] futex_wake_op: syz.2.231 tries to shift op by -1; fix this program [ 69.121763][ T71] usb 7-1: USB disconnect, device number 3 [ 69.131058][ T6873] netlink: 'syz.0.254': attribute type 11 has an invalid length. [ 69.195233][ T6882] dummy0: entered allmulticast mode [ 69.408383][ T6884] netlink: 188 bytes leftover after parsing attributes in process `syz.1.257'. [ 69.613653][ T6882] usb usb9: check_ctrlrecip: process 6882 (syz.0.256) requesting ep 01 but needs 81 [ 69.618756][ T6882] usb usb9: usbfs: process 6882 (syz.0.256) did not claim interface 0 before use [ 69.656111][ T6901] netlink: 56 bytes leftover after parsing attributes in process `syz.2.258'. [ 69.807119][ T50] tipc: Node number set to 729657309 [ 69.834284][ T6902] dummy0: left allmulticast mode [ 69.928311][ T6917] netlink: 4 bytes leftover after parsing attributes in process `syz.2.263'. [ 70.077466][ T6924] trusted_key: syz.3.265 sent an empty control message without MSG_MORE. [ 70.081341][ T6924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.265'. [ 70.136416][ T6930] netlink: 'syz.3.268': attribute type 10 has an invalid length. [ 70.178515][ T6930] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 70.237121][ T6940] Cannot find add_set index 65532 as target [ 70.242219][ T6940] netlink: 236 bytes leftover after parsing attributes in process `syz.3.271'. [ 70.348390][ T6948] FAT-fs (nullb0): bogus number of reserved sectors [ 70.351019][ T6948] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 70.515384][ T6964] netlink: 'syz.2.277': attribute type 15 has an invalid length. [ 70.568010][ T6976] QAT: Device 2 not found [ 70.724742][ T6984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 70.875549][ T40] kauditd_printk_skb: 168 callbacks suppressed [ 70.875567][ T40] audit: type=1400 audit(1774514449.608:4315): avc: denied { mounton } for pid=6994 comm="syz.0.287" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 70.876918][ T6995] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 70.890757][ T6995] qnx6: wrong signature (magic) in superblock #1. [ 70.893087][ T6995] qnx6: unable to read the first superblock [ 70.916898][ T40] audit: type=1326 audit(1774514449.648:4316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a5f9c799 code=0x7fc00000 [ 70.927239][ T40] audit: type=1326 audit(1774514449.658:4317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a5f9c799 code=0x7fc00000 [ 70.937595][ T40] audit: type=1326 audit(1774514449.658:4318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6987 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f41a5f9c799 code=0x7fc00000 [ 71.102350][ T40] audit: type=1400 audit(1774514449.838:4319): avc: denied { bind } for pid=7004 comm="syz.0.290" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.109447][ T40] audit: type=1400 audit(1774514449.838:4320): avc: denied { name_bind } for pid=7004 comm="syz.0.290" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 71.117514][ T40] audit: type=1400 audit(1774514449.838:4321): avc: denied { node_bind } for pid=7004 comm="syz.0.290" saddr=172.20.20.170 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 71.154711][ T40] audit: type=1400 audit(1774514449.888:4322): avc: denied { create } for pid=7008 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.161233][ T40] audit: type=1400 audit(1774514449.888:4323): avc: denied { bind } for pid=7008 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.168150][ T40] audit: type=1400 audit(1774514449.888:4324): avc: denied { listen } for pid=7008 comm="syz.0.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.454632][ T7026] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=7026 comm=syz.2.298 [ 71.535203][ T7037] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 71.643329][ T7048] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 71.649208][ T7048] netlink: 'syz.3.304': attribute type 1 has an invalid length. [ 71.682047][ T7053] binder: BC_ACQUIRE_RESULT not supported [ 71.684627][ T7053] binder: 7050:7053 ioctl c0306201 2000000001c0 returned -22 [ 71.704253][ T7055] bridge_slave_1: default FDB implementation only supports local addresses [ 71.895711][ T7080] 8021q: adding VLAN 0 to HW filter on device bond2 [ 71.997726][ T7090] geneve2: entered promiscuous mode [ 71.998361][ T7091] nfs4: Unknown parameter '' [ 72.112724][ T7100] capability: warning: `syz.2.321' uses deprecated v2 capabilities in a way that may be insecure [ 72.128263][ T7103] tmpfs: Bad value for 'nr_inodes' [ 72.434794][ T7125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 72.464812][ T7125] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 72.759901][ T7154] pim6reg: entered allmulticast mode [ 72.947180][ T7173] ISOFS: Unable to identify CD-ROM format. [ 73.011102][ T7178] syzkaller1: entered promiscuous mode [ 73.013526][ T7178] syzkaller1: entered allmulticast mode [ 73.129443][ T7186] __nla_validate_parse: 7 callbacks suppressed [ 73.129455][ T7186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 73.136653][ T7186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.340'. [ 73.140102][ T7186] netlink: 32 bytes leftover after parsing attributes in process `syz.3.340'. [ 73.216189][ T7193] rdma_rxe: rxe_newlink: failed to add bond0 [ 73.219538][ T7193] netlink: 'syz.3.343': attribute type 1 has an invalid length. [ 73.222792][ T7193] netlink: 'syz.3.343': attribute type 3 has an invalid length. [ 73.256234][ T7193] netlink: 224 bytes leftover after parsing attributes in process `syz.3.343'. [ 73.401955][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 73.461003][ T7192] infiniband syz1: set active [ 73.466057][ T7192] infiniband syz1: added bond0 [ 73.522815][ T7192] RDS/IB: syz1: added [ 73.526589][ T7192] smc: adding ib device syz1 with port count 1 [ 73.528972][ T7192] smc: ib device syz1 port 1 has no pnetid [ 73.936064][ T1328] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 74.603072][ T7249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.352'. [ 74.641976][ T7252] syzkaller0: entered promiscuous mode [ 74.644278][ T7252] syzkaller0: entered allmulticast mode [ 74.650843][ T7252] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 74.865302][ T7262] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 74.919378][ T7262] netlink: 'syz.3.355': attribute type 4 has an invalid length. [ 74.926345][ T7262] netlink: 'syz.3.355': attribute type 1 has an invalid length. [ 74.929416][ T7262] netlink: 228 bytes leftover after parsing attributes in process `syz.3.355'. [ 74.954078][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.357'. [ 75.050698][ T7277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7277 comm=syz.1.361 [ 75.061149][ T7277] erofs (device loop1): cannot find valid erofs superblock [ 75.096554][ T7280] xt_NFQUEUE: number of total queues is 0 [ 75.109314][ T7282] macsec1: entered promiscuous mode [ 75.111476][ T7282] macsec1: entered allmulticast mode [ 75.128122][ T7284] netlink: 'syz.2.364': attribute type 1 has an invalid length. [ 75.130966][ T7284] netlink: 44 bytes leftover after parsing attributes in process `syz.2.364'. [ 75.188484][ T7290] netlink: 20 bytes leftover after parsing attributes in process `syz.2.364'. [ 75.211455][ C2] vcan0: j1939_tp_rxtimer: 0xffff888035b8d800: rx timeout, send abort [ 75.278036][ T7295] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 75.292234][ T7295] 9p: Bad value for 'port' [ 75.647880][ T7316] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.711926][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880386c2800: rx timeout, send abort [ 75.715874][ C2] vcan0: j1939_tp_rxtimer: 0xffff888035b8d800: abort rx timeout. Force session deactivation [ 75.778320][ T7319] netlink: 'syz.3.374': attribute type 13 has an invalid length. [ 75.853028][ T7319] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 75.858037][ T7319] syzkaller0: entered promiscuous mode [ 75.859584][ T7319] syzkaller0: entered allmulticast mode [ 76.080345][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 76.080357][ T40] audit: type=1400 audit(1774514454.818:4419): avc: denied { write } for pid=7334 comm="syz.2.379" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 76.209763][ T40] audit: type=1400 audit(1774514454.948:4420): avc: denied { accept } for pid=7343 comm="syz.3.383" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.216841][ C2] vcan0: j1939_tp_rxtimer: 0xffff8880386c2800: abort rx timeout. Force session deactivation [ 76.241144][ T7346] netlink: 'syz.0.382': attribute type 1 has an invalid length. [ 76.253147][ T7346] 8021q: adding VLAN 0 to HW filter on device bond2 [ 76.264571][ T7347] bond2: (slave veth0_to_bond): making interface the new active one [ 76.268223][ T7347] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 76.275260][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.294672][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.298169][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.299384][ T7350] syzkaller0: entered promiscuous mode [ 76.303404][ T7350] syzkaller0: entered allmulticast mode [ 76.305353][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.308236][ T7350] 0: reclassify loop, rule prio 0, protocol 800 [ 76.310688][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.321644][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.326239][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.330758][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.335249][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.345039][ T7346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9489 sclass=netlink_route_socket pid=7346 comm=syz.0.382 [ 76.404218][ T40] audit: type=1400 audit(1774514455.138:4421): avc: denied { create } for pid=7352 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.412243][ T40] audit: type=1400 audit(1774514455.138:4422): avc: denied { getopt } for pid=7352 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.444141][ T40] audit: type=1400 audit(1774514455.178:4423): avc: denied { read write } for pid=7353 comm="syz.0.386" name="vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.452858][ T40] audit: type=1400 audit(1774514455.178:4424): avc: denied { open } for pid=7353 comm="syz.0.386" path="/dev/vhost-net" dev="devtmpfs" ino=1300 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.460901][ T40] audit: type=1400 audit(1774514455.188:4425): avc: denied { ioctl } for pid=7353 comm="syz.0.386" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 76.510177][ T40] audit: type=1400 audit(1774514455.248:4426): avc: denied { read } for pid=7361 comm="syz.3.387" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.518493][ T40] audit: type=1400 audit(1774514455.248:4427): avc: denied { open } for pid=7361 comm="syz.3.387" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.526410][ T40] audit: type=1400 audit(1774514455.258:4428): avc: denied { map } for pid=7361 comm="syz.3.387" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 76.638766][ T7371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 76.776396][ T841] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 76.794848][ T7381] comedi comedi3: driver 'ni_daq_700' does not support attach using comedi_config [ 76.799439][ T7381] comedi comedi3: comedi_config --init_data is deprecated [ 76.876637][ T7385] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 76.891278][ T7385] bond3: entered promiscuous mode [ 76.893004][ T7385] bond3: entered allmulticast mode [ 76.894865][ T7385] 8021q: adding VLAN 0 to HW filter on device bond3 [ 76.909438][ T7385] erspan1: entered allmulticast mode [ 76.913492][ T7385] bond3: (slave erspan1): making interface the new active one [ 76.916143][ T7385] erspan1: entered promiscuous mode [ 76.919482][ T7385] bond3: (slave erspan1): Enslaving as an active interface with an up link [ 76.927187][ T7387] netlink: 'syz.1.394': attribute type 1 has an invalid length. [ 76.928792][ T841] usb 7-1: config index 0 descriptor too short (expected 23569, got 27) [ 76.934346][ T841] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.941962][ T841] usb 7-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 76.946098][ T841] usb 