last executing test programs: 2m55.625116334s ago: executing program 1 (id=584): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f00000025c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x100, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x8002, &(0x7f0000000700)=ANY=[@ANYBLOB="56c78e3c733d76697274676f2c6e6f65bc33dbde548d51f5638173733d616e792c63616368653d66736361636865"]) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000020000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@o_path={0x0, r2}, 0x18) chdir(&(0x7f0000000300)='./file0\x00') ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080), 0x80441, 0x0) 2m54.745500876s ago: executing program 1 (id=596): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) mremap(&(0x7f000000d000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00002f1000/0x2000)=nil) (async) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000002480), 0x10b602, 0x0) ioctl$FBIOBLANK(r0, 0x4611, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) (async) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x2) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) (async) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000080)=0x1) 2m54.515282877s ago: executing program 1 (id=597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0xb0, 0x400, 0x1, 0x20000}, &(0x7f0000000040), &(0x7f0000000080)) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0xc1842, 0x0) syz_usb_disconnect(0xffffffffffffffff) io_uring_register$IORING_REGISTER_PBUF_RING(r2, 0x16, &(0x7f0000000380)={&(0x7f0000002000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4, 0x2}, 0x1) syz_clone3(&(0x7f0000000100)={0x4000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000380)={0x3, 0x0, @ioapic={0x2, 0x0, 0x800, 0x5, 0x0, [{0xd, 0x9, 0x2, '\x00', 0x1}, {0x86, 0x2, 0x26, '\x00', 0x1}, {0x4, 0xef, 0x8e, '\x00', 0xee}, {0xfb, 0x7, 0xd}, {0x13, 0xf, 0x2, '\x00', 0x5}, {0x0, 0x3, 0x5, '\x00', 0xd3}, {0xf, 0x0, 0x8, '\x00', 0x5}, {0x9, 0xdb, 0x1, '\x00', 0xd3}, {0x6, 0x23, 0x5, '\x00', 0x2}, {0xde, 0xc}, {0x40, 0x4, 0xf6, '\x00', 0x1}, {0xf5, 0x5, 0x4, '\x00', 0xb5}, {0x7, 0xff, 0x3, '\x00', 0x7}, {0x4, 0x0, 0x0, '\x00', 0xe9}, {0x10, 0x39, 0xc, '\x00', 0xcf}, {0x6c, 0x3f, 0x0, '\x00', 0x4}, {0x6e, 0x24, 0x1, '\x00', 0xa}, {0x7, 0x0, 0x8, '\x00', 0x9}, {0x7, 0x6, 0x0, '\x00', 0xfe}, {0x3, 0x9, 0x9, '\x00', 0x2}, {0x8, 0x6, 0x1, '\x00', 0x49}, {0xae, 0x2, 0x91, '\x00', 0xba}, {0x2, 0x8, 0x2, '\x00', 0xc3}, {0x5, 0xe, 0x54, '\x00', 0x9}]}}) 2m53.505009765s ago: executing program 1 (id=600): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000000001050400000000000000000200000004001880240001801400018008000100e000000108000200e00000010c000280050001"], 0x58}}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x34, 0x0, 0x8, 0x801, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a8}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @gre}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="20000000020805"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x4008050) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f0000000540)) ptrace$cont(0x20, r4, 0x0, 0x0) setpgid(r4, r3) setpgid(r3, 0x0) setpgid(0x0, r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r5, 0x9360, 0x800000000000001) 2m53.364202848s ago: executing program 1 (id=601): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x16, 0x0, 0x8, 0x2}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4, 0x0, r1}, 0x48) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, 0x49801, 0x49a41}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) sendto$packet(r3, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b2", 0xf, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r5, 0x1, 0x4, 0x6, @local}, 0x14) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000040)={r2, &(0x7f0000000c80), 0x20000000, 0x2}, 0x20) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000040)="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", 0x2000, 0xfffffffffffffffe) syz_clone3(&(0x7f0000000900)={0x40000800, 0x0, 0x0, 0x0, {0x1}, 0x0, 0x0, 0x0, 0x0}, 0xae) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x83fb, 0x789b1c25, 0x29, 0x4, 0x4, 0xcc7, 0x8, 0x8d, 0x9, 0xa, 0x2, 0x1, 0x8000, 0x1, 0x6, 0x81, 0x6, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5e, 0xb, 0xffc00001, 0x725bd8a9, 0x8, 0x100006, 0xf7fffff7, 0xfffffff8]}) 2m53.125015941s ago: executing program 1 (id=603): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x40242}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x78, 0x4a, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x38, 0x0, r3, 0x7121}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m53.076944968s ago: executing program 32 (id=603): r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) socket(0x1d, 0x2, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5800000010000300"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000c00010000001c001a8018000a8014000700fc"], 0x58}, 0x1, 0x2}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c000900080000", @ANYRES32], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x0, 0x40242}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_getaddrlabel={0x78, 0x4a, 0x400, 0x70bd27, 0x25dfdbfb, {0xa, 0x0, 0x38, 0x0, r3, 0x7121}, [@IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x38}}, @IFAL_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00'}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_LABEL={0x8, 0x2, 0x4}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) 2m26.533481934s ago: executing program 3 (id=1008): mount$bpf(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040), 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="7165636c6162656c2c000c393cb6ee5e904ef37a527299a05f12f4e731f0780457d25954b94659f19dba131311cc238e8045604ea559d4c6e0581754cab9577fb364e7019df887d74dea86491051fffafc260b0ec32b785351a2c18ba7487e9cfc430dade81f2809bae9643e0a"]) r0 = epoll_create(0x4) r1 = socket(0x2, 0x0, 0x40) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000000080)=0x0) io_submit(r3, 0x1, &(0x7f0000001240)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r2, &(0x7f0000000040)="0300ffff0000", 0x6}]) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f00000000c0)={0x0, 0x2c5, [0x6, 0x3, 0xb5, 0xdc, 0xfffffffffffffd66, 0x1e2800000000]}) socket$inet_tcp(0x2, 0x1, 0x0) r4 = accept4$tipc(r1, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x80000) shutdown(r4, 0x2) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000240)={0x8, 0x2}, 0x74) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001a00010000000000000000000a000000000000000000000008001f"], 0x24}, 0x1, 0x0, 0x0, 0x4048890}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r2, 0xc0096616, &(0x7f00000001c0)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000080)=@assoc_value={r8, 0xffffffff}, 0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000180)={r8, 0xffff, 0x100, 0x101, 0x10, 0x8}, 0x14) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)) 2m26.284072655s ago: executing program 3 (id=1009): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000000)={0x20000014}) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x400) 2m25.434528382s ago: executing program 3 (id=1023): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x468, 0x3f3, 0x800, 0x70bd2c, 0x25dfdbfc, {0x5, 0x1, 0x29, [0xa, 0xfffffffb, 0x9, 0x2, 0x1, 0x2, 0x3021, 0x5, 0x1, 0x8001, 0x23, 0xe, 0x81, 0x7e5, 0x9, 0x3, 0x9, 0xfffffffb, 0x2, 0xff, 0x7, 0x8, 0x8, 0x7, 0x3, 0x10001, 0x8, 0x2292c000, 0x3, 0x9, 0x8174, 0x6, 0x5, 0x7, 0x717, 0xcf25, 0x2, 0x0, 0x7, 0x8, 0x3, 0x2, 0x9, 0x400, 0x4, 0x2, 0xc, 0x7, 0xffffffff, 0x1, 0x9, 0xfffffeff, 0x8, 0x3, 0xffff, 0x6, 0x7, 0xb1f, 0x2, 0x40, 0xe, 0x3, 0x2, 0x1], [0x80000001, 0x1, 0x8, 0xffffffff, 0x7, 0x2, 0x1, 0xffffff01, 0x4, 0x4, 0x4, 0x9, 0x8, 0x101, 0x200, 0x0, 0x80000001, 0x400, 0x7ff, 0xa18, 0x101, 0x40, 0x1, 0x1ff, 0x7, 0x81, 0x100, 0x8, 0xfffff33d, 0x2, 0x3, 0x1ff13598, 0x6, 0x4ea, 0x6d9d, 0x4, 0x7, 0x2, 0x71ac, 0xc, 0x9, 0x1, 0x3, 0x8, 0x0, 0x39635ac8, 0x40000000, 0xb2, 0xe95f, 0x9, 0x6, 0x7, 0x80000001, 0x3, 0x2, 0x35ae, 0x3440000, 0x0, 0xfffffa47, 0x3, 0x7, 0x8, 0xfffffffa, 0x3c58], [0x1, 0xb, 0x0, 0x626ec3f, 0xfffffffe, 0x6, 0x9, 0x8925, 0x0, 0x8, 0xa9, 0x9, 0x40, 0x45, 0x7, 0xff, 0x5db6, 0x2, 0x6, 0x4, 0xb9e, 0x4, 0x2fbb, 0x6, 0x2, 0xd, 0x0, 0x2, 0x5, 0x8, 0x100, 0xd, 0x8, 0x5, 0x5, 0x0, 0x3, 0x8, 0x3, 0x0, 0x7, 0xe, 0xaddd, 0x2e6, 0x9, 0x80000001, 0x4, 0x79, 0x6, 0x8, 0x2, 0x1, 0x9, 0x911, 0x80, 0x57, 0x1000, 0x8f, 0x8, 0xfffffff7, 0x6, 0x4, 0x3, 0x1], [0x10000, 0x8, 0x7, 0x1, 0x4, 0x7fff, 0xfffffff7, 0x1, 0x8000, 0x5, 0x7, 0x6, 0x2, 0xfffffff7, 0x40, 0x1, 0x9, 0x393, 0x7, 0x7, 0xfff, 0x1ff, 0x18000000, 0xf65, 0x4, 0x700000, 0xaecf, 0x7ff, 0x1, 0x2, 0xf, 0x8, 0x9, 0x80000001, 0x1, 0x5c1a, 0x7, 0x7130, 0xffffffff, 0xb, 0x0, 0x1, 0x8, 0x0, 0xe0, 0x9, 0xffffffff, 0x10001, 0x7, 0xb, 0x5, 0x7, 0x2, 0x10, 0x4b59, 0x0, 0x4, 0x2, 0x200, 0x7, 0xd76, 0x5, 0x80, 0x5], 0x48, ['/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00', '\x00', '.