last executing test programs: 3.179963909s ago: executing program 1 (id=1496): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) (async) sendto(0xffffffffffffffff, &(0x7f00000000c0)="a724145674fdac", 0x7, 0x8000, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x80040, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000140)={0x80}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_SCHED_SCAN(r3, &(0x7f0000000780)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000240)={0x4f8, 0x0, 0x300, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x41c, 0x7d, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x43, 0x3, "0cee0ddcaa1b6fa9544ae69b5411d61c9136f13881a3403b76db3424bb89c4658122a22c0385178590f06f59e870d5c0b377a00ae3270356ab0664c092e9ca"}, @NL80211_BAND_2GHZ={0x8c, 0x0, "8612af3c28b5012ba91d76d60db9a5706f21d942d24672273267d1432a462364e04c2e038ba70fa8eb89f4778050fd4ea38f36ec9ff243730cb52b610ee25dceacd2ba007ba15fda6ff37e171cadfc7ea3a1a59c408bcde8207f8cbf4a69f7e91d838eda32ff2e145fde444c4389ad81c420c26c643934411f8520c5efe0757826786c5f4de635f7"}, @NL80211_BAND_60GHZ={0x44, 0x2, "b7ab4f84d7757733eb43dc9b68727005c1edf229f3a5ddcc928e1067e56503681d62e2158b00a4d9ce0609d0546e7dd612d8ca17720549fadbf0150efe26d307"}, @NL80211_BAND_6GHZ={0x4a, 0x3, "564e5f66b77cd8728118980f7e6021f3ad3b3ba285fa19fe5a1eea3895c0c4f86985640627dbd994a0a78362dae87c82c78d89e8cd45d8a6dcb99d189ea6870096270ee2aec5"}, @NL80211_BAND_5GHZ={0x5c, 0x1, "b93da082034d8242436980f737171d52aa4cc376957c0596d2bd714dd7dcac1815d028d5c8ef18abcdf84474539fd06a7e31c13ef36e10266af944346f25ab6a759b5521ee5ccd0e91d8a375f9193e050a205f36a3a0ad2a"}, @NL80211_BAND_2GHZ={0x91, 0x0, "a17beb9a31f97c1b22753f963b9356d1fe904ae2361b4bc41f887c525568fe6821e7ccea3c7db743a4e33ad41ed8052eb957bdf9d118b934408f3bba98b5551fc7221e8a8cfb03ea518a1a4e9fbc7781e5c2d90eb082be10df84117ddeec2c9dc298191e104c1c2385e082af9ba84a3e47fd4202689a639d3e24b13c89ec66957feabfa027f87c43f4b6c361a5"}, @NL80211_BAND_5GHZ={0xd5, 0x1, "f5b8fa2748c730a40d51c7b3b864b98747fbd1e6317b20b9ca5673163946d699f4b47bb728080b06a9eaa299631aa26930ddb4e5ee64756c9270e9ede1bfd41b6b7b2e3a88810276b62341941827577d2d6ee9f4f59aba44e1cf52ee15961b8b4ede286860840075631bcdbb1c7d1e513824eadeb34998b361007e1d5edc450b2187d0ebc08e2e2a6bf84976b39faa6205e3b1bcaa9f8e7bfb6a7116fae7c48972877d08842cc562c7946842fc18d7da4bd30317e8499f6e8007dc3e02a18c42e1f6f034372c700f3b138f9decfa0c3a46"}, @NL80211_BAND_6GHZ={0xee, 0x3, "77867c032de348111df194877f0866627ceb210cad0c2b392736a74666f62c4e8c97a28d5483f862ff4aa1cbd24a49fd8718d02341722c242f43fa02f40338dd3ea33325cf7b8e36ec608e51204698329d923dd88baf48c537bae862b7f3ca8e0620a745c0839caf622e28463949f48b5145271191714499bc98ee43bcc3714f474f5d00fb3131c6fe042e041003d8497f8106d018216e4f582bd0e275eaa3c76af55a53e4d86e286b15afb967e3491c5625aed75ac976f11533f74fc0036b5b266edf4ce9461e1edc2444d720cdd10a87c02fd997c1655c60df9375d9d693be9d053d8d82800223f83a"}]}, @NL80211_ATTR_SCAN_SSIDS={0xa8, 0x2d, 0x0, 0x1, [{0x23, 0x0, @random="7d8d2774da730b57ad6b074ace6a609b7c45ef7061b8c2887b843dccee7a6c"}, {0xa, 0x0, @default_ibss_ssid}, {0x15, 0x0, @random="9bc4273b6764e933f84e617ba786680924"}, {0xa, 0x0, @default_ibss_ssid}, {0x23, 0x0, @random="d5644c26d547a426350532dfc5b912d387495a1c8f5fc29113a755fcadab75"}, {0x1f, 0x0, @random="16d3ac8bc8a0544b00f6177cca900c0edb406e5b508a26a58a2e00"}, {0xa, 0x0, @random="89158f759215"}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xce}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0xf9}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x810}, 0x40000) (async, rerun: 32) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000900)={@rand_addr, 0x0}, &(0x7f0000000940)=0x14) (rerun: 32) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002f80)=0x0, &(0x7f0000002fc0)=0x4) sendmmsg$inet(r3, &(0x7f0000004b00)=[{{&(0x7f00000007c0)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000800)="8815eb56131eee2dddf0aa3e07fbd65dd70821b8d3f8a9ff9e535b1c256129ed5cc61829ea69c7462588aeae44c5339985d8d60094441d0046df4ad3221e636117f77fa73e04755313548683d777d0f6e94e69ca030624543e3f3406fb6549c447f4e810018cfa4ea8e9f7e47c7bdce194e49f60b572349e326f4ba0dd2eac1bbeffcfd620bc420aa33098e9842db3dc08a3060445e894410dd3c26fe7bb412c44a4136d1d6191d3a36ea6f155f8efd42c87d1be1af0fb910fb8", 0xba}], 0x1, &(0x7f0000000980)=[@ip_retopts={{0x6c, 0x0, 0x7, {[@timestamp={0x44, 0x28, 0x41, 0x0, 0x9, [0x1, 0xff, 0x80, 0x69b6, 0x8, 0x7, 0x3, 0x8000, 0x2]}, @rr={0x7, 0x1b, 0xdf, [@remote, @local, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @loopback, @multicast2]}, @noop, @lsrr={0x83, 0x17, 0xb5, [@local, @multicast2, @rand_addr=0x64010102, @multicast1, @rand_addr=0x64010100]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @loopback, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe7e}}], 0xc0}}, {{&(0x7f0000000a40)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000000a80)="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", 0x1000}, {&(0x7f0000001a80)="20fa3e792d3ed33b3f2e033d2cf3963a6be9b487c7e74ea44832cc7cdef213156ebaf086df48ba49eba6bed1b40f5f16d9e5b3346aadd4cc8e0c4befd2192b0906378a190486ca01ebff0a8ca029d682f79b364f619e599c906d7b35cce6409344c36973fca9fcc880b23fa26ece846beccb3c61ab722c4dc0833666d22628a5ecc14707a8eccaf00b8776692f9de8a09cfe315bf78e6aa4b7a8895cd83307433ab180c42f6169adcc64cc09c6ae175efe712bea18bfd282f24fccfbc69d0c574570cee008eb5ac0a2d3e0fdc4f673ff8b19d730b0", 0xd5}, {&(0x7f0000001b80)="a26509", 0x3}, {&(0x7f0000001bc0)="9b4d7c8db2dba506db2175845d3a34d5199270bc118afe29b4390884184de52e12c51647273859c36aaf55c7540d30737b3be49cb25330b9c67f6a0e30ec104e5ce2615963c31f603023df1c22421f3cd2025a5b5c0a4772b587ad0a5708e38e38255db5d8e374ce5def616ffb3a01bb1711cdb0ab7f1389cde484855ce04c6031cd7fb9ce8840b8929469107a283bc61650f4ed5bfe11311628958910e77ecd9104870f2398b1695b2a1c37ff782ee1708aa84e48812afa20cb5ff6275c6f8089bf039f7979a9822aebdb9d8df1a6dde2ecb1cfb7679e986912d10d78b000552b5f4c43f998e082fca51ece21b1c48f6cbbb8084dc6479b44f932ab8100a22932a112bd10264d50d2e2b88a6ed5a6f86036767fd3559c2496d3c6dbac08bdc762b8837185095645923185db4dc70cc8b14525ac3599b5a77c7d8190256cee6fd2134c07d8bc5ef0405ad0084a85ee2d1069fa49075e06389a400824c2e41ceaa5bcc627db89df791e4fe041917aa18faeca8a5526392b54b21dae6357ee37ce91370c0b2ad8bee7c40c1287c389d4e29a9db73341956f8e5ddbc6368c581a4edb840ae5733b46cc7a01ce535ac5f6dde46ae93a448d468536ea376727d19159eb76c133684d08f4fb0bcb6982c8854502815a39efdb18031fba5856d259d8e77127b01a42b3109b61e9c410b0e67e85c0172b88a5a40a0dd0bd295434f3d7ec34587cff10f6b2118b5081a814b19d8ac9cea0441907b4b8f58a8b41e74609ae3c9be7f64403b705d2623893e572b7d4256029ae5c9ec829c7858152d61364191ff6b6f48d3d8410681e50628dea62626f5d2d243888fa8cf3e2c0d9069797897b8cf6ac25ad64e25a0fc4665ff7b9367d1679d8b1dab294b327d3f98e77a8b455c512b28d80fc960307e502718862b30a75d4be5f5a9185672f1b4373d3d830c5fcf61af760f6a0b23cf8e879ac95ed5036df67f0bbaefc54280b265c3e542f024220c21db85ca375975933a1298da96bb8266db37bd6d6d98091274acf28b712823b28c12f94ab9789cad37f0d1fee3765140b1954e427c3f673d5f72eb4108948274f20570d6638ecf428cc62d54777dda7c5813af0d2dcea47a80484322749cd6e1abec28adfa3d02718338d24ec9bed6b9e5de29c2017a370b143e5c8e23471a422463d21c5cee653a3039aa3d0d4d7ff04bad4d9c9099acad2622f139504821b3d4a85d9cc6fac6d2eafad8ff8bff10cca02c1d1fab621eb716e1cbe1cee0087fee1081f45c5390221c09b3f5afa7b71474b4228791385970b6e5ff734c7577dad7abe4ad2df373766c96101e899bf46fe78fe9890e0bb60bbcd95973aa9175dbaf0cf35cc4c34699da1fdce02f98d9746fb490c0fc123fab021d9f81ee077c4514671629be3ec0754b11eb2c354cab57cbe31bef1875ebf572b9a5bfb72424b884760205f28924ace9aee0c997b73826cdd67dd445070541cfa5ebbc1bd39100f12892fecdea854c9708ac935a8a4065df5d6c6a999fc27fa710c7595134b08ae516e7dfd0adcb42097c26a89f960fa49c6514af182f73a8797db87d82951d70ffa6ce564198a42df8400badd64a4c73444ff3ecf57faed5475b85bcb93a6e850ceb9c7a45deeb4d1e326f1e47d17afe49daa31e7ca478cd93424b45f51b06ffe85d053909764e725f5d1c16792f47bb536754b3eb59f103efe60eb7c75906c6bacdce0f3a0a522c0b286cb145023ef0f94a364e9f41f2ef8154ab224c70b4024c7f8e01016a7266c38838c0394b43623abd8f6c9cbff2f7b28894f77bf4be4addcb5d1712d7f473804c087ac3152a93b43f65d748834b8a60dee1d0edb9b35a024390b52dba9a3f54588072779e4a6c38be95f086d70d09e999941dcb7e3ccc88c8a815d3264cfa70891faacfb27572202369541f47eb1ac4f4cd2f4d121b01ba0d4b782de772007ea6c22feb5d0165849eb3fc14f60334763b62703aad2be85f7cfdee1a07e1321e299a4f6b9fe4445336adadf48ce9ff7b6ac0826562139f621be6fffcd1dea8f73d7f5893750b529d25e9a5c2b62374a550966c5e9ad31c63b0f42baea22cdc0ec8d59aa6e815b6f2d7ed796148c1691dd71a3b914d822d018b4e92922f640ee9455a4ac9f39538c67ef71f395aeb395cb30b8545a1161b0e1f6aad5000265f9dd2972e937054a5dab7546b12d8e3b14ce9bfb31c48f0d9a0b78c2a9a9f2d259a4dcf1179c73e231ea3148cd75d65ac5cf3da7e79e3e35ed35ed8543f574c581bd4b5d95a66d5f8bf94b7b08bbf2bcfa41648c6dee47af9e822396bed33e4d4c9b5be64d67538d8d827d1908f332931a66a62ee037c6e029e279d81e6aa32aa4d12cebcfa7b12fb45bbd7877ddc779852d572fb842c2ad96b4b067e4bcfcef37b921350286506b00486cb0f1f708a5816bfaaf1eda0e5fb096b7c3b4e66e41bb4a0fe7cb6ab0e276c579df99b5d87643794759ed5057d22928f4223585c85df9b7ce5620d0c3bcbf7b499cb371afcf751249b4f55d0e37d95cba8009587dd4a8668d974a48d6c798262c355f7411416359c8a6e779a470f63a8b68e7564f4eee9b99af4b54b39fa13d6f61b6c8d7ebe8a35600b923dc97a929ca415f749c4293485c403b9cd462e1c52bb7504224f0ed0a0dc31ce18a1a3c41cabda888022ac0bbc910bebf9882f394df981ef28be45a3bb86ac2e99cf3b2c78dd0f4b19627d8a36dcda7c5de8a6b124282458e3a42c43d1308a3b37479bc3edc1baadcac6f811628042bdf99e4afcd49f25b636da93e848c150623366c0cd5ffef8e6917108fee8df965eff167a99cd57912141ab5a4717113919d2935da45a35a7f18c8fa59dc1d3e13eb959d059302d46a0324bf13a5bff5ad420abade7eea496ad15c3f434d08d3ec4612370a37f717ac6b8fc729b2cd5381f8799c03a868e71f8242d22df1b3721569d5139e7411227c736ce12b603e53c4237684b756269984ad09c57f3d48029ff27668ff999bbed70e27310ec301b09a4dfe8544d87000b853a71dcd177cf6fb222be8c5b1877cea37c317f95cb6fad54dcc328d6b57884110c5e589362ccf0635cbcedee3105a45cb0c5bf7154a556be6fbcbbf59978577ba53bb000f9aa9ae1013007307b9e5d79c99a7b1e5a395f3728f3867d36308c599b0ba449a6ada7c5ab1c4ee8aee07e2c0fc3277351c6e302cd01a492274f4e3b63fbe87d15d41bb43ccdd9097be1b3846914d28b00cd581d6982c51b6fbe79067f25b7935dbc17cfdad0a024a2edc417376deaa3efd26adfaa5c2cec2faabfe1aad4a12399999bd31dbf0617c87019df8f9854b754ba0c36c3bfe3c939647a744d06698fab65e2488e036ff01f2da0a337d7fd8c9f23d60ad2a50c5b91aa41655e2d0989b5b4bf8701496ab710dd075ca940b7796bd64709f932122511a6ed33a85b2b2920c024f88ed6e6ffdcd0e5119fbad89df37e5f3e3cd75f7a8256fcfe20e9fa4535686f24048dd90eb11e7c79caa40c60dd3b78a392a4f413ec4626ddac759637af661548bf482cc476b82fb517e0af5fd042cc3194d638b7c5ae3b978e8d4d5e402c4330eb63c2c8ca5ba821ef904fc9ada00f42fbd891c6db369f8e4b6126450b438b51abb48f99ba8564afe1031df054be1e5b269b9e00139bc45588306cd373762169f624f5ea43b0dc018d052bc834d2b36e666b53605d7061965f2526268b45f8c590941913f67004acc04e40c57ef63a02e42beb4ea4b5dac6772c0cce19cde8472e53587bcd0c610a51d0c8266eedc44720d173e14582c52b79cc2fd2b09d3cd45b33195347396e2401bb112f0e6d026c60da5c5969652bc5bdf7bebd1e2d7d8694ccc0e9266fd7ef7131d63a503f0d3f1c68cb501ecc93b6fba78584303ced9b522ef01c9baaf9931f1c0b61975cbaf21bd82ee24cfad93c037074121cd0b628fe72b479bd7a0afc5d4dfea203a6eab2fda7696c4111c74d5daf9149743891008303090d5538a06918c67f807e5a7aa4452221b5da36ef0fab855cb4ae0c73b96775844ce091c7d428bfb3be9a6688fe7b9ac71d3981fc3ffd6572319c5086e03c4f74df4210f4daab31a026f3e353625855bf78d27f8683d287e1ae7196b614e394409e2c68cd022451cffc9084ad92935b3f78268cee0bdef2f461cffac0d1f626f94c615f6254b3de73748cbcc400943f0c42c7b1bdbb2a6b3abc84e0a5806fc0da6b871a18539dab845dd0f428403ba118528377c5361c7acb9bef1fc61e88872fdc2d16194cf7a320e16a7746d6cd745401c388de91fe3a353c21cc5549c8f2d7fbb3321c78f6ec0e67807c0ee2f04dfd46c0ba782bd64783340a62daff30c6a61a7acd9b91f16a007e74ecec23b57726e5538c164cdebefe2ee6939339fc71f6a87df9ec06f05ae52d077a3e189fa02d59eb1c395661761df3eaeda764623e638168e1a3dbc04d3f2fd1aba372b8ce065005d19f403bd186ab7a7f450f16d7ef69fe371f6786f078365c9fe1ecb071946429f0ce554291254362c1ee93b789457328f28e6b00fabb39347369374d498746ccc2f5b179d9f50eba85726494ad52f2c2dc6e7e097b30b9b2cef399ac5b0f7f2151d08f8faa699e1bc93b56a3841ce56ee4721706d4a12a89b356e6fffc78656ef24193091775d18e975b9219d6c79b4b21ace05d0f6943992428b614154c4160def7ca60a5991c94fe02a3afb13723a6a8a9e96dbc81e37317a1e7580c26c4d71e74873986ee40bb52883e52a593b2805d2f3568ea10958b9185bf122b5433935725ff77646d01fdcd933c8b5419eac3e6089694601811aad5a0950bcb9aa4a3303ef17b6186a36862bc2685b1db6b88b63aa806ab51f505f5139a21489db9a0ed46cafce3a52642c049595234ce84f5f1d4e704f65fcfa9ebb05a2e8ea68ef525328bd0832c5799bb539586c218d957b19da0f32a00e8f21de7caba44162562495040f5eb19b25068d3d72dece92be7fe5404e15f96fa12b95bdea1e2fc43625cf0411a0b4661254a955d1de948d9b4c14705718c9c028e5297ffd116299f5cf8ecd74b97cbee244eb49876ee80c35b79328565f4f37a00bd4e3e44c813ca9b7bdeb654294860f339362a6e77e853eaf05b7c2a6a7848c7f23945b2a6a7574b6eff2d7fae263251d0eb5ea1fa270765bfc02ceb85dbfd7dfcb0937a889aeaa53c11eede2794228485c4d15bb1e615723ed2206b8beffb80449661adaca73ef7af031956f4da3888a92f100c17e11bb38ce43715d200bc9070e8e8f98f8ea9913f48365d22fa3abd4150129892001f60a8f102c90fa30df33d3e1c539d122eaaf701c97279c57b68371cfea2a9be146c81a0d7317e21664242558458c251132ca643a69606a2f9bc014d1367f7662545f0b7f14bc5347ad48e81d2a6a530059caa82c0ef668b4687f0b73c9d3408ec6bcb76e6528c517ead27d850e3866db2253c08c23fcf831f334c13f1b251bd72bf0d82e59b0553c2145a202616d6dd57462c936483a03bf6d02384432c8a41f288f84f4c3cd8e1bf567a86ff73fe3b87e66d7a30c2849260fb70906044b1ac41834f157f9b500b074a266d1ced8286cd33f6b60bb749dc9b4e0882e907316f378c16d46bf3678a55da1e58414b505b8462e98c6b9b82d40e7a33ad643d137a529fa9c5dc967534a5005de66bee3336a35f9faa7c744fb31b60af63b3de3ef8aad4d59f0874d47edb608bc13e4730635f01a34c9dbae69464369b9bb7c917575704f19d589ce5d65ce57c5b7", 0x1000}, {&(0x7f0000002bc0)="66b4a787c9884781cce3638140894bf7e87b72a5b85eae05f7d647fcb7170b3597b25bc0c7cc17c3ea1e780ff064dccb245a07940ea21c6c9a5c89f1ab5d4aea52fcfaf5eace0d166791ca9b74e1f5fa092189d2204e11fb2ca49781365694619aefb75cf9ad3f8b7160e0b030dee04b1970128f2e025c5fea32e49aed528687c37bd61f57998d3c10e407040db94d5d661bd9f62e0762f92948d875e359fbe98aaa67b34440a19a9ec26c56cfa3b6257c134230667e1778051fb2ac727fcd80e1f9ea188a4043aa7b92ad53f422dc448b8d221c005f8543b436007010150756de049d7eef5fd4", 0xe7}], 0x5}}, {{&(0x7f0000002d40)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000002f40)=[{&(0x7f0000002d80)="334d51f74953757b0e8864d27ea8b972083ae458ef40da22dd7043b7b35a83776100b64547795b6ee298eb8e3ce0fb06bc7b4716e6e1b2ed7c5fcd6933dfae2e280e44d1557d89eefdefbf42fe6f0c4c085a715a272bd3ac3eb1087a09a62155c4af79e8c5de34f554d4cab6e017b6c663acb00a4b0997222756a725c22272577643dd66bf6844bb6e6d319eb22afb8e531ef323b6136e5db2b454047808eeca5e56870a667b2622d2c8e50f3f680a22662b811da7abfd1a12", 0xb9}, {&(0x7f0000002e40)="7611cfbd90066bdc4d0e866fa4e3eae53d8fc73e87bd29b8b1bd99919915eb41124041f41e1ef97f21cc4a4918caf883d775fd4ef895bf2f01842bfacea072e43e26d8794f715ccd0d71db1bcbf00684185e543ca1d688283b1b8a", 0x5b}, {&(0x7f0000002ec0)="24c29ce6fb03c30d", 0x8}, {&(0x7f0000002f00)="d2744458d76aeb7ff755b42e6bf6f2822b69e61b30f1", 0x16}], 0x4, &(0x7f0000003000)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4be}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbd11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xe04}}, @ip_retopts={{0x38, 0x0, 0x7, {[@noop, @cipso={0x86, 0x24, 0x1, [{0x2, 0x2}, {0x6, 0x12, "7982158f1dae9caaa86722573f2ed582"}, {0x0, 0xa, "5d76ef53cdcb9c33"}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010101, @remote}}}], 0x118}}, {{&(0x7f0000003140)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000003380)=[{&(0x7f0000003180)="2d5aa0dfb67218e89aefb2716b58170b37455d0d6f3442da9f7c51d8262207386e29b165f1c1278a3a6e2697d00aa388fd6db6a43654b625e0c0763bbbc72b71c397582e0e216d022fd6595c5383fba8089b6b148f21af02df90779570600d6df31700d27af36b4b043b09eb2fdc07078a8148ebb9aee13cea7bf86006bdf4315edfa9569cf53bbd419b7c42c4891153c3620087c31f873d843fd5acffb80f69ee6bf0aaa49dec2c85c88aefef6d7934ce7eb8b55d55b5631195", 0xba}, {&(0x7f0000003240)="c18e48d545bb8ea2eb4b4ea1070e6bbac0a84b558a3158d5b8ffaf4d1ba0f05c3737cb55ad3b736327b2e5f4dbe406d512b6da1f51ca030e127c1c1417c7e37709f8c10a5f34eeb1ef384a7b0d1384fbd77604ffe8c80d10552543e32842d0648f0e2a7a95f7116274ad4bc96adba8603088825e91fb7a4a00008f955dd55219eeb24f86177fcfd392cac8f49e507da797153af7333b3b19f45efdca6e5e16860c34b8419a3481ffd033ef43d3ae958fef82d9b73d2fcacbfdcbe04852339eaa5ede8b338450e85d9ded071464ca69bcd4cb660d79ab9a5d210e9a127e3c53cbecc42cde", 0xe4}, {&(0x7f0000003340)="ac85bb6d398802e2c5", 0x9}], 0x3, &(0x7f00000033c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x9a07}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1916d208}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x319}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_retopts={{0x9c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x2c, 0xca, 0x1, 0x2, [{@rand_addr=0x64010100, 0xfa45ee4}, {@loopback, 0x2}, {@local, 0x7ff}, {@private=0xa010100, 0x3}, {@loopback, 0xffff8000}]}, @noop, @ssrr={0x89, 0x7, 0x8c, [@dev={0xac, 0x14, 0x14, 0x44}]}, @cipso={0x86, 0x4c, 0x2, [{0x0, 0x9, "baa146336a1fc5"}, {0x0, 0x5, "d55715"}, {0x1, 0x8, "ffd161ee5c1e"}, {0x2, 0xb, "35bcc1344352429598"}, {0x6, 0xb, "7cdfca6e9d186cfd9e"}, {0x2, 0xc, "95acd4b89627f10368a2"}, {0x2, 0xa, "ea04a94de6dbf9e9"}, {0x2, 0x4, "8ba0"}]}, @generic={0x94, 0xa, "babbcb243e706cdb"}, @noop]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_retopts={{0x40, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0xba, 0x1, 0x5, [{@broadcast, 0x10000}, {@private=0xa010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x6}, {@multicast1, 0x9}]}, @ssrr={0x89, 0xb, 0x2f, [@empty, @rand_addr=0x64010101]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xff8}}], 0x188}}, {{&(0x7f0000003580)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000004700)=[{&(0x7f00000035c0)="b1c4534669f121e633f438a112ed98341a280095bcc7d6a2506e84193f443fc38014f89c6ac1d4f60e00e40f7b69705617cf66bc63af53cc6d863b0e4e259a1650353c36c392e36a926c7369bbae9cdcf8936b4e900cd3387e47178f79bab899aa48522b5ea62348d376c0212e4d44597dc89201f5b00a18638d", 0x7a}, {&(0x7f0000003640)="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", 0x1000}, {&(0x7f0000004640)="27c1748aeab4ac279afd2b9ee19624d6f11632a784a0236fdc1df2dad00227953e389ddf78df3730d6f04f54f3d2f1aae9e29cbb23dd26763dd6ce12a505c3ca50f3ad2d20d774ceb034840550b8626cea596b4275ee703b863b497bd187ae6b0e41d56adfbebdd7ef56db803adad941eac40cb53581e2ddbcb660186c33246ca714808f22", 0x85}], 0x3, &(0x7f0000004740)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffeffff}}], 0x18}}, {{&(0x7f0000004780)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000004900)=[{&(0x7f00000047c0)="90fdb212289be66ca286d831c6a12b66ec925ca8bab2d19e5d1ed3fb263f423867f1607e81ab2ccbb889af4cfa815bca16d88709d4e62614f8270d0fea068ee7e39a8de43933153145e4e11e74fe5c55ebaaa96f119a11c87be6dfd46d092ad6b0e0609386fc3b38097c58f76d89332d8361d63cace7d2b92a6baa72e5c1fa962093e897a520ab664064d667d5196a3bda333b92f97cdeb4dddf2ef46fb50532eb972d0ae5f566817f9fe4547f4dd7", 0xaf}, {&(0x7f0000004880)="5aa7ab892ebe386fcdc45a3a206ae4e582b0249c68dd7abbb775577158c51d0975bb24f3470ca6da39a05e4189729eaf853fffb5455eee58eb4eb9f6c05dd6cd4105e6f7ab11bd0e19f9349386e2b61dc8", 0x51}], 0x2, &(0x7f0000004940)=[@ip_ttl={{0x14, 0x0, 0x2, 0xd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x34, 0x74, 0x3, 0x9, [{@dev={0xac, 0x14, 0x14, 0x3c}, 0x209}, {@rand_addr=0x64010101, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@loopback, 0x5}, {@loopback, 0x1}, {@loopback, 0x5}]}, @timestamp_addr={0x44, 0x14, 0x1b, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x4}, {@multicast1, 0xfa}]}, @noop, @end, @timestamp_addr={0x44, 0xc, 0x91, 0x1, 0xf, [{@broadcast, 0x9}]}]}}}, @ip_retopts={{0x68, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x67, [@empty, @remote, @multicast1]}, @generic={0x94, 0xd, "9922c48f0db7db0c6a5490"}, @timestamp={0x44, 0x20, 0x92, 0x0, 0x9, [0x1b, 0xfffffff8, 0x0, 0x3dc00000, 0x6, 0x641dd974, 0xd]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x17, 0x88, [@dev={0xac, 0x14, 0x14, 0x44}, @broadcast, @rand_addr=0x64010102, @remote, @multicast1]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x10}}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @ssrr={0x89, 0xb, 0xb1, [@remote, @broadcast]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x47}}], 0x190}}], 0x6, 0x4000000) (async) recvmmsg(r3, &(0x7f000000c600)=[{{&(0x7f0000004c80)=@alg, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004d00)=""/67, 0x43}, {&(0x7f0000004d80)=""/87, 0x57}, {&(0x7f0000004e00)=""/22, 0x16}], 0x3, &(0x7f0000004e80)=""/203, 0xcb}, 0x5}, {{&(0x7f0000004f80)=@generic, 0x80, &(0x7f0000006280)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/49, 0x31}, {&(0x7f0000006040)=""/48, 0x30}, {&(0x7f0000006080)=""/200, 0xc8}, {&(0x7f0000006180)=""/7, 0x7}, {&(0x7f00000061c0)=""/183, 0xb7}], 0x6, &(0x7f0000006300)=""/238, 0xee}, 0x3eec}, {{0x0, 0x0, &(0x7f00000088c0)=[{&(0x7f0000006400)=""/97, 0x61}, {&(0x7f0000006480)=""/4096, 0x1000}, {&(0x7f0000007480)=""/42, 0x2a}, {&(0x7f00000074c0)=""/4096, 0x1000}, {&(0x7f00000084c0)=""/196, 0xc4}, {&(0x7f00000085c0)=""/10, 0xa}, {&(0x7f0000008600)=""/85, 0x55}, {&(0x7f0000008680)=""/247, 0xf7}, {&(0x7f0000008780)=""/150, 0x96}, {&(0x7f0000008840)=""/72, 0x48}], 0xa, &(0x7f0000008980)=""/203, 0xcb}, 0xe}, {{0x0, 0x0, &(0x7f0000008ac0)=[{&(0x7f0000008a80)=""/2, 0x2}], 0x1, &(0x7f0000008b00)=""/80, 0x50}, 0x2}, {{0x0, 0x0, &(0x7f000000bf80)=[{&(0x7f0000008b80)=""/4096, 0x1000}, {&(0x7f0000009b80)=""/4096, 0x1000}, {&(0x7f000000ab80)=""/241, 0xf1}, {&(0x7f000000ac80)=""/106, 0x6a}, {&(0x7f000000ad00)=""/111, 0x6f}, {&(0x7f000000ad80)=""/104, 0x68}, {&(0x7f000000ae00)=""/85, 0x55}, {&(0x7f000000ae80)=""/227, 0xe3}, {&(0x7f000000af80)=""/4096, 0x1000}], 0x9, &(0x7f000000c040)=""/39, 0x27}}, {{0x0, 0x0, &(0x7f000000c0c0)=[{&(0x7f000000c080)=""/40, 0x28}], 0x1}, 0x100}, {{&(0x7f000000c100)=@rc, 0x80, &(0x7f000000c580)=[{&(0x7f000000c180)=""/133, 0x85}, {&(0x7f000000c240)=""/87, 0x57}, {&(0x7f000000c2c0)=""/36, 0x24}, {&(0x7f000000c300)=""/223, 0xdf}, {&(0x7f000000c400)=""/19, 0x13}, {&(0x7f000000c440)=""/250, 0xfa}, {&(0x7f000000c540)=""/16, 0x10}], 0x7}, 0xff}], 0x7, 0x2046, &(0x7f000000c7c0)) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f000000c800)={0x0, 0x4800, 0x1}, &(0x7f000000c840)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f000000c880)={r8, @in6={{0xa, 0x4e21, 0xffff8001, @private1, 0x28d}}, 0x0, 0x8, 0x1, 0x6}, &(0x7f000000c940)=0x98) (async) write$tun(0xffffffffffffffff, &(0x7f000000c980)={@void, @void, @llc={@llc={0xf0, 0xf0, "a9", "0b078b07e0d7746ef1a8b3f36cbd97f285a473bfd2ceed"}}}, 0x1a) (async, rerun: 32) setsockopt$inet6_buf(r7, 0x29, 0x2d, &(0x7f000000c9c0)="1276dea7f64dde93e500dec9f7f623b97d3c4dcecc01f44695122b8e1b6769699c887f2be806b1ee9cdab67795bd1fb550a9615dfd9734f6fb12985087ee81081234772632f2976234f033105c80e180d38d219ff570f5ee2a30a47b96c066db35ce644b6312a6f3ac78961a91238709c45938679abe28b777868b6f763dd771d2ae75c8c4d2b53aa3690b7c10b524ceb50e9fe5306834b99785e499", 0x9c) (async, rerun: 32) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f000000cb80)={&(0x7f000000ca80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000cb40)={&(0x7f000000cac0)={0x44, 0x4, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4804}, 0x4000) (async, rerun: 32) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r10 = syz_genetlink_get_family_id$nfc(&(0x7f000000cc00), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f000000ccc0)={&(0x7f000000cbc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f000000cc80)={&(0x7f000000cc40)={0x14, r10, 0x500, 0x70bd2c, 0x25dfdbfe, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x41) (async, rerun: 64) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) sendto$inet6(r11, &(0x7f000000cd00)="9e5004bbc22e7ef616e582f5f9a049754614ffe265405e", 0x17, 0x10, &(0x7f000000cd40)={0xa, 0x4e23, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, 0x1c) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r11, 0x8008f511, &(0x7f000000cd80)) (async) r12 = socket$alg(0x26, 0x5, 0x0) ioctl$OCFS2_IOC_GROUP_ADD(r12, 0x40186f02, &(0x7f000000cdc0)={0xa0, 0x8, 0xc, 0x2}) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f000000ce00)={{0x1, 0x1, 0x18, r6, {0x3}}, './file0\x00'}) mkdirat(r13, &(0x7f000000ce40)='./file0\x00', 0x4) (async, rerun: 32) syz_genetlink_get_family_id$nl802154(&(0x7f000000ce80), r9) (async, rerun: 32) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r13, 0xc0182101, &(0x7f000000cec0)={r0, 0x1, 0xe}) 3.17897064s ago: executing program 1 (id=1498): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x4000000, 0x8, 0x4000040d}) close(r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010700bd7000fddbdf2501"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) 3.099703066s ago: executing program 1 (id=1500): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000080)={@any, 0x2}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f00000001c0)={@host, 0x7}) connect$llc(r0, &(0x7f0000000040)={0x1a, 0x1, 0x0, 0x0, 0xe, 0x29, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}}, 0x10) r2 = fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) accept$inet(r5, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, r6, 0x1, 0x70bd2c, 0x25dfdbfa, {{0xa}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c891}, 0x84) ioctl$SG_IO(r3, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x6, 0x6b, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f0000002240)=""/4103, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) 2.750288956s ago: executing program 2 (id=1510): socket$netlink(0x10, 0x3, 0x8000000004) (async) r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=@deltfilter={0x44, 0x2d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffff, 0xfff3}, {0x3, 0xc}, {0xf, 0x10}}, [@TCA_CHAIN={0x8, 0xb, 0x85}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_CHAIN={0x8, 0xb, 0x7ff}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x44}}, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f00000000c0)="580000001500add427323b472545b4560a117fff0b0082001b59000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee0000000000000000020000", 0x56}, {&(0x7f0000000000)="abd9", 0x2}], 0x2) socket$unix(0x1, 0x1, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_to_bridge\x00', 0x0}) socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x903, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x1}, {0xffff, 0xfff1}, {0x6, 0xfff2}}}, 0x24}}, 0x8840) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x66, 0x903, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x1}, {0xffff, 0xfff1}, {0x6, 0xfff2}}}, 0x24}}, 0x8840) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000040)=0xfffffffb, 0x4) 2.509894862s ago: executing program 2 (id=1511): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a1830000000000000000050000000c009900000000005d00000048000e0088000900080211000000080211000000ec03f3b85ad30000a1ffffffffffffff040000000006010101010101030100060243832a01003c04000434007606000000000000f1d65c43a57bb54af71a7a29fbbf9d2df1fb7fd8e2641bb2557a365d1036bb83bef90c9b84deaee3a10b36230bbada12bc9b"], 0x68}, 0x1, 0x0, 0x0, 0x8810}, 0x0) 2.5091956s ago: executing program 2 (id=1512): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800000, 0x0, 0x1, 0x1, 0x4, 0x6}, 0x20) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000008f40), 0x0, 0x0) ppoll(&(0x7f000000a200)=[{r2, 0x44a2}], 0x1, 0x0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r2, 0x40146f2c, &(0x7f0000000080)={0x2, 0x0, 0x3, 0x1}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r6, &(0x7f0000000140)=@OVL_FILEID_V1={0x18, 0x300f8, {'\x00', {0x0, 0xfb, 0x15, 0x7, 0x5, "e837282efe0868327a31a705ec978547"}}}, 0x830600) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_GET_KEEPCAPS(0x7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x208802, 0x0) close(r10) socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$SIOCSIFHWADDR(r10, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) write$tun(r2, &(0x7f0000000240)=ANY=[], 0x3c3) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000040)=0x6, 0x4) 2.2405823s ago: executing program 1 (id=1515): openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000000500050007000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000300)='cramfs\x00', 0x21000d, 0x0) 2.14685575s ago: executing program 1 (id=1519): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x5, 0x7, 0x50000}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x11, 0x5, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x16, 0x301, 0x70bd24, 0xfffffffc, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c00011fe6261800626f6e64000000000c0002000800010006", @ANYRESDEC=r1], 0x3c}}, 0x8001) (async) r6 = syz_open_dev$media(&(0x7f0000000100), 0x2, 0x101000) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000700)=[{}, {}, {}, {}]}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r2, 0x40085874, &(0x7f00000000c0)={r7}) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="440055371000030428bd78000008000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000001c00128009000100766c616e000000000c000280060001000200000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100000008000a00", @ANYRES32=r5], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.986657526s ago: executing program 0 (id=1522): socket$igmp(0x2, 0x3, 0x2) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, 0x0, 0x0, 0x0, 0x0}, 0x58) socket$netlink(0x10, 0x3, 0xf) (async) socket$netlink(0x10, 0x3, 0xf) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000340)=r1}, 0x20) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r3], 0x38}}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) splice(r2, 0x0, r4, 0x0, 0x7c1d, 0x8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0, 0xffffffffffffffff}, 0x4) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) (async) r6 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000440)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="49202a3a2a8f57756200"], 0xa) (async) write$cgroup_devices(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="49202a3a2a8f57756200"], 0xa) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) (async) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x11) ioctl$TIOCVHANGUP(r7, 0x5437, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) epoll_create1(0x80000) openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) socket(0x1e, 0x5, 0x0) r8 = syz_ublk_setup_io_uring(0x22, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1db}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0, &(0x7f00000004c0)=0x0) syz_io_uring_submit(r9, r10, r11, &(0x7f0000000240)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x74c1}}) io_uring_register$IORING_REGISTER_NAPI(r8, 0x1b, &(0x7f0000000100)={0x1, 0x2}, 0x1) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) syz_ublk_add_dev(r8, r9, r10, r11, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) ioctl$TIOCL_PASTESEL(r7, 0x541c, &(0x7f0000000000)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) signalfd4(r5, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x800) (async) r12 = signalfd4(r5, &(0x7f0000000040)={[0xfffffffffffffff7]}, 0x8, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xa, 0x1f, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000b500000000000000090000001800000004000000000000000500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018440000fcffffff0000000000000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r12, @ANYBLOB="00000000000000de41050000edd85700007d000000000000580c136c0000000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.850073327s ago: executing program 0 (id=1524): r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f0000000e00)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x7, 0x30, 0x6, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x7ff, 0x8, 0x6}, {0x6, 0x24, 0x1a, 0xfcc4, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x5, 0xff}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x68, 0x7, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0x2, 0x5c}}}}}}}]}}, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001e000100000000000000e80007000000", @ANYRESHEX=r0, @ANYBLOB="000000000a0005"], 0x28}}, 0x0) 1.847719642s ago: executing program 3 (id=1525): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x2012, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0xffffffb0, 0x30, 0xffff}, 0x14}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) setreuid(0xee00, 0xee00) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xd1, 0xa0, 0x5e, 0x20, 0xccd, 0x102, 0x890e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x54, 0x40, 0x1, "", [{{0x9, 0x4, 0xbc, 0x80, 0x0, 0xc, 0xf1, 0xc7, 0x7f}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) r4 = semget(0x3, 0x4, 0x39c) semctl$SETALL(r4, 0x0, 0x11, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000100)={0x1, 0x9, 0x7, 0x0}) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) ioctl$VHOST_VDPA_GET_VQS_COUNT(r1, 0x8004af80, &(0x7f0000000180)) 1.758203534s ago: executing program 1 (id=1526): prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(0xffffffffffffffff, 0x3b89, &(0x7f0000000140)={0x28, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x9d, &(0x7f0000000080)="775f88ada00adb8bd9324ff3e75de9f6fa3c089538627b53c1ca006cc0a95a5ce3583978e64a5d5cd4acad465321d87df7e7913b4997ede68e62d96fb530d027285d0fa1dc8612664ec0d4f57c0d22a6d03e88bb3bc1cb3e487ba26d679cb33342520509c0e2f47bcd4f3e2809a8e02859463de118579bbed74444874c4026041dead84c47097aee0d133f4db7dc227cbb2ac2816fa7aec06a36fda441"}) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f0000000180)=@ready={0x0, 0x0, 0x8, "a89caf4f", {0x1, 0x29, 0x5, 0x7, 0xe}}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2d2040, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r1, 0x3b82, &(0x7f0000000280)={0x18, r2, 0x2, 0x0, &(0x7f0000000240)=[{0x8, 0x9}, {0x1000000, 0x3ff}]}) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) r3 = syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_ep_read(r3, 0x2, 0x1f, &(0x7f0000000300)=""/31) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x34000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000380)=0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) r5 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r5, 0x82, 0x107c, &(0x7f0000000440)={[{0x1000, 0x4e00, "561c7fb8d17608f02ac79c59490af03fe989aab1417f01f7458068d0eafd99de89815ad1f0101708ed01b5d18f7c6b75f100f43a0924ccc1592b880ac1116bf6009159409cff1f0402efe49d4c3db2fed53d061461e5c84c1d43237b48cc186ac22fa2741beab664058c2633d7d190e27fe7ed361b76fc3f06e236ae92effa20df610553716c92a5321945933965c62432b05928743728f0a9603d2c04bc7156c27b7f4b6f1dbcbc77ada47f7f93db9ed6b925dadfbdeb13394ada7b375dfb7e99d5eb619742c9da190bea5e6a528a572609eaf8a4c145decee98e8866ad89311c0151cb4e52be28434d059d0d057b0e084f581b6a3bb2f4badd9e0061848ad1630a3ec77fac0a4533bc9a528571e0da30966a3795f4f3c31aed480b01f7ca5b76e72eec7da25a175271e0368e7b3d60c0fc75036da05fb5306c1495f50a614da2761c9c04a0c843f772a2724ea3668db156749226db9de063b3c60e177d1b123308969b02b01676b3cc55b0daa3f8e373d8dd42b30b58eb2ad73864806f985ab015f3355761b78467edcef317067845502f2ea0715f52b61651da9e795b0ac3d81845a5b57267a41f288c154adb4cd94eb46d9f21180bc2f8a3ff447d30588eba8ca9c6183c06e22b46de584e45398fa969196156c5165a720c397498b552ebbd6720382a9a2e9d86c18bcfa6fba50444a7c7142b26723254dc823b1bd73088ed8e0d3e89868d6b93eb7d0d1551bb864d0f71b1683268068eb5a0db768ed715d0ac2d09d5a384549768922a56ea982a40da99cc786393a3132e9cf137d0344d91d3bed18d0813fe711876fe62ef2927041cb5a2a22ce8ac9102ee99651cc0bdaa310f45082ecbc8a8ff0d0f1907bd059bdebad81b03a75cf71b9d3fae74818164cea9ce52cb1345ede0a9c7e1ebe4895ba450fc59242311afeff7900583fc78d7aa6fcba0906455a5fbef27dc2c59df00de2da68a7dbe85e842a3d4e163450f09f129888ad77c104e1fd7d6150e12d775a7c2c43d147c0dc562f47048486618f0afbd8bcee96b4874b8a072da5ed9849b17909470528bd7fec4ed8f8b18516880c3f23632e8e2eadff85b01cff77506411268edfc7499c6b56d66b46b10d0545c397008f4320d821179130b2e01e6fd1ebba4d1ca1a82523d26f0f9d7e01bb52b91a6e71f378bd6f018cca9f7b2de3c9deaef280c40fccedc0f18d782edc18c3143e4354fac721c692c55730a45f6f0541468a539fbf1e6b5f10b0e07e36333eccaca377a761bf9cdd7522cbbebd5427edad1176eb18044b202759ed1423887007840559c22671a83516246336b11aecf4b3c95a63d71c7086c0906a5f83e8ce897792f57a1f372513df37e78da46b9e7e633dd93e2c3a7e786835746ad69c2ed68dc1925f598e3fb93550c77c08eb6471f4f2eea209f819a4f5619cde421b19de0bc4506d7f6ab008ad9386bd8f2a01ded63144e3daadb8ddf3cd93128852f93ead9812a0357c40d94c6b5faa4a079bd759ac7ce0a8c7f8e4aeeacc080eca4653ef4ce6cf9b80913c8f697f57de55f5cf2a6d20d9169dfb37254e880273bcccaaa2978af99ab90b9591d2e293e740e9ca2f44d68b8b300d20a08cc02e15bc79c811e3e49bd4f894e481b62f8a00da30e8697439a0d192e286ac989fcef3967153cab5e1f82b0f25c2800d88dfa693da4b61ae28185cef81d71eac762f429bbe0de9045c4720519c6157c220e62fdda6ba2709533fefdeb8eef7da1f2f95cab8790b585a8a727b187914e65432b37c4673e65353d490648d3f3245a8f73386561b7ebefbf4e76457c8976334627c42290ca8747c3c55cdfeda35fbb9bb1e7fb914676edebcb4df9fa64b651e744fffad755ae1795a7111c2601040efe60bc91287a0069b1395301382ebdc90a990587bbf5d36420f7d1b7cd015881b046e565234f29d8baf07b49d70e7424dff62e7ddf329825ec486061fd200e883ff992d0480cabe87f753ac47ae51536cde8df79824153e959cb0f8db03f41f34214553934b56db67a26e40947f513c03cdb2bd6510465b89e1c508c02750083c54e879b8088ec6a8ff3a1382572e5f50d59e47dd04984ca40b658bb0ad22484067195eaa435d9ea0b4ef8cbc2e01b388dc83cda8558a8233729ecdab3fd2f20a77cb2373ca7930157a4638a99353957c5a12207b19d4c912d30157eb286901b2b84b4acba0afadee8b737ae1ce122d895e26acee2c4230acfaf72357f7ebcfcff5107ed63b36ed40c2e8a0cb07c0e7bce8c1704b178a9ea8951bbed508f488aae2c4ba268783bda3b17a2d141a639c459a2e602538763771565cb092913e8a64c6426c167b9b3c228430d6df5c4d5082cdf735045e2d479f20bf5c80f6891d5b7ba8c45b8770fbfe211d52356a6d636702874b12cdb877b48e406977c9bdd94e777a7f6817b7d14524aac0ae61fa329c1395d233e75d5542242f473432d3ee7d6682081ffef87cd87903fa70326341c241415a4703c7974f8247d21358b691728c72f511731b7c7a6e81c4902b4d5bd1b11b957ee578a1487269d80fb84fc9b4cef5d02e642e31003334adc942ea99f7d295f1f4e2a9f2ddde6a2c59d998215d2f28df15f974accb2f760fac6cee3ff2836156e2bc8e9ac1d13765dffd4d69eef07f278bb9c676839ff963776c7c28eb2724edc6df0bffe9f98f69075a162d575409e7848ca744f43625ec66edf65d0ea4c5ffd1616d049693a60346ffad2d368e9709bcb454b85b3450c2df7cc319c6fbc41473b8bdb30b6b4c8a224af27877d558d970055b3426cc42edda6f0c0bd8b15f4872819a0695db2abaa2bf4a8e223540aa530e95e55c95c076e5958630ccfb5e1a3c252d8e199971eefe745197731794e4959def2f49bdc2ec416494ca5f2549e81567de956e3f7741ebe02389b0ba2ad3adfdac21a08285fc3f3e17a09f5306c2d4b6a0c23c65cee55afb8b3af10131304552814aa7cd5b164a5b9d210dd0ecc134a07bb82f59ed114f7f6ee8b7bda6e5216bec94051819d1093392c9c3f120ea316082d95984f7e48be07e2ee13661f08e667cfa7b5d7471371977af8b7df0f803c6cd444feb698de442adb6521f23ac2b185ebdd78f44611b07e76a16080ed21147430d5d76e335dbc4057dfc8ba5faac07665174859850a495e7381296458e11e63cdc8a737cd57f18f970c21b2d65c40dcdcc9ad6a20a16e01fcd5c196a54f8805635060bf2516d7eb2e1bc65cfb991ad211bbf26eba7495bd7c899fa52a7a24e0593bd8a174aa60f4de331c9a4a20fcd3923ca190015b3d622bfad569c6ebb0b52ee45cfd9ca2f031c8507215b26b1dd33893b40603f27be3d5d7c325b78440ce9d0ccef9f6e7f00fd0fad70d5fe44502cf626a11e7d4c9cdb3099c35315caaa1d35067ee0298958fd5788b9c14f5e5f91830c9e32c137767a6601773866e338695ac8e589ce5acf4ac4cea44d16f188738863c5fb05fac282a039b3760658a9a3109f0ef5246e5861c66a852f8a8bd7cdc6ad56da5aa247fcf09521797cd9a7f7505b03fe9fbacab33e8c2c8dca1ab93b2102b06fe3b36575f815981afec72112646030e9f909b41d565be32327095d48b16966dec1de308889dd808a43625f603c86fbb11df23bd44f9df2d3d2bd0d822c5ff077f1b9b20b16a481021733a9d3defee4c3a2d4fe6444f4fdf0ff7d50e0af841646cf6fa543e980653b974bef5b4d12ad3f6ea37945b0650116f106233c238e9fdbe0d313cb4c34e768eb6622e58b359df30a5d60169bfac496f11366cbbdc79c6b1f5790f99caa9f7ca605ff21ddf8db738dbcc2a16b7742b78db97483011813fbd429e7f04895ab7581b77d4092e250d74a7559ab3a6de0a89772454da828a8d00e58012235b78b7f50fb0eb1175ba54b664b1076de27071207d346a272bdcf7525a9226a4eac7d248190d80d7b1c7c3e4426612bc8073934361715eef9e3a4a1f4f0e12e335e6ac5446e4c6aa6284c9cba95d3ae8505837b264ac8a0d4c22f5c65a3d973f6e5d370e5c8f9ea0cafdcd5e71aa322dd31c1f6c624f1667eb5a0feea92e4cbb06e5f42f97fc385e6bb8677b43e2296f04f401edd447cfb0a740e5478ba8b41efaac7b8c94f1bb6f9bda5ea81f010f70d05e98968b89f46afa435a3a6d0802fc3e28723520c7655018d91669a22742600be05b63e7339886d2e690aab3bfa102dadd2bafb8aa3455ff0b7827ae526f79dc96ba9c9d1d463673400ce13d7509a450db10663418f8a542718c269575558aaef88dacdb08c91cda59e6672ecb58678556f6e05303ca16b58379ddff4e3e728e2f984161a0450713117722916a911658b8d4f8cefba367df8d8c9105d62a788b87de5511c2c1317fd02a73ef292c443b67ef044de3218fbd8b0bf07306717f01373ad8baef42afccd0fb0895c80ab48654cc0cdf74755c6af9f99f8aea03b27a391864c46c874ff5d9a4845e4c6ac6470c983712ca4b98206352c46b49edaefd28e9a65d6d14816ea359794340b279b9e1800cd029c7e359467e878a534c514b1e386a0a2ed15e927c460c63f665da675f9ad021dce86ab1a5dc7be2481aa852ec4d3c11ec6d6d3efcca8658ea0633c8522570fecb76fa8f5370b2b83fdec8509a4b229da0d3d41e0923829fa50e2034a6c2ed0bcd25a9a99291c23359e20fdbb0ced1779b34dc98f540bc7b7e53c8cd4687b4b935aa742c21851f782b1e37f562424b1d22d525f26d8d721117fa86f0427ded06fdd436ebd3868f25f6970fb4ac876d39b70a4d6bb4dd668299ab5c47d37f53e53ac7f3768fb53e6fa8848a281a982d7d3e631496b51949ad9ccd3998268d5f498b16ead4bea44ee19835ba1f7fbffde49dd797ba1629ac0202885c0c34364535fb0dde7e3b02ca24766d8696d84ee25be690b23e683527b6d60f53373f4dd066438c3d16f9f789ee8d6669cf684d6e18f18d90ab96ec682496661554ce79e22dcd5b08479da4e987685bd79161e9b1faf236703eea8ddebabb3b1df1c3cf6be902f1ecae3572c5a9e2061a00900aa921a453f7903a3d4582d55bbded0760877babf034e7111dee0eebf82f5e87e224d2ff6b1eb43903c39481d06e1205c9766415c818967f9323e767a2a87e7dee59f6cf19af8fd23ab55a7d5e1c65aa8cdb7003cec0d0e492ddb4c10c398be015e1f32b41db05edb246a900bedd43fc13672821a643a123461e20d81459c0777b9f220abc95bafe3293770ddd70220f830de0062c9522c6069cb373818993460df13577aadaaf7a4497922e2bf4da62e42e57d143fbac3708bf11b989898c4fa3123cee928216bb7d56d65954ae7668a05f39638aaef3fd5a58b11244633d3e75d64f414ec9aca116e8293ae214b9116db9dac1d590b7bc721832070c873b292dd999bb608368f441d6bc0fbc6d7a9a602b86090e049c6cb51f8d9d7daeaa3a447173e8192f31b29776d9141ec08284f7e0f049fafb7124ecbc03734920085e28661638eae721b90133c9f687d64f406bfa271c79c24121946e0e3d8d3acd347c0476a5df66b511a10d5b0889d9801395ce169d9f6efd8a0c2b72c837b43f8548308afe4698b02f9658351a5f059b3e65819cf641a869418d578a0e1c911daa7cbdc5eb53984a002c89365ecfc95d1399f32bfc6b206a64b9b43f17b9530e738f626cbbe5dab0c581b65bdff221af1aafed9e52d86641ba095fef0b13732d356584fc11fb44c41da95c5a396e50987483abd15d20cd05ae6b3b5f97c178ec07f4c9a0"}, {0x73, 0x4e00, "14f9ede328ef415b44c689f9931d26f8767d607e306322798cd5c709791d1399b99a89d4dab6f4b2d27c231c713fcef161ccd59b1fde34ecaf226b35f1d227ba38e5ff03a6773f903be4d8c911690824991c937faa15cf11886659ea8c9f7a1309fc7e6716436afb7a412dbbf8b067d9c777d3"}]}) getpeername$inet6(r4, &(0x7f00000014c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000001500)=0x1c) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1.320277755s ago: executing program 2 (id=1527): r0 = syz_io_uring_setup(0x7961, &(0x7f00000010c0)={0x0, 0xeee5, 0x8, 0x0, 0x2c5}, &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000000)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0xf2, 0x1, 0x0, 0x0, &(0x7f0000000200)}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000500)={0x800, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000400)=""/36, 0x24}, {&(0x7f0000000440)=""/29, 0x1d}], &(0x7f00000004c0)=[0x0, 0x600000000000, 0x1, 0x1000, 0x8, 0x6], 0x3}, 0x20) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000240)=0xf) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000002740)={0x2, 0x0, &(0x7f0000002640)=[{&(0x7f0000000100)=""/129, 0x81}], &(0x7f00000026c0)=[0xffffffffffffffff], 0x1}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000540)={'wg0\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x400454cd, 0x7) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000080)={0x0, 0x0}) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000140)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY(r7, 0x3b83, &(0x7f0000000180)={0x28, 0x2, 0x0, r8, 0x8, 0xffffffff, 0xa}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r10, &(0x7f0000c00000/0x400000)=nil) ioctl$NILFS_IOCTL_GET_CPSTAT(r4, 0x80186e83, &(0x7f0000000580)) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="8771bac97037", 'sit0\x00'}}, 0x1e) r12 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r12, &(0x7f0000000000)={0x18, 0x0, {0x4, @random="8771bac97037", 'sit0\x00'}}, 0x1e) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f00000001c0)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r6, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.240448939s ago: executing program 3 (id=1528): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ftruncate(r1, 0x4a8e) write$FUSE_INTERRUPT(r1, &(0x7f0000000040)={0x10}, 0x10) write$binfmt_misc(r1, &(0x7f0000000080)="cbcddaba0d4e58877f6bf8455edd5d980ab9055022e2d44bf91fc38da4bf072b2f35fc6755138555147661fc0d0618d282d4109c0d8f113d4a04f975f8d2fd5c6049b54e706f", 0x46) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x15, 0x3, 'ovf\x00', 0x1, 0x6, 0x3d}, 0x2c) (async) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x10000, 0xc, 0x2}}, 0x44) (async) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @loopback, 0x4e21, 0x3, 'lblcr\x00', 0x0, 0x81, 0x39}, {@rand_addr=0x64010500, 0x4e25, 0x3, 0xc3, 0xfffffff8, 0x12d5c}}, 0x44) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000140)=@in6={0x2, 0x15, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1.22583728s ago: executing program 3 (id=1529): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x20001, 0x190) open_by_handle_at(r0, &(0x7f0000000100)=@orangefs={0x14, 0x1, {"73185b78e073b80914e4370dcb8a3f90", 0x8001}}, 0x513400) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r2, 0xffffffffffffff73, 0x2) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x38802, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="80000000", @ANYRES16=r5, @ANYBLOB="05002dbd7000ffdbdf254400000008000300", @ANYRES32=r6, @ANYBLOB="6400238006000c000a00000005001f000100000006001b000200000008001a0003000000050005000a0000000600120007003a0f060003005c0000000600190009000000050006000900000006000400f400000006000c000800000006001600"], 0x80}}, 0x0) (async) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x100d, 0xde8bef52389a5434) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000280)={r3, 0x0, {0x0, 0x0, 0x0, 0x2000000000, 0x4, 0x0, 0x0, 0x12, 