7-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 76.950427][ T841] usb 7-1: Manufacturer: syz [ 76.954736][ T841] usb 7-1: config 0 descriptor?? [ 77.017798][ T7397] netlink: 'syz.1.397': attribute type 10 has an invalid length. [ 77.029087][ T7397] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.032738][ T7397] bond0: (slave team0): Enslaving as an active interface with an up link [ 77.038660][ T7397] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 77.049350][ T841] rc_core: IR keymap rc-hauppauge not found [ 77.051339][ T841] Registered IR keymap rc-empty [ 77.056087][ T7397] libceph: secret too big 289 [ 77.056473][ T841] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0 [ 77.062590][ T841] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/rc/rc0/input8 [ 77.090216][ T7402] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 77.150717][ T7410] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 77.169022][ T50] usb 7-1: USB disconnect, device number 4 [ 77.369412][ T7425] mkiss: ax0: crc mode is auto. [ 77.374738][ T7425] netlink: 'syz.0.405': attribute type 30 has an invalid length. [ 77.385495][ T1148] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.391059][ T1148] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.395602][ T1148] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.399144][ T1148] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 77.568875][ T7439] /dev/sr0: Can't open blockdev [ 77.572114][ T7450] mmap: syz.0.412 (7450) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.579768][ T7450] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 77.635181][ T7448] kvm: kvm [7446]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 77.638933][ T7447] kvm: kvm [7446]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x1 [ 77.742903][ T7462] syz_tun: entered allmulticast mode [ 77.891757][ T7485] ip6t_REJECT: ECHOREPLY is not supported [ 77.918473][ T7461] syz_tun: left allmulticast mode [ 78.048368][ T7503] syz.1.426: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 78.054165][ T7503] CPU: 1 UID: 0 PID: 7503 Comm: syz.1.426 Tainted: G L syzkaller #0 PREEMPT(full) [ 78.054187][ T7503] Tainted: [L]=SOFTLOCKUP [ 78.054191][ T7503] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 78.054199][ T7503] Call Trace: [ 78.054204][ T7503] [ 78.054209][ T7503] dump_stack_lvl+0x100/0x190 [ 78.054247][ T7503] warn_alloc.cold+0x95/0x1c1 [ 78.054271][ T7503] ? __pfx_warn_alloc+0x10/0x10 [ 78.054298][ T7503] ? kasan_save_stack+0x3f/0x50 [ 78.054318][ T7503] ? kasan_save_stack+0x30/0x50 [ 78.054336][ T7503] ? kasan_save_track+0x14/0x30 [ 78.054358][ T7503] ? xskq_create+0xfb/0x1d0 [ 78.054380][ T7503] __vmalloc_node_range_noprof+0x1252/0x1530 [ 78.054402][ T7503] ? xskq_create+0xfb/0x1d0 [ 78.054421][ T7503] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 78.054445][ T7503] ? xskq_create+0xfb/0x1d0 [ 78.054459][ T7503] vmalloc_user_noprof+0x9e/0xe0 [ 78.054475][ T7503] ? xskq_create+0xfb/0x1d0 [ 78.054489][ T7503] xskq_create+0xfb/0x1d0 [ 78.054505][ T7503] xsk_setsockopt+0x743/0xab0 [ 78.054520][ T7503] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.054534][ T7503] ? find_held_lock+0x2b/0x80 [ 78.054551][ T7503] ? __fget_files+0x215/0x3d0 [ 78.054568][ T7503] ? selinux_socket_setsockopt+0x6a/0x80 [ 78.054593][ T7503] ? __pfx_xsk_setsockopt+0x10/0x10 [ 78.054608][ T7503] do_sock_setsockopt+0xf3/0x1d0 [ 78.054631][ T7503] __sys_setsockopt+0x195/0x220 [ 78.054651][ T7503] __x64_sys_setsockopt+0xbd/0x160 [ 78.054668][ T7503] ? do_syscall_64+0x95/0xf80 [ 78.054685][ T7503] ? lockdep_hardirqs_on+0x78/0x100 [ 78.054704][ T7503] do_syscall_64+0x106/0xf80 [ 78.054721][ T7503] ? clear_bhb_loop+0x40/0x90 [ 78.054743][ T7503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.054756][ T7503] RIP: 0033:0x7f41a5f9c799 [ 78.054768][ T7503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 78.054780][ T7503] RSP: 002b:00007f41a6f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 78.054793][ T7503] RAX: ffffffffffffffda RBX: 00007f41a6215fa0 RCX: 00007f41a5f9c799 [ 78.054801][ T7503] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 78.054808][ T7503] RBP: 00007f41a6032c99 R08: 0000000000000004 R09: 0000000000000000 [ 78.054815][ T7503] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 78.054823][ T7503] R13: 00007f41a6216038 R14: 00007f41a6215fa0 R15: 00007ffdf2630058 [ 78.054840][ T7503] [ 78.054844][ T7503] Mem-Info: [ 78.144084][ T7503] active_anon:10992 inactive_anon:4 isolated_anon:0 [ 78.144084][ T7503] active_file:5200 inactive_file:47921 isolated_file:0 [ 78.144084][ T7503] unevictable:1768 dirty:1750 writeback:0 [ 78.144084][ T7503] slab_reclaimable:8926 slab_unreclaimable:69453 [ 78.144084][ T7503] mapped:24596 shmem:2401 pagetables:3621 [ 78.144084][ T7503] sec_pagetables:291 bounce:0 [ 78.144084][ T7503] kernel_misc_reclaimable:0 [ 78.144084][ T7503] free:458558 free_pcp:14868 free_cma:0 [ 78.159139][ T7511] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 78.160340][ T7503] Node 0 active_anon:43940kB inactive_anon:16kB active_file:20800kB inactive_file:191492kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98384kB dirty:6992kB writeback:0kB shmem:6068kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13376kB pagetables:13556kB sec_pagetables:1164kB all_unreclaimable? no Balloon:0kB [ 78.176668][ T7503] Node 1 active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:928kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 78.189518][ T7503] Node 0 DMA free:15204kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 78.200888][ T7503] lowmem_reserve[]: 0 1231 1231 1231 1231 [ 78.202762][ T7503] Node 0 DMA32 free:188628kB boost:0kB min:27476kB low:34344kB high:41212kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43940kB inactive_anon:16kB active_file:20800kB inactive_file:191492kB unevictable:3536kB writepending:6992kB zspages:0kB present:2080628kB managed:1260856kB mlocked:0kB bounce:0kB free_pcp:44812kB local_pcp:8140kB free_cma:0kB [ 78.213279][ T7503] lowmem_reserve[]: 0 0 0 0 0 [ 78.215095][ T7503] Node 1 Normal free:1630400kB boost:0kB min:39760kB low:49700kB high:59640kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:3536kB writepending:8kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:14140kB local_pcp:1068kB free_cma:0kB [ 78.226577][ T7503] lowmem_reserve[]: 0 0 0 0 0 [ 78.228143][ T7503] Node 0 DMA: 9*4kB (U) 12*8kB (U) 12*16kB (U) 13*32kB (U) 10*64kB (U) 10*128kB (U) 9*256kB (U) 6*512kB (U) 3*1024kB (U) 0*2048kB 1*4096kB (M) = 15204kB [ 78.232988][ T7503] Node 0 DMA32: 771*4kB (UME) 373*8kB (UME) 588*16kB (UME) 574*32kB (UME) 138*64kB (UME) 62*128kB (UME) 84*256kB (UME) 83*512kB (UME) 48*1024kB (UM) 10*2048kB (UM) 1*4096kB (M) = 188340kB [ 78.240061][ T7503] Node 1 Normal: 222*4kB (UM) 220*8kB (UME) 203*16kB (UM) 166*32kB (UM) 186*64kB (UME) 179*128kB (UME) 169*256kB (UME) 150*512kB (UME) 138*1024kB (UM) 4*2048kB (UME) 321*4096kB (UM) = 1630408kB [ 78.246467][ T7503] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.249941][ T7503] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.253019][ T7503] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 78.256190][ T7503] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 78.259847][ T7503] 55518 total pagecache pages [ 78.261755][ T7503] 0 pages in swap cache [ 78.263283][ T7503] Free swap = 124996kB [ 78.264830][ T7503] Total swap = 124996kB [ 78.266648][ T7503] 1048443 pages RAM [ 78.268262][ T7503] 0 pages HighMem/MovableOnly [ 78.270278][ T7503] 283918 pages reserved [ 78.271835][ T7503] 0 pages cma reserved [ 78.317194][ T7516] __nla_validate_parse: 8 callbacks suppressed [ 78.317210][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.430'. [ 78.322698][ T7516] netlink: 5 bytes leftover after parsing attributes in process `syz.3.430'. [ 78.346564][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 78.403291][ T7525] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.432'. [ 78.411663][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.2.431'. [ 78.497531][ T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 78.504414][ T9] usb 6-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 78.507974][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.511498][ T7533] SELinux: Context system_u:object_r:dhcpc_var_run_t:s0 is not valid (left unmapped). [ 78.513125][ T9] usb 6-1: config 0 descriptor?? [ 78.521334][ T9] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 78.564238][ T7537] gfs2: path_lookup on c::: returned error -2 [ 78.643644][ T10] cfg80211: failed to load regulatory.db [ 78.697283][ T5930] Bluetooth: hci1: command 0x2016 tx timeout [ 78.737830][ T9] usb 6-1: USB disconnect, device number 4 [ 78.780792][ T7555] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 78.889880][ T7562] tipc: Enabling of bearer rejected, media not registered [ 79.226338][ T7590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.455'. [ 79.334989][ T7599] tmpfs: Bad value for 'mpol' [ 79.377309][ T7600] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.457'. [ 79.547095][ T7611] binder: 7610:7611 ioctl 8008ae9d 2000000003c0 returned -22 [ 79.591521][ T7618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 79.631671][ T7621] netlink: 'syz.0.463': attribute type 2 has an invalid length. [ 79.631826][ T7616] netlink: 220 bytes leftover after parsing attributes in process `syz.1.462'. [ 79.639087][ T7616] netlink: 'syz.1.462': attribute type 2 has an invalid length. [ 79.648137][ T7621] netlink: 151 bytes leftover after parsing attributes in process `syz.0.463'. [ 79.748181][ T5938] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 80.056351][ T1328] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.240430][ T1328] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 80.243570][ T1328] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.246337][ T1328] usb 7-1: Product: syz [ 80.247772][ T1328] usb 7-1: Manufacturer: syz [ 80.249519][ T1328] usb 7-1: SerialNumber: syz [ 80.252896][ T1328] usb 7-1: config 0 descriptor?? [ 80.458325][ T50] usb 7-1: USB disconnect, device number 5 [ 80.571083][ T7643] overlay: filesystem on ./bus not supported [ 81.090070][ T40] kauditd_printk_skb: 55 callbacks suppressed [ 81.090085][ T40] audit: type=1400 audit(1774514459.828:4484): avc: denied { getopt } for pid=7696 comm="syz.0.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 81.102321][ T7697] binder: BINDER_SET_CONTEXT_MGR already set [ 81.104915][ T7697] binder: 7696:7697 ioctl 4018620d 200000004a80 returned -16 [ 81.112971][ T7698] binder_alloc: binder_alloc_mmap_handler: 7696 200000fff000-200001000000 already mapped failed -16 [ 81.169010][ T40] audit: type=1400 audit(1774514459.908:4485): avc: denied { execute } for pid=7703 comm="syz.0.490" path=2F6D656D66643A9D23202864656C6574656429 dev="hugetlbfs" ino=19845 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 81.239369][ T40] audit: type=1400 audit(1774514459.968:4486): avc: denied { create } for pid=7708 comm="syz.3.491" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 81.265187][ T40] audit: type=1400 audit(1774514459.998:4487): avc: denied { read } for pid=7708 comm="syz.3.491" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.275033][ T40] audit: type=1400 audit(1774514459.998:4488): avc: denied { open } for pid=7708 comm="syz.3.491" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.338416][ T7709] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 81.341387][ T7709] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.350176][ T7709] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 81.353917][ T7709] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 81.355857][ T7709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.359182][ T7709] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 81.365545][ T7709] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 81.368019][ T7709] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.371766][ T7709] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 81.381016][ T7709] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 81.382968][ T7709] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.398243][ T7709] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.445567][ T7728] bridge_slave_1: default FDB implementation only supports local addresses [ 81.486212][ T7733] capability: warning: `syz.3.497' uses 32-bit capabilities (legacy support in use) [ 81.615278][ T40] audit: type=1400 audit(1774514460.348:4489): avc: denied { write } for pid=7743 comm="syz.1.