[-%/&%\x00', '/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00', '/dev/kvm\x00']}, ["", "", "", ""]}, 0x468}, 0x1, 0x0, 0x0, 0x8005}, 0x8800) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffbfffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x7ff, 0x1, 0x0, 0x400, 0x80, 0x88, 0x2, 0x8, 0x8d], 0xeeee8000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m25.304650043s ago: executing program 3 (id=1024): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000080)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000000f000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000300)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b8000000000f23c00f21f835010003000f23f8ee6d6c2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x4b}], 0x1, 0x3b, 0x0, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x36, 0x40000000788, 0x80000000002, 0x183, 0x400000004, 0x0, 0xee, 0x0, 0x100000000, 0x1000045, 0x10000, 0x6, 0xf, 0xfffffffffffffffd, 0x0, 0xab], 0x8000000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x10, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES64=r5], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x4000) 2m25.303992553s ago: executing program 3 (id=1025): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = syz_io_uring_setup(0x10d4, &(0x7f0000000000)={0x0, 0x615e, 0x0, 0x0, 0x1000034f}, &(0x7f00000000c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000002c0)={0x1, &(0x7f0000000200)=[{0x32, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_LINK_TIMEOUT={0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) io_uring_enter(r0, 0x200047bc, 0x0, 0x0, 0x0, 0x5e) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000fd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f00005b9000/0x1000)=nil, &(0x7f00008d9000/0x1000)=nil, &(0x7f00007d4000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00002b7000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe9a}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x181, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f0000000140)={0x28729f328c68897}) r7 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x2c, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee1, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0xa, 0x4) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f0000000340)="04", 0x1) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000200)=0x237a, 0x4) sendmmsg$inet6(r5, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r8, @ANYRES32=r10], 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="78050000", @ANYRES16=0x0, @ANYBLOB="000125bd7000fcdbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="f00002803c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="200102803c000100e7fe0100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572ff2e636f756e74000000000000000000000000000005000300030000000800040089d9000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000600000008000100", @ANYRES32=0x0, @ANYBLOB="ac00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff01000038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000900000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004006606000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="74000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000044000400c0ff09752e000000070003020b00000004006705ff0000000000060808000000f8ff190709000000040009830500000007000b0609000000080004050600000008000100", @ANYRES32=0x0, @ANYBLOB="f40002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000300000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000700000008000600", @ANYRES32=0x0, @ANYBLOB], 0x578}, 0x1, 0x0, 0x0, 0x200c0c2}, 0x8841) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m25.048714355s ago: executing program 3 (id=1026): syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x400080c0}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 2m24.957050612s ago: executing program 33 (id=1026): syz_open_dev$radio(&(0x7f0000002100), 0x2, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x0, 0x0) preadv2(r2, &(0x7f0000000280)=[{&(0x7f00000008c0)=""/211, 0xd3}], 0x1, 0x0, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x64}, 0x1, 0x0, 0x0, 0x400080c0}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x2}, @NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m34.641224169s ago: executing program 0 (id=1820): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="170000001400030400000000000000542d"], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008801}, 0x40000) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f00000002c0)={0xc0, 0x0, 0x4000}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x8000}}, './file0\x00'}) fcntl$dupfd(r5, 0x0, r1) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 1m34.417472958s ago: executing program 0 (id=1823): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x161842, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r5, 0x6, 0x22, 0x0, &(0x7f0000000080)) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0xf0}, 0x24044080) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0)='macvtap0\x00', 0x10) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140), 0x4) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000000)={0x1, 0x4, 0xca, &(0x7f0000000240)=""/202}) ppoll(&(0x7f00000000c0)=[{r0, 0x8040}], 0x1, 0x0, 0x0, 0x0) write$ppp(r0, &(0x7f0000000200)="bc72", 0x2) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) 1m34.25470248s ago: executing program 0 (id=1826): r0 = socket$netlink(0x10, 0x3, 0x15) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x4, 0x6, 0x3}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) socket$kcm(0x10, 0x2, 0x0) (async) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) (async) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) ioctl$DVB_DVR_DMX_DQBUF(r1, 0xc0186f40, &(0x7f0000000140)={0x6, 0x6, 0x4, 0xfffffff7, 0x4, 0x8}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000340)="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", 0x182}], 0x1) fspick(r2, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000034000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000428000000060a010400000000000000000500000008000b400000000009000100ce6b898c5fbc01b25fc9ba73569a5973797a3000000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a300000000034000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000428000000060a010400000000000000000500000008000b400000000009000100ce6b898c5fbc01b25fc9ba73569a5973797a3000000000140000001100010000000000000000000000000a"], 0xa4}}, 0x0) ioctl$int_out(r1, 0x0, &(0x7f0000000180)) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000280)) 1m34.253238813s ago: executing program 0 (id=1828): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f0000000300)={'bond0\x00', @ifru_names='veth0_vlan\x00'}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES8=r0], 0x0, 0x5, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random="00008000", @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x0, @loopback, @loopback, {[], @mld={0x82, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) write$P9_RLERROR(r3, &(0x7f0000000200)={0xf, 0x7, 0x1, {0x6, 'memory'}}, 0xf) write$cgroup_subtree(r1, &(0x7f0000000a40)={[{0x2d, 'freezer'}, {0x2b, 'memory'}, {0x2d, 'memory'}, {0x2b, 'devices'}, {0x2d, 'pids'}, {0x2b, 'devices'}, {0x2d, 'net'}, {0x2b, 'net_prio'}, {0x2d, 'freezer'}, {0x2b, 'rdma'}, {0x2d, 'rdma'}]}, 0x55) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r6 = syz_init_net_socket$ax25(0x3, 0x3, 0x7) setsockopt$ax25_int(r6, 0x101, 0x9, &(0x7f0000000340)=0xb0a, 0x4) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f00000003c0)={0x2, {0x2, 0x80e, 0x8, 0xc1e6, 0x1ff}}) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @dev, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, {[], @param_prob={0x2, 0x1, 0x0, 0x0, {0x0, 0x6, '\x00', 0x80, 0x11, 0x0, @private2={0xfc, 0x2, '\x00', 0x40}, @ipv4={'\x00', '\xff\xff', @dev}, [], "17c11d58674e624c1a146558aab57fff"}}}}}}}, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000240)=""/58, 