0x14, "996a78edc5cac93c3e473f65d9eb5297f0ca82d56dcddb164e29606b4f2cf0b60d9b92b3cf1597f6b7ff9c4fbf4326f66eccdbf05411d4a42e798491e44e3e6f", "3c54d63cef61aa187f941933694c882f4835e79819ddc15edb9ca42b19129e446327fbe58f617cc4617f5347a395cacecf34365db4d55dace1d4e9d56e6fa42e", "fd4131e7744b74aaa2317f2b2cb2fea7e7d63f26e8cfd1d6c6eaab2b99d845fb", [0x61, 0x4]}}) (async) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) (async) r8 = epoll_create1(0x0) (async) r9 = socket(0x10, 0x803, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f0000000040)) (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r10, &(0x7f0000000400)={0x2020}, 0x2020) ioctl$LOOP_SET_STATUS(r7, 0x4c02, &(0x7f00000001c0)={0x0, {}, 0x0, {}, 0x10002, 0x3, 0x19, 0xc, "e1c5be584875f9a3a8c3d21d4aed0888fd5bbc6482d20f77cd7c69344687c22d97bae414bddadaa37277c798331a9beae5f95599c89e8c9e4abd843f22651d53", "1de095496130c0f2d7e3adec074fcc6ef189d2e859a4a31a9afd00", [0x4, 0x3]}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007600090700000000000000000702e1ff", @ANYRES32=0x0, @ANYBLOB="0c000d80080003"], 0x24}, 0x1, 0x5502000000000000}, 0x0) 1.160219931s ago: executing program 3 (id=1530): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000) sendmsg$alg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="42a6c54587814dd5f4eff6892bdfdcdca90666e33172a447ee3152ff970cb426c664e31734abc8dea29f9822c6e3325d0a11405680d0dc5e2b176f73854cfd96792bf4f0c4997ec6b27c4be669543fe06990f0a216abf637a75464e2727dad28787ff134d666b5a8523f523cb7d54f3eca69ee839075a57baa63fcbd", 0x7c}, {&(0x7f0000000080)="6d83d1aa0cbe31989fbd810ed3ee980520f58911dbfababf510d2dbdab6d6dc4144fff643ba75f4a8eee5c7ae65a2821d186a65ffdc94d6081a35828911c49f148a5ca533e78b60880dc31eb6ef5f3dbfb7698d1e84141a3d0d641f01c98abc02e0df311a84ecddafb9e8e1ea7a6e6106c2870ab522fa0658f2504bb31060ea989650b67e1fd3bdb3978bc1fff45cf0ce155368c2329f660c49878919e2e8f8a52c6530e8b3d9c6c42cc6c995bb8ce1ef7457c44f172ccabf24e593614af105f81b4", 0xc2}, {&(0x7f0000000180)="3164b34a718d62b48b6609a887186644fb5372c6923bc736e54bf09e679e4cef73a2bac973920dcab11a6a991f4f863c21a24ab93077c1b8aaf0a9e7427b1397ac6a46d799c4c28d06f7f0fc3b725e4605bd5813f2c08829a2b248643858b3d682c66b4b913d43fd2648c8ff5885dd3395ea76d8a54cfbf5ab5ef2ce4cf5c3876b6854c7f877361818b8139a4f7c7c6c6dccabcc264d6daebd67e12c57a8c3210e28c8ed1bf6a34e54ddd7db9e35841479cf87060c28562c71366713a30988626758232bb1cd7aa4b3f9b34fe7eebcba50a12b654b5d86a825189f0ba32c561869d936f7", 0xe4}], 0x3, &(0x7f00000002c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48800}, 0x40001) sendmsg$alg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000340)="19e334985ee40017e24c4e4c5dedc5492967b588c5f315c1289aa4ce817e6117e9a9fbc692a5d6654030fe0267bbe8e981ed58c89a889bdd4db3f883d1946789c871ee083748da038e6a272f6322df83840a903e", 0x54}, {&(0x7f00000003c0)="e192b2f528faca8179fd139ff620b67bd470417e4ab9b4994a93c918f889b2cbfa9cbc373b7854fc10e4ff2af5345466da25976bf9893a9d056c694e34215b47c388d6b66883bedbcd79d61ad8a211bb18f226db03712c74c35d7562860fb0559308eeba030652b0c7d9c684d95f96eea54259193b2c34705921079636cc", 0x7e}, {&(0x7f0000000440)="13", 0x1}, {&(0x7f0000000480)="1497590daa0c3994c85a0bb7e9a0d1c7f276d92ebccf5b87bce5f740bf91e271501ce727bb7b85c71c3efedc4ceef8891a6730248e929f5498a4b30df93882db7087e4250ec2e04727f483a014eeedb359bf1bce59b61594214a73f55d85ad42f4d98793dccf478fdd4a98fb5f029eda6702f81bd3", 0x75}, {&(0x7f0000000500)="bcc3aee3ab16838d735f76524a164658748b3c6f7ffa5041186d6c3b4271a5acc0d1d0e66e90910587da56e404c340d9b033a374e1df384bd225bf42e87dc3ed823a4c57d66109ca408ff8f6195e2ad6", 0x50}, {&(0x7f0000000580)="9027c02f6a3f068546180b145ed6", 0xe}, {&(0x7f00000005c0)="184aabb9360616ea9c03c15e7cba0f476154e37e8b72bb048fd13ebaf2774e013f91d695a79a001c25485504e58ae37d2e6bbd679622c022fbc503dce21c38e29287d656db6b456034c8f8b1b42e1b5e53639b6bd4b7740b536c48ff6ccf38b22b33dcb5436a095c8adaf025fdbdbc52189d64d8f4da611a1db26ea2a61dae167eca3815", 0x84}, {&(0x7f0000000680)="4c9ac2cb53a5509ddd6723839a8ab705dd14e9ba7f7f0f0c21e8813b09ceb05712fe07d25d35bcdb912ffa62e17b39a99fb9ff9f0b4c8a4d640924c8d2bf798556e53d383751973711166c92f8c06fc4d7d15c8cdb614b10f128da6209df3aae88b4d785fa355d3edbc1fe906dec1f127d01aa9cd1c8dda4a1421ce92a34c180", 0x80}, {&(0x7f0000000700)="013515529dcac59695656dcf51aab4b4fb4b1047b4ac0399905cd388839f03b9c6730f59527498ab8b5fd045a06d86737c76602d4d6b54e4d4412672ef3af9169ea5ed9e352b086e8a4882502fa3d5974e076109c2234d0d67a2be857f4dd2d746a8965a757a0b456e09eab4c32a632111bca198bfcf67bd1279704de70b26574736fdb1d498b74f912b8c98dc3d1cf54a87389c915d6f4994d3b671dec15899b1d6be7eeb580fe10a5571ffd5e6a49d5b6a01e8cad5c9b2", 0xb8}, {&(0x7f00000007c0)="5f5fb7629946c6ffcf2b6253f7d72191da48de0cfad25982c58c9497c4af87d14803a0a718ec6925fa4770f3c7b4ca0cd75581c2b42841bee440eaf1448c04cd62715c934702115d044d239b935e0198a0fdc2f4ff65c207e6380b5a579c1c3fc3b3556df48eab7e", 0x68}], 0xa, 0x0, 0x0, 0x10}, 0x4004081) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000940), 0x40002, 0x0) r2 = getuid() getresgid(&(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000a40)={{0x1, 0x1, 0x18, r0, {r2, r3}}, './file0\x00'}) io_uring_enter(r1, 0x7808, 0x5dd3, 0x28, &(0x7f0000000a80)={[0x8]}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000bc0)={@ifindex=0x0, 0x26, 0x1, 0xffff, &(0x7f0000000ac0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000c40)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000c00)={@cgroup=r1, r4, 0x28, 0x34, r4, @void, @void, @void, @value=r7, r6}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r1, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000c80)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, &(0x7f0000000cc0)=[0x0], &(0x7f0000000d00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xd, &(0x7f0000000d40)=[{}, {}], 0x10, 0x10, &(0x7f0000000d80), &(0x7f0000000dc0), 0x8, 0x5c, 0x8, 0x8, &(0x7f0000000e00)}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000f80)={r8}, 0x4) r9 = syz_open_dev$sg(&(0x7f0000000fc0), 0xa7, 0x220000) ioctl$XFS_IOC_GOINGDOWN(r9, 0x8004587d, &(0x7f0000001000)=0x400) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000001040), 0x600000, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r4, 0x3b88, &(0x7f0000001080)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r10, 0x3ba0, &(0x7f00000010c0)={0x48, 0x2, r11}) r12 = socket$inet(0x2, 0x5, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000011c0)={'ip6tnl0\x00', &(0x7f0000001140)={'syztnl1\x00', r5, 0x29, 0x40, 0x9a, 0xb3fe, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x11}, 0x0, 0x10, 0x200}}) setsockopt$inet_mreqn(r12, 0x0, 0x24, &(0x7f0000001200)={@multicast1, @multicast1, r13}, 0xc) r14 = openat$zero(0xffffffffffffff9c, &(0x7f0000001240), 0x101800, 0x0) ioctl$KVM_CREATE_VM(r14, 0xae01, 0x21) ioctl$USBDEVFS_FREE_STREAMS(r14, 0x8008551d, &(0x7f0000001280)={0x4ec1, 0x13, [{0x2}, {0xd, 0x1}, {0xf, 0x1}, {0x7}, {0xb, 0x1}, {0x1}, {0xe, 0x1}, {0xe}, {0x4}, {0x2}, {0xf, 0x1}, {0xc, 0x1}, {0x8}, {0xa, 0x1}, {0xa, 0x1}, {0xf}, {0xa}, {0xa, 0x1}, {0x8}]}) write$tcp_congestion(r4, &(0x7f00000012c0)='bic\x00', 0x4) fcntl$lock(r4, 0x5, &(0x7f0000001300)={0x1, 0x4, 0x2, 0x9}) r15 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_elf64(r15, &(0x7f0000001340)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xdf, 0x81, 0x6, 0xfff, 0x3, 0x3e, 0x314, 0x73, 0x40, 0x2b8, 0xeeb5, 0x65, 0x38, 0x4, 0x81, 0x101, 0x8}, [{0x6, 0x8, 0x70000000000, 0xffffffffffffa165, 0xc, 0x1, 0x10001, 0xfffffffffffffffb}, {0x4, 0x9, 0x2, 0x1, 0x0, 0x100, 0x6, 0x3}, {0x6, 0x5bb, 0xffffffffffffffec, 0x9, 0xa1, 0xfffffffffffffffb, 0x8000000000000001, 0x3}, {0x70000000, 0x7, 0x3d78, 0xaca, 0x1, 0x7, 0x6, 0x9}], "502801faedeafab2bc970dbcf35d6e78ff84fcaa909559c8046acf8a48ae758c49e3c5ca0347fb7a03046aaf63e8153a0ac2e93fbbb5cc200ca95e01623f3dfc6313ceda5d3b5d51aa143a82799c5f06788f5804dbe7356fd3101fd038f862c6fbde072061496adffed99590b8a920f27d2589e1a6fd5c00c85301492b43d191808d511f9e4bd7f4e7d38ea4cd3e751122a89521357815d9a80d0538e528eb129458d826", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x8c4) ioctl$SG_GET_NUM_WAITING(r9, 0x227d, &(0x7f0000001c40)) ioctl$XFS_IOC_FSGEOMETRY_V4(0xffffffffffffffff, 0x8070587c, &(0x7f0000001cc0)) 1.159286474s ago: executing program 0 (id=1531): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000100), 0x64, 0x2, 0x0, 0x0, r1}) 1.158651746s ago: executing program 0 (id=1532): r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x9e8, 0x0, 0xa, 0x148, 0x8d8, 0x60, 0x970, 0x2a8, 0x2a8, 0x970, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x850, 0x8b8, 0x0, {0x200003ae, 0x7f00}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x3ff, 0x1}, {0x9}, {0x1, 0x3}, {}, {0x3, 0x3}, {0x4e, 0x2}, {0x25a5}, {0x0, 0x1}, {0x7}, {0x8001, 0x1}, {0xe, 0x3}], [{0x8, 0x80}, {0x8, 0x3a16}, {0x8, 0x8}, {0x5, 0x8}, {0x100, 0x8}, {0x5, 0x9}, {0x9, 0x421d}, {0x7, 0x5}, {0x6, 0x80000001}, {0x4, 0x7f}, {0x6, 0xb52}], 0x1, 0xb}, {[{0x4, 0x3}, {0x6, 0x3}, {0x80000001, 0x2}, {0xd, 0x1}, {0x21}, {0xfffffff9, 0x2}, {0x37}, {0x6, 0x2}, {0x6e318da7}, {0xff, 0x2}, {0x700000, 0x2}], [{0x5, 0x4}, {0x4, 0x1}, {0x0, 0x81}, {0x7, 0x4}, {0x8, 0x4}, {0x0, 0x9}, {0x8, 0x2}, {0xa, 0x46f}, {0x8, 0x9}, {0x9ae, 0x400}, {0x400, 0x6}], 0x8, 0x2}, {[{0x8}, {0x3, 0x3}, {0x8, 0x2}, {0x3, 0x1}, {0x8}, {0x7, 0x1}, {0x3, 0x3}, {0x8cc, 0x1}, {0x5a, 0x2}, {0x3, 0x2}, {0x4, 0x3}], [{0x5, 0xc00}, {0x4, 0xffff785e}, {0x0, 0x1}, {0x3}, {0x2, 0x3bb2}, {0x8, 0x56}, {0xf68, 0x1}, {0x4, 0x80000001}, {0xffff, 0x2a}, {0x401, 0x2}, {0x1, 0x4a8}], 0x0, 0x4}, {[{0xb}, {0x1ff, 0x2}, {0x80000001, 0x3}, {0x81, 0x2}, {0x52, 0x2}, {0x7, 0x1}, {0x6}, {0x1, 0x2}, {0x40, 0x2}, {0x4, 0x3}, {0x400, 0x2}], [{0x7, 0x2}, {0x5b, 0x1}, {0x0, 0x84b}, {0x195c}, {0x10000000}, {0x400, 0x2}, {0x68a, 0x5}, {0x101, 0x4}, {0x2c}, {0xfff, 0x4}, {0x6, 0x4}], 0x8, 0x3}, {[{0xc}, {0x71d}, {0x428}, {0x2, 0x2}, {0x7, 0x2}, {0x9, 0x2}, {0x80000000}, {0x23b}, {0x2, 0x3}, {0xfffffff7}, {0x6, 0x1}], [{0xe8, 0x4}, {0x7, 0x5}, {0xa, 0xac}, {0x8, 0xff}, {0x2, 0x2}, {0x7e7}, {0x0, 0x800}, {0x6, 0x8}, {0x6, 0xc}, {0x3, 0xc0000000}, {0x3c, 0x64e}], 0xa, 0xa}, {[{0x6, 0x1}, {0x0, 0x2}, {0x800, 0x2}, {0x8, 0x1}, {0x0, 0x1}, {0x4}, {0x789e, 0x1}, {0x5}, {0x226, 0x3}, {0x3, 0x2}, {0x65, 0x2}], [{0x71e, 0xd}, {0x6, 0x3}, {0x7, 0x501}, {0x7f, 0x10}, {0x1, 0xffffff7f}, {0x2, 0x9}, {0x6, 0x7036}, {0xf8a, 0x106}, {0x6, 0x1a}, {0x3, 0xc}, {0x8, 0x200}], 0xb, 0x2}, {[{0x0, 0x1}, {0x4358, 0x1}, {0x5, 0x1}, {0x6}, {0x8000, 0x2}, {0xa, 0x3}, {0x3, 0x2}, {0xbda, 0x1}, {0x5, 0x3}, {0x86e0, 0x3}, {0x7fffffff}], [{0xffffffff, 0x1}, {0x9, 0xe72f}, {0x9, 0xfffffff8}, {0x33, 0x8}, {0x5, 0x8}, {0x80000000, 0x94fc}, {0x600000, 0x8}, {0x1, 0x8}, {0x4, 0xfffffcff}, {0x8, 0xb}, {0x277}], 0x0, 0x3}, {[{0xf}, {0xff, 0x1}, {0x8, 0x2}, {0x6, 0x1}, {0x7, 0x2}, {0x8, 0x3}, {0x9}, {0xffff, 0x3}, {0x9}, {0x8, 0x1}, {0xff}], [{0x0, 0x8}, {0x300, 0xad}, {0x8, 0x4}, {0x9, 0x5}, {0x3, 0x1}, {0x100, 0x94}, {0x7, 0x9}, {0x4, 0x9}, {}, {0x4}, {0x1, 0x2}], 0x5}, {[{0x3ff, 0x2}, {0x8, 0x2}, {0x9, 0x2}, {0x0, 0x2}, {0x8, 0x3}, {0x9, 0x1}, {0x8000}, {0xffffffff, 0x2}, {0x4}, {0x3}, {0xfffffe00, 0x1}], [{0xe99, 0x6}, {0x200d18e2, 0x4}, {0x8, 0x10}, {0x3, 0xd}, {0x5, 0x3}, {0x4, 0x8}, {0x80000000, 0x3}, {0x7f0f, 0x6}, {0x8, 0xf65ffacc}, {0x2, 0x6}, {0xf, 0x5}], 0x6, 0x6}, {[{0x4}, {0x1, 0x1}, {0x2, 0x2}, {0x1, 0x3}, {0x3, 0x1}, {0xff, 0x2}, {0x5, 0x3}, {0x80000000, 0x3}, {0x0, 0x2}, {0xfffff800}, {0x4}], [{0x4, 0x6}, {0xe, 0x291a}, {0x401, 0xffff}, {0x3ff, 0x4}, {0xe976, 0x600}, {0x9, 0xc4e7}, {0xfffffff7, 0x1000}, {0x10, 0xfffffff9}, {0x4, 0x4}, {0x2, 0x8000}, {0x0, 0x3}], 0x5, 0x6}, {[{0x9, 0x2}, {0x1b, 0x1}, {0x4}, {0xe64a, 0x2}, {0x4, 0x3}, {0x3, 0x3}, {0x7, 0x1}, {0x1}, {0x80000001, 0x1}, {0x6, 0x1}, {0x400, 0x3}], [{0x6, 0x10000}, {0x1a002663, 0x69}, {0x8, 0x3}, {0xebb8, 0xe0}, {0x1, 0x8}, {0x1000, 0x3}, {0x5, 0x3}, {0x3, 0x3ff}, {0x7ff, 0x1ff}, {0x8, 0x2}, {0x6, 0x6642}], 0x2, 0xb}], 0x0, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x6, 0x3, 0x81, 'snmp_trap\x00', 'syz0\x00', {0x30f6a663}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x0, 0x8000}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0xa48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="d40000001b00010027bd7000fbdbdf2500000000000000000000000000000001000000000000000000000000000000014e2100044e2400030a00008089000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="010000000000008069040000000000000100000000000000d30000000000000000000000020000800600000000000000010000000000000000000100000000000100000000000000feffffffffffffff0101000000000000ff07000000000000fb000000bd6b6e00020000010000000007000000000000000a0010"], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480140001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205"], 0x108}}, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESOCT=r3]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') pread64(r4, &(0x7f0000000840)=""/4117, 0x1015, 0x3) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x12) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000100)=0x8) 1.158063466s ago: executing program 3 (id=1533): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="49532bbd7000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900080000009e00000004004280"], 0x2c}}, 0x6048004) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000597000/0x3000)=nil, 0x3000, 0x9, 0x28011, r2, 0x0) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000340)={&(0x7f0000fec000/0x13000)=nil, &(0x7f0000feb000/0x2000)=nil, 0x13000}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) memfd_create(&(0x7f00000012c0)='\\*$,!\x00', 0x0) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f00000007c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="18010000", @ANYRES16=r0, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0xc000}, 0x490c0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) socket$nl_route(0x10, 0x3, 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'veth0_virt_wifi\x00'}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x62, 0xfffffffffffffe74, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xff, 0x194, &(0x7f0000000980)="ffc4438e5c3081d0e133e812196ec0ed923733aa8b5aba32c8650e7a66d6136853773dfbc6226be13039e230d511f1ac50cc7811aac0400e4c833fedf842ae2918e6fddb550729246fcf4c0a01bc64989ea3985fb362751a83991bd56e761379caa64f6148893ff25f38d5cd6dd695bbf9ca709a9960e0e6b054d5e2239bcb7c0fb2ac66dc4c8f534e439ff20ccaf0d48a98c19c92a3b437a699350f49606d21a403f8c112c46fea5486bf367a854b0f6c1e563b656e4794f6793a08bb3656c391643f6df71d0255054368a938d38503d064da82d5dbf395ad47ed3932669168d324ed0f6de8360d499042ddc7d02b6c0772128257702bfe6d0971f00fea85da062cdc", &(0x7f00000007c0)="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", 0x2, 0x0, 0x3ff}, 0x24) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0xfffffffffffffe51, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r7, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="5c00000015006b0300224ed86e6c1d000a117ea6e070d6064e22000300000002250002000f00000017d34460bc24eab556a705251e6182949a00003d3b48dfd8cdbf9767b4fa51f62a64c9f4060046d88037e786a6d0a5d700000017", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100000ffffee000000000000050002"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) 1.059496087s ago: executing program 0 (id=1534): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-generic)\x00'}, 0x58) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f0000000780)={{r0, &(0x7f00000001c0)='xts(cast6)\x00', 0x0, &(0x7f0000000200)={@_ha_fsid={[0x2b, 0x200]}, {0x978b, 0x40, 0xf13a, 0xbb7e}}, 0x4, &(0x7f0000000240), &(0x7f0000000380)=0xdad}, 0x4, &(0x7f0000000700)=[{0x2, 0x6, &(0x7f00000003c0)='rfc4309(aegis128-generic)\x00', &(0x7f0000000400)="59abd89a526854471addec2edf3c2d7514c4a58682af290e2c87aba8c0c72abd3cbc36a436dd1ecbc8b0a261c23bc3b9ac4d086a2463a6fdb2a0be37e459a9bb609b1b1ecd51246bb1b05167010adf85203e57d49ca7dc97cddd2559fd6d7fce3ec22ee31443bbbcdcd44a8bda3f8d8c637a2923b85648f8a418c6335464cfabb11afc61d20a69d21f827ef4e62a1822b76e5b", 0x93, 0x10}, {0x3, 0x7, &(0x7f00000004c0)=':\x00', &(0x7f0000000500)="35ed096f", 0x4}, {0x1, 0x4, &(0x7f0000000540)='-[\x00', &(0x7f0000000580)="321ed7cb16b5ef03b74ff34ae056d42673aa18f5d4480159b3e81ac91a22ff47af4d9b80ee451611c0dea098e64f1e407b9fd273", 0x34, 0x28}, {0x2, 0x5, &(0x7f00000005c0)='/&\\~%%\x00', &(0x7f0000000600)="8808682ddd2ae33a59113900069e63e970704392828843c2004c2f898f034e29149ca66bb54025dd35f570e9c641c0d8ab980e32a69c4cc2405d0c645773139fd75e9ba275e98e9c6b498af76a9a6b442b8bcf45fea713d0fa018a10d8989e5547250f4e5fad7b3334c7ff194b695cf915ebe2e4a616d4b33db9bccd48e32aaf6a9fd9e4bac4786f4d11904f7c035934da5e27ec4180f470b62320c705f95d8fdd5959ad1c00f8ecefd0120409a088e78f086eb6b420847f55a72782e6ab8ac0846d12a723491340c53151155da03d4c285866d3a36013db162c769f96eb", 0xde, 0x20}]}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40ffff"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019008400"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, 0x0) sendmsg$nl_route(r1, 0x0, 0x44) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$alg(r0, 0x0, 0xffffffffffffff11) 1.056868791s ago: executing program 3 (id=1535): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x8be0, 0x0, 0x1, 0x465, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x2}, 0x50) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) ioctl$HIDIOCGRDESC(r2, 0x4008c002, 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0xe5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000340)={&(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x0, 0x0, r3}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xa, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x39, &(0x7f0000000140)=""/57, 0x41100, 0x21, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000280)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)=[{0x4, 0x4, 0x6, 0x5}], 0x10, 0x9}, 0x94) 770.223954ms ago: executing program 0 (id=1536): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0x971}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @adapter={0xfffffffffffffffe, 0x62e98893, 0x2, 0xfffffbff, 0x5}}]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000740)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000780)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000880)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02003cbd7000ffdbdf250f00003b6d2adc00", @ANYRES32=0x0, @ANYBLOB="0a0014007770616e3300000008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x20000045) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000002c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000300)={'wpan3\x00', 0x0}) r12 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="02002dbd7000fbdbdf25140000000c000600000000000100000008000300", @ANYRES32=r10, @ANYBLOB="080001000200000008000300", @ANYRES32=r11, @ANYBLOB="08001c00", @ANYRES32=r12, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYRESHEX=r13, @ANYRESDEC=0x0, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0004290001000000000000000000000000007e878e4e484a951ac15cf2628c22ed353cd221152a1940e2fe7a281f71b2925ea830250b6544fe15b5fa294c59925463395d65d61495f84f74a8ec3dfbccb1170e190970451bad4888532e0ea6c5ca0667cdf815647d87f1414099b38dfd5272f3e4ffcf8483ab9e7c9ddffc90109d9baa3e3492f9c181bb00"/155, @ANYRES32=r14, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x48015) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$IEEE802154_ADD_IFACE(r15, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x20004c80) sendmsg$IEEE802154_ASSOCIATE_REQ(r8, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x44, r16, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x86}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x7}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xfe7b15388dcb92db}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x16}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x16}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r17 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r17, 0x89ea, &(0x7f0000000000)) 448.059µs ago: executing program 2 (id=1537): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r1, &(0x7f0000000000)={0x2a, 0x1}, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc5}]}, 0x30}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getnexthop={0x28, 0x6a, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@NHA_FDB={0x4}, @NHA_GROUPS={0x4}, @NHA_ID={0xfffffffffffffeba}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x404c815) 0s ago: executing program 2 (id=1538): mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x400caed0, &(0x7f0000000400)={0x2, 0x0, @ioapic={0xffffffff, 0xb, 0x8, 0x9, 0x0, [{0xc, 0xe, 0x5, '\x00', 0x4}, {0xf, 0x0, 0x6, '\x00', 0x4}, {0xff, 0x7, 0xf, '\x00', 0x7f}, {0x8, 0x9f, 0x2, '\x00', 0x9}, {0x1, 0x0, 0x0, '\x00', 0x80}, {0x1, 0x8, 0xbd, '\x00', 0x7f}, {0x9, 0x0, 0xd1, '\x00', 0x2}, {0x9, 0x1, 0x49}, {0x3, 0x5e, 0x4, '\x00', 0x33}, {0x7, 0x3, 0x7f, '\x00', 0x4}, {0x8, 0x2, 0xfc, '\x00', 0xff}, {0x5, 0xb, 0xc4, '\x00', 0x4}, {0x40, 0x1, 0x4, '\x00', 0x9}, {0x5, 0x7}, {0xfd, 0x1, 0xc5, '\x00', 0x4}, {0x9, 0xc, 0x48, '\x00', 0x9}, {0x2, 0xc, 0x0, '\x00', 0xe}, {0x7, 0x6, 0x1b, '\x00', 0x2}, {0x4, 0x4, 0x3, '\x00', 0x4}, {0x42, 0x4e, 0x5, '\x00', 0x4}, {0xf0, 0x1, 0x7, '\x00', 0x1}, {0x78, 0x81, 0x5d, '\x00', 0x8}, {0xf, 0x10, 0xff, '\x00', 0x5}, {0x7f, 0x63, 0x5, '\x00', 0x3}]}}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x15) kernel console output (not intermixed with test programs): g attributes in process `syz.0.588'. [ 100.003786][ T8008] bond0 (unregistering): Released all slaves [ 100.289675][ T8020] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 100.292675][ T8020] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.302608][ T8020] vhci_hcd vhci_hcd.0: Device attached [ 100.311580][ T8021] vhci_hcd: connection closed [ 100.314435][ T6278] vhci_hcd vhci_hcd.3: stop threads [ 100.322569][ T6278] vhci_hcd vhci_hcd.3: release socket [ 100.325234][ T6278] vhci_hcd vhci_hcd.3: disconnect device [ 100.340675][ T40] audit: type=1326 audit(1780733621.799:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8023 comm="syz.2.593" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdec099ce59 code=0x0 [ 100.417323][ T8026] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 100.443639][ T8028] loop6: detected capacity change from 0 to 8 [ 100.451047][ T8029] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 100.456340][ T8029] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 100.562101][ T8028] Dev loop6: unable to read RDB block 8 [ 100.566195][ T8028] loop6: unable to read partition table [ 100.568976][ T8028] loop6: partition table beyond EOD, truncated [ 100.571569][ T8028] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 100.867448][ T5844] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 101.019789][ T5844] usb 5-1: not running at top speed; connect to a high speed hub [ 101.026581][ T5844] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1040, setting to 1023 [ 101.033022][ T5844] usb 5-1: New USB device found, idVendor=0582, idProduct=008b, bcdDevice= 0.40 [ 101.036728][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.040158][ T5844] usb 5-1: Product: syz [ 101.042048][ T5844] usb 5-1: Manufacturer: 팩卭즲鳎䕢㦳鹫⅚ᘧ䞿嘵ꃝꞤ叒ꭌ퍍페莡᥺皏ฒ닭∲泴陿閭훬않㺞┠枻⻠諰떛昳䭁竩ᥩ杤䳸骹풍岋뙂砂惰⸓갊藠勠禛탪㎢㑀遵޿恧醩쯂旳펽ﾲ巈剺Ỹ磦헶᭷⏲聸㾲ぢ♿秈攬輾궉쓀쬺㼾Ῑ礧✙⨏ [ 101.054098][ T5844] usb 5-1: SerialNumber: syz [ 101.240696][ T8058] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 101.251333][ T8058] bond2: entered promiscuous mode [ 101.253127][ T8058] 8021q: adding VLAN 0 to HW filter on device bond2 [ 101.268858][ T8058] erspan1: entered allmulticast mode [ 101.318707][ T8063] bond2 (unregistering): Released all slaves [ 101.320703][ T40] audit: type=1400 audit(1780733622.779:685): avc: denied { execute } for pid=8062 comm="syz.2.608" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 101.470628][ T5844] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 101.473233][ T5844] usb 5-1: invalid MIDI in EP 0 [ 101.516310][ T5844] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 101.536317][ T7450] udevd[7450]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.037193][ T8100] xt_ipcomp: unknown flags 1D [ 102.082141][ T8104] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 102.104851][ T8104] bond4: entered promiscuous mode [ 102.107573][ T8104] 8021q: adding VLAN 0 to HW filter on device bond4 [ 102.121127][ T8104] erspan1: entered allmulticast mode [ 102.158756][ T8102] /dev/nullb0: Can't open blockdev [ 102.174772][ T8107] bond4 (unregistering): Released all slaves [ 102.328461][ T8109] fuse: Bad value for 'fd' [ 102.404566][ T8112] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 103.037616][ T2055] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 103.168268][ T2055] usb 6-1: device descriptor read/64, error -71 [ 103.407516][ T2055] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 103.537424][ T2055] usb 6-1: device descriptor read/64, error -71 [ 103.632097][ T10] usb 5-1: USB disconnect, device number 6 [ 103.648632][ T2055] usb usb6-port1: attempt power cycle [ 103.998357][ T2055] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 104.028164][ T2055] usb 6-1: device descriptor read/8, error -71 [ 104.277494][ T2055] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 104.298502][ T2055] usb 6-1: device descriptor read/8, error -71 [ 104.374732][ T8139] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 104.378901][ T8139] __nla_validate_parse: 9 callbacks suppressed [ 104.378911][ T8139] netlink: 4 bytes leftover after parsing attributes in process `syz.0.632'. [ 104.420888][ T2055] usb usb6-port1: unable to enumerate USB device [ 104.484063][ T8148] netlink: 'syz.0.635': attribute type 1 has an invalid length. [ 104.494801][ T8148] bond0: entered promiscuous mode [ 104.496662][ T8148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.507704][ T8148] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 104.527943][ T8148] erspan1: entered allmulticast mode [ 104.574125][ T8156] netlink: 4 bytes leftover after parsing attributes in process `syz.0.635'. [ 104.584362][ T8156] bond0 (unregistering): Released all slaves [ 104.774372][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.778300][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.781880][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.785402][ T8167] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 104.792229][ T8167] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 104.800026][ T8167] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 104.811797][ T8169] nvme_fabrics: unknown parameter or missing value '' in ctrl creation request [ 104.812777][ T8167] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 104.828176][ T8167] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 104.840344][ T8176] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.849753][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.856426][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.860647][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.863311][ T8167] xfrm0 speed is unknown, defaulting to 1000 [ 104.909586][ T8182] netlink: 48 bytes leftover after parsing attributes in process `syz.3.643'. [ 104.964253][ T34] libceph: connect (1)[c::]:6789 error -101 [ 104.968008][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 104.971821][ T34] libceph: connect (1)[c::]:6789 error -101 [ 104.974344][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 105.047919][ T8184] ceph: No mds server is up or the cluster is laggy [ 105.141543][ T8190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 105.148231][ T8190] bridge1: entered promiscuous mode [ 105.149917][ T8190] bridge1: entered allmulticast mode [ 105.201840][ T8192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.647'. [ 105.691601][ T8200] fuse: Invalid rootmode [ 105.715333][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 105.715348][ T40] audit: type=1400 audit(1780733627.169:689): avc: denied { mount } for pid=8201 comm="syz.3.650" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 105.748995][ T62] Bluetooth: hci3: unexpected event for opcode 0x202f [ 105.792000][ T8204] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 105.819761][ T8213] netlink: 'syz.3.655': attribute type 1 has an invalid length. [ 105.835664][ T8216] openvswitch: netlink: Invalid VLAN frame [ 105.850865][ T8213] bond2: entered promiscuous mode [ 105.855146][ T8213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.856251][ T8218] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.656'. [ 105.861305][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.655'. [ 105.861885][ T8218] netlink: 4388 bytes leftover after parsing attributes in process `syz.2.656'. [ 105.871462][ T8213] erspan1: entered allmulticast mode [ 105.897609][ T8220] input: syz1 as /devices/virtual/input/input15 [ 105.899410][ T8220] input: failed to attach handler leds to device input15, error: -6 [ 105.921844][ T8221] netlink: 4 bytes leftover after parsing attributes in process `syz.3.655'. [ 105.927735][ T8221] bond2 (unregistering): Released all slaves [ 105.948249][ T8223] Cannot find del_set index 14804 as target [ 105.990062][ T8229] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8229 comm=syz.2.660 [ 106.002766][ T8229] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 106.004969][ T8229] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.009169][ T8229] vhci_hcd vhci_hcd.0: Device attached [ 106.016465][ T8231] vhci_hcd: connection closed [ 106.018124][ T6285] vhci_hcd vhci_hcd.2: stop threads [ 106.021472][ T6285] vhci_hcd vhci_hcd.2: release socket [ 106.024447][ T6285] vhci_hcd vhci_hcd.2: disconnect device [ 106.085015][ T8238] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 106.103065][ T8238] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 106.332060][ T8257] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 106.471584][ T40] audit: type=1400 audit(1780733627.929:690): avc: denied { read } for pid=8264 comm="syz.1.672" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 106.519207][ T40] audit: type=1400 audit(1780733627.979:691): avc: denied { cmd } for pid=8266 comm="syz.1.673" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 106.579336][ T8270] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 106.579357][ T8271] netlink: 'syz.3.674': attribute type 1 has an invalid length. [ 106.590139][ T8270] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 106.593037][ T8270] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 106.596283][ T8270] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 106.596304][ T40] audit: type=1400 audit(1780733628.049:692): avc: denied { firmware_load } for pid=8269 comm="syz.3.674" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 106.637610][ T2055] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 106.644953][ T8271] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 106.645333][ T8273] bond3: entered promiscuous mode [ 106.648071][ T8271] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 106.649821][ T8273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.652121][ T8271] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 106.666577][ T8273] 8021q: adding VLAN 0 to HW filter on device bond3 [ 106.669059][ T8273] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 106.672765][ T8273] bond3: (slave sit2): Error -95 calling set_mac_address [ 106.800025][ T2055] usb 5-1: Using ep0 maxpacket: 32 [ 106.804293][ T2055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.810485][ T2055] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.814433][ T2055] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 106.821544][ T2055] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.829294][ T2055] usb 5-1: config 0 descriptor?? [ 106.841401][ T5833] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 106.874328][ T62] Bluetooth: hci1: Malformed LE Event: 0x02 [ 106.875722][ T8294] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 106.886228][ T40] audit: type=1400 audit(1780733628.339:693): avc: denied { map } for pid=8293 comm="syz.3.679" path="socket:[24578]" dev="sockfs" ino=24578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 106.899801][ T8294] autofs: Bad value for 'fd' [ 106.998147][ T8304] bridge1: port 1(veth3) entered blocking state [ 107.000239][ T8304] bridge1: port 1(veth3) entered disabled state [ 107.002402][ T8304] veth3: entered allmulticast mode [ 107.004950][ T8304] veth3: entered promiscuous mode [ 107.042422][ T8304] bridge1: port 2(veth5) entered blocking state [ 107.045291][ T8304] bridge1: port 2(veth5) entered disabled state [ 107.049686][ T8304] veth5: entered allmulticast mode [ 107.054503][ T8304] veth5: entered promiscuous mode [ 107.252031][ T2055] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 107.498540][ T8261] syz_tun: entered allmulticast mode [ 107.509584][ T8261] dvmrp8: entered allmulticast mode [ 107.516146][ T8260] syz_tun: left allmulticast mode [ 107.519223][ T2055] usb 5-1: USB disconnect, device number 7 [ 107.843965][ T8316] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 107.886967][ T8319] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 107.895344][ T5882] IPVS: starting estimator thread 0... [ 107.943081][ T40] audit: type=1400 audit(1780733629.399:694): avc: denied { module_request } for pid=8323 comm="syz.3.689" kmod="netdev-syzkaller0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 107.975005][ T40] audit: type=1400 audit(1780733629.429:695): avc: denied { write } for pid=8327 comm="syz.2.690" name="/" dev="9p" ino=72877853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 107.997552][ T8322] IPVS: using max 28 ests per chain, 67200 per kthread [ 108.064614][ T40] audit: type=1400 audit(1780733629.519:696): avc: denied { write } for pid=8334 comm="syz.1.692" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 108.202630][ T40] audit: type=1400 audit(1780733629.659:697): avc: denied { ioctl } for pid=8348 comm="syz.1.698" path="pid:[4026533829]" dev="nsfs" ino=4026533829 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.341108][ T8361] netlink: 'syz.2.702': attribute type 1 has an invalid length. [ 108.372412][ T8363] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 108.374906][ T34] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 108.653212][ T8381] kvm: pic: single mode not supported [ 108.653287][ T8381] kvm: pic: level sensitive irq not supported [ 109.091838][ T40] audit: type=1400 audit(1780733630.549:698): avc: denied { lock } for pid=8403 comm="syz.0.716" path="socket:[23297]" dev="sockfs" ino=23297 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 109.229171][ T8410] program syz.1.717 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.267307][ T8415] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 109.421924][ T8429] __nla_validate_parse: 7 callbacks suppressed [ 109.421935][ T8429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 109.428249][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 109.502031][ T8431] xt_hashlimit: size too large, truncated to 1048576 [ 109.601233][ T8435] netlink: 20 bytes leftover after parsing attributes in process `syz.3.725'. [ 109.616256][ T8435] macsec1: entered promiscuous mode [ 109.628796][ T8437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.726'. [ 109.643168][ T8437] 8021q: adding VLAN 0 to HW filter on device bond4 [ 109.657687][ T8437] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 109.735821][ T8443] netlink: 24 bytes leftover after parsing attributes in process `syz.3.728'. [ 109.741153][ T8446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.746381][ T8445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.877489][ T8452] netlink: 200 bytes leftover after parsing attributes in process `syz.2.729'. [ 109.915072][ T8454] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.922604][ T8454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.730'. [ 110.277887][ T8488] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 110.416932][ T8509] netlink: 168 bytes leftover after parsing attributes in process `syz.2.745'. [ 110.423507][ T8509] IPVS: nq: FWM 3 0x00000003 - no destination available [ 110.460308][ T8512] netlink: 'syz.0.746': attribute type 2 has an invalid length. [ 110.473263][ T8514] netlink: 52 bytes leftover after parsing attributes in process `syz.2.747'. [ 110.476434][ T8514] netlink: 76 bytes leftover after parsing attributes in process `syz.2.747'. [ 110.542951][ T62] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 110.769163][ T8544] loop2: detected capacity change from 0 to 7 [ 110.775760][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 110.775770][ T40] audit: type=1400 audit(1780733632.229:711): avc: denied { connect } for pid=8547 comm="syz.2.755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 110.775993][ T8544] Dev loop2: unable to read RDB block 7 [ 110.787459][ T8544] loop2: unable to read partition table [ 110.789382][ T8544] loop2: partition table beyond EOD, truncated [ 110.791513][ T8544] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 110.811824][ T40] audit: type=1400 audit(1780733632.269:712): avc: denied { write } for pid=8549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.836407][ T5144] Dev loop2: unable to read RDB block 7 [ 110.842096][ T5144] loop2: unable to read partition table [ 110.846884][ T5144] loop2: partition table beyond EOD, truncated [ 110.865813][ T40] audit: type=1400 audit(1780733632.319:713): avc: denied { relabelfrom } for pid=8552 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 110.887749][ T40] audit: type=1400 audit(1780733632.339:714): avc: denied { write } for pid=8555 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.894880][ T40] audit: type=1400 audit(1780733632.339:715): avc: denied { relabelto } for pid=8552 comm="syz.1.756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 110.972754][ T8567] bond0: (slave sit0): refused to change device type [ 111.016830][ T8569] IPv6: addrconf: prefix option has invalid lifetime [ 111.056177][ T8573] xt_cluster: node mask cannot exceed total number of nodes [ 111.130887][ T8578] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1042 sclass=netlink_route_socket pid=8578 comm=syz.1.765 [ 111.206707][ T8576] kvm_pr_unimpl_wrmsr: 3 callbacks suppressed [ 111.206724][ T8576] kvm: kvm [8575]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x22 [ 111.236966][ T40] audit: type=1400 audit(1780733632.689:716): avc: denied { lock } for pid=8581 comm="syz.2.766" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 111.321521][ T40] audit: type=1400 audit(1780733632.779:717): avc: denied { write } for pid=8589 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.412910][ T40] audit: type=1400 audit(1780733632.869:718): avc: denied { write } for pid=8602 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.444858][ T8604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.448765][ T8604] batadv_slave_1: entered promiscuous mode [ 111.509705][ T40] audit: type=1400 audit(1780733632.969:719): avc: denied { mount } for pid=8616 comm="syz.1.773" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 111.516543][ T40] audit: type=1400 audit(1780733632.969:720): avc: denied { mounton } for pid=8616 comm="syz.1.773" path="/202/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 111.554479][ T8622] program syz.0.775 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.560174][ T8623] netlink: 'syz.1.774': attribute type 4 has an invalid length. [ 111.693231][ T8635] netlink: 'syz.3.779': attribute type 2 has an invalid length. [ 111.847483][ T5844] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 111.997452][ T5844] usb 6-1: Using ep0 maxpacket: 8 [ 112.000263][ T5844] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.003378][ T5844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 112.006422][ T5844] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 112.009527][ T5844] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 112.013486][ T5844] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 112.016252][ T5844] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.115310][ T8654] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 112.233833][ T5844] usb 6-1: GET_CAPABILITIES returned 0 [ 112.235685][ T5844] usbtmc 6-1:16.0: can't read capabilities [ 112.241135][ T8666] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 112.303698][ T8667] cgroup2: Unknown parameter 'smackfstransmute' [ 112.333861][ T8669] syzkaller1: entered promiscuous mode [ 112.335581][ T8669] syzkaller1: entered allmulticast mode [ 112.436945][ C2] usbtmc 6-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 112.444727][ T5844] usb 6-1: USB disconnect, device number 11 [ 112.597829][ T62] Bluetooth: hci0: Invalid handle: 0x6564 > 0x0eff [ 112.902185][ T8699] Invalid argument reading file caps for ./file0 [ 112.959292][ T8704] netlink: 'syz.0.799': attribute type 1 has an invalid length. [ 112.972715][ T8704] bond0: entered promiscuous mode [ 112.974562][ T8704] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.993685][ T8704] erspan1: entered allmulticast mode [ 113.040798][ T8710] bond0 (unregistering): Released all slaves [ 113.043712][ T8712] netlink: 'syz.1.801': attribute type 11 has an invalid length. [ 113.083384][ T8712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.100651][ T8712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.113229][ T8712] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.116622][ T8712] 8021q: adding VLAN 0 to HW filter on device bond2 [ 113.125069][ T8712] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.135586][ T6285] bridge1: port 1(veth3) entered blocking state [ 113.137747][ T6285] bridge1: port 1(veth3) entered forwarding state [ 113.141064][ T6285] bridge1: port 2(veth5) entered blocking state [ 113.143081][ T6285] bridge1: port 2(veth5) entered forwarding state [ 113.178810][ T8717] binder: BINDER_SET_CONTEXT_MGR already set [ 113.183217][ T8717] binder: 8716:8717 ioctl 4018620d 200000000040 returned -16 [ 113.186615][ T8717] binder: 8716:8717 ioctl c0306201 0 returned -14 [ 113.314903][ T8732] SELinux: policydb string does not match my string SE Linux [ 113.317518][ T8732] SELinux: failed to load policy [ 113.569624][ T8758] raw_sendmsg: syz.3.812 forgot to set AF_INET. Fix it! [ 113.681469][ T8780] comedi comedi3: no devices specified [ 113.793245][ T8770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.799035][ T8770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.847628][ T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 113.871050][ T8801] netlink: 'syz.1.826': attribute type 1 has an invalid length. [ 113.898034][ T8801] bond5: entered promiscuous mode [ 113.901028][ T8801] 8021q: adding VLAN 0 to HW filter on device bond5 [ 113.915064][ T8801] erspan1: entered allmulticast mode [ 113.931407][ T8809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=8809 comm=syz.2.827 [ 113.937496][ T8809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=8809 comm=syz.2.827 [ 113.942770][ T8809] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8209 sclass=netlink_route_socket pid=8809 comm=syz.2.827 [ 113.968876][ T8812] bond5 (unregistering): Released all slaves [ 113.977627][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.197654][ T24] usb 8-1: device descriptor read/64, error -71 [ 114.327467][ T5844] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 114.437423][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 114.489317][ T5844] usb 5-1: unable to get BOS descriptor or descriptor too short [ 114.493760][ T5844] usb 5-1: config 8 has an invalid interface number: 58 but max is 0 [ 114.497464][ T5844] usb 5-1: config 8 has no interface number 0 [ 114.500143][ T5844] usb 5-1: config 8 interface 58 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 114.507324][ T5844] usb 5-1: string descriptor 0 read error: -22 [ 114.510759][ T5844] usb 5-1: New USB device found, idVendor=0572, idProduct=1340, bcdDevice=4c.0d [ 114.514556][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.522572][ T8822] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 114.577560][ T24] usb 8-1: device descriptor read/64, error -71 [ 114.611202][ T8826] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.689730][ T8832] __nla_validate_parse: 13 callbacks suppressed [ 114.689774][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.836'. [ 114.689825][ T24] usb usb8-port1: attempt power cycle [ 114.729797][ T8822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.733568][ T8822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.737073][ T8822] netlink: 'syz.0.832': attribute type 2 has an invalid length. [ 114.742007][ T34] usb 5-1: USB disconnect, device number 8 [ 114.958017][ T8843] xt_hashlimit: size too large, truncated to 1048576 [ 115.033343][ T8845] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.047443][ T24] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 115.056543][ T8843] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 115.067825][ T24] usb 8-1: device descriptor read/8, error -71 [ 115.128369][ T8850] netlink: 'syz.2.841': attribute type 1 has an invalid length. [ 115.140716][ T8850] bond4: entered promiscuous mode [ 115.142652][ T8850] 8021q: adding VLAN 0 to HW filter on device bond4 [ 115.148856][ T8850] netlink: 8 bytes leftover after parsing attributes in process `syz.2.841'. [ 115.156802][ T8850] erspan1: entered allmulticast mode [ 115.205698][ T8852] netlink: 4 bytes leftover after parsing attributes in process `syz.2.841'. [ 115.210438][ T8852] bond4 (unregistering): Released all slaves [ 115.307612][ T24] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 115.341572][ T24] usb 8-1: device descriptor read/8, error -71 [ 115.448045][ T24] usb usb8-port1: unable to enumerate USB device [ 115.920574][ T8889] block nbd2: NBD_DISCONNECT [ 115.939484][ T8888] block nbd2: Disconnected due to user request. [ 115.944182][ T8888] block nbd2: shutting down sockets [ 116.052220][ T8896] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.193328][ T8904] netlink: 'syz.0.856': attribute type 1 has an invalid length. [ 116.198028][ T62] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 116.204741][ T8899] /dev/nullb0: Can't open blockdev [ 116.267480][ T5833] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 116.417523][ T5833] usb 8-1: device descriptor read/64, error -71 [ 116.515676][ T8917] netlink: 'syz.1.860': attribute type 1 has an invalid length. [ 116.535353][ T8917] bond5: entered promiscuous mode [ 116.539089][ T8917] 8021q: adding VLAN 0 to HW filter on device bond5 [ 116.547309][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.860'. [ 116.560283][ T8917] erspan1: entered allmulticast mode [ 116.606861][ T8919] netlink: 4 bytes leftover after parsing attributes in process `syz.1.860'. [ 116.615170][ T8919] bond5 (unregistering): Released all slaves [ 116.658800][ T5833] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 117.078367][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 117.078385][ T40] audit: type=1400 audit(1780733638.539:738): avc: denied { read write } for pid=8931 comm="syz.3.864" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.091595][ T40] audit: type=1400 audit(1780733638.539:739): avc: denied { open } for pid=8931 comm="syz.3.864" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.131603][ T40] audit: type=1400 audit(1780733638.589:740): avc: denied { ioctl } for pid=8931 comm="syz.3.864" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c81 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 117.196701][ T8942] syzkaller0: entered promiscuous mode [ 117.199093][ T8942] syzkaller0: entered allmulticast mode [ 117.363694][ T8954] syzkaller0: entered promiscuous mode [ 117.365756][ T8954] syzkaller0: entered allmulticast mode [ 117.666225][ T8969] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 117.732558][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 117.733202][ T8978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.878'. [ 117.786689][ T8981] netlink: 188 bytes leftover after parsing attributes in process `syz.1.879'. [ 117.791044][ T62] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 117.868758][ T8981] (syz.1.879,8981,1):ocfs2_get_sector:1714 ERROR: status = -5 [ 117.877733][ T8981] (syz.1.879,8981,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 117.880338][ T8981] (syz.1.879,8981,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 117.883394][ T8981] (syz.1.879,8981,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 117.883882][ T8988] netlink: 108 bytes leftover after parsing attributes in process `syz.0.881'. [ 117.896585][ T40] audit: type=1400 audit(1780733639.349:741): avc: denied { create } for pid=8980 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 117.945465][ T8993] wg1: entered promiscuous mode [ 117.948833][ T8993] team0: Device wg1 is up. Set it down before adding it as a team port [ 118.004011][ T40] audit: type=1400 audit(1780733639.459:742): avc: denied { mounton } for pid=8998 comm="syz.0.886" path="/248/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 118.018310][ T8997] netlink: 'syz.3.884': attribute type 1 has an invalid length. [ 118.034740][ T8997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 118.078520][ T8997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.884'. [ 118.089266][ T40] audit: type=1400 audit(1780733639.549:743): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 118.186382][ T40] audit: type=1400 audit(1780733639.639:744): avc: denied { accept } for pid=9021 comm="syz.3.