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 81.630908][ T7747] selinux_netlink_send: 57 callbacks suppressed [ 81.630920][ T7747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7747 comm=syz.0.501 [ 81.637350][ T40] audit: type=1400 audit(1774514460.368:4490): avc: denied { nlmsg_read } for pid=7713 comm="syz.2.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 81.654140][ T7747] netlink: 'syz.0.501': attribute type 1 has an invalid length. [ 81.696848][ T40] audit: type=1400 audit(1774514460.428:4491): avc: denied { ioctl } for pid=7750 comm="syz.1.502" path="socket:[19901]" dev="sockfs" ino=19901 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.706151][ T40] audit: type=1400 audit(1774514460.428:4492): avc: denied { ioctl } for pid=7750 comm="syz.1.502" path="socket:[19038]" dev="sockfs" ino=19038 ioctlcmd=0x10 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 81.772822][ T40] audit: type=1400 audit(1774514460.508:4493): avc: denied { write } for pid=7754 comm="syz.0.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.776332][ T7756] openvswitch: netlink: nsh attr 0 has unexpected len 3 expected 0 [ 82.086038][ T54] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 82.257402][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.261353][ T54] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.265043][ T54] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.271849][ T54] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.275071][ T54] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.280003][ T54] usb 8-1: config 0 descriptor?? [ 82.462879][ T7800] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 82.705890][ T54] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd [ 82.733416][ T54] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 82.859968][ T39] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 82.918486][ T7762] ptrace attach of "/syz-executor exec"[7829] was attempted by "/syz-executor exec"[7762] [ 83.019616][ T39] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 83.024574][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.029784][ T39] usb 6-1: Product: syz [ 83.031595][ T39] usb 6-1: Manufacturer: syz [ 83.033561][ T39] usb 6-1: SerialNumber: syz [ 83.040695][ T39] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 83.059529][ T24] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 83.070761][ T1328] usb 8-1: USB disconnect, device number 6 [ 83.096100][ T50] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 83.177652][ T7838] fuse: Unknown parameter '0xffffffffffffffff0x000000000000000a' [ 83.186347][ T7839] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7839 comm=syz.2.527 [ 83.186379][ T7838] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=7838 comm=syz.2.527 [ 83.260937][ T50] usb 5-1: unable to get BOS descriptor or descriptor too short [ 83.266705][ T50] usb 5-1: not running at top speed; connect to a high speed hub [ 83.270383][ T50] usb 5-1: config 1 interface 0 altsetting 12 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 83.274288][ T50] usb 5-1: config 1 interface 0 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 83.279238][ T50] usb 5-1: config 1 interface 0 has no altsetting 0 [ 83.283001][ T50] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 83.286127][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.288813][ T50] usb 5-1: Product: syz [ 83.290290][ T50] usb 5-1: Manufacturer: syz [ 83.291855][ T50] usb 5-1: SerialNumber: syz [ 83.296120][ T7825] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 83.416484][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 83.416540][ T5930] Bluetooth: hci2: command 0x0c1a tx timeout [ 83.419160][ T5938] Bluetooth: hci1: command 0x2016 tx timeout [ 83.421058][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 83.468426][ T1328] usb 6-1: USB disconnect, device number 5 [ 83.506714][ T50] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 83.515788][ T50] usb 5-1: USB disconnect, device number 3 [ 83.559207][ T7848] netlink: 'syz.3.530': attribute type 58 has an invalid length. [ 83.600567][ T7850] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 83.669364][ T7804] __nla_validate_parse: 10 callbacks suppressed [ 83.669382][ T7804] netlink: 60 bytes leftover after parsing attributes in process `syz.1.517'. [ 83.926392][ T7872] netlink: 44 bytes leftover after parsing attributes in process `syz.2.536'. [ 84.063857][ T7885] tmpfs: Bad value for 'mpol' [ 84.126185][ T24] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 84.128983][ T24] ath9k_htc: Failed to initialize the device [ 84.136221][ T7894] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.143481][ T1328] usb 6-1: ath9k_htc: USB layer deinitialized [ 84.170503][ T7896] bond0: entered promiscuous mode [ 84.172749][ T7896] bond_slave_0: entered promiscuous mode [ 84.175424][ T7896] bond_slave_1: entered promiscuous mode [ 84.181237][ T7896] batadv0: entered promiscuous mode [ 84.185427][ T7896] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 84.190672][ T7896] bond0: left promiscuous mode [ 84.192723][ T7896] bond_slave_0: left promiscuous mode [ 84.195213][ T7896] bond_slave_1: left promiscuous mode [ 84.198859][ T7896] batadv0: left promiscuous mode [ 84.207673][ T7897] bond0: entered promiscuous mode [ 84.209615][ T7897] bond_slave_0: entered promiscuous mode [ 84.211786][ T7897] bond_slave_1: entered promiscuous mode [ 84.216387][ T7897] batadv0: entered promiscuous mode [ 84.218920][ T7897] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 84.225529][ T7897] bond0: left promiscuous mode [ 84.227388][ T7897] bond_slave_0: left promiscuous mode [ 84.229230][ T7897] bond_slave_1: left promiscuous mode [ 84.231653][ T7897] batadv0: left promiscuous mode [ 84.319939][ T5938] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 84.350241][ T7911] bond4: option downdelay: invalid value (18446744073709551615) [ 84.353447][ T7911] bond4: option downdelay: allowed values 0 - 2147483647 [ 84.359102][ T7911] bond4 (unregistering): Released all slaves [ 84.458089][ T7921] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 84.519007][ T5938] Bluetooth: hci1: Ignoring connect complete event for invalid link type [ 84.553847][ T7934] pim6reg99999999: entered allmulticast mode [ 84.689092][ T7939] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3827144520 (61234312320 ns) > initial count (22536324432 ns). Using initial count to start timer. [ 84.798687][ T7949] lo: Caught tx_queue_len zero misconfig [ 84.800896][ T7949] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 84.808924][ T7949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.556'. [ 84.912987][ T5938] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 84.966063][ T7963] usb 2-1: USB disconnect, device number 2 [ 85.022388][ T7967] input input11: cannot allocate more than FF_MAX_EFFECTS effects [ 85.118477][ T7970] ieee802154 phy0 wpan0: encryption failed: -22 [ 85.125127][ T7970] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.220269][ T7980] bridge_slave_0: left allmulticast mode [ 85.222133][ T7980] bridge_slave_0: left promiscuous mode [ 85.224570][ T7980] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.236355][ T7980] bridge_slave_1: left allmulticast mode [ 85.238345][ T7980] bridge_slave_1: left promiscuous mode [ 85.240306][ T7980] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.245631][ T7980] bond2: (slave veth0_to_bond): Releasing active interface [ 85.253365][ T7980] bond0: (slave bond_slave_0): Releasing backup interface [ 85.259078][ T7980] bond0: (slave bond_slave_1): Releasing backup interface [ 85.265860][ T7980] team0: Port device team_slave_0 removed [ 85.269963][ T7980] team0: Port device team_slave_1 removed [ 85.272009][ T7980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.274233][ T7980] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.278657][ T7980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.280796][ T7980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.283781][ T7980] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 85.323871][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.567'. [ 85.417334][ T5997] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 85.445073][ T7990] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 85.449143][ T7990] SELinux: failed to load policy [ 85.487420][ T5938] Bluetooth: hci1: command 0x2016 tx timeout [ 85.497106][ T5938] Bluetooth: hci3: command 0x0c1a tx timeout [ 85.499745][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 85.576890][ T5997] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 85.581737][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.585315][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.591702][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.595888][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.600534][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.626077][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.629944][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.633576][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.638772][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.642606][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.646544][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.650576][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.654152][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.658034][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.662766][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.667832][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.671494][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.673003][ T8009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 85.676827][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.684934][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.689180][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.693918][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.698127][ T5997] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 85.701843][ T5997] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 85.706294][ T5997] usb 8-1: config 0 interface 0 has no altsetting 0 [ 85.710108][ T5997] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 85.713881][ T5997] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 85.718571][ T5997] usb 8-1: Product: syz [ 85.719900][ T5997] usb 8-1: Manufacturer: syz [ 85.721400][ T5997] usb 8-1: SerialNumber: syz [ 85.724192][ T5997] usb 8-1: config 0 descriptor?? [ 85.733072][ T5997] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 85.918692][ T8032] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.946214][ T54] usb 8-1: USB disconnect, device number 7 [ 85.957244][ T54] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 85.973241][ T8038] fuse: Bad value for 'rootmode' [ 85.990241][ T8040] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 86.208586][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 86.208602][ T40] audit: type=1400 audit(1774514464.948:4521): avc: denied { setopt } for pid=8067 comm="syz.1.