0x3a}, {&(0x7f0000000340)=""/159, 0x9f}], 0x2, 0x1a1, 0x40) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f0000000140)={0x28, 0x2, r8, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xc}) newfstatat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000006c0)={{{@in6=@ipv4={""/10, ""/2, @broadcast}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@remote}}, &(0x7f00000007c0)=0xe8) r11 = getuid() mount$fuse(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x80, &(0x7f00000008c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x1400}}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions}], [{@dont_hash}, {@uid_lt={'uid<', r10}}, {@seclabel}, {@euid_eq={'euid', 0x3d, r11}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@seclabel}, {@smackfsdef={'smackfsdef', 0x3d, '#*'}}]}}) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x5, r8, r8, 0x3, 0xfffffffffffffffa, 0x3fff}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r4, 0x5, 0x1, 0x0, &(0x7f0000000000)='e', 0x0, 0xb3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 1m34.150064948s ago: executing program 0 (id=1829): openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/oss_mixer\x00', 0x202, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0xa02, 0xc1) sendfile(r0, r0, 0x0, 0x2) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000000400)) 1m34.147535741s ago: executing program 0 (id=1831): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="4e2c28d2a80b524944688a3aca01d061", 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000440)={0x2, {{0x2, 0x4e22, @loopback}}}, 0x88) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000b80)=[@release={0x40086303}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x2, {0x4000046, 0xffffffe6, 0xfffb, 0xf7168000}}) socket(0x22, 0x2, 0x24) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0x6, 0x6, 0x3, {0x6, @sliced={0x6, [0x1, 0x9, 0x8000, 0x5, 0xfffe, 0x0, 0xf, 0xf0, 0x2, 0x5, 0xfffd, 0x500, 0x8, 0xffff, 0x0, 0x4, 0x4d, 0x61, 0x2, 0x7, 0x4, 0x5, 0x8, 0x8b, 0xff1b, 0x9, 0x2, 0x8, 0xd, 0x5, 0x1c2f, 0xfff2, 0x5, 0xd1, 0x8, 0x9, 0x401, 0x7, 0x3, 0x9, 0x9, 0x80, 0x5, 0x8, 0x2, 0x6, 0x7f, 0xf9a], 0x4}}, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) 1m18.031599715s ago: executing program 34 (id=1831): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000100)="4e2c28d2a80b524944688a3aca01d061", 0x10) syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000440)={0x2, {{0x2, 0x4e22, @loopback}}}, 0x88) r7 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000b80)=[@release={0x40086303}], 0x0, 0x0, 0x0}) ioctl$VIDIOC_G_SELECTION(r7, 0xc040565e, &(0x7f0000000240)={0xa, 0x0, 0x2, {0x4000046, 0xffffffe6, 0xfffb, 0xf7168000}}) socket(0x22, 0x2, 0x24) ioctl$VIDIOC_CREATE_BUFS(r5, 0xc100565c, &(0x7f0000000340)={0x6, 0x6, 0x3, {0x6, @sliced={0x6, [0x1, 0x9, 0x8000, 0x5, 0xfffe, 0x0, 0xf, 0xf0, 0x2, 0x5, 0xfffd, 0x500, 0x8, 0xffff, 0x0, 0x4, 0x4d, 0x61, 0x2, 0x7, 0x4, 0x5, 0x8, 0x8b, 0xff1b, 0x9, 0x2, 0x8, 0xd, 0x5, 0x1c2f, 0xfff2, 0x5, 0xd1, 0x8, 0x9, 0x401, 0x7, 0x3, 0x9, 0x9, 0x80, 0x5, 0x8, 0x2, 0x6, 0x7f, 0xf9a], 0x4}}, 0x3}) close_range(r6, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) write$P9_RVERSION(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff060002000800395032303030"], 0x15) 41.263983861s ago: executing program 4 (id=2550): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x84000, 0x0) sendmmsg$alg(r0, &(0x7f0000001c00)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="3547ea2938e5f28deca1ee6e94a975e68c1355eecfc52e5c135248d4c39f73460dfbb04a8121f11d0c5473cec6925fc260caaf2766476c317d89372711a276667f70a7126314eae8d6109fcd6d0aa5283195905c5b2f0e4a47196a46859b55a424a934878412db70cbef938e1db94caabfe17e73bffdb2f5d340660f1c", 0x7d}, {&(0x7f00000000c0)="9fc2ea221a18792e4f1ca86645e30a36c50544038eb8dfd3d3405d9c263226985504814e9acf80913c0bbbaed83a1b12d920e206b875c05378b3eadf810739a78153be682bec6d6fb194f4520a1738c9a7ab285c440af8d402cae6083243597c3313d33171a09c0daefdadc4114506c9d96cbf9b6f0731b4c40d6c0baa7b56d36ff4835ed941c9b235732b05ba350a62bbf6bb2bc8ee4891661042dd31fd52f3c70cde372e7efbb36e0432908d2dcb0e4a435da50ba344210db824cd263cfc592de1c6ff4acba0bd0b6c6ffb187cf79a6d03174cb56a75a323fca23650379faa34413ab0f01d16cc76788dfe3c08959ffa5306ac0be9054d", 0xf8}, {&(0x7f00000001c0)="d7cbd6c4b896c853e14ba6ea87a3527005218f105b6fe979d3f0c3057b126634040da1063689d6a0c20512cb50ede43bcb1df4784921dd8fdad1b57c7f722de475926c884b6b33799f8c5cfee16b10d392737133c344826ebba35f5b29c5f09b0a973ade6e686eb661608f366f8894a52fa721d578549fb75510f9f9d53ec479204eb6b2a0a0576bd833f2501acd296a679e638d5ad367146205d3bb0b46ca3e36fd774bdbf35faa28d21168a778370913e8794a1d2f09800de66b8b9d0e700a6cd192245291781e1528de8251823ec97aae6f", 0xd3}, {&(0x7f00000002c0)="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", 0xfe}], 0x4, &(0x7f0000000400)=[@iv={0x38, 0x117, 0x2, 0x1d, "5992465eee4973f505426342812d6eda295d0ef615ebf5e6d79fb5239c"}, @iv={0x58, 0x117, 0x2, 0x3e, "7b395e7188ef9b3432b9e4389cc15e8871d2e72e514fda7e6abf99e7f850a92b121e14cac690acd66684c60648463a86ca75e4d480d691fea0326392e364"}, @assoc={0x18, 0x117, 0x4, 0xebcb}, @iv={0x70, 0x117, 0x2, 0x5c, "fe7905ca241808e0d38cf75768c9fc1294eff90270fdf2fa75fe42de87d8f396ad1080cbf2df87c5f62492d8427f2034d9bcfe02954cd997a0107a726382f4d8fa7a14707756e58f50efebb14dc0da17db080bb1bf07a211fc64c56f"}], 0x118}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000540)="ea804cd6b1daa14a7c5da39b50901d4e739fa99d085e3c45b4832ca4a9613d7c1c7e", 0x22}, {&(0x7f0000000580)="ff168ee65d2cb94a1de9584ceaa758b7fe13db83d26578fc552a2947806e745f70c956e8d7826016ca57e333429635a4d9354be86c31b39315cec45506a622b2957b9bd7157e50e8eeb8a9a7c9130ee05738bd216da2bc5012050d7887ad63a05393413e1bcbb482959be1a6e55f", 0x6e}, {&(0x7f0000000600)="0f31a3cef8cd14bbbf34965940bec3e24264c84af7d91a88a90f40439132ff92d948f51819a0ad3f8d81cf6d04039d3784dc48b1711819f3003af5abb8efd6d09d1480da75b001f1b7dbe96ff8b42352451b81164d2ca413ad0f628bb3f8f9a91bad17c05a760a326d1f9f6b2dea800320c89ee4d32ae11e6772be28d21ef884fa915b55c776207f35a5228f2e53e277b41d3256f4d01857d381965be174ea5430e2f0b4165736210a3b7edd75de39b0716436ee9af1397fb24d773cc637421779b5c5bfe3910fa89b97", 0xca}, {&(0x7f0000000700)="03d5dff57d991eae243aaed1bdf720ec129311d4b7f2190afc82eb29aa572a434da99c8d5570f9c9a07aa026932ad21af4c28f9d0636445d2ef703c309bbd0436e4474b604177a6eaef1b03fb47211939e304bd1dd98fb03db11b7490798b216796151e1b4c75fd8b387a59036ade18c19cd64c730b3af36381e61393ac0bf209cc356a72e", 0x85}, {&(0x7f00000007c0)="d942e555682346edc88c513ac9", 0xd}, {&(0x7f0000000800)="4ba5aaddd2286b6c8685f101837714d3ee660434de1c9166a2e9c2e1a8a1917b813a62ea5a5245eec8438b5c3c107b8aa1321f81cbf2fb26ce645de918a0262fee4a2cc74bd87bea3263d5057da3cacbf26042d2c94220ee7142fe1f772219a3ceb273a19dcec3127811e361f513695a33222c", 0x73}, {&(0x7f0000000880)="db438e611224aa01c5c25886782bed3b615a5a11aaa0bb141fd254196c437595ff82fa4cbd781127d571c5f5a4c96e13984779648be5", 0x36}, {&(0x7f00000008c0)="a474f94ee7f74c5105e74779c09e71492e01c3bf7594ba19334534abe7a9f2164ceccaca60f1d1acc1f6d19a0f0321691b28c58cb209be5b452d6d60a5064c7e64b8ceb942df20200c7f67d3874bfd0bed21950219ecc26304b1aaceb60314eb098ed34fba1e15ba9e6c185e3af69c90b5802ef386034c209503da6d9e2a5a13a994743b9cdf060a35c499e09fdc17852c8b92e9fb6b3aeab04a20a9786b2fed52d301f83c2ad68b74e4dc7f821d3efd41d624ce617135700a", 0xb9}], 0x8, &(0x7f0000000a00)=[@iv={0x70, 0x117, 0x2, 0x5b, "f64385ed1ae660c6a0e20bfd0c74bc4adadf7bb258d2199e652e2605162f5600f595dbaf5afac1491dd544af418d906f2b77097524a7c2530addbbabbd21aeffc1c7ab45a8f240aadacf8991dd41ab45c14ab41c94e5199ed155db"}, @op={0x18}], 0x88, 0x840}, {0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000000ac0)="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", 0x1000}, {&(0x7f0000001ac0)="f3f9ff3b0f1e1522c7d4703552ba19be7e499e92a15bc4ece519c81398f8418067578ed535e413a11dcc2aee4cb61449539173413c998f3f86f3bb51e2e4173e385a5100b37699ec42f5e5f736562c6624de60036c2b23c2694c097951e7a5da7fa20c7a5174e84d90b9efd12c3ca0e616a2d108aff5756d945cb7346e055dc8eab57cd0690ed16d3c2c4f27c13ad2ee1de501237dc7b3f4ae72db8e07a0c5326964d02bffb7caf1cd80b0813653ec03bfa928018e255478fbf58dbb", 0xbc}], 0x2, &(0x7f0000001bc0), 0x0, 0x880}], 0x3, 0x20000810) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000001cc0)={0x1}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001d40)={0x0, &(0x7f0000001d00)}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000001d80)={'veth0_to_bond\x00', {0x2, 0x0, @broadcast}}) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000002100)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000020c0)={&(0x7f0000001e00)={0x2ac, 