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.199801][ T40] audit: type=1400 audit(1780733639.659:745): avc: denied { bpf } for pid=9022 comm="syz.1.891" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.210786][ T40] audit: type=1400 audit(1780733639.659:746): avc: denied { perfmon } for pid=9022 comm="syz.1.891" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 118.246861][ T9028] overlayfs: missing 'lowerdir' [ 118.383777][ T40] audit: type=1400 audit(1780733639.839:747): avc: denied { listen } for pid=9042 comm="syz.1.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 118.520931][ T9055] netlink: 'syz.2.897': attribute type 11 has an invalid length. [ 119.047606][ T5882] usb 8-1: new low-speed USB device number 14 using dummy_hcd [ 119.181097][ T34] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 119.209235][ T5882] usb 8-1: unable to get BOS descriptor or descriptor too short [ 119.213594][ T5882] usb 8-1: config 8 has an invalid interface number: 198 but max is 0 [ 119.217769][ T5882] usb 8-1: config 8 has no interface number 0 [ 119.220517][ T5882] usb 8-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 119.228802][ T5882] usb 8-1: string descriptor 0 read error: -22 [ 119.231918][ T5882] usb 8-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 119.235787][ T5882] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.243624][ T9084] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 119.332060][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.339395][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.342406][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 119.346727][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 119.349882][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.354517][ T34] usb 6-1: config 0 descriptor?? [ 119.372961][ T9112] tmpfs: Bad value for 'mpol' [ 119.539904][ T9119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.544188][ T9119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.570635][ T5833] usb 8-1: USB disconnect, device number 14 [ 119.611494][ T9131] f2fs: Unknown parameter 'grpquota' [ 119.625934][ T9127] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.627569][ T9126] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 119.757227][ T9141] loop6: detected capacity change from 0 to 8 [ 119.781140][ T34] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x6 [ 119.785389][ T34] plantronics 0003:047F:FFFF.0003: item fetching failed at offset 14/15 [ 119.790449][ T34] plantronics 0003:047F:FFFF.0003: parse failed [ 119.793266][ T34] plantronics 0003:047F:FFFF.0003: probe with driver plantronics failed with error -22 [ 119.892122][ T9141] Dev loop6: unable to read RDB block 8 [ 119.894452][ T9141] loop6: unable to read partition table [ 119.896905][ T9141] loop6: partition table beyond EOD, truncated [ 119.900656][ T9141] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 119.918281][ T9150] nbd: must specify at least one socket [ 119.951495][ T62] Bluetooth: hci0: unexpected event for opcode 0x203d [ 120.042729][ T5882] usb 6-1: USB disconnect, device number 12 [ 120.067566][ T5833] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 120.212457][ T9163] trusted_key: syz.0.928 sent an empty control message without MSG_MORE. [ 120.240733][ T5833] usb 8-1: Using ep0 maxpacket: 8 [ 120.246706][ T5833] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 120.253192][ T5833] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 120.257686][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.264446][ T5833] usb 8-1: config 0 descriptor?? [ 120.322885][ T9165] netlink: 'syz.0.929': attribute type 2 has an invalid length. [ 120.480802][ T5833] iowarrior 8-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 120.588581][ T9199] __nla_validate_parse: 8 callbacks suppressed [ 120.588599][ T9199] netlink: 40 bytes leftover after parsing attributes in process `syz.1.935'. [ 120.599330][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.604670][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.606992][ T9201] comedi comedi3: s526: a I/O base address must be specified [ 120.610327][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.613310][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.616107][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.619384][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.621615][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.623830][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.626013][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.628704][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.631909][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.634291][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.636531][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.639208][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.641395][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.643709][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.646056][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.650023][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.652752][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.655246][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.658396][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.660931][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.663096][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.665447][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.667951][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.671277][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.674475][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.677723][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.680761][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.683292][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.936'. [ 120.683773][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.690846][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.694117][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.697171][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.704222][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.704660][ T5882] usb 8-1: USB disconnect, device number 15 [ 120.709104][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.712914][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.719334][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.722970][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.726069][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.736758][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.740424][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.743626][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.747160][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.751024][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.754356][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.757928][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.761451][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.765058][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.770058][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.776949][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.792136][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.795446][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.799261][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.802481][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.805849][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.809249][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.812231][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.815269][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.819727][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.822735][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.825035][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.828112][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.830439][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.832681][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.834914][ T9199] comedi comedi3: comedi_config --init_data is deprecated [ 120.941941][ T9227] kAFS: unparsable volume name [ 121.047496][ T9195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.933'. [ 121.210201][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.944'. [ 121.228357][ T9249] program syz.2.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.318569][ T9254] netlink: 'syz.0.947': attribute type 1 has an invalid length. [ 121.321177][ T9255] netlink: 'syz.2.946': attribute type 6 has an invalid length. [ 121.329510][ T9255] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 121.351497][ T9254] bond0: entered promiscuous mode [ 121.353795][ T9254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.360723][ T9254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 121.368302][ T9254] erspan1: entered allmulticast mode [ 121.384166][ T9251] xfrm0 speed is unknown, defaulting to 1000 [ 121.421117][ T9259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.947'. [ 121.433168][ T9259] bond0 (unregistering): Released all slaves [ 121.595284][ T9273] overlayfs: invalid origin (0000006f7665726c) [ 121.675981][ T9280] workqueue: Failed to create a rescuer kthread for wq "nfc5_nci_tx_wq": -EINTR [ 121.799664][ T9303] program syz.3.957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 121.879479][ T9311] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1im]7(a H] [ 122.095176][ T9325] netlink: 64 bytes leftover after parsing attributes in process `syz.0.963'. [ 122.149440][ T40] kauditd_printk_skb: 15 callbacks suppressed [ 122.149458][ T40] audit: type=1400 audit(1780733643.609:763): avc: denied { write } for pid=9326 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.218915][ T9334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 122.225410][ T9334] netlink: 11 bytes leftover after parsing attributes in process `syz.0.965'. [ 122.257650][ T5833] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 122.274219][ T9337] tipc: Resetting bearer [ 122.282680][ T9337] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 122.344901][ T9341] netlink: 'syz.0.968': attribute type 1 has an invalid length. [ 122.410823][ T5833] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.414303][ T5833] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.417327][ T5833] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.420650][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.426995][ T9318] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 122.432014][ T5833] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.637822][ T10] usb 8-1: USB disconnect, device number 16 [ 122.645229][ T40] audit: type=1400 audit(1780733644.099:764): avc: denied { append } for pid=9346 comm="syz.1.970" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 122.855429][ T40] audit: type=1400 audit(1780733644.309:765): avc: denied { setopt } for pid=9356 comm="syz.1.973" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 122.902799][ T40] audit: type=1400 audit(1780733644.359:766): avc: denied { write } for pid=9358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.973187][ T9364] xt_l2tp: missing protocol rule (udp|l2tpip) [ 122.973980][ T40] audit: type=1400 audit(1780733644.429:767): avc: denied { write } for pid=9362 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.019318][ T40] audit: type=1400 audit(1780733644.479:768): avc: denied { getopt } for pid=9368 comm="syz.2.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 123.104578][ T9373] 8021q: VLANs not supported on ip6_vti0 [ 123.230979][ T9375] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 123.387204][ T40] audit: type=1400 audit(1780733644.839:769): avc: denied { wake_alarm } for pid=9386 comm="syz.3.983" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 123.407139][ T9391] netlink: 'syz.0.984': attribute type 1 has an invalid length. [ 123.430718][ T9391] bond2: entered promiscuous mode [ 123.432805][ T9391] 8021q: adding VLAN 0 to HW filter on device bond2 [ 123.439083][ T9391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.984'. [ 123.450383][ T9391] erspan1: entered allmulticast mode [ 123.451274][ T9394] /dev/nullb0: Can't open blockdev [ 123.500406][ T9396] bond2 (unregistering): Released all slaves [ 123.515338][ T9385] binder: 9384:9385 ioctl 8138ae83 7fdec18faa90 returned -22 [ 123.700767][ T9357] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 123.715938][ T40] audit: type=1400 audit(1780733645.169:770): avc: denied { lock } for pid=9403 comm="syz.3.988" path="socket:[30126]" dev="sockfs" ino=30126 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 123.768648][ T9414] openvswitch: netlink: Missing key (keys=40, expected=100) [ 123.770172][ T40] audit: type=1400 audit(1780733645.229:771): avc: denied { name_bind } for pid=9412 comm="syz.3.990" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 123.886623][ T9431] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=257 sclass=netlink_route_socket pid=9431 comm=syz.2.993 [ 123.927021][ T9440] sg_write: data in/out 16777180/10 bytes for SCSI command 0x0-- guessing data in; [ 123.927021][ T9440] program syz.2.996 not setting count and/or reply_len properly [ 124.129267][ T40] audit: type=1400 audit(1780733645.579:772): avc: denied { watch } for pid=9451 comm="syz.2.1001" path="/235/file0" dev="tmpfs" ino=1258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 124.140456][ T9450] xt_socket: unknown flags 0xc [ 124.377036][ T9470] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 124.380254][ T9470] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 124.385417][ T9470] /dev/nullb0: Can't open blockdev [ 124.390617][ T9466] syzkaller0: entered promiscuous mode [ 124.393106][ T9466] syzkaller0: entered allmulticast mode [ 124.584504][ T9486] xt_hashlimit: size too large, truncated to 1048576 [ 124.937887][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.257743][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 125.427506][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 125.432045][ T10] usb 6-1: config 1 has an invalid descriptor of length 39, skipping remainder of the config [ 125.436303][ T10] usb 6-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.443190][ T10] usb 6-1: config 1 interface 0 has no altsetting 0 [ 125.448902][ T10] usb 6-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.40 [ 125.452809][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.456126][ T10] usb 6-1: Product: 걮曖챭फ껗紛銘矧氎溕狿꼑忶ইઝ匐깹荤膗ໂ苂ᣥ傏䵛ᩁ픰ꖮ瀙䔹눭苯힑汻㫇ସꯙ쾖 [ 125.462135][ T10] usb 6-1: Manufacturer: ꮫp禎粆㼥뵫᮴ꪅ煋浆둶瞗렱⛑혢Ⓑ죈쐮⠥䄬쫤ꯁ孜᭼㤷ᨓᏠ畺ǎ귫䍎쁆貾㎋Ⴧꛑ淳䇉ă밖끝╌쪡㳏Ჰ똓ⳭㅛⳬẶꤿ퐹鷓쬗ཷᤪⓃ⽿玁ꞑ峁俐㘶峜ꍣ姻啼녁ꤣꯆ蝂챱幖멊輸ᩝ◍ꪰᳩ豌촴毄灀ﭠซ≋ѥ륶浣귧赧ᆓꛐ숬ꓖ皷开趜 [ 125.475209][ T10] usb 6-1: SerialNumber: ࠚ [ 125.637605][ T9525] overlayfs: only single ':' or double '::' sequences of unescaped colons in lowerdir mount option allowed. [ 125.674164][ T9527] netlink: 'syz.2.1020': attribute type 1 has an invalid length. [ 125.692790][ T9527] 8021q: adding VLAN 0 to HW filter on device bond4 [ 125.696199][ T9527] netlink: 'syz.2.1020': attribute type 10 has an invalid length. [ 125.698949][ T9527] __nla_validate_parse: 9 callbacks suppressed [ 125.698958][ T9527] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1020'. [ 125.704252][ T9527] dummy0: entered promiscuous mode [ 125.708281][ T9527] netlink: 'syz.2.1020': attribute type 1 has an invalid length. [ 125.760933][ T9512] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1015'. [ 125.789276][ T10] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 125.794628][ T10] usb 6-1: USB disconnect, device number 13 [ 125.921580][ T9536] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.964111][ T9538] veth0_virt_wifi: entered promiscuous mode [ 125.966736][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1023'. [ 126.080674][ T9543] netlink: 'syz.0.1025': attribute type 1 has an invalid length. [ 126.096647][ T9543] bond2: entered promiscuous mode [ 126.099436][ T9543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 126.110159][ T9543] erspan1: entered allmulticast mode [ 126.140967][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561ec000: rx timeout, send abort [ 126.145816][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880561ed800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.158637][ T9545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1025'. [ 126.163530][ T9545] bond2 (unregistering): Released all slaves [ 126.536531][ T9550] bond5: Removing last ns target with arp_interval on [ 126.544901][ T9550] gfs2: error -5 reading superblock [ 126.645106][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880561ec000: abort rx timeout. Force session deactivation [ 126.826694][ T9571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1030'. [ 126.881413][ T9582] dlm: non-version read from control device 0 [ 127.102270][ T9590] xfrm0 speed is unknown, defaulting to 1000 [ 127.251641][ T9619] netlink: 'syz.3.1038': attribute type 1 has an invalid length. [ 127.305545][ T9619] bond3: entered promiscuous mode [ 127.308325][ T9619] 8021q: adding VLAN 0 to HW filter on device bond3 [ 127.315485][ T9624] erspan1: entered allmulticast mode [ 127.376180][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1038'. [ 127.387994][ T9619] bond3 (unregistering): Released all slaves [ 127.424321][ T9631] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1040'. [ 127.428867][ T9631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1040'. [ 127.432886][ T9631] openvswitch: netlink: Flow key attr not present in new flow. [ 127.659026][ T62] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 127.669237][ T62] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.749255][ T9649] /dev/sr0: Can't open blockdev [ 127.761386][ T9654] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 127.933614][ T9682] ntfs3(sr0): Primary boot signature is not NTFS. [ 127.936820][ T9682] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 128.010424][ T40] kauditd_printk_skb: 14 callbacks suppressed [ 128.010440][ T40] audit: type=1400 audit(1780733649.469:787): avc: denied { listen } for pid=9685 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.047554][ T40] audit: type=1400 audit(1780733649.509:788): avc: denied { lock } for pid=9687 comm="syz.0.1058" path="socket:[30708]" dev="sockfs" ino=30708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 128.066773][ T40] audit: type=1400 audit(1780733649.519:789): avc: denied { write } for pid=9687 comm="syz.0.1058" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 128.103934][ T40] audit: type=1400 audit(1780733649.559:790): avc: denied { setopt } for pid=9685 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.110689][ T40] audit: type=1400 audit(1780733649.559:791): avc: denied { read } for pid=9685 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 128.557085][ T9711] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1062'. [ 128.677426][ T34] usb 8-1: new low-speed USB device number 17 using dummy_hcd [ 128.780738][ T40] audit: type=1400 audit(1780733650.239:792): avc: denied { lock } for pid=9715 comm="syz.2.1067" path="socket:[32928]" dev="sockfs" ino=32928 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 128.839087][ T34] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 128.843348][ T34] usb 8-1: config 0 has no interface number 0 [ 128.846086][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.850850][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 128.855726][ T34] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 128.865948][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 128.870728][ T34] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 128.875395][ T34] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 128.885294][ T34] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 128.897465][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.903140][ T34] usb 8-1: config 0 descriptor?? [ 128.908948][ T9709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.911999][ T9709] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 128.920733][ T34] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 129.031339][ T9735] netlink: 'syz.2.1074': attribute type 16 has an invalid length. [ 129.034881][ T9735] netlink: 