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.247676][ T40] audit: type=1400 audit(1774514464.988:4522): avc: denied { create } for pid=8069 comm="syz.0.592" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.255765][ T5938] Bluetooth: hci0: unexpected event for opcode 0x0c5b [ 86.258785][ T40] audit: type=1400 audit(1774514464.988:4523): avc: denied { ioctl } for pid=8037 comm="syz.2.584" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x9440 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 86.289397][ T40] audit: type=1400 audit(1774514465.028:4524): avc: denied { mounton } for pid=8071 comm="syz.1.593" path="/123/file0" dev="tmpfs" ino=666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 86.467395][ T40] audit: type=1326 audit(1774514465.208:4525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8083 comm="syz.0.596" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0f8759c799 code=0x0 [ 86.504478][ T40] audit: type=1400 audit(1774514465.238:4526): avc: denied { bind } for pid=8087 comm="syz.3.598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.518106][ T5938] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 86.541113][ T40] audit: type=1400 audit(1774514465.278:4527): avc: denied { accept } for pid=8090 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.557853][ T40] audit: type=1400 audit(1774514465.298:4528): avc: denied { transfer } for pid=8090 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 86.568760][ T40] audit: type=1400 audit(1774514465.308:4529): avc: denied { read } for pid=8090 comm="syz.1.599" path="socket:[23743]" dev="sockfs" ino=23743 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 86.634311][ T40] audit: type=1400 audit(1774514465.368:4530): avc: denied { append } for pid=8094 comm="syz.1.600" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 86.667495][ T8097] input: syz1 as /devices/virtual/input/input12 [ 86.676182][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.601'. [ 86.683756][ T8102] hsr_slave_0: left promiscuous mode [ 86.690658][ T8102] hsr_slave_1: left promiscuous mode [ 86.747833][ T8105] bond4: (slave bond_slave_1): Device is not our slave [ 86.750359][ T8105] bond4: option active_slave: invalid value (bond_slave_1) [ 86.753705][ T8105] bond4 (unregistering): Released all slaves [ 86.839501][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 86.842501][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.602'. [ 86.860727][ T8116] tmpfs: Bad value for 'mpol' [ 86.912385][ T8122] netlink: 72 bytes leftover after parsing attributes in process `syz.1.605'. [ 86.960169][ T8128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.606'. [ 86.963906][ T8128] netlink: 60 bytes leftover after parsing attributes in process `syz.2.606'. [ 87.035244][ T8134] bridge: RTM_NEWNEIGH with invalid ether address [ 87.042345][ T8134] bridge_slave_1: default FDB implementation only supports local addresses [ 87.255748][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.261085][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.265545][ T8155] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 87.269112][ T8155] UDF-fs: Scanning with blocksize 512 failed [ 87.273742][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.282360][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.289257][ T8155] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 87.292531][ T8155] UDF-fs: Scanning with blocksize 1024 failed [ 87.295574][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.299740][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.303925][ T8155] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 87.308380][ T8155] UDF-fs: Scanning with blocksize 2048 failed [ 87.312479][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 87.316605][ T8155] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 87.320521][ T8155] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 87.324118][ T8155] UDF-fs: Scanning with blocksize 4096 failed [ 87.327272][ T8155] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 87.362716][ T8159] pimreg9: entered allmulticast mode [ 87.484576][ T8179] hugetlbfs: syz.3.627 (8179): Using mlock ulimits for SHM_HUGETLB is obsolete [ 87.566105][ T5938] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.569053][ T5930] Bluetooth: hci1: command 0x2016 tx timeout [ 87.569306][ T5941] Bluetooth: hci3: command 0x0c1a tx timeout [ 87.958806][ T8213] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 87.961233][ T8213] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.963823][ T8213] vhci_hcd vhci_hcd.0: Device attached [ 87.965932][ T8217] vhci_hcd: connection closed [ 87.967854][ T6770] vhci_hcd vhci_hcd.0: stop threads [ 87.971277][ T6770] vhci_hcd vhci_hcd.0: release socket [ 87.973239][ T6770] vhci_hcd vhci_hcd.0: disconnect device [ 88.245082][ T8241] futex_wake_op: syz.1.646 tries to shift op by -1; fix this program [ 88.284020][ T8243] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 88.286835][ T8243] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 88.292013][ T8243] vhci_hcd vhci_hcd.0: Device attached [ 88.303560][ T8244] vhci_hcd: connection closed [ 88.304737][ T13] vhci_hcd vhci_hcd.1: stop threads [ 88.311213][ T13] vhci_hcd vhci_hcd.1: release socket [ 88.313817][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 89.054130][ T8271] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 89.686140][ T1328] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 89.837617][ T1328] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.842001][ T1328] usb 7-1: New USB device found, idVendor=1e71, idProduct=200e, bcdDevice= 0.00 [ 89.846297][ T1328] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.856985][ T1328] usb 7-1: config 0 descriptor?? [ 89.865906][ T1328] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 89.878591][ T8295] __nla_validate_parse: 6 callbacks suppressed [ 89.878609][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.3.666'. [ 89.973971][ T8298] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 90.144970][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 90.623761][ T8309] netlink: 'syz.3.670': attribute type 16 has an invalid length. [ 90.627105][ T8309] netlink: 48 bytes leftover after parsing attributes in process `syz.3.670'. [ 90.630825][ T8309] veth1_macvtap: entered allmulticast mode [ 90.669737][ T8315] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.671'. [ 90.674110][ T8314] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1012 sclass=netlink_route_socket pid=8314 comm=syz.3.671 [ 90.676601][ T8261] overlayfs: failed to resolve './bus': -2 [ 90.722404][ T8320] tipc: Started in network mode [ 90.724325][ T8320] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 90.728651][ T8320] tipc: Enabling of bearer rejected, failed to enable media [ 90.766190][ T1328] usb 7-1: USB disconnect, device number 6 [ 91.037112][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.681'. [ 91.253359][ T8355] netlink: 24 bytes leftover after parsing attributes in process `syz.0.685'. [ 91.331687][ T40] kauditd_printk_skb: 25 callbacks suppressed [ 91.331699][ T40] audit: type=1400 audit(1774514470.068:4556): avc: denied { ioctl } for pid=8359 comm="syz.1.687" path="socket:[24342]" dev="sockfs" ino=24342 ioctlcmd=0x5838 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 91.360414][ T8368] tmpfs: Unknown parameter '00000000000000000000' [ 91.401242][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 92.145889][ T8381] syz_tun: entered allmulticast mode [ 92.149491][ T8381] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 92.152588][ T8381] mroute: pending queue full, dropping entries [ 92.155839][ T8380] syz_tun: left allmulticast mode [ 92.195737][ T5936] udevd[5936]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 92.199778][ T40] audit: type=1400 audit(1774514470.928:4557): avc: denied { append } for pid=8385 comm="syz.1.697" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 92.218564][ T8386] netlink: 12 bytes leftover after parsing attributes in process `syz.1.697'. [ 92.239173][ T8386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.697'. [ 92.273670][ T8390] sctp: [Deprecated]: syz.0.699 (pid 8390) Use of int in max_burst socket option. [ 92.273670][ T8390] Use struct sctp_assoc_value instead [ 92.286962][ T40] audit: type=1400 audit(1774514471.028:4558): avc: denied { accept } for pid=8387 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 92.293322][ T40] audit: type=1400 audit(1774514471.028:4559): avc: denied { read } for pid=8387 comm="syz.0.699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 92.357971][ T39] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.360299][ T8395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'. [ 92.429530][ T40] audit: type=1400 audit(1774514471.168:4560): avc: denied { read } for pid=8398 comm="syz.1.703" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.441339][ T40] audit: type=1400 audit(1774514471.168:4561): avc: denied { open } for pid=8398 comm="syz.1.703" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.451965][ T40] audit: type=1400 audit(1774514471.168:4562): avc: denied { ioctl } for pid=8398 comm="syz.1.703" path="/dev/btrfs-control" dev="devtmpfs" ino=1342 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 92.526436][ T39] usb 7-1: Using ep0 maxpacket: 8 [ 92.536951][ T39] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 92.539631][ T39] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 92.540976][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 92.542867][ T39] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 92.552651][ T39] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 92.557976][ T39] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 92.561527][ T39] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.567581][ T39] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 92.571088][ T39] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.780531][ T39] usb 7-1: usb_control_msg returned -32 [ 92.784661][ T39] usbtmc 7-1:16.0: can't read capabilities [ 92.856875][ T40] audit: type=1400 audit(1774514471.598:4563): avc: denied { unmount } for pid=5933 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 93.093954][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 93.098305][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.712'. [ 93.114499][ T40] audit: type=1400 audit(1774514471.848:4564): avc: denied { connect } for pid=8430 comm="syz.1.712" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 93.134549][ T8432] usbtmc 7-1:16.0: INITIATE_ABORT_BULK_OUT returned 0 [ 93.155033][ T40] audit: type=1400 audit(1774514471.888:4565): avc: denied { read write } for pid=8433 comm="syz.1.713" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 93.301837][ T8447] nfs: Unknown parameter '00000000000000000000' [ 93.339584][ T10] usb 7-1: USB disconnect, device number 7 [ 93.420441][ T8459] sctp: [Deprecated]: syz.0.720 (pid 8459) Use of int in maxseg socket option. [ 93.420441][ T8459] Use struct sctp_assoc_value instead [ 93.582464][ T8474] program syz.0.725 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.587124][ C2] sr 2:0:0:0: [sr0] tag#11 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 93.590537][ C2] sr 2:0:0:0: [sr0] tag#11 CDB: opcode=0x95 95 ff fb ff 00 00 00 00 00 00 00 00 00 00 00 00 [ 93.754567][ T8483] xt_hashlimit: size too large, truncated to 1048576 [ 93.806386][ T8490] x9: renamed from bridge_slave_0 (while UP) [ 93.914683][ T8500] netlink: 'syz.3.735': attribute type 21 has an invalid length. [ 93.919500][ T8502] snd_dummy snd_dummy.0: control 3:0:128:syz0:8200 is already present [ 93.967461][ T8504] can0: slcan on ttynull. [ 94.007891][ T8503] can0 (unregistered): slcan off ttynull. [ 94.055896][ T8510] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 94.261439][ T8525] sp0: Synchronizing with TNC [ 94.276314][ T8523] [U] [ 94.297343][ T8528] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.335583][ T8531] dlm: no local IP address has been set [ 94.338797][ T8531] dlm: cannot start dlm midcomms -107 [ 94.341861][ T8531] nfs4: Unknown parameter 'L a&N\L' [ 94.345333][ T8532] dlm: no local IP address has been set [ 94.349329][ T8532] dlm: cannot start dlm midcomms -107 [ 94.376442][ T8537] netlink: 'syz.1.749': attribute type 11 has an invalid length. [ 94.409831][ T8540] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 94.441776][ T8546] netlink: 'syz.2.753': attribute type 21 has an invalid length. [ 94.589974][ T8565] netlink: 'syz.1.760': attribute type 1 has an invalid length. [ 94.600708][ T8565] 8021q: adding VLAN 0 to HW filter on device bond4 [ 94.612067][ T8565] vlan2: entered allmulticast mode [ 94.616081][ T8565] macsec0: entered allmulticast mode [ 94.618452][ T8565] veth1_macvtap: entered allmulticast mode [ 94.621713][ T8565] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 