0x14, 0x400, 0x70bd2c, 0x25dfdbff, {0x18, 0x40}, [@INET_DIAG_REQ_BYTECODE={0x5e, 0x1, "07beb0c4305a212adef3fe75c73b6714a08a5da0997d8d4be9254fc999533b1f2240d4df0500938ce18c3cffc657eb24bdeb7bbba5e2d12853363d692054a8429066a35a7ae5c882435197ef28ca62147d30fd454dcdd48624f1"}, @INET_DIAG_REQ_BYTECODE={0x18, 0x1, "bfe44ec52a8ac188e2d5effe546134838eaa25ef"}, @INET_DIAG_REQ_BYTECODE={0x3f, 0x1, "f30cf79bfe36f95d2b4707b81e3c1ede924ae9114165ad4bbb73d84ad4c744e46c91083df737de0482224b2a6a92944c17168799d87d618124e008"}, @INET_DIAG_REQ_BYTECODE={0x81, 0x1, "a71f5825ac369a350850e01f613e4dc7b53ac040bdda13512c2ceed257b497559d8f2153375391d1ac9212929041d2778de5fb293da8815b21b8caf7249e40255e681a9567362b3c44d7415892459c0491b3589f2ab1961d6aa328ae681ce52344d3725a6c48e5a3ea0140ced45cd078f068050f2e19217ce4fe1a225b"}, @INET_DIAG_REQ_BYTECODE={0xe4, 0x1, "166a6e5b7e1c176acfb7411b49d66162d510991e3cd83e8e87e64f6e3fe4a63c13b5a6f07139dedc0d5b7adf43ae4d5217aa6f10e4013bc377047dc7cd255480c75862efae921ae67a1eacccb545f49c767ed905d87dbcef05aef50eafbf8789f758077f546a694db76924fb19da976505e2ed5ad4ec301d98a7bfe374d9515987f66363a4a1a7bc5dc82f83608448e48a8e1007c534bf1bd2ede1efcffe0827c300670214df528066cd4c4253cb41e2a416111d6a3910e57c7803d3f3a2bee08b75fcc3cb7c3e030c36a01dfa5b1eac9f59cbb2c54779a13af6115af415a40c"}, @INET_DIAG_REQ_BYTECODE={0x75, 0x1, "091aaa710b0727232afa26514478ccd183c6237e4b9fd946583e85c1463a81e1e642fe2daf607b56548075e398a6d020fe0214f3bb9a98a34c18bcdcce49e36c3360b966d94de3071f0e50b44003910bb76c28f680caa8dd01897139eb44f0e901cf505891b9c7947d40a48444deaa5475"}]}, 0x2ac}, 0x1, 0x0, 0x0, 0x1}, 0x4000090) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002180)=@generic={&(0x7f0000002140)='./file0\x00', r0}, 0x18) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r1, 0x942e, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000021c0)={0x0, 0x1b, "83ec3b4fcdedde57f1cb733ab80f4a8c714c2376ed292748abb2b9"}, &(0x7f0000002200)=0x23) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000002240)={r2, 0xff89, 0x30, 0x100000000, 0x7}, &(0x7f0000002280)=0x18) bpf$OBJ_GET_PROG(0x7, &(0x7f0000002300)=@generic={&(0x7f00000022c0)='./file0\x00', 0x0, 0x10}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffa000/0x4000)=nil, r4, 0x6, 0x20010, 0xffffffffffffffff, 0x0) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000002340)={0x80000000, 0xfffffffc, 0x5, 0x400, 0x9, "4cfc92b77a7a7b999ae4ee934b854184c7f9ba", 0x3, 0x7816}) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000002380)) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f00000023c0)={r2, 0x3, 0x3, 0x8, 0x9, 0x8, 0xff, 0x0, {0x0, @in6={{0xa, 0x4e24, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x24000}}, 0x4, 0x9, 0xffffffff, 0x5, 0x7}}, &(0x7f0000002480)=0xb0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002800)={0x0, &(0x7f00000024c0)=[@uexit={0x0, 0x18, 0x3}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xa, 0x7, 0x3, 0x1}}, @wrmsr={0x65, 0x20, {0x640, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @rdmsr={0x66, 0x18, {0xbd1}}, @rdmsr={0x66, 0x18, {0xbf4}}, @set_irq_handler={0xc8, 0x20, {0xff, 0x1}}, @cpuid={0x64, 0x18, {0x5, 0x2}}, @code={0xa, 0x79, {"0f20e035000004000f22e048b803000000000000000f23c00f21f835030009000f23f836360f35c7442400ff000000c744240200000100ff2c24b8010000000f01c1c4c145d8b73c6a0000c4c3b5783200362666430f388296670d000066ba4300b800000000efcb"}}, @rdmsr={0x66, 0x18, {0x4a3}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @wr_crn={0x67, 0x20, {0x8, 0x3}}, @cpuid={0x64, 0x18, {0x8001, 0x8}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0x9c, 0x4, 0x2, 0x1}}, @rdmsr={0x66, 0x18, {0x9a9}}, @in_dx={0x69, 0x20, {0x83e8, 0x1}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @ro_nat=0x6402, 0x7, 0x81, 0x7f}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x8, 0x4, 0x1}}, @in_dx={0x69, 0x20, {0xceb4, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @wr_drn={0x68, 0x20, {0x6, 0x9}}], 0x321}) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4040aea0, &(0x7f0000002840)=@arm64={0x5, 0xae, 0x5, '\x00', 0xd2}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000002880)={@mcast2, 0x0}, &(0x7f00000028c0)=0x14) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002940), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002980)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r0, &(0x7f00000035c0)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003580)={&(0x7f00000029c0)={0xbbc, r7, 0x201, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_PEER_MEASUREMENTS={0x4b0, 0x111, 0x0, 0x1, {0x4ac, 0x5, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x68, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x60, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x3a0, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x378, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xc0}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xc8, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x81}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xa38f}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3274aea23fdb2a1d}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xa}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xbc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2613}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x58}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xcc, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x83}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0xa4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1d}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}]}]}]}, {0x9c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x8, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x84, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x80, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x6e4, 0x111, 0x0, 0x1, {0x6e0, 0x5, 0x0, 0x1, [{0x634, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x44, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1671}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2a}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x127886c3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x154, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x11c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6b5}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x80}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1b}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x2c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xf6a1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x136}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x101}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x51}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x7}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x188, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0xb4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x13}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x5}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0x194, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x68, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x10}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd4, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1e}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x50, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xc96d}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xbf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffc}]}]}]}, @NL80211_PMSR_PEER_ATTR_REQ={0x108, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x5c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xa0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xe8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x4b}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1c}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x4}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0xa8, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x14, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x81}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1e4}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x976}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}]}]}}]}, 0xbbc}, 0x1, 0x0, 0x0, 0x84}, 0x4000044) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000003640), r0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000003740)={&(0x7f0000003600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003700)={&(0x7f0000003680)={0x4c, r9, 