'syz.2.1074': attribute type 3 has an invalid length. [ 129.041830][ T9735] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1074'. [ 129.105963][ T9741] netlink: 'syz.2.1076': attribute type 1 has an invalid length. [ 129.114757][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.120906][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.125346][ T9709] ldusb 8-1:0.55: Write buffer overflow, 16 bytes dropped [ 129.130930][ T9710] ldusb 8-1:0.55: Write buffer overflow, 16 bytes dropped [ 129.135294][ T24] usb 8-1: USB disconnect, device number 17 [ 129.149827][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 129.195899][ T9747] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 129.202369][ T40] audit: type=1400 audit(1780733650.659:793): avc: denied { append } for pid=9746 comm="syz.2.1077" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 129.392377][ T9767] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.396714][ T9767] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 129.400811][ T9767] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 129.403204][ T9767] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 129.575959][ T9769] xfrm0 speed is unknown, defaulting to 1000 [ 129.675530][ T40] audit: type=1400 audit(1780733651.129:794): avc: denied { create } for pid=9780 comm="syz.2.1085" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 129.820144][ T40] audit: type=1400 audit(1780733651.279:795): avc: denied { mount } for pid=9795 comm="syz.2.1089" name="/" dev="rpc_pipefs" ino=32998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 129.827919][ T40] audit: type=1400 audit(1780733651.279:796): avc: denied { mounton } for pid=9795 comm="syz.2.1089" path="/266/file0" dev="rpc_pipefs" ino=32998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 129.912918][ T9805] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 130.093759][ T9817] tipc: Started in network mode [ 130.097515][ T9817] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 130.116818][ T9817] tipc: Enabled bearer , priority 10 [ 131.015182][ T9831] program syz.3.1098 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.121761][ T5833] tipc: Node number set to 4269801488 [ 131.145680][ T9835] /dev/nullb0: Can't open blockdev [ 131.602229][ T9847] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 132.345455][ T9864] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 132.374157][ T9866] input: syz0 as /devices/virtual/input/input17 [ 132.570321][ T9813] __nla_validate_parse: 8 callbacks suppressed [ 132.570337][ T9813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1094'. [ 132.614273][ T9877] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1112'. [ 132.614688][ T9878] binder: Binderfs stats mode cannot be changed during a remount [ 132.703064][ T9882] netlink: 'syz.2.1114': attribute type 21 has an invalid length. [ 132.706365][ T9882] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1114'. [ 132.762641][ T9886] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 132.956200][ T9893] kvm: kvm [9892]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 132.961031][ T9893] kvm: kvm [9892]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 133.004980][ T9895] dlm: no local IP address has been set [ 133.008686][ T9895] dlm: cannot start dlm midcomms -107 [ 133.017428][ T845] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 133.187447][ T845] usb 8-1: Using ep0 maxpacket: 32 [ 133.192186][ T845] usb 8-1: config 0 has an invalid interface number: 119 but max is 0 [ 133.196529][ T845] usb 8-1: config 0 has no interface number 0 [ 133.198556][ T845] usb 8-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 133.217443][ T845] usb 8-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 133.221480][ T845] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 133.224843][ T845] usb 8-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 133.230818][ T845] usb 8-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 133.249531][ T845] usb 8-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 133.252579][ T845] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.255780][ T845] usb 8-1: Product: syz [ 133.267423][ T845] usb 8-1: Manufacturer: syz [ 133.269017][ T845] usb 8-1: SerialNumber: syz [ 133.273182][ T845] usb 8-1: config 0 descriptor?? [ 133.295325][ T845] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.119/input/input18 [ 133.419998][ T9921] netlink: 'syz.1.1125': attribute type 3 has an invalid length. [ 133.423758][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1125'. [ 133.486686][ T24] usb 8-1: USB disconnect, device number 18 [ 133.651678][ T9935] (syz.0.1129,9935,0):ocfs2_get_sector:1714 ERROR: status = -5 [ 133.654780][ T9935] (syz.0.1129,9935,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 133.660588][ T9935] (syz.0.1129,9935,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 133.665424][ T9935] (syz.0.1129,9935,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 133.705847][ T9940] binder: BINDER_SET_CONTEXT_MGR already set [ 133.706008][ T9939] binder_alloc: binder_alloc_mmap_handler: 9938 200000ffd000-200001000000 already mapped failed -16 [ 133.708677][ T9940] binder: 9938:9940 ioctl 4018620d 200000004a80 returned -16 [ 133.714563][ T9940] binder: BINDER_SET_CONTEXT_MGR already set [ 133.716104][ T9940] binder: 9938:9940 ioctl 4018620d 200000004a80 returned -16 [ 133.717834][ T9939] binder_alloc: binder_alloc_mmap_handler: 9938 200000ffd000-200001000000 already mapped failed -16 [ 133.718569][ T9940] binder: BINDER_SET_CONTEXT_MGR already set [ 133.724605][ T9940] binder: 9938:9940 ioctl 4018620d 200000004a80 returned -16 [ 133.778625][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 133.778642][ T40] audit: type=1400 audit(1780733655.239:804): avc: denied { write } for pid=9943 comm="syz.0.1131" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 134.266537][ T40] audit: type=1400 audit(1780733655.719:805): avc: denied { checkpoint_restore } for pid=9958 comm="syz.0.1137" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.326862][ T9963] xt_hashlimit: size too large, truncated to 1048576 [ 134.358501][ T5844] usb 8-1: new full-speed USB device number 19 using dummy_hcd [ 134.374692][ T9965] netlink: 'syz.1.1139': attribute type 1 has an invalid length. [ 134.394347][ T9965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 134.427879][ T9965] bond6: (slave ip6erspan0): making interface the new active one [ 134.434625][ T9965] bond6: (slave ip6erspan0): Enslaving as an active interface with an up link [ 134.519546][ T5844] usb 8-1: not running at top speed; connect to a high speed hub [ 134.523957][ T5844] usb 8-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 134.531439][ T5844] usb 8-1: config 1 interface 0 has no altsetting 0 [ 134.540150][ T5844] usb 8-1: New USB device found, idVendor=0079, idProduct=1844, bcdDevice= 0.40 [ 134.544434][ T5844] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.550621][ T5844] usb 8-1: Product: Ѝ [ 134.552455][ T5844] usb 8-1: Manufacturer: Е [ 134.554880][ T5844] usb 8-1: SerialNumber: Ў [ 134.571110][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 134.575203][ T9978] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1142'. [ 134.578043][ T9971] kvm: kvm [9970]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 134.582863][ T9971] kvm: kvm [9970]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 134.585129][ T9978] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1142'. [ 134.604937][ T9971] kvm: kvm [9970]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 134.629540][ T9971] kvm: kvm [9970]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 134.633771][ T9971] kvm: kvm [9970]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 134.642077][ T40] audit: type=1400 audit(1780733656.099:806): avc: denied { write } for pid=9979 comm="syz.1.1143" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 134.726923][ T1043] [drm:virtio_gpu_dequeue_ctrl_func] *ERROR* response 0x1205 (command 0x105) [ 134.773952][ T9953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.782246][ T9953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.819107][ T1134] ata1.00: Read log 0x10 page 0x00 failed, Emask 0x1 [ 134.825807][ T1134] ata1: failed to read log page 10h (errno=-5) [ 134.829081][ T1134] ata1.00: exception Emask 0x1 SAct 0x100 SErr 0x0 action 0x0 [ 134.830419][ T5844] usbhid 8-1:1.0: can't add hid device: -71 [ 134.832439][ T1134] ata1.00: irq_stat 0x40000000 [ 134.834718][ T5844] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 134.836722][ T1134] ata1.00: failed command: WRITE FPDMA QUEUED [ 134.842497][ T1134] ata1.00: cmd 61/18:40:fe:07:10/00:00:00:00:00/40 tag 8 ncq dma 12288 out [ 134.842497][ T1134] res 50/04:00:00:00:00/00:00:00:00:00/00 Emask 0x1 (device error) [ 134.842987][ T5844] usb 8-1: USB disconnect, device number 19 [ 134.849506][ T1134] ata1.00: status: { DRDY } [ 134.853882][ T1134] ata1.00: error: { ABRT } [ 134.857056][ T1134] ata1.00: configured for UDMA/100 [ 134.862330][ T1134] ata1: EH complete [ 134.873524][ T9998] xt_time: unknown flags 0xc [ 137.739796][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 150.917411][T10013] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1150'. [ 150.923404][T10013] overlayfs: invalid origin (0000006f7665726c) [ 150.949921][T10006] syzkaller1: entered promiscuous mode [ 150.952366][T10006] syzkaller1: entered allmulticast mode [ 150.977036][T10018] netlink: 'syz.0.1154': attribute type 1 has an invalid length. [ 150.997804][T10018] bond2: entered promiscuous mode [ 151.000605][T10018] 8021q: adding VLAN 0 to HW filter on device bond2 [ 151.010567][T10018] kAFS: unparsable volume name [ 151.051017][T10027] random: crng reseeded on system resumption [ 151.089834][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.094461][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.098667][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.102117][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.105081][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.109203][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.111848][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.114275][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.116613][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.119203][ T5844] hid-generic 0005:0010:10000.0004: unknown main item tag 0x0 [ 151.132118][ T5844] hid-generic 0005:0010:10000.0004: hidraw1: BLUETOOTH HID v0.02 Device [syz1] on syz0 [ 151.252910][T10045] netlink: 'syz.2.1159': attribute type 2 has an invalid length. [ 151.317586][ T5812] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 151.535796][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.543782][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.557828][T10055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.559478][T10054] xt_hashlimit: size too large, truncated to 1048576 [ 151.564757][T10055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.798134][T10063] 9p: Bad value for 'rfdno' [ 151.801642][T10065] xt_CT: You must specify a L4 protocol and not use inversions on it [ 151.885723][T10069] bridge_slave_0: left allmulticast mode [ 151.888345][T10069] bridge_slave_0: left promiscuous mode [ 151.890859][T10069] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.896602][T10069] bridge_slave_1: left allmulticast mode [ 151.899684][T10069] bridge_slave_1: left promiscuous mode [ 151.902092][T10069] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.910847][T10069] bond0: (slave bond_slave_0): Releasing backup interface [ 151.913777][T10069] bond_slave_0: left promiscuous mode [ 151.919731][T10069] bond0: (slave bond_slave_1): Releasing backup interface [ 151.922576][T10071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1170'. [ 151.922904][T10069] bond_slave_1: left promiscuous mode [ 151.935916][T10069] team0: Port device team_slave_0 removed [ 151.943269][T10069] team0: Port device team_slave_1 removed [ 151.947835][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.951111][T10069] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.957014][T10069] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.960957][T10069] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.966432][T10069] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 151.989195][ T40] audit: type=1400 audit(1780733673.449:807): avc: denied { call } for pid=10068 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 151.997567][ T40] audit: type=1400 audit(1780733673.449:808): avc: denied { transfer } for pid=10068 comm="syz.2.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 152.015902][ T24] xfrm0 speed is unknown, defaulting to 1000 [ 152.022160][ T2055] syz0: Port: 1 Link DOWN [ 152.038051][T10078] netlink: 'syz.3.1173': attribute type 89 has an invalid length. [ 152.043458][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1173'. [ 152.056023][T10079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 152.057900][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1172'. [ 152.062630][T10081] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1172'. [ 152.063740][T10079] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1172'. [ 152.131240][ T5812] usb 6-1: unable to get BOS descriptor or descriptor too short [ 152.136828][ T5812] usb 6-1: no configurations [ 152.141349][ T5812] usb 6-1: can't read configurations, error -22 [ 152.153880][T10084] netlink: 'syz.2.1174': attribute type 21 has an invalid length. [ 152.164867][T10098] netlink: 'syz.3.1177': attribute type 1 has an invalid length. [ 152.176124][T10098] bond3: entered promiscuous mode [ 152.178562][T10098] 8021q: adding VLAN 0 to HW filter on device bond3 [ 152.196693][ T40] audit: type=1400 audit(1780733673.649:809): avc: denied { write } for pid=10097 comm="syz.3.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 152.197092][T10098] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 152.206805][T10098] SELinux: failed to load policy [ 152.210718][T10098] usb usb9: usbfs: process 10098 (syz.3.1177) did not claim interface 13 before use [ 152.219375][T10098] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 152.223274][T10098] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 152.226433][T10098] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 152.356960][T10119] Bluetooth: hci4: Frame reassembly failed (-84) [ 152.365937][ T1177] Bluetooth: hci4: Frame reassembly failed (-84) [ 152.403345][T10122] comedi comedi2: rti800: I/O port conflict (0x140,16) [ 152.460546][T10127] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1181'. [ 152.711413][ T40] audit: type=1400 audit(1780733674.169:810): avc: denied { accept } for pid=10154 comm="syz.3.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 152.774566][ T40] audit: type=1400 audit(1780733674.229:811): avc: denied { create } for pid=10164 comm="syz.1.1188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 152.782840][ T40] audit: type=1400 audit(1780733674.239:812): avc: denied { sys_admin } for pid=10164 comm="syz.1.1188" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 152.790458][T10165] overlayfs: failed to clone lowerpath [ 152.829332][T10155] xfrm0 speed is unknown, defaulting to 1000 [ 152.970317][T10191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 153.000356][T10196] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 153.003167][T10196] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 153.006642][T10196] vhci_hcd vhci_hcd.0: Device attached [ 153.021827][T10196] vhci_hcd vhci_hcd.0: port 0 already used [ 153.049134][T10197] vhci_hcd: connection closed [ 153.049405][ T6284] vhci_hcd vhci_hcd.1: stop threads [ 153.053723][ T6284] vhci_hcd vhci_hcd.1: release socket [ 153.056030][ T6284] vhci_hcd vhci_hcd.1: disconnect device [ 153.312028][T10188] cgroup: fork rejected by pids controller in /syz0 [ 153.709116][ T40] audit: type=1400 audit(1780733675.169:813): avc: denied { bind } for pid=10246 comm="syz.1.1201" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 153.751142][T10251] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 153.753943][T10251] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 153.760992][T10251] vhci_hcd vhci_hcd.0: Device attached [ 153.771408][T10252] vhci_hcd: unknown pdu 2 [ 153.777564][ T6283] vhci_hcd vhci_hcd.1: stop threads [ 153.779930][ T6283] vhci_hcd vhci_hcd.1: release socket [ 153.782207][ T6283] vhci_hcd vhci_hcd.1: disconnect device [ 153.803213][ T40] audit: type=1400 audit(1780733675.259:814): avc: denied { map } for pid=10254 comm="syz.0.1203" path="socket:[34484]" dev="sockfs" ino=34484 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 153.954870][T10261] can0: slcan on ptm1. [ 153.962045][T10261] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1206'. [ 154.052061][ T40] audit: type=1400 audit(1780733675.509:815): avc: denied { write } for pid=10263 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.121960][ T40] audit: type=1400 audit(1780733675.579:816): avc: denied { write } for pid=10266 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 154.185649][T10260] can0 (unregistered): slcan off ptm1. [ 154.264421][T10271] comedi comedi2: rti802: I/O port conflict (0x140,4) [ 154.270705][T10271] ip6t_srh: unknown srh invflags 4000 [ 154.388680][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 154.389320][T10283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1209'. [ 154.391646][ T5740] Bluetooth: hci4: command 0x1003 tx timeout [ 154.395125][T10283] netem: invalid attributes len -12 [ 154.395134][T10283] netem: change failed [ 154.704238][T10305] netlink: 'syz.0.1217': attribute type 89 has an invalid length. [ 154.863121][T10320] ufs: You didn't specify the type of your ufs filesystem [ 154.863121][T10320] [ 154.863121][T10320] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 154.863121][T10320] [ 154.863121][T10320] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 154.940683][T10326] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 155.321098][T10334] overlayfs: failed to clone lowerpath [ 155.515336][T10343] gre1: entered promiscuous mode [ 155.522091][T10343] gre1: entered allmulticast mode [ 155.532885][ T62] Bluetooth: hci0: unexpected event for opcode 0x200b [ 156.060937][T10378] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 156.097650][T10378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.099906][ T62] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 156.116396][T10378] 8021q: adding VLAN 0 to HW filter on device bond4 [ 156.128566][T10378] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 156.132688][T10378] bond4: (slave gre1): Error -95 calling set_mac_address [ 156.143252][ T62] Bluetooth: hci1: unexpected event for opcode 0x040d [ 156.156130][ T34] bridge0: entered promiscuous mode [ 156.163653][T10390] gretap1: entered promiscuous mode [ 156.167681][T10390] bond4: (slave gretap1): making interface the new active one [ 156.171010][T10390] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 156.184238][T10390] macvlan2: entered promiscuous mode [ 156.187162][T10390] macvlan2: entered allmulticast mode [ 156.190204][T10390] bond4: entered promiscuous mode [ 156.197104][T10390] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 156.203490][T10390] bond4: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 156.210971][T10390] bond4: left promiscuous mode [ 156.235538][T10394] tmpfs: Bad value for 'mpol' [ 156.427256][T10410] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 156.480640][T10412] __nla_validate_parse: 1 callbacks suppressed [ 156.480654][T10412] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1252'. [ 156.503817][T10414] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1253'. [ 156.759245][T10416] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16402 sclass=netlink_route_socket pid=10416 comm=syz.0.1254 [ 156.833141][T10420] ALSA: seq fatal error: cannot create timer (-16) [ 157.077569][ T5833] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 157.227593][ T5833] usb 5-1: Using ep0 maxpacket: 32 [ 157.233244][ T5833] usb 5-1: config 112 has an invalid interface number: 140 but max is 2 [ 157.239407][ T5833] usb 5-1: config 112 has an invalid interface number: 154 but max is 2 [ 157.243012][ T5833] usb 5-1: config 112 has an invalid interface number: 186 but max is 2 [ 157.246404][ T5833] usb 5-1: config 112 has no interface number 0 [ 157.249225][ T5833] usb 5-1: config 112 has no interface number 1 [ 157.252324][ T5833] usb 5-1: config 112 has no interface number 2 [ 157.255295][ T5833] usb 5-1: config 112 interface 154 altsetting 8 endpoint 0xF has invalid maxpacket 2039, setting to 64 [ 157.260128][ T5833] usb 5-1: config 112 interface 154 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 157.264569][ T5833] usb 5-1: config 112 interface 154 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 157.270120][ T5833] usb 5-1: config 112 interface 154 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 157.277317][ T5833] usb 5-1: config 112 interface 186 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 157.284831][ T5833] usb 5-1: config 112 interface 186 altsetting 1 endpoint 0xA has an invalid bInterval 247, changing to 7 [ 157.289831][ T5833] usb 5-1: config 112 interface 186 altsetting 1 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 157.295120][ T5833] usb 5-1: config 112 interface 186 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 157.300505][ T5833] usb 5-1: config 112 interface 186 altsetting 1 has a duplicate endpoint with address 0x3, skipping [ 157.305086][ T5833] usb 5-1: config 112 interface 186 altsetting 1 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 157.310086][ T5833] usb 5-1: config 112 interface 140 has no altsetting 0 [ 157.313037][ T5833] usb 5-1: config 112 interface 154 has no altsetting 0 [ 157.319087][ T5833] usb 5-1: config 112 interface 186 has no altsetting 0 [ 157.324617][ T5833] usb 5-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=18.fb [ 157.328809][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.333627][ T5833] usb 5-1: Product: 㤺蟧ﮞ᥁ᝬॼ⫉낈퓶圮毲䵎䷓ᤐ䲗̞㡨杻港㪭ꬰ㞚뾢䶡遬ᓵ㽵뤖ᯖ洕䛚裂稉䭇珂㬏䩷圖됸僅雑폴᪞韈츔ዞᚕ⇓荷蚀㹨ྊ愍ᕁ矯ൕީ锼깦೅®ạ嬤ꥲ⴪迖㞊ꤸ렜倷頝嶂⭝肮苫⶙侢ㆧ蔂㣗駵೽嬃謋襴걹䖼ຸ蝧荥হ騣扷 [ 157.346569][ T5833] usb 5-1: Manufacturer: 湚㓭禼눪㤯쵛ꜿ耦₪뾣ᜌ씬媀豩깕뗊⪞摚ར幃ಥ椬蕲ᷪ䏨轻ኯ垴鱆팖캹཯꡹䊥➅弘贈똹ﶡ㦇蚢ㅿٵ⪣檍ʮᝓꔭ뼰斡譞⥡즩旁꼂䡺麈湓湒뵯ज䏈塿氮錃 [ 157.356734][ T5833] usb 5-1: SerialNumber: 镰봍꧗堇鏸㘩锏ꗒ湭䛗级ꨛ⑊ॗ淋ᘘꚌ멋卽ꩩ錑욫뤓⡟뤨䏦⪐왽ꖱ믹딒羕멄ṡ٪ャ⺦኶䍣㵣뷵维㙋൱郥ቁ뱐豀팉镽ꫡ搬㡻삺颁㈂뙻ᱳ㢦葐꒐ᢀƴॠꢬ鳮广⺠鈁쀖퀥ꫵ [ 157.479319][T10439] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 157.483771][T10439] netlink: 'syz.3.1263': attribute type 30 has an invalid length. [ 157.575212][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 157.575231][ T40] audit: type=1400 audit(1780733679.029:822): avc: denied { getopt } for pid=10419 comm="syz.0.