94.637901][ T8566] vlan2: entered allmulticast mode [ 94.640743][ T8566] bond4: (slave vlan2): Error -34 calling dev_set_mtu [ 94.784824][ T8575] bond0: (slave nr0): Error: Device can not be enslaved while up [ 95.422365][ T5941] Bluetooth: hci3: unexpected event for opcode 0x0c7b [ 95.444375][ T8598] ip6t_srh: unknown srh match flags 4015 [ 95.523950][ T8601] __nla_validate_parse: 9 callbacks suppressed [ 95.523970][ T8601] netlink: 32 bytes leftover after parsing attributes in process `syz.0.771'. [ 95.585874][ T8604] SELinux: Context system_u:object_r:dhcpd_initrc_exec_t:s0 is not valid (left unmapped). [ 95.974264][ T8616] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 96.137930][ T8634] syz.1.780 (8634): drop_caches: 0 [ 96.221721][ T8636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.782'. [ 96.496967][ T8652] can: request_module (can-proto-3) failed. [ 96.519528][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.790'. [ 96.523277][ T8655] netlink: 24 bytes leftover after parsing attributes in process `syz.3.790'. [ 96.533556][ T5941] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 96.590709][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.594051][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.598181][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.601245][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.604264][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.607835][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.610973][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.614075][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.617931][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.621949][ T10] hid-generic 0005:00B6:0009.0003: unknown main item tag 0x0 [ 96.671261][ T10] hid-generic 0005:00B6:0009.0003: hidraw0: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 96.688590][ T1148] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.726355][ T8677] fido_id[8677]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.782610][ T1148] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.782840][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 96.782857][ T40] audit: type=1400 audit(1774514475.518:4588): avc: denied { execute } for pid=8678 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.799922][ T40] audit: type=1400 audit(1774514475.518:4589): avc: denied { execute_no_trans } for pid=8678 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 96.859554][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.798'. [ 96.879407][ T5938] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 96.881113][ T40] audit: type=1400 audit(1774514475.618:4590): avc: denied { setopt } for pid=8683 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.884013][ T5938] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 96.895073][ T5938] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 96.899209][ T5938] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 96.909618][ T5938] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.913750][ T1148] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.938893][ T40] audit: type=1400 audit(1774514475.668:4591): avc: denied { mounton } for pid=8688 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 96.999001][ T1148] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.051196][ T8701] netlink: 'syz.3.803': attribute type 15 has an invalid length. [ 97.051224][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 97.056187][ T60] netdevsim netdevsim3 : set [0, 1] type 1 family 0 port 2816 - 0 [ 97.056257][ T6775] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0 [ 97.056358][ T6775] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0 [ 97.056378][ T6775] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0 [ 97.056420][ T8701] netlink: 'syz.3.803': attribute type 15 has an invalid length. [ 97.056440][ T8701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.803'. [ 97.084441][ T40] audit: type=1400 audit(1774514475.818:4592): avc: denied { mount } for pid=8703 comm="syz.3.804" name="/" dev="hugetlbfs" ino=24898 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 97.124221][ T40] audit: type=1400 audit(1774514475.858:4593): avc: denied { write } for pid=8705 comm="syz.1.805" lport=57865 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 97.214346][ T1148] bridge_slave_1: left allmulticast mode [ 97.218232][ T1148] bridge_slave_1: left promiscuous mode [ 97.222984][ T1148] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.228967][ T1148] bridge_slave_0: left allmulticast mode [ 97.230854][ T1148] bridge_slave_0: left promiscuous mode [ 97.233781][ T1148] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.353940][ T1148] bond2 (unregistering): (slave gretap1): Releasing backup interface [ 97.592026][ T1148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.598111][ T1148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.603235][ T1148] bond0 (unregistering): Released all slaves [ 97.610851][ T1148] bond1 (unregistering): Released all slaves [ 97.621795][ T1148] bond2 (unregistering): Released all slaves [ 97.632590][ T1148] bond3 (unregistering): Released all slaves [ 97.715848][ T8688] chnl_net:caif_netlink_parms(): no params data found [ 97.780638][ T8734] netlink: 'syz.0.811': attribute type 3 has an invalid length. [ 97.780768][ T8739] netlink: 112 bytes leftover after parsing attributes in process `syz.3.812'. [ 97.785591][ T8734] netlink: 'syz.0.811': attribute type 1 has an invalid length. [ 97.828214][ T8688] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.830610][ T8688] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.833066][ T8688] bridge_slave_0: entered allmulticast mode [ 97.836024][ T8688] bridge_slave_0: entered promiscuous mode [ 97.919694][ T8688] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.926181][ T8688] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.927497][ T40] audit: type=1400 audit(1774514476.668:4594): avc: denied { write } for pid=8747 comm="syz.3.814" path="socket:[22501]" dev="sockfs" ino=22501 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 97.930744][ T8688] bridge_slave_1: entered allmulticast mode [ 97.931177][ T8748] Bluetooth: MGMT ver 1.23 [ 97.947107][ T8688] bridge_slave_1: entered promiscuous mode [ 97.994968][ T8688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.003904][ T8688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.040413][ T8688] team0: Port device team_slave_0 added [ 98.045185][ T8688] team0: Port device team_slave_1 added [ 98.073172][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.075911][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.086539][ T8688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.094080][ T8688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.097034][ T8688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.107635][ T8688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.163281][ T8688] hsr_slave_0: entered promiscuous mode [ 98.166871][ T8688] hsr_slave_1: entered promiscuous mode [ 98.169776][ T8688] debugfs: 'hsr0' already exists in 'hsr' [ 98.172029][ T8688] Cannot create hsr debugfs directory [ 98.275386][ T1148] hsr_slave_0: left promiscuous mode [ 98.278208][ T1148] hsr_slave_1: left promiscuous mode [ 98.281148][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.284299][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.288721][ T1148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.291804][ T1148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.301952][ T1148] veth1_macvtap: left promiscuous mode [ 98.304334][ T1148] veth0_macvtap: left promiscuous mode [ 98.306768][ T1148] veth1_vlan: left promiscuous mode [ 98.308914][ T1148] veth0_vlan: left promiscuous mode [ 98.408472][ T1148] pim6reg (unregistering): left allmulticast mode [ 98.515903][ T1148] team0 (unregistering): Port device team_slave_1 removed [ 98.540069][ T1148] team0 (unregistering): Port device team_slave_0 removed [ 98.571617][ T8765] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 98.793933][ T8784] netlink: 'syz.1.822': attribute type 11 has an invalid length. [ 98.955590][ T8688] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.962025][ T8688] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.968479][ T8688] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.979500][ T8688] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.016313][ T5941] Bluetooth: hci3: command tx timeout [ 99.037213][ T8688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.048101][ T8688] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.058645][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.061479][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.064974][ T6770] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.067243][ T6770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.103679][ T8688] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.225559][ T8688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.282771][ T8827] fuse: Bad value for 'fd' [ 99.372983][ T40] audit: type=1400 audit(1774514478.108:4595): avc: denied { bind } for pid=8837 comm="syz.3.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.393615][ T40] audit: type=1400 audit(1774514478.128:4596): avc: denied { ioctl } for pid=8837 comm="syz.3.832" path="socket:[23426]" dev="sockfs" ino=23426 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.401467][ T8688] veth0_vlan: entered promiscuous mode [ 99.422213][ T8688] veth1_vlan: entered promiscuous mode [ 99.444665][ T8688] veth0_macvtap: entered promiscuous mode [ 99.449779][ T8688] veth1_macvtap: entered promiscuous mode [ 99.465146][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.473832][ T8688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.481159][ T60] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.484842][ T60] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.489462][ T60] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.493925][ T60] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.556782][ T40] audit: type=1326 audit(1774514478.298:4597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8842 comm="syz.3.833" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdde039c799 code=0x0 [ 99.636975][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.640475][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.664068][ T8849] evm: overlay not supported [ 99.664282][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.671863][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.693348][ T8846] "syz.0.834" (8846) uses obsolete ecb(arc4) skcipher [ 99.752292][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.835'. [ 99.755849][ T8858] netlink: 'syz.0.835': attribute type 7 has an invalid length. [ 99.770646][ T8865] netlink: 'syz.0.835': attribute type 7 has an invalid length. [ 99.998342][ T8875] openvswitch: netlink: IP tunnel TTL not specified. [ 100.551072][ T8913] overlayfs: failed lookup in lower (newroot/194, name='bus', err=-40): overlapping layers [ 100.597442][ T8920] erspan2: entered promiscuous mode [ 100.603607][ T8919] __nla_validate_parse: 5 callbacks suppressed [ 100.603619][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.852'. [ 100.648439][ T8923] netlink: 16 bytes leftover after parsing attributes in process `syz.0.853'. [ 100.666620][ T8925] IPv6: NLM_F_CREATE should be specified when creating new route [ 100.694584][ T8925] fuse: blksize only supported for fuseblk [ 100.781814][ T8933] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.856'. [ 101.345597][ T8974] ip6tnl0: Caught tx_queue_len zero misconfig [ 101.895148][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 101.895165][ T40] audit: type=1400 audit(1774514480.628:4610): avc: denied { create } for pid=8996 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.899358][ T39] IPVS: starting estimator thread 0... [ 101.906411][ T8997] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 101.908277][ T40] audit: type=1400 audit(1774514480.638:4611): avc: denied { setopt } for pid=8996 comm="syz.4.