0x4, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x50}, 0x8090) connect$pptp(r0, &(0x7f0000003780)={0x18, 0x2, {0x2, @remote}}, 0x1e) r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000037c0), 0x100, 0x0) sendmsg$NL80211_CMD_SET_KEY(r10, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000038c0)={&(0x7f0000003840)={0x7c, r7, 0x10, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x1c, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "7c2806312a263a77a71c92f05d"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x8, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "800a388a90"}, @NL80211_ATTR_KEY_SEQ={0x14, 0xa, "51ca3272b8e5129d750b3793dec8e47f"}]}, 0x7c}, 0x1, 0x0, 0x0, 0x16}, 0x8040) 41.262957063s ago: executing program 4 (id=2551): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x4) (async) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x5) sendmsg$nl_route_sched(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b80)=@newtaction={0x11c, 0x30, 0xeaa3ef926154e70d, 0x0, 0x0, {}, [{0x108, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc}, {0xfffffffffffffd21, 0x8, {0x2}}}}, @m_sample={0xb8, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x0, 0x2, {0x3, 0xd, 0x10000000, 0x0, 0x3}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x100008, 0x4d82, 0xffffffffffffffff, 0x7ff, 0x4}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0xfff, 0x88, 0x6, 0x3, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xffffffff}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x8}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x9e07, 0x5, 0x3, 0x9}}]}, {0x22, 0x6, "b993a266d04d68c578a189161d7b3605ae1ad871dbd78a555343b82aff5a"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x11c}}, 0x0) 41.199677539s ago: executing program 4 (id=2554): r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1, 0x2100) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000300)={&(0x7f00000001c0)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_SETPLANE(r0, 0xc03064b7, &(0x7f0000000200)={r1, 0x0, 0x0, 0x5, 0x80000003, 0xfffffffc, 0x0, 0x0, 0x5, 0x7, 0xd, 0x31e}) 41.113494617s ago: executing program 4 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x0, 0x5, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x40004) setitimer(0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000400), 0x440000, 0x0) ioctl$FIGETBSZ(r3, 0x2, &(0x7f0000000440)) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mkdir(0x0, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x3000005, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r4, 0x4) listen(r4, 0x5) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x1015, 0x1) umount2(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c0000000800010003"], 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r7 = signalfd4(r2, &(0x7f00000000c0)={[0xb20]}, 0x8, 0x180800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x3c) 41.027872597s ago: executing program 4 (id=2557): syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60fca33f00087300fe800000000000000000000000000000fe8000000000000000000000000000aa5c00010000000000b990bdc7ae3a36"], 0x0) 40.65251459s ago: executing program 4 (id=2568): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x128, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x7, 0xd3}}, @common=@icmp6={{0x28}, {0xc, "a7a0", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'pimreg0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1, 0x58, 0x3, 0x60}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x9, 0x1000, 0x0, 0x0, "ea131b26f25237f3aeab4b54f0431edf86d9d4cf1f53413dc91159374c3aa782ebb08f6128e44661f16de5fb98696e14d50679f5ed049f4c8eb3cb596f06244e"}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "a811", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) write$binfmt_misc(r5, &(0x7f0000000100)="70e953f4659eab2874a70e0964c53c475b415fd2c2a501cbf0af17faa2603ce3c181779e472367a4163a7fd5da9fb383b2180bb23fe6ea0b84f244911625c513f63d4d3e0260ebc4ba72b420cea085f1de713fb096724430391ae36cf7a7bd9d0f4132585e0d0821fb3534bd2442f590bd07b0dfc2ec5d06ce4bd45cb5550d39446b686d9837628a519b8770402eb04d3dc7eabde18eacb12e4642ef40b712487081451e3c750bad55c58f87452e637c4079f33301fdb123953431a4347993ae6e4d2dc5ec48ce0034a43af084b394d15e48505f6cc95d428975866db398b0c82218c16d345189b12a", 0xe9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01080000000000000000070000000900010003797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000340003803080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c0002800800014000000007140000001000010000000000000000000084000a"], 0xf4}}, 0x0) 40.527936208s ago: executing program 35 (id=2568): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x4, 0x408, 0xffffffff, 0x128, 0x0, 0x128, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@ah={{0x30}, {[0x4d3, 0x4d5], 0x7, 0xd3}}, @common=@icmp6={{0x28}, {0xc, "a7a0", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, [0xff000000, 0xff, 0xffffff00], [0xffffffff, 0xffffff00, 0xff, 0xff000000], 'pimreg0\x00', 'wlan1\x00', {0xff}, {0xff}, 0x1, 0x58, 0x3, 0x60}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x9, 0x1000, 0x0, 0x0, "ea131b26f25237f3aeab4b54f0431edf86d9d4cf1f53413dc91159374c3aa782ebb08f6128e44661f16de5fb98696e14d50679f5ed049f4c8eb3cb596f06244e"}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xb, "a811", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000080)={0x0, 0x1, 0x7, 0x10001, 0x5, "1afa86d32101b58680cdda128ed251c679583d", 0x3f, 0x80000004}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) pipe2$9p(&(0x7f0000000200), 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd}) unlink(&(0x7f0000000100)='./file0\x00') close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r6, 0x29, 0x21, &(0x7f0000000080)=0x3, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @private1, 0x5}, 0x1c) write$binfmt_misc(r5, &(0x7f0000000100)="70e953f4659eab2874a70e0964c53c475b415fd2c2a501cbf0af17faa2603ce3c181779e472367a4163a7fd5da9fb383b2180bb23fe6ea0b84f244911625c513f63d4d3e0260ebc4ba72b420cea085f1de713fb096724430391ae36cf7a7bd9d0f4132585e0d0821fb3534bd2442f590bd07b0dfc2ec5d06ce4bd45cb5550d39446b686d9837628a519b8770402eb04d3dc7eabde18eacb12e4642ef40b712487081451e3c750bad55c58f87452e637c4079f33301fdb123953431a4347993ae6e4d2dc5ec48ce0034a43af084b394d15e48505f6cc95d428975866db398b0c82218c16d345189b12a", 0xe9) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a01080000000000000000070000000900010003797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200600000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000340003803080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c0002800800014000000007140000001000010000000000000000000084000a"], 0xf4}}, 0x0) 38.568752384s ago: executing program 6 (id=2596): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x0, {0x4, 0x5, 0x0, 0x8, 0x0, 0x0, {0x200000000000, 0x203, 0x6, 0xffff, 0x0, 0xfffffffffffffffc, 0x7f, 0x0, 0x120, 0x2000, 0x0, r2, 0x0, 0xfc24, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x103880, 0x60) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x36) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000001c0)={0x54, r5, 0x1, 0xffffffff, 0x0, {0x26}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x10001}, {0xc, 0x90, 0x1ff}}]}, 0x54}}, 0x0) 38.492511012s ago: executing program 6 (id=2599): syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff02c}, {0x6}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_open_dev$usbfs(0x0, 0xf, 0x8041) 36.900380367s ago: executing program 6 (id=2611): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) keyctl$get_persistent(0x16, 0xee00, 0xffffffffffffffff) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f3, &(0x7f0000000000)) 35.959702833s ago: executing program 6 (id=2620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c00000002030340000000f6ff000000000000100800010001"], 0x1c}}, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6400000002060500000000000000000000000000120003006269746d61703a69702c6d616300000005000400000000000900020073797a310000004018000780050003001f0000000c00018008000140ffffffff05000500020000000500010006"], 0x64}}, 0x8804) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4309(aegis128-aesni)\x00'}, 0x58) close_range(r3, 0xffffffffffffffff, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x8840) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x102) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9101) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00') bind$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2000000) socketpair$unix(0x1, 0x1, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2803000000", @ANYRES32=0x0, @ANYBLOB="80000200e180000008001b0000000000"], 0x28}}, 0x0) 35.863519023s ago: executing program 6 (id=2621): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x11, @rand_addr, 0x0, 0x3, 'sh\x00', 0x20, 0x8, 0x5a}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00ad, &(0x7f0000000200)={[{@noswap}, {@mpol={'mpol', 0x3d, {'interleave', '=static', @void}}}]}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 35.595148185s ago: executing program 6 (id=2627): mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mount$nfs4(&(0x7f0000000100)='}):^@-@-\xf9%]\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x1280410, &(0x7f0000000200)={[{'\x03#'}, {'1#L'}, {'}[}\\'}, {'/&'}, {}], [{@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '*?