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 157.585169][T10420] input: syz1 as /devices/virtual/input/input19 [ 157.589496][T10420] input: failed to attach handler leds to device input19, error: -6 [ 157.603320][ T5833] usb-storage 5-1:112.140: USB Mass Storage device detected [ 157.631912][ T5833] usb-storage 5-1:112.140: Quirks match for vid 07cf pid 1001: a qemu-system-x86_64: ahci: PRDT length for NCQ command (0x0) is smaller than the requested size (0x307000) [ 157.698262][ T5833] usb-storage 5-1:112.154: USB Mass Storage device detected [ 157.710259][ T5833] usb-storage 5-1:112.154: Quirks match for vid 07cf pid 1001: a [ 157.715311][T10453] overlay: filesystem on ./file0 not supported [ 157.788902][ T5833] cdc_mbim 5-1:112.186: probe with driver cdc_mbim failed with error -71 [ 157.797233][ T5833] usb-storage 5-1:112.186: USB Mass Storage device detected [ 157.801236][ T5833] usb-storage 5-1:112.186: Quirks match for vid 07cf pid 1001: a [ 157.911336][ T5833] usb 5-1: USB disconnect, device number 9 [ 157.924402][T10466] ufs: You didn't specify the type of your ufs filesystem [ 157.924402][T10466] [ 157.924402][T10466] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 157.924402][T10466] [ 157.924402][T10466] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 158.297115][T10493] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1274'. [ 158.305963][T10493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10493 comm=syz.1.1274 [ 158.350745][T10499] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 158.355804][T10499] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.533847][ T40] audit: type=1400 audit(1780733679.989:823): avc: denied { lock } for pid=10510 comm="syz.2.1278" path="socket:[34751]" dev="sockfs" ino=34751 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 158.651832][T10518] [U] Y"P [ 158.666538][T10521] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1282'. [ 158.670898][T10520] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1282'. [ 158.700614][T10518] [U] X,4dOֈ%g0qֆ::uez/LH7GYk/i'ؖA,Pfɕ2>Oˍ>mVߩ5$ ;ctL [ 158.783547][ T5740] Bluetooth: hci3: unexpected event for opcode 0x041c [ 158.799350][ T5740] Bluetooth: hci3: unexpected event for opcode 0x041c [ 158.878816][T10539] overlayfs: failed to resolve './file2': -2 [ 158.952219][ T40] audit: type=1400 audit(1780733680.409:824): avc: denied { write } for pid=10544 comm="syz.2.1287" name="/" dev="9p" ino=72877853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.972438][ T40] audit: type=1400 audit(1780733680.409:825): avc: denied { write } for pid=10544 comm="syz.2.1287" name="/" dev="9p" ino=72877853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 158.987254][T10542] netlink: 196 bytes leftover after parsing attributes in process `syz.3.1286'. [ 158.991422][T10545] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 158.996205][T10542] openvswitch: netlink: Flow key attr not present in new flow. [ 159.067534][T10550] loop5: detected capacity change from 0 to 7 [ 159.090419][T10550] Dev loop5: unable to read RDB block 7 [ 159.092347][T10550] loop5: unable to read partition table [ 159.094292][T10550] loop5: partition table beyond EOD, truncated [ 159.096313][T10550] loop_reread_partitions: partition scan of loop5 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 159.114895][ T40] audit: type=1400 audit(1780733680.569:826): avc: denied { setattr } for pid=10549 comm="syz.0.1289" name="loop5" dev="devtmpfs" ino=663 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 159.118273][ C2] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 159.125400][ C2] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 159.174851][ T5844] IPVS: starting estimator thread 0... [ 159.177265][T10555] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 159.229285][T10561] IPVS: set_ctl: invalid protocol: 43 255.255.255.255:20000 [ 159.259677][T10557] IPVS: using max 43 ests per chain, 103200 per kthread [ 159.354955][T10571] netlink: 'syz.2.1294': attribute type 1 has an invalid length. [ 159.382297][T10571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 159.388030][ T40] audit: type=1400 audit(1780733680.849:827): avc: denied { shutdown } for pid=10570 comm="syz.2.1294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.399353][T10571] vlan0: entered allmulticast mode [ 159.401007][T10571] veth0_to_bond: entered allmulticast mode [ 159.408057][T10571] bond5: (slave vlan0): Enslaving as an active interface with a down link [ 159.437660][ T5844] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 159.459122][T10578] xt_cgroup: invalid path, errno=-2 [ 159.472643][T10578] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.475224][T10578] UDF-fs: Scanning with blocksize 2048 failed [ 159.478936][T10578] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 159.483339][T10578] UDF-fs: Scanning with blocksize 4096 failed [ 159.487567][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 159.587454][ T5844] usb 8-1: Using ep0 maxpacket: 8 [ 159.588695][ T5844] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 159.588711][ T5844] usb 8-1: config 179 has no interface number 0 [ 159.588729][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 159.588743][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 159.588757][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 159.588770][ T5844] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 159.588784][ T5844] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 159.588803][ T5844] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 159.588815][ T5844] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.590697][T10552] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 159.660155][ T39] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 159.660184][ T39] usb 5-1: config 1 interface 0 has no altsetting 0 [ 159.663795][ T39] usb 5-1: New USB device found, idVendor=1c4f, idProduct=0059, bcdDevice= 0.40 [ 159.672613][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.672639][ T39] usb 5-1: Product: 楻卍閫佒蘮꡾홺依쿊ᐡ傟炌跊䬛猓逸罈檮䆖䍁蹆婯璌ᖑ떬돈搙ӵ钊䍵㾬ᴊ휂ྊẗ䭆 [ 159.672660][ T39] usb 5-1: Manufacturer: 仔㔃ﹺ쫨찟肈厘蝢쐦ꌕ屐笝駼㍩꧊맧敷⧸꫘弁ꂯ乥ꘖ曮ඎቴ៿嵔컟㊘┅ﵥ瞲긮䛁အ㏡캰ᐄᲨ钽☽⻘歚扱镢ꐜ벻堮鼟콅ല慘媳髏Ꮭᕩ퇴煕ﶽⒼఉ짣ঀᕚ崋ꏃ僭蚺䘛籸唿毨晭꟢͸㯧쌽ឱથ [ 159.672691][ T39] usb 5-1: SerialNumber: 螝ⶼސя㝘ľꏄⶋ肍讄Ử襻淳㣰甇ﵦ펟稅狒ꗥ컪索㉙꜡齚ѧὨ넳毙챼議좑꯼륡퉞礏苿攦揵㤏ꊠ䢐汝洲싩✍ⱞ⒩뚴규⎘㻿廧ቃ᷉㒅夬䮄捶咕䜃뉐⌚᧭䋡⇺꧌ [ 159.697557][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 159.842680][ T5844] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:179.65/input/input20 [ 159.862274][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.867834][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.871852][ T24] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 159.876211][ T24] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 159.879293][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.889411][ T24] usb 6-1: config 0 descriptor?? [ 160.088836][T10561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.092658][T10561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.107841][ T39] usbhid 5-1:1.0: can't add hid device: -71 [ 160.109899][ T39] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 160.115427][ T39] usb 5-1: USB disconnect, device number 10 [ 160.301724][ T24] hid_parser_main: 27 callbacks suppressed [ 160.301744][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.306932][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.311173][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.313898][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.316937][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.319609][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.322102][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.325253][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.328465][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.331285][ T24] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x0 [ 160.342994][ T24] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 160.587182][ T24] usb 6-1: USB disconnect, device number 16 [ 160.797270][T10599] IPVS: set_ctl: invalid protocol: 33 100.1.1.1:20003 [ 160.801522][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 160.823258][ T40] audit: type=1400 audit(1780733682.279:828): avc: denied { map } for pid=10598 comm="syz.0.1303" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 160.864922][ T40] audit: type=1400 audit(1780733682.319:829): avc: denied { read } for pid=10600 comm="syz.0.1304" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.874598][ T40] audit: type=1400 audit(1780733682.319:830): avc: denied { open } for pid=10600 comm="syz.0.1304" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 160.886291][ T40] audit: type=1400 audit(1780733682.329:831): avc: denied { ioctl } for pid=10600 comm="syz.0.1304" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 161.180418][T10606] /dev/nullb0: Can't open blockdev [ 161.183401][T10606] /dev/nullb0: Can't open blockdev [ 161.262012][T10611] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.269008][T10611] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 161.289893][T10611] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 161.294966][T10611] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 161.299513][T10611] overlayfs: d_ino too big (324, ino=9223372036854777583, xinobits=3) [ 161.303714][T10611] overlayfs: d_ino too big (syzcgroup, ino=9223372036854775816, xinobits=3) [ 161.307985][T10611] overlayfs: d_ino too big (syz-inputs, ino=9223372036854775815, xinobits=3) [ 161.311997][T10611] overlayfs: d_ino too big (sys, ino=9223372036854775814, xinobits=3) [ 161.315524][T10611] overlayfs: d_ino too big (selinux, ino=9223372036854775813, xinobits=3) [ 161.319507][T10611] overlayfs: d_ino too big (proc, ino=9223372036854775812, xinobits=3) [ 161.327518][T10611] overlayfs: d_ino too big (dev, ino=4611686018427387923, xinobits=3) [ 161.332931][T10611] overlayfs: d_ino too big (kernel, ino=4611686018427387911, xinobits=3) [ 161.566689][T10619] XFS (nbd1): SB validate failed with error -5. [ 161.724003][T10627] ieee802154 phy0 wpan0: encryption failed: -22 [ 162.108097][ T10] usb 8-1: USB disconnect, device number 20 [ 162.108210][ C2] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 162.114082][ C2] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 162.278899][T10636] netlink: 'syz.1.1312': attribute type 12 has an invalid length. [ 162.282336][T10636] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1312'. [ 162.368154][T10646] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 162.430648][T10654] overlayfs: failed to resolve './file2': -2 [ 162.577527][ T10] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 162.707478][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 162.728636][ T10] usb 8-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 162.732746][ T10] usb 8-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 162.738814][ T10] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 162.741808][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.744446][ T10] usb 8-1: Product: syz [ 162.745834][ T10] usb 8-1: Manufacturer: syz [ 162.747999][ T10] usb 8-1: SerialNumber: syz [ 162.759792][ T10] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 162.778569][ T5740] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 162.782532][ T5740] Bluetooth: hci3: Injecting HCI hardware error event [ 162.783827][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1320'. [ 162.785543][ T5740] Bluetooth: hci3: hardware error 0x00 [ 162.835478][T10663] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1320'. [ 162.867467][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 162.870697][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.874210][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.877191][T10662] bond_slave_0: entered promiscuous mode [ 162.878060][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 162.880221][T10662] bond_slave_0: entered allmulticast mode [ 162.883337][ T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 162.889640][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.897767][ T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 162.900779][ T24] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 162.903293][ T24] usb 5-1: Manufacturer: syz [ 162.909591][ T24] usb 5-1: config 0 descriptor?? [ 162.941239][ T6283] bond5: (slave vlan0): link status definitely up, 10000 Mbps full duplex [ 162.946170][ T6283] bond5: (slave vlan0): making interface the new active one [ 162.957562][ T6283] bond5: active interface up! [ 163.020514][T10665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 163.177639][ T24] rc_core: IR keymap rc-hauppauge not found [ 163.179545][ T24] Registered IR keymap rc-empty [ 163.181513][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.197551][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.218505][ T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 163.223041][ T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input21 [ 163.233751][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.247545][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.267638][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.297967][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.319154][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.340462][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.358009][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.378142][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.407654][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.427601][ T24] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 163.449212][ T24] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 163.453477][ T24] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 163.460313][ T24] usb 5-1: USB disconnect, device number 11 [ 163.567501][ T62] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 163.571952][T10680] fuse: Invalid rootmode [ 163.690864][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 163.690877][ T40] audit: type=1400 audit(1780733685.149:833): avc: denied { watch } for pid=10681 comm="syz.2.1325" path="/322/bus" dev="overlay" ino=1714 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 163.866058][T10685] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.869835][T10686] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 163.927684][T10687] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1326'. [ 163.932228][T10687] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 163.981191][ T40] audit: type=1400 audit(1780733685.439:834): avc: denied { mount } for pid=10690 comm="syz.0.1327" name="/" dev="ramfs" ino=36525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 164.382424][T10710] ntfs3(nbd2): try to read out of volume at offset 0x0 [ 164.447441][ T1043] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 164.509848][ T40] audit: type=1400 audit(1780733685.969:835): avc: denied { create } for pid=10717 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.518657][ T40] audit: type=1400 audit(1780733685.969:836): avc: denied { bind } for pid=10717 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.527495][ T40] audit: type=1400 audit(1780733685.969:837): avc: denied { accept } for pid=10717 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.534486][ T40] audit: type=1400 audit(1780733685.969:838): avc: denied { write } for pid=10717 comm="syz.2.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 164.609291][ T1043] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 164.612185][ T1043] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 164.615320][ T1043] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 164.618230][ T1043] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 164.621548][ T40] audit: type=1400 audit(1780733686.079:839): avc: denied { write } for pid=10724 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.621963][ T1043] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 164.631533][ T1043] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 164.631678][ T40] audit: type=1400 audit(1780733686.089:840): avc: denied { read } for pid=10724 comm="syz.2.1334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 164.636126][ T1043] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 164.644032][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 164.646508][ T1043] usb 6-1: Product: syz [ 164.647899][ T1043] usb 6-1: Manufacturer: syz [ 164.652079][T10693] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 164.655237][ T1043] cdc_wdm 6-1:1.0: skipping garbage [ 164.656893][ T1043] cdc_wdm 6-1:1.0: skipping garbage [ 164.660922][ T1043] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 164.662745][ T1043] cdc_wdm 6-1:1.0: Unknown control protocol [ 164.672198][T10728] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1335'. [ 164.743861][ T40] audit: type=1400 audit(1780733686.199:841): avc: denied { execstack } for pid=10729 comm="syz.2.1336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 164.857497][ T5740] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 164.859975][ T1043] usb 6-1: USB disconnect, device number 17 [ 165.224101][ T2055] usb 8-1: USB disconnect, device number 21 [ 165.668666][ T40] audit: type=1326 audit(1780733687.129:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10788 comm="syz.2.1354" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdec099ce59 code=0x0 [ 165.846898][T10802] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10802 comm=syz.1.1357 [ 166.160859][T10813] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1362'. [ 166.193510][T10811] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8933, magic 89 != 6b] [ 166.207740][T10811] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 8933, magic 89 != 6b] [ 166.292462][T10819] batadv_slave_1: entered promiscuous mode [ 166.303653][T10822] netlink: 'syz.1.1365': attribute type 1 has an invalid length. [ 166.332211][T10822] 8021q: adding VLAN 0 to HW filter on device bond7 [ 166.346465][T10822] vlan0: entered allmulticast mode [ 166.348778][T10822] veth0_to_bond: entered allmulticast mode [ 166.365577][T10822] bond7: (slave vlan0): making interface the new active one [ 166.379371][T10822] bond7: (slave vlan0): Enslaving as an active interface with an up link [ 166.520040][T10829] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.524453][T10829] block device autoloading is deprecated and will be removed. [ 166.652023][T10827] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 166.659062][T10827] block device autoloading is deprecated and will be removed. [ 166.664583][T10827] md: md0 has zero or unknown size, marking faulty! [ 166.666762][T10827] md: md_import_device returned -22 [ 166.701629][T10818] batadv_slave_1: left promiscuous mode [ 166.925818][T10858] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1373'. [ 167.199269][T10869] bond6: (slave bond_slave_1): Device is not bonding slave [ 167.202425][T10869] bond6: option active_slave: invalid value (bond_slave_1) [ 167.207027][T10869] bond6 (unregistering): Released all slaves [ 167.509436][T10877] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1382'. [ 167.602968][T10882] ref_ctr_offset mismatch. inode: 0x7cf offset: 0x5 ref_ctr_offset(old): 0x2 ref_ctr_offset(new): 0x0 [ 167.660276][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 168.098792][T10923] tmpfs: Unknown parameter 'grpqu~qbloc$8"pd(k_hardimit' [ 168.127890][T10894] ceph: No mds server is up or the cluster is laggy [ 168.295225][T10931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 168.326154][ T5740] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 168.332369][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1402'. [ 168.335379][T10942] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1402'. [ 168.484398][T10967] bridge1: entered promiscuous mode [ 168.494256][T10967] loop4: detected capacity change from 0 to 2640 [ 168.505234][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.509377][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.512709][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.515833][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.519406][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.522708][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.525928][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.529214][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.531748][T10967] ldm_validate_partition_table(): Disk read failed. [ 168.533781][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.536313][T10967] Buffer I/O error on dev loop4, logical block 0, async page read [ 168.540305][T10967] Dev loop4: unable to read RDB block 0 [ 168.542448][T10967] loop4: unable to read partition table [ 168.546698][T10967] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 168.563735][ T5144] ldm_validate_partition_table(): Disk read failed. [ 168.567725][ T5144] Dev loop4: unable to read RDB block 0 [ 168.569920][ T5144] loop4: unable to read partition table [ 168.708278][ T845] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 168.727195][T10977] xt_nfacct: accounting object `syz0' does not exist [ 168.774778][T10980] netlink: 45 bytes leftover after parsing attributes in process `syz.0.1414'. [ 168.861148][ T845] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.862745][T10989] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.875591][ T845] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 168.878824][ T845] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 168.883860][ T845] usb 6-1: Product: syz [ 168.885129][ T845] usb 6-1: Manufacturer: syz [ 168.897741][ T845] usb 6-1: SerialNumber: syz [ 169.079216][T10995] tipc: Enabling of bearer rejected, already enabled [ 169.108502][ T845] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.131391][T10998] overlayfs: failed to resolve './file2': -2 [ 169.227468][ T5833] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 169.257714][T11003] handle_userfault: 12 callbacks suppressed [ 169.257726][T11003] FAULT_FLAG_ALLOW_RETRY missing 801 [ 169.263333][T11003] CPU: 2 UID: 0 PID: 11003 Comm: syz.3.1421 Tainted: G L syzkaller #0 PREEMPT(full) [ 169.263362][T11003] Tainted: [L]=SOFTLOCKUP [ 169.263367][T11003] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 169.263373][T11003] Call Trace: [ 169.263378][T11003] [ 169.263384][T11003] dump_stack_lvl+0x100/0x190 [ 169.263401][T11003] handle_userfault.cold+0x37/0x69 [ 169.263416][T11003] ? do_raw_spin_unlock+0x145/0x1e0 [ 169.263434][T11003] ? _raw_spin_unlock+0x28/0x50 [ 169.263452][T11003] ? __free_frozen_pages+0x5a5/0x10a0 [ 169.263476][T11003] ? __pfx_handle_userfault+0x10/0x10 [ 169.263510][T11003] ? rcu_read_unlock+0x2d/0xb0 [ 169.263527][T11003] ? rcu_read_unlock+0x2d/0xb0 [ 169.263547][T11003] do_anonymous_page+0x1a83/0x2050 [ 169.263569][T11003] __handle_mm_fault+0x1d2c/0x2a00 [ 169.263586][T11003] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 169.263605][T11003] ? __pfx___handle_mm_fault+0x10/0x10 [ 169.263621][T11003] ? pte_offset_map_lock+0x174/0x320 [ 169.263633][T11003] ? find_held_lock+0x2b/0x80 [ 169.263647][T11003] ? follow_page_pte+0x4d0/0x13f0 [ 169.263662][T11003] handle_mm_fault+0x37b/0xa30 [ 169.263696][T11003] __get_user_pages+0x1178/0x32a0 [ 169.263726][T11003] ? __pfx___get_user_pages+0x10/0x10 [ 169.263749][T11003] populate_vma_page_range+0x267/0x3f0 [ 169.263764][T11003] ? __pfx_populate_vma_page_range+0x10/0x10 [ 169.263781][T11003] ? vma_set_page_prot+0xb1/0x120 [ 169.263795][T11003] mprotect_fixup+0x955/0xe30 [ 169.263815][T11003] ? __pfx_mprotect_fixup+0x10/0x10 [ 169.263840][T11003] ? selinux_file_mprotect+0x18c/0x610 [ 169.263859][T11003] do_mprotect_pkey+0xa4b/0xef0 [ 169.263879][T11003] ? __pfx_do_mprotect_pkey+0x10/0x10 [ 169.263911][T11003] __x64_sys_mprotect+0x78/0xc0 [ 169.263925][T11003] ? lockdep_hardirqs_on+0x78/0x100 [ 169.263939][T11003] do_syscall_64+0x115/0x870 [ 169.263953][T11003] ? clear_bhb_loop+0x40/0x90 [ 169.263966][T11003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.263977][T11003] RIP: 0033:0x7fab9599ce59 [ 169.263987][T11003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.263997][T11003] RSP: 002b:00007fab96876028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 169.264008][T11003] RAX: ffffffffffffffda RBX: 00007fab95c15fa0 RCX: 00007fab9599ce59 [ 169.264015][T11003] RDX: 000000000000000f RSI: 0000000000004000 RDI: 0000200000ffc000 [ 169.264021][T11003] RBP: 00007fab95a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 169.264027][T11003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.264034][T11003] R13: 00007fab95c16038 R14: 00007fab95c15fa0 R15: 00007ffff7211f78 [ 169.264047][T11003] [ 169.408570][ T29] usb 6-1: USB disconnect, device number 18 [ 169.414032][ T29] usblp0: removed [ 169.427431][ T5833] usb 5-1: Using ep0 maxpacket: 8 [ 169.430429][ T5833] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 169.435739][ T5833] usb 5-1: config 179 has no interface number 0 [ 169.441205][ T5833] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 169.446274][ T5833] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 169.450267][ T5833] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 169.453671][ T5833] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 169.457094][ T5833] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 169.467167][ T5833] usb 5-1: config 179 interface 65 has no altsetting 0 [ 169.470402][ T5833] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 169.474068][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.498853][ T5833] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input23 [ 169.502913][T11020] bridge2: entered promiscuous mode [ 169.505107][T11020] bridge2: entered allmulticast mode [ 169.517967][T11016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1425'. [ 169.523752][T11022] netlink: 'syz.1.1425': attribute type 1 has an invalid length. [ 169.641838][T11033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1430'. [ 169.647250][T11033] 9p: Bad value for 'wfdno' [ 169.727947][T10993] input input23: unable to receive magic message: -110 [ 169.740132][ T29] usb 5-1: USB disconnect, device number 12 [ 169.742589][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 170.044736][T11051] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 170.051950][T11051] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1435'. [ 170.056337][T11051] 8021q: VLANs not supported on ip6tnl0 [ 170.103405][ T40] audit: type=1400 audit(1780733691.559:855): avc: denied { module_load } for pid=11055 comm="syz.2.1437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 170.103485][T11056] Invalid ELF header type: 0 != 1 [ 170.193373][T11058] overlay: filesystem on ./file0 not supported as upperdir [ 170.325659][T11056] 9p: Invalid gid '0x00000000ffffffff' [ 170.365208][T11056] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1437'. [ 170.465120][T11080] comedi: No check for data length of config insn id 6 is implemented [ 170.468740][T11080] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 170.472494][T11080] comedi: Assuming n=15 is correct [ 170.480674][T11080] /dev/nullb0: Can't open blockdev [ 170.512025][T11079] kvm: kvm [11077]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xbe [ 170.681777][T11089] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 170.706689][T11089] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 170.882863][T11098] netlink: 'syz.2.1450': attribute type 8 has an invalid length. [ 170.885977][T11098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1450'. [ 170.937900][ T40] audit: type=1400 audit(1780733692.399:856): avc: denied { listen } for pid=11099 comm="syz.2.1451" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 171.087866][T11103] fuse: Bad value for 'group_id' [ 171.089936][T11103] fuse: Bad value for 'group_id' [ 171.179371][T11108] sctp: [Deprecated]: syz.0.1454 (pid 11108) Use of struct sctp_assoc_value in delayed_ack socket option. [ 171.179371][T11108] Use struct sctp_sack_info instead [ 171.196621][T11109] netlink: zone id is out of range [ 171.571884][T11139] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 171.587480][T11139] PKCS7: Only support pkcs7_signedData type [ 171.785498][T11158] ubi0: attaching mtd0 [ 171.793198][T11158] ubi0: scanning is finished [ 171.794803][T11158] ubi0: empty MTD device detected [ 171.954304][T11162] batadv_slave_1: entered promiscuous mode [ 172.357940][T11158] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 172.360396][T11158] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 172.360433][T11158] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 172.360443][T11158] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 172.360453][T11158] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 172.360462][T11158] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 172.360471][T11158] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1564471448 [ 172.360482][T11158] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 172.362253][T11177] ubi0: background thread "ubi_bgt0d" started, PID 11177 [ 172.414936][T11181] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 172.418864][T11181] /dev/nullb0: Can't open blockdev [ 172.543815][T11189] tipc: Enabling of bearer rejected, failed to enable media [ 172.553390][T11192] tipc: Enabling of bearer rejected, failed to enable media [ 172.581535][T11199] __nla_validate_parse: 1 callbacks suppressed [ 172.581549][T11199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1476'. [ 172.587570][T11199] tipc: Invalid UDP bearer configuration [ 172.587599][T11199] tipc: Enabling of bearer rejected, failed to enable media [ 172.593828][T11199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=11199 comm=syz.2.1476 [ 172.610941][ T6278] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.618402][ T6278] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.622744][ T6278] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.626240][T11203] netlink: 'syz.0.1477': attribute type 15 has an invalid length. [ 172.626658][ T6278] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 172.680912][ T40] audit: type=1400 audit(1780733694.139:857): avc: denied { name_bind } for pid=11211 comm="syz.0.1481" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 172.687873][T11213] random: crng reseeded on system resumption [ 172.695822][ T40] audit: type=1326 audit(1780733694.149:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.1481" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa09659ce59 code=0x0 [ 172.721121][T11218] Bluetooth: MGMT ver 1.23 [ 172.803197][ T40] audit: type=1326 audit(1780733694.259:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09659ce59 code=0x7ffc0000 [ 172.820223][ T40] audit: type=1326 audit(1780733694.259:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09659ce59 code=0x7ffc0000 [ 172.833781][ T40] audit: type=1326 audit(1780733694.269:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09659ce59 code=0x7ffc0000 [ 172.842994][ T40] audit: type=1326 audit(1780733694.269:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09659ce59 code=0x7ffc0000 [ 172.850219][ T40] audit: type=1326 audit(1780733694.269:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11211 comm="syz.0.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa09659ce59 code=0x7ffc0000 [ 172.937121][T11238] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1487'. [ 172.941150][T11238] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1487'. [ 173.083851][T11245] xt_hashlimit: size too large, truncated to 1048576 [ 173.286828][T11260] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.1494'. [ 173.289755][T11260] veth0_to_bond: default FDB implementation only supports local addresses [ 173.380201][T11277] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.494483][ T5740] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 173.558374][T11297] IPVS: set_ctl: invalid protocol: 137 224.0.0.2:20004 [ 173.565871][T11299] devtmpfs: Unknown parameter 'usrkuota_block_ardlimif' [ 173.568900][T11299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1505'. [ 173.582293][T11299] syz_tun: entered promiscuous mode [ 173.595948][T11299] syz_tun: refused to change device tx_queue_len [ 173.658953][T11305] 9pnet_virtio: no channels available for device syz [ 173.708717][T11309] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 173.872833][T11311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 173.872860][T11312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1510'. [ 173.875629][T11311] netlink: 'syz.2.1510': attribute type 30 has an invalid length. [ 173.878408][T11312] netlink: 'syz.2.1510': attribute type 30 has an invalid length. [ 174.088222][T11319] tipc: Enabled bearer , priority 0 [ 174.091565][T11319] syzkaller0: entered promiscuous mode [ 174.093377][T11319] syzkaller0: entered allmulticast mode [ 174.098589][T11319] tipc: Resetting bearer [ 174.217804][T11325] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 174.217813][T11326] openvswitch: netlink: VXLAN extension 145 out of range max 1 [ 174.219160][T11326] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 174.270710][T11330] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 174.286584][T11330] cramfs: wrong magic [ 174.572258][T11348] can0: slcan on ttyS3. [ 174.640506][T11348] can0 (unregistered): slcan off ttyS3. [ 174.665029][T11359] x_tables: duplicate underflow at hook 1 [ 174.700008][ T40] kauditd_printk_skb: 519 callbacks suppressed [ 174.700025][ T40] audit: type=1400 audit(1780733696.159:1383): avc: denied { map } for pid=11363 comm="syz.3.1525" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.711903][ T40] audit: type=1400 audit(1780733696.159:1384): avc: denied { execute } for pid=11363 comm="syz.3.1525" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 174.858756][T11317] tipc: Resetting bearer [ 174.869017][T11317] tipc: Disabling bearer [ 174.987458][ T1043] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 175.150966][ T1043] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 175.154544][ T1043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.157261][ T1043] usb 6-1: Product: syz [ 175.158968][ T1043] usb 6-1: Manufacturer: syz [ 175.160750][ T1043] usb 6-1: SerialNumber: syz [ 175.165713][ T1043] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 175.380238][T11386] netlink: 'syz.3.1533': attribute type 66 has an invalid length. [ 175.380552][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1532'. [ 175.388657][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 175.391579][T11388] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1532'. [ 175.450026][ T40] audit: type=1400 audit(1780733696.909:1385): avc: denied { ioctl } for pid=11389 comm="syz.0.1534" path="socket:[40524]" dev="sockfs" ino=40524 ioctlcmd=0x587b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 176.497267][ T40] audit: type=1400 audit(1780733697.949:1386): avc: denied { bind } for pid=11407 comm="syz.2.1537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 176.598158][T11412] ------------[ cut here ]------------ [ 176.600516][T11412] kvm_is_error_gpa(gpa) == kvm_is_error_hva(uhva) [ 176.600526][T11412] WARNING: arch/x86/kvm/../../../virt/kvm/pfncache.c:267 at __kvm_gpc_refresh+0x1992/0x22c0, CPU#2: syz.2.1538/11412 [ 176.606360][T11412] Modules linked in: [ 176.608172][T11412] CPU: 2 UID: 0 PID: 11412 Comm: syz.2.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.611525][T11412] Tainted: [L]=SOFTLOCKUP [ 176.612858][T11412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.616237][T11412] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 176.619123][T11412] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 af b6 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 a1 b6 85 00 48 85 db 0f 84 e9 ed ff ff [ 176.626625][T11412] RSP: 0018:ffffc9000e5ff250 EFLAGS: 00010287 [ 176.629665][T11412] RAX: 00000000000006e7 RBX: ffffffffffffffff RCX: ffffc9000c121000 [ 176.632147][T11412] RDX: 0000000000080000 RSI: ffffffff8182f911 RDI: ffff888060200000 [ 176.634785][T11412] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 176.638107][T11412] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 176.640569][T11412] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc9000e5ff468 [ 176.643639][T11412] FS: 00007fdec18db6c0(0000) GS:ffff8880d6587000(0000) knlGS:0000000000000000 [ 176.646923][T11412] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 176.649496][T11412] CR2: 00007fdec18daff8 CR3: 000000013eec4000 CR4: 0000000000352ef0 [ 176.652627][T11412] Call Trace: [ 176.653796][T11412] [ 176.654993][T11412] ? find_held_lock+0x2b/0x80 [ 176.656863][T11412] ? __pfx___mutex_lock+0x10/0x10 [ 176.659093][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.661050][T11412] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 176.663023][T11412] kvm_gpc_refresh+0xc9/0x170 [ 176.664872][T11412] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 176.667090][T11412] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 176.669199][T11412] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 176.671364][T11412] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 176.673512][T11412] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 176.675531][T11412] ? arch_stack_walk+0xa6/0xf0 [ 176.677253][T11412] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 176.679421][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.681286][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.683123][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.685172][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.687050][T11412] ? is_bpf_text_address+0x8a/0x1a0 [ 176.689498][T11412] ? bpf_ksym_find+0x128/0x1c0 [ 176.691225][T11412] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 176.693659][T11412] ? is_bpf_text_address+0x94/0x1a0 [ 176.695579][T11412] ? kernel_text_address+0x8d/0x100 [ 176.697709][T11412] ? __pfx_widen_string+0x10/0x10 [ 176.699519][T11412] ? __kernel_text_address+0xd/0x30 [ 176.701156][T11412] ? unwind_get_return_address+0x59/0xa0 [ 176.702914][T11412] ? arch_stack_walk+0xa6/0xf0 [ 176.704427][T11412] ? tomoyo_path_number_perm+0x46d/0x580 [ 176.706299][T11412] ? stack_trace_save+0x8e/0xc0 [ 176.708029][T11412] ? __pfx_stack_trace_save+0x10/0x10 [ 176.709699][T11412] ? stack_depot_save_flags+0x27/0x9d0 [ 176.711420][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.713267][T11412] ? tomoyo_path_number_perm+0x46d/0x580 [ 176.715306][T11412] ? kasan_save_stack+0x3f/0x50 [ 176.716831][T11412] ? kasan_save_stack+0x30/0x50 [ 176.718654][T11412] ? kasan_save_track+0x14/0x30 [ 176.720199][T11412] ? kasan_save_free_info+0x3b/0x70 [ 176.721819][T11412] kvm_vm_ioctl+0x1564/0x4050 [ 176.723312][T11412] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 176.724893][T11412] ? kasan_quarantine_put+0x104/0x240 [ 176.726575][T11412] ? lockdep_hardirqs_on+0x78/0x100 [ 176.729552][T11412] ? find_held_lock+0x2b/0x80 [ 176.731042][T11412] ? tomoyo_path_number_perm+0x28f/0x580 [ 176.732776][T11412] ? tomoyo_path_number_perm+0x28f/0x580 [ 176.734531][T11412] ? tomoyo_path_number_perm+0x188/0x580 [ 176.736278][T11412] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.738209][T11412] ? futex_wait+0x11e/0x370 [ 176.739649][T11412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.741484][T11412] ? do_vfs_ioctl+0x226/0x13e0 [ 176.742954][T11412] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.744526][T11412] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.746643][T11412] ? __fget_files+0x215/0x3d0 [ 176.748382][T11412] ? hook_file_ioctl_common+0x149/0x410 [ 176.750127][T11412] ? selinux_file_ioctl+0x13b/0x290 [ 176.751758][T11412] ? selinux_file_ioctl+0xb6/0x290 [ 176.753350][T11412] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 176.754942][T11412] __x64_sys_ioctl+0x18e/0x210 [ 176.756435][T11412] do_syscall_64+0x115/0x870 [ 176.757941][T11412] ? clear_bhb_loop+0x40/0x90 [ 176.759418][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.761251][T11412] RIP: 0033:0x7fdec099ce59 [ 176.762655][T11412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.768801][T11412] RSP: 002b:00007fdec18db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.771509][T11412] RAX: ffffffffffffffda RBX: 00007fdec0c16090 RCX: 00007fdec099ce59 [ 176.773930][T11412] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000005 [ 176.776392][T11412] RBP: 00007fdec0a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 176.779339][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.781794][T11412] R13: 00007fdec0c16128 R14: 00007fdec0c16090 R15: 00007fff59ebffd8 [ 176.784266][T11412] [ 176.785250][T11412] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 176.787755][T11412] CPU: 2 UID: 0 PID: 11412 Comm: syz.2.1538 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.791142][T11412] Tainted: [L]=SOFTLOCKUP [ 176.792498][T11412] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 176.795662][T11412] Call Trace: [ 176.796715][T11412] [ 176.797641][T11412] dump_stack_lvl+0x100/0x190 [ 176.799198][T11412] vpanic+0x552/0x970 [ 176.800475][T11412] ? __pfx_vpanic+0x10/0x10 [ 176.801885][T11412] panic+0xd1/0xe0 [ 176.803075][T11412] ? __pfx_panic+0x10/0x10 [ 176.804667][T11412] check_panic_on_warn.cold+0x19/0x34 [ 176.806795][T11412] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 176.808752][T11412] __warn.cold+0x191/0x328 [ 176.810174][T11412] __report_bug+0x296/0x3d0 [ 176.811615][T11412] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 176.813255][T11412] ? __pfx___report_bug+0x10/0x10 [ 176.814841][T11412] ? lockdep_unlock+0x5a/0xc0 [ 176.816305][T11412] ? __lock_acquire+0xd73/0x2630 [ 176.817843][T11412] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 176.819503][T11412] report_bug+0xb2/0x220 [ 176.820834][T11412] ? __kvm_gpc_refresh+0x1992/0x22c0 [ 176.822492][T11412] handle_bug+0x16a/0x2a0 [ 176.823858][T11412] exc_invalid_op+0x17/0x50 [ 176.825273][T11412] asm_exc_invalid_op+0x1a/0x20 [ 176.826802][T11412] RIP: 0010:__kvm_gpc_refresh+0x1992/0x22c0 [ 176.828640][T11412] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 26 08 00 00 48 8b 04 24 31 db 48 8b a8 08 01 00 00 e9 cf f0 ff ff e8 af b6 85 00 90 <0f> 0b 90 e9 92 f7 ff ff e8 a1 b6 85 00 48 85 db 0f 84 e9 ed ff ff [ 176.834527][T11412] RSP: 0018:ffffc9000e5ff250 EFLAGS: 00010287 [ 176.836403][T11412] RAX: 00000000000006e7 RBX: ffffffffffffffff RCX: ffffc9000c121000 [ 176.838851][T11412] RDX: 0000000000080000 RSI: ffffffff8182f911 RDI: ffff888060200000 [ 176.841260][T11412] RBP: ffffffffffffff01 R08: 0000000000000000 R09: 0000000000000001 [ 176.843639][T11412] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888000000000 [ 176.846054][T11412] R13: ffff888000000001 R14: ffff888000000000 R15: ffffc9000e5ff468 [ 176.848501][T11412] ? __kvm_gpc_refresh+0x1991/0x22c0 [ 176.850170][T11412] ? find_held_lock+0x2b/0x80 [ 176.851654][T11412] ? __pfx___mutex_lock+0x10/0x10 [ 176.853218][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.854783][T11412] ? __pfx___kvm_gpc_refresh+0x10/0x10 [ 176.856475][T11412] kvm_gpc_refresh+0xc9/0x170 [ 176.857948][T11412] kvm_xen_set_evtchn.part.0+0x168/0x230 [ 176.859713][T11412] ? kvm_xen_set_evtchn.part.0+0x153/0x230 [ 176.861515][T11412] kvm_xen_hvm_evtchn_send+0x22f/0x290 [ 176.863235][T11412] ? __pfx_kvm_xen_hvm_evtchn_send+0x10/0x10 [ 176.865094][T11412] kvm_arch_vm_ioctl+0x13ac/0x18d0 [ 176.866709][T11412] ? arch_stack_walk+0xa6/0xf0 [ 176.868208][T11412] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 176.869871][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.871428][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.872960][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.874515][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.876066][T11412] ? is_bpf_text_address+0x8a/0x1a0 [ 176.877674][T11412] ? bpf_ksym_find+0x128/0x1c0 [ 176.879182][T11412] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 176.881089][T11412] ? is_bpf_text_address+0x94/0x1a0 [ 176.882713][T11412] ? kernel_text_address+0x8d/0x100 [ 176.884349][T11412] ? __pfx_widen_string+0x10/0x10 [ 176.885944][T11412] ? __kernel_text_address+0xd/0x30 [ 176.887739][T11412] ? unwind_get_return_address+0x59/0xa0 [ 176.889543][T11412] ? arch_stack_walk+0xa6/0xf0 [ 176.891114][T11412] ? tomoyo_path_number_perm+0x46d/0x580 [ 176.892928][T11412] ? stack_trace_save+0x8e/0xc0 [ 176.894498][T11412] ? __pfx_stack_trace_save+0x10/0x10 [ 176.896212][T11412] ? stack_depot_save_flags+0x27/0x9d0 [ 176.897856][T11412] ? __lock_acquire+0x4a5/0x2630 [ 176.899446][T11412] ? tomoyo_path_number_perm+0x46d/0x580 [ 176.901289][T11412] ? kasan_save_stack+0x3f/0x50 [ 176.902855][T11412] ? kasan_save_stack+0x30/0x50 [ 176.904453][T11412] ? kasan_save_track+0x14/0x30 [ 176.905984][T11412] ? kasan_save_free_info+0x3b/0x70 [ 176.907682][T11412] kvm_vm_ioctl+0x1564/0x4050 [ 176.909196][T11412] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 176.910859][T11412] ? kasan_quarantine_put+0x104/0x240 [ 176.912576][T11412] ? lockdep_hardirqs_on+0x78/0x100 [ 176.914278][T11412] ? find_held_lock+0x2b/0x80 [ 176.915802][T11412] ? tomoyo_path_number_perm+0x28f/0x580 [ 176.917571][T11412] ? tomoyo_path_number_perm+0x28f/0x580 [ 176.919378][T11412] ? tomoyo_path_number_perm+0x188/0x580 [ 176.921174][T11412] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 176.923086][T11412] ? futex_wait+0x11e/0x370 [ 176.924592][T11412] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 176.926514][T11412] ? do_vfs_ioctl+0x226/0x13e0 [ 176.928122][T11412] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 176.929750][T11412] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 176.931935][T11412] ? __fget_files+0x215/0x3d0 [ 176.933457][T11412] ? hook_file_ioctl_common+0x149/0x410 [ 176.935246][T11412] ? selinux_file_ioctl+0x13b/0x290 [ 176.937010][T11412] ? selinux_file_ioctl+0xb6/0x290 [ 176.938893][T11412] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 176.940530][T11412] __x64_sys_ioctl+0x18e/0x210 [ 176.942084][T11412] do_syscall_64+0x115/0x870 [ 176.943607][T11412] ? clear_bhb_loop+0x40/0x90 [ 176.945111][T11412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.947041][T11412] RIP: 0033:0x7fdec099ce59 [ 176.948473][T11412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.954591][T11412] RSP: 002b:00007fdec18db028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.957243][T11412] RAX: ffffffffffffffda RBX: 00007fdec0c16090 RCX: 00007fdec099ce59 [ 176.960142][T11412] RDX: 0000200000000400 RSI: 00000000400caed0 RDI: 0000000000000005 [ 176.962658][T11412] RBP: 00007fdec0a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 176.965350][T11412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.967979][T11412] R13: 00007fdec0c16128 R14: 00007fdec0c16090 R15: 00007fff59ebffd8 [ 176.970637][T11412] [ 176.972412][T11412] Kernel Offset: disabled [ 176.973825][T11412] Rebooting in 86400 seconds..