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 101.915272][ T40] audit: type=1400 audit(1774514480.648:4612): avc: denied { ioctl } for pid=8999 comm="syz.0.875" path="socket:[27003]" dev="sockfs" ino=27003 ioctlcmd=0x9425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 102.017184][ T8998] IPVS: using max 42 ests per chain, 100800 per kthread [ 102.018031][ T9014] netlink: 16 bytes leftover after parsing attributes in process `syz.4.880'. [ 102.136100][ T40] audit: type=1400 audit(1774514480.868:4613): avc: denied { append } for pid=9023 comm="syz.0.883" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 102.206153][ T5938] Bluetooth: hci3: command tx timeout [ 102.218521][ T9028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.885'. [ 102.333956][ T9047] openvswitch: netlink: EtherType 50a is less than min 600 [ 102.335177][ T9046] netlink: 28 bytes leftover after parsing attributes in process `syz.4.891'. [ 102.341495][ T9046] netlink: 'syz.4.891': attribute type 7 has an invalid length. [ 102.344840][ T9046] netlink: 'syz.4.891': attribute type 8 has an invalid length. [ 102.346589][ T5997] IPVS: starting estimator thread 0... [ 102.349788][ T9046] netlink: 4 bytes leftover after parsing attributes in process `syz.4.891'. [ 102.361441][ T9046] erspan0: entered promiscuous mode [ 102.364619][ T9046] gretap0: entered promiscuous mode [ 102.369136][ T9046] erspan0: left promiscuous mode [ 102.373243][ T9046] gretap0: left promiscuous mode [ 102.393810][ T40] audit: type=1400 audit(1774514481.128:4614): avc: denied { mounton } for pid=9054 comm="syz.0.893" path="/syzcgroup/unified/syz0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 102.404705][ T5938] Bluetooth: hci0: unexpected event for opcode 0x041b [ 102.456122][ T9050] IPVS: using max 39 ests per chain, 93600 per kthread [ 102.649744][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.4.898'. [ 103.006133][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.006321][ T5938] Bluetooth: hci4: command 0x1003 tx timeout [ 103.157383][ T9108] netlink: 'syz.1.908': attribute type 39 has an invalid length. [ 103.332297][ T9112] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 103.335729][ T40] audit: type=1400 audit(1774514482.068:4615): avc: denied { connect } for pid=9111 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.386509][ T40] audit: type=1400 audit(1774514482.128:4616): avc: denied { shutdown } for pid=9111 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.508898][ T9126] netlink: 'syz.0.914': attribute type 1 has an invalid length. [ 103.539367][ T9133] bridge_slave_1: left allmulticast mode [ 103.541903][ T9133] bridge_slave_1: left promiscuous mode [ 103.544518][ T9133] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.553932][ T9133] bridge_slave_0: left allmulticast mode [ 103.555888][ T9133] bridge_slave_0: left promiscuous mode [ 103.560050][ T9133] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.605621][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 103.707210][ T9143] Invalid argument reading file caps for ./file0 [ 103.862372][ T9156] Bluetooth: MGMT ver 1.23 [ 104.039024][ T24] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 104.166058][ T24] usb 6-1: device descriptor read/64, error -71 [ 104.278684][ T9169] openvswitch: netlink: IP tunnel dst address not specified [ 104.286117][ T5941] Bluetooth: hci3: command tx timeout [ 104.339945][ T9172] openvswitch: netlink: IP tunnel dst address not specified [ 104.410422][ T9174] netlink: 12 bytes leftover after parsing attributes in process `syz.3.932'. [ 104.421495][ T24] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 104.435159][ T9181] netlink: 'syz.4.933': attribute type 1 has an invalid length. [ 104.458361][ T9181] bond1: entered promiscuous mode [ 104.461070][ T9181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 104.499680][ T9181] bond1: (slave bridge1): making interface the new active one [ 104.502637][ T9181] bridge1: entered promiscuous mode [ 104.505406][ T9181] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 104.566116][ T24] usb 6-1: device descriptor read/64, error -71 [ 104.618581][ T9196] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 104.618598][ T9196] netlink: 'syz.3.938': attribute type 2 has an invalid length. [ 104.677066][ T24] usb usb6-port1: attempt power cycle [ 104.701631][ T9207] netlink: 'syz.3.942': attribute type 2 has an invalid length. [ 105.028657][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 105.043222][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 105.047201][ T24] usb 6-1: device descriptor read/8, error -71 [ 105.072529][ T9224] 9p: Invalid uid '0x00000000ffffffff' [ 105.233502][ T9235] netlink: 'syz.0.949': attribute type 10 has an invalid length. [ 105.297801][ T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 105.328190][ T24] usb 6-1: device descriptor read/8, error -71 [ 105.343734][ T9246] fuse: Bad value for 'fd' [ 105.384534][ T40] audit: type=1400 audit(1774514484.118:4617): avc: denied { watch watch_reads } for pid=9245 comm="syz.3.956" path="/proc/773" dev="proc" ino=26460 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 105.446632][ T24] usb usb6-port1: unable to enumerate USB device [ 105.455266][ T40] audit: type=1326 audit(1774514484.188:4618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9254 comm="syz.4.959" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9d9359c799 code=0x0 [ 105.474279][ T40] audit: type=1400 audit(1774514484.208:4619): avc: denied { mounton } for pid=9256 comm="syz.3.960" path="/proc/777/task" dev="proc" ino=28267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 105.628143][ T9267] xt_bpf: check failed: parse error [ 105.663493][ T9269] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 105.673909][ T9269] fuse: Unknown parameter '&QaO8W' [ 105.832402][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 105.892247][ T9289] vlan1: entered promiscuous mode [ 105.894031][ T9289] hsr_slave_1: entered promiscuous mode [ 105.896322][ T9289] vlan1: entered allmulticast mode [ 105.898887][ T9289] hsr_slave_1: entered allmulticast mode [ 105.905891][ T9289] dummy0: Caught tx_queue_len zero misconfig [ 105.993453][ T9294] __nla_validate_parse: 4 callbacks suppressed [ 105.993465][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.970'. [ 106.101342][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.0.971'. [ 106.128319][ T9298] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=515 sclass=netlink_route_socket pid=9298 comm=syz.0.971 [ 106.151222][ T9298] xt_CT: No such helper "pptp" [ 106.339415][ T9305] netlink: 35808 bytes leftover after parsing attributes in process `syz.4.973'. [ 106.429130][ T9308] openvswitch: netlink: IPv6 tunnel dst address is zero [ 106.436245][ T50] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 106.512502][ T9317] /dev/nullb0: Can't lookup blockdev [ 106.596268][ T50] usb 5-1: Using ep0 maxpacket: 8 [ 106.600583][ T50] usb 5-1: config 1 has an invalid interface number: 175 but max is 0 [ 106.605844][ T50] usb 5-1: config 1 has no interface number 0 [ 106.608714][ T50] usb 5-1: config 1 interface 175 altsetting 8 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 106.613123][ T50] usb 5-1: config 1 interface 175 has no altsetting 0 [ 106.620239][ T50] usb 5-1: New USB device found, idVendor=19d2, idProduct=000b, bcdDevice= c.6e [ 106.623950][ T50] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.627768][ T50] usb 5-1: Product: 䘈峈㪿ᘂ窭䎲࣭䶙ᩌﵣ쭃鶠秤禸ⲝ⯗᧣뼺ژ線蚜쟒꠰唔왪쪝↻셡谄⹺৛鯹촹 [ 106.633054][ T50] usb 5-1: Manufacturer: ဝ馥夬ⱹуｚ⍈䤹碢稫ᜑ䳪应蒐ᜪ䂺쀩띣ᬭ紛蟰㒰�䍨ৈᑎ벋䃳쇈ꇑ瞳喔堡▯㷊䌺ﾡ륣ठ⧟挦㍠箴昗᫐兲楀ᔠ斊泠狂鷦 [ 106.641882][ T50] usb 5-1: SerialNumber: syz [ 106.662078][ T9337] netlink: 36 bytes leftover after parsing attributes in process `syz.3.984'. [ 106.754365][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 106.807665][ T9354] program syz.4.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.846174][ T5941] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 106.859407][ T50] option 5-1:1.175: GSM modem (1-port) converter detected [ 106.865161][ T50] usb 5-1: USB disconnect, device number 4 [ 106.882684][ T50] option 5-1:1.175: device disconnected [ 106.948073][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 106.971130][ T9374] Driver unsupported XDP return value 0 on prog (id 137) dev N/A, expect packet loss! [ 106.977819][ T9374] batadv_slave_1: Caught tx_queue_len zero misconfig [ 106.980565][ T9374] openvswitch: netlink: Missing valid actions attribute. [ 106.982977][ T9374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.012540][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.999'. [ 107.101319][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.108632][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.136455][ T9394] veth1_macvtap: left allmulticast mode [ 107.152053][ T9394] tipc: Resetting bearer [ 107.155016][ T9394] syzkaller0: left promiscuous mode [ 107.157594][ T9394] syzkaller0: left allmulticast mode [ 107.160300][ T9394] macsec1: left promiscuous mode [ 107.162256][ T9394] macsec1: left allmulticast mode [ 107.165066][ T9394] bond3: left promiscuous mode [ 107.167678][ T9394] erspan1: left promiscuous mode [ 107.169907][ T9394] bond3: left allmulticast mode [ 107.174186][ T9394] erspan1: left allmulticast mode [ 107.182163][ T9394] erspan2: left promiscuous mode [ 107.186763][ T60] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.189843][ T60] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.192621][ T60] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.196859][ T60] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.276210][ T50] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 107.408033][ T9404] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1003'. [ 107.458356][ T50] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 107.462302][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 107.467248][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 107.471802][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 107.479479][ T50] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 107.482449][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.487343][ T50] usb 9-1: config 0 descriptor?? [ 107.494451][ T9390] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.918035][ T50] plantronics 0003:047F:FFFF.0004: collection stack underflow [ 107.926013][ T50] plantronics 0003:047F:FFFF.0004: item 0 0 0 12 parsing failed [ 107.928732][ T50] plantronics 0003:047F:FFFF.0004: parse failed [ 107.930763][ T50] plantronics 0003:047F:FFFF.0004: probe with driver plantronics failed with error -22 [ 107.941470][ T9419] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 107.955281][ T9419] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1008'. [ 107.993632][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 107.993645][ T40] audit: type=1400 audit(1774514486.728:4625): avc: denied { ioctl } for pid=9418 comm="syz.1.1008" path="socket:[28926]" dev="sockfs" ino=28926 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 108.108653][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 108.267689][ T9427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.270780][ T9427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.276650][ T9390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.279392][ T9390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.418199][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 108.566420][ T24] usb 6-1: Using ep0 maxpacket: 8 [ 108.572281][ T24] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.598138][ T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.601890][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 108.608287][ T40] audit: type=1400 audit(1774514487.348:4626): avc: denied { read } for pid=9428 comm="syz.3.