(%@\')#)@'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x64, 0x31, 0x34, 0x39, 0x62], 0x2d, [0x61, 0x35, 0x38, 0x9b9cc2b73ebf749e], 0x2d, [0x33, 0x64, 0x33, 0x64], 0x2d, [0x19, 0x32, 0x30, 0x34], 0x2d, [0x38, 0x39, 0x63, 0x62, 0x63, 0x32, 0x35, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '+@/\\\t'}}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}, {@appraise_type}]}) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 35.538438824s ago: executing program 36 (id=2627): mkdir(&(0x7f0000000040)='./file1\x00', 0x20) mount$nfs4(&(0x7f0000000100)='}):^@-@-\xf9%]\x00', &(0x7f0000000140)='./file1\x00', &(0x7f00000001c0), 0x1280410, &(0x7f0000000200)={[{'\x03#'}, {'1#L'}, {'}[}\\'}, {'/&'}, {}], [{@flag='dirsync'}, {@smackfshat={'smackfshat', 0x3d, '*?(%@\')#)@'}}, {@measure}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'upperdir'}}, {@fsuuid={'fsuuid', 0x3d, {[0x38, 0x66, 0x64, 0x31, 0x34, 0x39, 0x62], 0x2d, [0x61, 0x35, 0x38, 0x9b9cc2b73ebf749e], 0x2d, [0x33, 0x64, 0x33, 0x64], 0x2d, [0x19, 0x32, 0x30, 0x34], 0x2d, [0x38, 0x39, 0x63, 0x62, 0x63, 0x32, 0x35, 0x37]}}}, {@smackfsdef={'smackfsdef', 0x3d, '+@/\\\t'}}, {@smackfshat={'smackfshat', 0x3d, 'workdir'}}, {@appraise_type}]}) mkdir(&(0x7f0000000000)='./bus\x00', 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000bc0)={"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"}) ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, &(0x7f00000007c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x2, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) 1.712236812s ago: executing program 7 (id=3113): syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_num_comp_pkts={{0x13, 0x5}, {0x1, [{0xc9, 0x1ff}]}}}, 0x8) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) 1.708634951s ago: executing program 7 (id=3114): socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x8, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @rand_addr=0x64010102}, "00186371ae9b1c03"}}}}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}}}, 0x0) 1.434241595s ago: executing program 7 (id=3120): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c000280080001"], 0x78}}, 0x0) 1.434151025s ago: executing program 7 (id=3121): ioprio_set$uid(0x3, 0x0, 0xa00c) 1.359315663s ago: executing program 7 (id=3122): syz_usb_connect(0x6, 0x24, 0x0, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000005c0), 0x40000000088d82, 0x0) r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000040)={0x0, 0xeae, 0x100, 0x2, 0xd}, &(0x7f0000000300)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x1, &(0x7f0000000140)=[{0x0}], 0x1}) io_uring_enter(r1, 0x847b9, 0xebd0, 0xa, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 1.209627803s ago: executing program 2 (id=3127): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000080)={0x5, 0x7}) close_range(r0, 0xffffffffffffffff, 0x0) 1.113610251s ago: executing program 2 (id=3128): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x411c, &(0x7f0000000000)={0x0, 0xfffffffc, 0x8000, 0x3, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000)) close_range(r0, r0, 0x0) 1.027874483s ago: executing program 2 (id=3129): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x4}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x4800) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) 888.574989ms ago: executing program 2 (id=3130): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x20}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 888.446309ms ago: executing program 2 (id=3131): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='children\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) 791.682531ms ago: executing program 2 (id=3132): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @mcast2, 0x1c}, 0x1c) syz_open_dev$loop(0x0, 0x7c, 0x1e9142) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000000100)=0x80000005, 0x4) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 791.553379ms ago: executing program 7 (id=3133): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x6, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000280)={r2, 0x0, {0x0, 0x0, 0x0, 0x32, 0x4000000000001001, 0x0, 0x0, 0x1c, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0x6]}}) 663.57305ms ago: executing program 8 (id=3134): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000a"], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 596.580819ms ago: executing program 8 (id=3135): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket(0x23, 0x6, 0x1000) 523.106197ms ago: executing program 8 (id=3136): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0xca, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) sync() mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 395.922322ms ago: executing program 5 (id=3137): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x2000077c, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10) 395.740447ms ago: executing program 5 (id=3138): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f00005e7000/0x400000)=nil) 321.730455ms ago: executing program 5 (id=3139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 215.043542ms ago: executing program 5 (id=3140): syz_io_uring_setup(0x28cb, &(0x7f0000000200)={0x0, 0xd365, 0x10100, 0x3, 0x80000000}, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd000000801900", [0x100000000, 0x8000000000000000]}}) 214.870299ms ago: executing program 8 (id=3141): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000740)={"0bd13af7e222d7b82977a894bcf2d741b99f8f02da617b9ad94014424a83db0314f34fdfe9a260e953f1aaf3610eec4c839a08a42b569d1e59b5520d8ad988ecacf773bc8c1855c13291a20986512ff73d4967f734679cb88ac4c1013a6d38828f96b71019283ce07d08bbb370738322ffae7a0afc79279598c1166ec564d5be5344fc87a5f00ca1354bced1fccde226dcd6e864d8262199e37fda0824cafccbe5f8cd0518aa106eb5f8a0986aca2d05a5eaa0177c72d3caeb3579fd729cfe1e7c8e2bb7a9dcfc32e31c7dd4cb48b11128a933481391a63c788de6306217984ef3aa5c402cf680385d96c065818632f2eb3b976ae7997d793ee5a91e26017c70319748f5b8505ce26e2fc2a50296523adc134596ff6ce79f6b58e5ca0612085af940096fb90cb23a7eac4d0e1f0933ef17dd5b760ed2864d8cc3dca7174f7d10bc4ccde5463f72f0265c673a73a1d7d41a581d8491c8f37615278b543c2c3310ae461a924409d0b5a1a75085d800e69f7351d6f2e058d6323d3ae70c7a1b7961a017dcbd827381d2133be3eda141656239ee6859843e51305726cc2444f1360e65e2993842d09428843f2c50c989084ed7722d34e930873d420e9c9fffda5fedf8370000000000000000885e2e653d083ccc91792e12e3082139763d44f68d1115d8e545444accee3bb38a9fa3b9ff7172868cfaf0a8f22a6939248404db646f2aa405a21b953498132fe3167e4783623451da9253e12187b4086f56bdd827e75a5523e04683335992552fa2cce95d2b23833d57bf2872f9e428b374d049a35636113207f68e34d7f1392c05add0d78b9d999c7a5d47dcbb803bcab54544dbceb73f41d5ac0970883308fecd0edcbb3eea10c1b56c851d13ff248353994d4fc68815b1bf45d202c9944b5cecc4d09a99b422ef51442a8c16e1dbb6a955c4618d592d43cd7e52c206929662f178afe060401868ffaf0db2f1eb3aaeb591be9eae546ae97266315e87487dd399ea4ec20423904c3953376a3ab41853f00b720b270b6ae8fd3cbd6c66e4af6d15bbae6aa085e56a3f8ca4a40117a72209d18e4e31e06389650b8115ef5f1fcd8c2d56b37d66fff06008836e501304a332dd3a9e6eea4f8f8d9e3671edc0abe7788692ba653850e980c36a4d3f60d090a58e34fa033b8e92ce7c19a1730872bd9b58530729400823e68ebb0ab9294bebfcd5404194a9dce119d204e01736b57ef37f7bc11ebf9bbf4d33a35ccebc67a3e38bc092cc208e8d70f33d830d26e16b5adcfb3a8928ececc4273771716dce7a0cd4d6f37f8cf70242fe91f09d9d07745e60c35b93bc343eb27751afc6ffb4693ef290668824287595c20cda170ff582c630e2a5df595cb8b7868b8f28665c7fb592d8763b6a0c3e20154f6400"}) 75.365593ms ago: executing program 5 (id=3142): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r2, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x9) 