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 108.616083][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 108.621409][ T24] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 108.625288][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.666687][ T24] hub 6-1:1.0: bad descriptor, ignoring hub [ 108.668575][ T24] hub 6-1:1.0: probe with driver hub failed with error -5 [ 108.671107][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 108.675126][ T24] cdc_wdm 6-1:1.0: skipping garbage [ 108.684658][ T24] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 108.687784][ T24] cdc_wdm 6-1:1.0: Unknown control protocol [ 108.731058][ T9443] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1014'. [ 108.765734][ T9445] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1015'. [ 108.865041][ T9451] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 108.966871][ T5997] usb 6-1: USB disconnect, device number 10 [ 109.088122][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 109.328505][ T9479] fuse: Bad value for 'fd' [ 109.330770][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1027'. [ 109.330897][ T9479] fuse: Bad value for 'fd' [ 109.334458][ T9483] netlink: 'syz.3.1027': attribute type 3 has an invalid length. [ 109.334497][ T9483] netlink: 'syz.3.1027': attribute type 2 has an invalid length. [ 109.344843][ T9479] fuse: Bad value for 'fd' [ 109.347737][ T9479] fuse: Bad value for 'fd' [ 109.350019][ T9479] fuse: Bad value for 'fd' [ 109.352257][ T9479] fuse: Bad value for 'fd' [ 109.354531][ T9479] fuse: Bad value for 'fd' [ 109.357105][ T9479] fuse: Bad value for 'fd' [ 109.359994][ T9479] fuse: Bad value for 'fd' [ 109.362301][ T9479] fuse: Bad value for 'fd' [ 109.364226][ T9479] fuse: Bad value for 'fd' [ 109.365934][ T9479] fuse: Bad value for 'fd' [ 109.367734][ T9479] fuse: Bad value for 'fd' [ 109.369411][ T9479] fuse: Bad value for 'fd' [ 109.371292][ T9479] fuse: Bad value for 'fd' [ 109.373906][ T9479] fuse: Bad value for 'fd' [ 109.376670][ T9479] fuse: Bad value for 'fd' [ 109.379163][ T9479] fuse: Bad value for 'fd' [ 109.381420][ T9479] fuse: Bad value for 'fd' [ 109.383531][ T9479] fuse: Bad value for 'fd' [ 109.385616][ T9479] fuse: Bad value for 'fd' [ 109.388454][ T9479] fuse: Bad value for 'fd' [ 109.390670][ T9479] fuse: Bad value for 'fd' [ 109.392773][ T9479] fuse: Bad value for 'fd' [ 109.394839][ T9479] fuse: Bad value for 'fd' [ 109.397561][ T9479] fuse: Bad value for 'fd' [ 109.400980][ T9479] fuse: Bad value for 'fd' [ 109.403146][ T9479] fuse: Bad value for 'fd' [ 109.405653][ T9479] fuse: Bad value for 'fd' [ 109.408121][ T9479] fuse: Bad value for 'fd' [ 109.410387][ T9479] fuse: Bad value for 'fd' [ 109.412608][ T9479] fuse: Bad value for 'fd' [ 109.414905][ T9479] fuse: Bad value for 'fd' [ 109.513014][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 109.904942][ T40] audit: type=1400 audit(1774514488.638:4627): avc: denied { mounton } for pid=9519 comm="syz.1.1039" path="/222/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 110.089110][ T5996] usb 9-1: USB disconnect, device number 2 [ 110.157188][ T9548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9548 comm=syz.0.1047 [ 110.161728][ T9551] netlink: 'syz.3.1049': attribute type 1 has an invalid length. [ 110.165334][ T9551] netlink: 'syz.3.1049': attribute type 4 has an invalid length. [ 110.167714][ T9548] raw_sendmsg: syz.0.1047 forgot to set AF_INET. Fix it! [ 110.176405][ T9548] netlink: 'syz.0.1047': attribute type 1 has an invalid length. [ 110.209987][ T9546] netlink: 'syz.4.1048': attribute type 3 has an invalid length. [ 110.312134][ T40] audit: type=1800 audit(1774514489.048:4628): pid=9563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1051" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 110.328709][ T9563] overlayfs: conflicting options: nfs_export=on,index=off [ 110.996908][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 111.146661][ T54] usb 5-1: Using ep0 maxpacket: 16 [ 111.150855][ T54] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 111.154513][ T54] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 111.160801][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 111.167178][ T54] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 111.171124][ T54] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.177811][ T54] usb 5-1: config 0 descriptor?? [ 111.184042][ T54] pxrc 5-1:0.0: Could not find endpoint [ 111.188074][ T54] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 111.386305][ T50] usb 5-1: USB disconnect, device number 5 [ 111.401473][ T9587] __nla_validate_parse: 6 callbacks suppressed [ 111.401485][ T9587] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1059'. [ 111.658273][ T9606] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1061'. [ 111.661310][ T9606] unsupported nlmsg_type 40 [ 111.782180][ T9615] netlink: 1328 bytes leftover after parsing attributes in process `syz.3.1064'. [ 111.971060][ T40] audit: type=1400 audit(1774514490.708:4629): avc: denied { accept } for pid=9629 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 112.019696][ T40] audit: type=1400 audit(1774514490.758:4630): avc: denied { bind } for pid=9633 comm="syz.4.1070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.030046][ T40] audit: type=1326 audit(1774514490.768:4631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9631 comm="syz.3.1071" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdde039c799 code=0x0 [ 112.047426][ T9619] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 112.050098][ T9618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.095837][ T9643] netlink: 'syz.4.1073': attribute type 1 has an invalid length. [ 112.113857][ T9643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.126180][ T9643] 8021q: adding VLAN 0 to HW filter on device bond2 [ 112.128657][ T9643] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 112.133963][ T9643] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 112.182732][ T9646] ip6erspan0: entered promiscuous mode [ 112.187500][ T9646] bond2: (slave ip6erspan0): making interface the new active one [ 112.190458][ T9646] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 112.287656][ T40] audit: type=1400 audit(1774514491.028:4632): avc: denied { name_bind } for pid=9651 comm="syz.4.1076" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 112.295159][ T40] audit: type=1400 audit(1774514491.028:4633): avc: denied { listen } for pid=9651 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 112.302455][ T40] audit: type=1400 audit(1774514491.028:4634): avc: denied { listen } for pid=9651 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 112.383666][ T9655] ip6gretap1: entered promiscuous mode [ 112.385792][ T9655] ip6gretap1: entered allmulticast mode [ 112.426689][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 112.647680][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 112.746181][ T6105] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 112.917285][ T6105] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 112.920636][ T6105] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.923959][ T6105] usb 9-1: Product: syz [ 112.925924][ T6105] usb 9-1: Manufacturer: syz [ 112.933126][ T6105] usb 9-1: SerialNumber: syz [ 112.941654][ T6105] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 112.959726][ T5998] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 112.999667][ T9675] /dev/nbd3: Can't lookup blockdev [ 113.079802][ T9678] xt_hashlimit: size too large, truncated to 1048576 [ 113.204522][ T9682] /dev/sr0: Can't lookup blockdev [ 113.591651][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 113.591668][ T40] audit: type=1400 audit(1774514492.328:4636): avc: denied { getopt } for pid=9707 comm="syz.3.1093" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 113.722279][ T9706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.737946][ T9706] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.748740][ T5941] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 113.789499][ T40] audit: type=1400 audit(1774514492.528:4637): avc: denied { connect } for pid=9724 comm="syz.0.1099" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 113.856459][ T841] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 113.920994][ T40] audit: type=1400 audit(1774514492.658:4638): avc: denied { create } for pid=9736 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.928817][ T40] audit: type=1400 audit(1774514492.668:4639): avc: denied { ioctl } for pid=9736 comm="syz.3.1102" path="socket:[31049]" dev="sockfs" ino=31049 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.937733][ T40] audit: type=1400 audit(1774514492.668:4640): avc: denied { bind } for pid=9736 comm="syz.3.1102" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 113.944115][ T40] audit: type=1400 audit(1774514492.668:4641): avc: denied { mounton } for pid=9738 comm="syz.0.1103" path="/proc/783/cgroup" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 113.969345][ T9740] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 113.969345][ T9740] program syz.0.1103 not setting count and/or reply_len properly [ 113.976216][ T5998] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 113.979957][ T5998] ath9k_htc: Failed to initialize the device [ 113.987011][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 113.992481][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1104'. [ 114.008537][ T5998] usb 9-1: ath9k_htc: USB layer deinitialized [ 114.018229][ T5998] usb 9-1: USB disconnect, device number 3 [ 114.019006][ T841] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.031572][ T841] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 114.034750][ T841] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.038199][ T841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.049642][ T9711] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 114.063999][ T841] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 114.163925][ T9760] bond4: ARP target 9.0.0.0 is already present [ 114.167817][ T9760] bond4: option arp_ip_target: invalid value (9) [ 114.169403][ T40] audit: type=1400 audit(1774514492.908:4642): avc: denied { setattr } for pid=9757 comm="syz.0.1107" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 114.182014][ T9760] bond4 (unregistering): Released all slaves [ 114.281171][ T9711] support for cryptoloop has been removed. Use dm-crypt instead. [ 114.323655][ T54] usb 6-1: USB disconnect, device number 11 [ 114.523443][ T9782] fuse: Bad value for 'fd' [ 114.609818][ T9796] MTD: Couldn't look up '/dev/nullb0': -13 [ 114.908027][ T9827] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.913809][ T9828] netlink: 'syz.1.1127': attribute type 10 has an invalid length. [ 114.918879][ T9828] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1127'. [ 114.963429][ T9833] IPVS: set_ctl: invalid protocol: 92 0.0.0.0:2 [ 114.980468][ T9838] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 115.027707][ T9846] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1131'. [ 115.058270][ T40] audit: type=1400 audit(1774514493.798:4643): avc: denied { shutdown } for pid=9847 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.123720][ T40] audit: type=1400 audit(1774514493.858:4644): avc: denied { getopt } for pid=9852 comm="syz.0.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 115.136308][ T50] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 115.297712][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.306230][ T50] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.312895][ T50] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.320067][ T50] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.323290][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.332600][ T50] usb 9-1: config 0 descriptor?? [ 115.336711][ C2] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 115.337968][ T9883] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1141'. [ 115.369851][ T9883] bond6 (unregistering): Released all slaves [ 115.548633][ T50] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 115.568748][ T50] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 115.701462][ T9889] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1143'. [ 115.720203][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 115.757006][ T9908] netlink: 'syz.0.1148': attribute type 1 has an invalid length. [ 115.765072][ T9912] kAFS: unable to lookup cell '1' [ 115.822392][ T9825] comedi comedi4: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 115.828143][ T9811] comedi comedi4: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 115.841467][ T5998] usb 9-1: USB disconnect, device number 4 [ 115.900620][ T9925] xfrm1: entered promiscuous mode [ 115.902570][ T9925] xfrm1: entered allmulticast mode [ 115.956448][ T40] audit: type=1400 audit(1774514494.698:4645): avc: denied { listen } for pid=9926 comm="syz.0.1153" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 116.265826][ T9933] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 116.272261][ T5941] Bluetooth: hci0: unknown advertising packet type: 0x62 [ 116.272331][ T5941] Bluetooth: hci0: Malformed LE Event: 0x02 [ 116.304634][ T9930] fuse: Bad value for 'fd' [ 116.311718][ T9936] netlink: 'syz.1.1156': attribute type 11 has an invalid length. [ 116.436377][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 116.600031][ T9964] openvswitch: netlink: IP tunnel TTL not specified. [ 132.388862][ T9971] __nla_validate_parse: 5 callbacks suppressed [ 132.388881][ T9971] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1166'. [ 132.428253][ T9981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.486173][ T9989] 9pnet: Found fid 0 not clunked [ 132.490066][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 132.490080][ T40] audit: type=1400 audit(1774514511.228:4647): avc: denied { create } for pid=9986 comm="syz.3.1172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 132.491969][ T9993] netlink: 'syz.1.1174': attribute type 10 has an invalid length. [ 132.497949][ T40] audit: type=1400 audit(1774514511.238:4648): avc: denied { read write } for pid=9986 comm="syz.3.1172" name="file0" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.522155][ T40] audit: type=1400 audit(1774514511.258:4649): avc: denied { open } for pid=9986 comm="syz.3.1172" path="/368/file0/file0" dev="9p" ino=71827647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 132.549084][ T9997] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1175'. [ 132.588109][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1176'. [ 132.591333][T10001] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1176'. [ 132.594533][T10001] netlink: 'syz.1.1176': attribute type 11 has an invalid length. [ 132.598772][T10001] netlink: 'syz.1.1176': attribute type 7 has an invalid length. [ 132.608625][T10001] syz_tun: entered allmulticast mode [ 132.611529][T10001] 9pnet_fd: p9_fd_create_tcp (10001): problem binding to privport [ 132.615360][T10000] syz_tun: left allmulticast mode [ 132.654034][T10003] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1178'. [ 132.740352][ T40] audit: type=1400 audit(1774514511.478:4650): avc: denied { connect } for pid=10007 comm="syz.4.1180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.780111][T10012] /dev/nbd3: Can't lookup blockdev [ 132.794376][T10014] netlink: 180 bytes leftover after parsing attributes in process `syz.4.1181'. [ 132.893260][ T5941] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 132.958436][T10031] /dev/nullb0: Can't open blockdev [ 132.963107][ T40] audit: type=1804 audit(1774514511.698:4651): pid=10031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1188" name="/newroot/73/file1" dev="tmpfs" ino=396 res=1 errno=0 [ 133.260431][T10050] 9p: Unknown uid 00000000004294967295 [ 133.266518][ T40] audit: type=1400 audit(1774514511.998:4652): avc: denied { getopt } for pid=10048 comm="syz.0.1194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 133.296710][T10054] /dev/sg0: Can't lookup blockdev [ 133.353011][T10059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'. [ 133.380505][T10059] 8021q: adding VLAN 0 to HW filter on device bond6 [ 133.392456][T10058] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1196'. [ 133.417516][T10058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10058 comm=syz.4.1196 [ 133.526504][T10064] syzkaller0: entered promiscuous mode [ 133.529286][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1197'. [ 133.532087][T10064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1197'. [ 133.663127][ T5996] Process accounting resumed [ 133.670106][T10073] xt_policy: output policy not valid in PREROUTING and INPUT [ 133.672977][ T40] audit: type=1400 audit(1774514512.408:4653): avc: denied { append } for pid=10070 comm="syz.4.1199" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 133.710322][T10071] Process accounting resumed [ 134.133500][T10085] ------------[ cut here ]------------ [ 134.136735][T10085] enable_ept && !allow_smaller_maxphyaddr [ 134.136751][T10085] WARNING: arch/x86/kvm/vmx/vmx.c:5444 at handle_exception_nmi+0xa6e/0x1bb0, CPU#2: syz.1.1206/10085 [ 134.144931][T10085] Modules linked in: [ 134.147928][T10085] CPU: 2 UID: 0 PID: 10085 Comm: syz.1.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.153941][T10085] Tainted: [L]=SOFTLOCKUP [ 134.156328][T10085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.161018][T10085] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 134.163926][T10085] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 134.174358][T10085] RSP: 0018:ffffc9000512f9d8 EFLAGS: 00010287 [ 134.177544][T10085] RAX: 0000000000015344 RBX: ffff88805ece5380 RCX: ffffc90007761000 [ 134.181304][T10085] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff8880357c4980 [ 134.182189][ T5941] Bluetooth: hci2: unexpected event for opcode 0x0c7b [ 134.185054][T10085] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 134.192495][T10085] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 134.196970][T10085] R13: 0000000000000000 R14: ffff88805a7b9000 R15: ffff88805ece5458 [ 134.200960][T10085] FS: 00007f41a6f336c0(0000) GS:ffff8880d653f000(0000) knlGS:0000000000000000 [ 134.205195][T10085] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.208833][T10085] CR2: 0000000000000000 CR3: 000000011dd57000 CR4: 0000000000352ef0 [ 134.212555][T10085] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000020 [ 134.216657][T10085] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 134.220571][T10085] Call Trace: [ 134.222152][T10085] [ 134.223577][T10085] ? __pfx_handle_exception_nmi+0x10/0x10 [ 134.226426][T10085] vmx_handle_exit+0x84d/0x1f40 [ 134.229001][T10085] vcpu_run+0x34cf/0x5ca0 [ 134.231469][T10085] ? __pfx_vcpu_run+0x10/0x10 [ 134.233893][T10085] ? rcu_is_watching+0x12/0xc0 [ 134.236546][T10085] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 134.239248][T10085] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 134.242001][T10085] kvm_vcpu_ioctl+0x730/0x1730 [ 134.244539][T10085] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.247312][T10085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.250156][T10085] ? do_vfs_ioctl+0x226/0x13e0 [ 134.252456][T10085] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.254959][T10085] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.259235][T10085] ? __fget_files+0x215/0x3d0 [ 134.261577][T10085] ? hook_file_ioctl_common+0x146/0x410 [ 134.263873][T10085] ? selinux_file_ioctl+0x139/0x290 [ 134.266722][T10085] ? selinux_file_ioctl+0xb4/0x290 [ 134.269188][T10085] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.271824][T10085] __x64_sys_ioctl+0x18e/0x210 [ 134.274237][T10085] do_syscall_64+0x106/0xf80 [ 134.277249][T10085] ? clear_bhb_loop+0x40/0x90 [ 134.279794][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.282700][T10085] RIP: 0033:0x7f41a5f9c799 [ 134.284943][T10085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.294921][T10085] RSP: 002b:00007f41a6f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.299900][T10085] RAX: ffffffffffffffda RBX: 00007f41a6215fa0 RCX: 00007f41a5f9c799 [ 134.303427][T10085] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 134.306310][T10085] RBP: 00007f41a6032c99 R08: 0000000000000000 R09: 0000000000000000 [ 134.308954][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.311776][T10085] R13: 00007f41a6216038 R14: 00007f41a6215fa0 R15: 00007ffdf2630058 [ 134.315297][T10085] [ 134.316573][T10085] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.319096][T10085] CPU: 2 UID: 0 PID: 10085 Comm: syz.1.1206 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.323141][T10085] Tainted: [L]=SOFTLOCKUP [ 134.324716][T10085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.328500][T10085] Call Trace: [ 134.329871][T10085] [ 134.331122][T10085] dump_stack_lvl+0x100/0x190 [ 134.332979][T10085] vpanic+0x552/0x970 [ 134.334455][T10085] ? __pfx_vpanic+0x10/0x10 [ 134.336057][T10085] panic+0xd1/0xe0 [ 134.337398][T10085] ? __pfx_panic+0x10/0x10 [ 134.339082][T10085] check_panic_on_warn.cold+0x19/0x34 [ 134.341140][T10085] ? handle_exception_nmi+0xa6e/0x1bb0 [ 134.343309][T10085] __warn.cold+0x191/0x348 [ 134.345430][T10085] __report_bug+0x296/0x3d0 [ 134.347826][T10085] ? handle_exception_nmi+0xa6e/0x1bb0 [ 134.351000][T10085] ? __pfx___report_bug+0x10/0x10 [ 134.353701][T10085] ? __pfx_skip_emulated_instruction+0x10/0x10 [ 134.356611][T10085] ? kvm_pmu_trigger_event.isra.0+0x789/0xc00 [ 134.359470][T10085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.362219][T10085] ? handle_exception_nmi+0xa6e/0x1bb0 [ 134.364708][T10085] report_bug+0xb2/0x220 [ 134.366638][T10085] ? handle_exception_nmi+0xa6e/0x1bb0 [ 134.369251][T10085] handle_bug+0x16a/0x2a0 [ 134.371403][T10085] exc_invalid_op+0x17/0x50 [ 134.373427][T10085] asm_exc_invalid_op+0x1a/0x20 [ 134.375915][T10085] RIP: 0010:handle_exception_nmi+0xa6e/0x1bb0 [ 134.378800][T10085] Code: 08 84 d2 0f 85 fd 10 00 00 44 0f b6 2d 96 e3 39 0f 31 ff 44 89 ee e8 a1 2b 69 00 45 84 ed 0f 85 b5 0e 00 00 e8 43 31 69 00 90 <0f> 0b 90 31 ff 44 89 e6 e8 e5 2b 69 00 45 85 e4 0f 85 7f 0b 00 00 [ 134.386168][T10085] RSP: 0018:ffffc9000512f9d8 EFLAGS: 00010287 [ 134.388295][T10085] RAX: 0000000000015344 RBX: ffff88805ece5380 RCX: ffffc90007761000 [ 134.391131][T10085] RDX: 0000000000080000 RSI: ffffffff819faffd RDI: ffff8880357c4980 [ 134.394016][T10085] RBP: 000000000f6632eb R08: 0000000000000001 R09: 0000000000000000 [ 134.397879][T10085] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 134.401685][T10085] R13: 0000000000000000 R14: ffff88805a7b9000 R15: ffff88805ece5458 [ 134.405113][T10085] ? handle_exception_nmi+0xa6d/0x1bb0 [ 134.407034][T10085] ? handle_exception_nmi+0xa6d/0x1bb0 [ 134.408981][T10085] ? __pfx_handle_exception_nmi+0x10/0x10 [ 134.411214][T10085] vmx_handle_exit+0x84d/0x1f40 [ 134.413152][T10085] vcpu_run+0x34cf/0x5ca0 [ 134.415046][T10085] ? __pfx_vcpu_run+0x10/0x10 [ 134.416745][T10085] ? rcu_is_watching+0x12/0xc0 [ 134.418578][T10085] ? kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 134.420747][T10085] kvm_arch_vcpu_ioctl_run+0x565/0x1830 [ 134.423204][T10085] kvm_vcpu_ioctl+0x730/0x1730 [ 134.425304][T10085] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.427707][T10085] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 134.430554][T10085] ? do_vfs_ioctl+0x226/0x13e0 [ 134.433135][T10085] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 134.436317][T10085] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 134.439908][T10085] ? __fget_files+0x215/0x3d0 [ 134.442111][T10085] ? hook_file_ioctl_common+0x146/0x410 [ 134.444834][T10085] ? selinux_file_ioctl+0x139/0x290 [ 134.447405][T10085] ? selinux_file_ioctl+0xb4/0x290 [ 134.449909][T10085] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 134.452483][T10085] __x64_sys_ioctl+0x18e/0x210 [ 134.455010][T10085] do_syscall_64+0x106/0xf80 [ 134.457489][T10085] ? clear_bhb_loop+0x40/0x90 [ 134.460013][T10085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.462833][T10085] RIP: 0033:0x7f41a5f9c799 [ 134.464995][T10085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.473878][T10085] RSP: 002b:00007f41a6f33028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 134.477510][T10085] RAX: ffffffffffffffda RBX: 00007f41a6215fa0 RCX: 00007f41a5f9c799 [ 134.480334][T10085] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 134.483108][T10085] RBP: 00007f41a6032c99 R08: 0000000000000000 R09: 0000000000000000 [ 134.486079][T10085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.489115][T10085] R13: 00007f41a6216038 R14: 00007f41a6215fa0 R15: 00007ffdf2630058 [ 134.492349][T10085] [ 134.494291][T10085] Kernel Offset: disabled [ 134.495831][T10085] Rebooting in 86400 seconds..