224.963µs ago: executing program 5 (id=3143): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x13fa6}]}}]}, 0x44}}, 0x2) sendmmsg$inet(r5, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @dev={0xac, 0x14, 0x14, 0x41}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}}], 0x1, 0x4004800) 119.94µs ago: executing program 8 (id=3144): syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x7, 0x0, 0x41c}}}, 0x7) 0s ago: executing program 8 (id=3145): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r1, 0x0, 0x0, 0x2, 0x0, 0x60) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) kernel console output (not intermixed with test programs): xpacket 1024, setting to 64 [ 217.662409][ T24] usb 11-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 217.666563][ T24] usb 11-1: config 1 interface 0 has no altsetting 0 [ 217.670330][ T24] usb 11-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 217.673211][ T24] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.678461][ T24] usb 11-1: Product: ఁ [ 217.679898][ T24] usb 11-1: Manufacturer: Е [ 217.681402][ T24] usb 11-1: SerialNumber: 덡ꮝ钍婆囨裰蚓㑓뉅釺᩼Ⴊ汭샴_珵ཆ•េ㒛圝䫖⦚⭷ೂ⼐಑䡌뤃ᷟ鶴Ä쒮뱶 [ 217.687757][T14843] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 217.883919][ T5940] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.888515][ T5940] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.889878][T14872] cgroup: fork rejected by pids controller in /syz5 [ 217.893690][ T5940] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.897386][ T5940] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.902444][ T5940] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 217.942318][T14900] xfrm0 speed is unknown, defaulting to 1000 [ 218.068760][T14900] chnl_net:caif_netlink_parms(): no params data found [ 218.128103][T14841] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 218.146701][ T24] usb 11-1: USB disconnect, device number 3 [ 218.223075][T10753] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.290089][T14900] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.293426][T14900] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.295810][T14900] bridge_slave_0: entered allmulticast mode [ 218.298955][T14900] bridge_slave_0: entered promiscuous mode [ 218.308598][T14900] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.312820][T14900] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.315830][T14900] bridge_slave_1: entered allmulticast mode [ 218.324046][T14900] bridge_slave_1: entered promiscuous mode [ 218.355517][T10753] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.396258][T14900] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.401258][T14900] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.440781][T14900] team0: Port device team_slave_0 added [ 218.445119][T15097] loop5: detected capacity change from 0 to 7 [ 218.445591][T14900] team0: Port device team_slave_1 added [ 218.451300][ T7345] Dev loop5: unable to read RDB block 7 [ 218.453808][ T7345] loop5: AHDI p1 p2 p3 [ 218.455255][ T7345] loop5: partition table partially beyond EOD, truncated [ 218.463315][ T7345] loop5: p1 start 1601398130 is beyond EOD, truncated [ 218.465957][ T7345] loop5: p2 start 1702059890 is beyond EOD, truncated [ 218.472204][T15097] Dev loop5: unable to read RDB block 7 [ 218.474303][T15097] loop5: AHDI p1 p2 p3 [ 218.475620][T15097] loop5: partition table partially beyond EOD, truncated [ 218.483978][T15097] loop5: p1 start 1601398130 is beyond EOD, truncated [ 218.486685][T15097] loop5: p2 start 1702059890 is beyond EOD, truncated [ 218.491865][T10753] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.525887][T14900] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.532140][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.542288][T14900] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.548818][T14900] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.551780][T14900] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 218.564444][T14900] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.594670][T10753] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.642577][T14900] hsr_slave_0: entered promiscuous mode [ 218.645789][T14900] hsr_slave_1: entered promiscuous mode [ 218.648289][T14900] debugfs: 'hsr0' already exists in 'hsr' [ 218.650362][T14900] Cannot create hsr debugfs directory [ 218.814270][T14900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 218.819008][T14900] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.884797][T10753] bridge_slave_1: left allmulticast mode [ 218.887197][T10753] bridge_slave_1: left promiscuous mode [ 218.889811][T10753] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.897845][T10753] bridge_slave_0: left allmulticast mode [ 218.900169][T10753] bridge_slave_0: left promiscuous mode [ 218.902667][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.428656][T10753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.433900][T10753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.437730][T10753] bond0 (unregistering): Released all slaves [ 219.442993][T10753] bond1 (unregistering): (slave vxcan3): Releasing backup interface [ 219.446634][T10753] bond1 (unregistering): Released all slaves [ 219.453387][T10753] bond2 (unregistering): Released all slaves [ 219.463169][T10753] bond3 (unregistering): Released all slaves [ 219.495358][T14900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.499832][T14900] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.526729][ T5998] usb 11-1: new full-speed USB device number 4 using dummy_hcd [ 219.568795][T10753] : left promiscuous mode [ 219.606277][T15319] overlayfs: failed to resolve './file1/file0': -2 [ 219.632694][T14900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.636802][T14900] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.648297][T10753] tipc: Disabling bearer [ 219.665882][T10753] tipc: Left network mode [ 219.698849][ T5998] usb 11-1: config 0 has an invalid interface number: 8 but max is 0 [ 219.701645][ T5998] usb 11-1: config 0 has no interface number 0 [ 219.708581][ T5998] usb 11-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 219.712369][ T5998] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 219.716000][ T5998] usb 11-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 219.716942][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 219.716952][ T40] audit: type=1400 audit(1770968791.906:1346): avc: denied { mount } for pid=15330 comm="syz.5.2192" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 219.736303][ T5998] usb 11-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 219.739406][ T5998] usb 11-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 219.742782][ T5998] usb 11-1: Product: syz [ 219.744192][ T5998] usb 11-1: SerialNumber: syz [ 219.751928][ T5998] usb 11-1: config 0 descriptor?? [ 219.759307][ T5998] cm109 11-1:0.8: invalid payload size 0, expected 4 [ 219.763409][ T5998] input: CM109 USB driver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.8/input/input29 [ 219.779614][ T5930] Bluetooth: hci1: Malformed Event: 0x13 [ 219.790381][T14900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 219.798063][T14900] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.821680][T10750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.825105][T10750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.977503][T14900] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.980282][ C3] cm109 11-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 219.990242][T14900] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.029521][T14900] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.034009][T14900] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.126847][ T5930] Bluetooth: hci4: command tx timeout [ 220.129389][T10753] hsr_slave_0: left promiscuous mode [ 220.132421][T10753] hsr_slave_1: left promiscuous mode [ 220.135416][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.139564][T10753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.143082][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.145574][T10753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.164899][T10753] veth1_macvtap: left allmulticast mode [ 220.167218][T10753] veth1_macvtap: left promiscuous mode [ 220.169437][T10753] veth0_macvtap: left allmulticast mode [ 220.171821][T10753] veth0_macvtap: left promiscuous mode [ 220.174386][T10753] veth1_vlan: left promiscuous mode [ 220.176755][T10753] veth0_vlan: left promiscuous mode [ 220.683603][T10753] team0 (unregistering): Port device team_slave_1 removed [ 220.713230][T10753] team0 (unregistering): Port device team_slave_0 removed [ 221.074757][T10753] team0 (unregistering): Port device dummy0 removed [ 221.160883][ C0] cm109 11-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 221.161225][ T24] usb 11-1: USB disconnect, device number 4 [ 221.163906][ C0] cm109 11-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 221.175388][T14900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.185969][ T24] cm109 11-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 221.210155][T14900] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.220422][T10750] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.223382][T10750] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.256611][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.259675][T10741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.470597][T14900] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.531301][ T40] audit: type=1400 audit(1770968793.608:1347): avc: denied { watch_sb } for pid=15459 comm="syz.6.2206" path="/33/bus" dev="tmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 221.540226][T14900] veth0_vlan: entered promiscuous mode [ 221.546766][T14900] veth1_vlan: entered promiscuous mode [ 221.566089][T14900] veth0_macvtap: entered promiscuous mode [ 221.574703][T14900] veth1_macvtap: entered promiscuous mode [ 221.600099][T14900] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.607531][T14900] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.616019][T10741] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.619719][T10741] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.648900][T10749] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.655328][T10749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.735978][T10750] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.745976][T10750] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.793943][T10760] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.805175][T10760] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.847658][T10753] bridge_slave_0: left allmulticast mode [ 221.858714][T10753] bridge_slave_0: left promiscuous mode [ 221.861369][T10753] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.881385][T15519] fuse: Bad value for 'fd' [ 221.893143][ T40] audit: type=1400 audit(1770968793.935:1348): avc: denied { setopt } for pid=15513 comm="syz.6.2215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 221.947782][T15521] __nla_validate_parse: 72 callbacks suppressed [ 221.947801][T15521] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2216'. [ 221.949368][T15525] netlink: 'syz.2.2172': attribute type 21 has an invalid length. [ 221.983401][T15519] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2215'. [ 222.089900][T15543] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 222.205226][T15547] atomic_op ffff888056d9a198 conn xmit_atomic 0000000000000000 [ 222.208594][T15547] program syz.4.2219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 222.246961][T10753] bond1 (unregistering): (slave gretap2): Releasing backup interface [ 222.293039][T10753] dvmrp6 (unregistering): left allmulticast mode [ 222.355437][ T5930] Bluetooth: hci4: command tx timeout [ 222.987247][T10753] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.993949][T10753] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.999429][T10753] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 223.007083][T10753] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 223.011624][T10753] bond0 (unregistering): Released all slaves [ 223.145919][T10753] bond1 (unregistering): (slave bond2): Releasing backup interface [ 223.149976][T10753] bond1 (unregistering): Released all slaves [ 223.283449][T10753] bond2 (unregistering): Released all slaves [ 223.292973][T10753] bond3 (unregistering): Released all slaves [ 223.410676][T10753] bond4 (unregistering): (slave bond5): Releasing backup interface [ 223.413650][T10753] bond4 (unregistering): Released all slaves [ 223.530672][T10753] bond5 (unregistering): Released all slaves [ 223.546985][T15525] netlink: 'syz.2.2172': attribute type 6 has an invalid length. [ 223.550179][T15525] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2172'. [ 223.567332][T15519] gtp0: entered promiscuous mode [ 223.572415][ T54] xfrm0 speed is unknown, defaulting to 1000 [ 223.578408][ T54] infiniband syz1: ib_query_port failed (-19) [ 223.612262][T15559] bond4: option xmit_hash_policy: invalid value (6) [ 223.618018][T15559] bond4 (unregistering): Released all slaves [ 223.649143][T15563] netlink: 'syz.2.2221': attribute type 4 has an invalid length. [ 223.697146][T10753] : left promiscuous mode [ 223.755358][T15642] xt_connbytes: Forcing CT accounting to be enabled [ 223.766139][T15642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.782956][T15559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2220'. [ 223.786094][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2220'. [ 223.801236][T15646] syzkaller0: entered promiscuous mode [ 223.803498][T15646] syzkaller0: entered allmulticast mode [ 223.828912][T10753] tipc: Left network mode [ 223.831739][T10753] IPVS: stopping backup sync thread 8638 ... [ 223.925367][ T40] audit: type=1400 audit(1770968795.851:1349): avc: denied { listen } for pid=15659 comm="syz.2.2227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 223.926165][T15662] 9pnet_virtio: no channels available for device ./file0 [ 223.942523][T15662] SELinux: Context system_u:object_r:run_init_exec_t:s0 is not valid (left unmapped). [ 223.948056][ T40] audit: type=1400 audit(1770968795.870:1350): avc: denied { relabelto } for pid=15661 comm="syz.5.2229" name="file0" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 223.965209][ T40] audit: type=1400 audit(1770968795.870:1351): avc: denied { associate } for pid=15661 comm="syz.5.2229" name="file0" dev="tmpfs" ino=1731 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:run_init_exec_t:s0" [ 223.978005][ T40] audit: type=1400 audit(1770968795.879:1352): avc: denied { unlink } for pid=9644 comm="syz-executor" name="file0" dev="tmpfs" ino=1731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:run_init_exec_t:s0" [ 224.005623][ T40] audit: type=1326 audit(1770968795.916:1353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15668 comm="syz.2.2230" exe="/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7f4fb899aeb9 code=0x0 [ 224.060783][T15658] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2228'. [ 224.146754][ T40] audit: type=1326 audit(1770968796.047:1354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15687 comm="syz.5.2235" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9e93f9aeb9 code=0x0 [ 224.174487][T15692] pimreg: entered allmulticast mode [ 224.252601][ T40] audit: type=1400 audit(1770968796.150:1355): avc: denied { mount } for pid=15706 comm="syz.4.2239" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 224.312516][T15713] tmpfs: Cannot disable swap on remount [ 224.403140][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 224.407438][T10753] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.415059][T10753] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.419669][T10753] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.434059][T10753] veth1_to_batadv: left promiscuous mode [ 224.436402][T10753] veth1_macvtap: left promiscuous mode [ 224.439145][T10753] veth0_macvtap: left allmulticast mode [ 224.441619][T10753] veth0_macvtap: left promiscuous mode [ 224.443878][T10753] veth1_vlan: left promiscuous mode [ 224.576388][ T5930] Bluetooth: hci4: command tx timeout [ 224.623290][T15751] netlink: 'syz.2.2250': attribute type 21 has an invalid length. [ 224.625922][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 224.925919][T10753] team0 (unregistering): Port device team_slave_1 removed [ 225.368974][T15751] netlink: 'syz.2.2250': attribute type 21 has an invalid length. [ 225.372896][T15751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2250'. [ 225.389114][T10744] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.391987][T10744] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.395778][T10744] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.398741][T10744] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 225.415728][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 225.415745][ T40] audit: type=1400 audit(1770968797.234:1358): avc: denied { read } for pid=15761 comm="syz.5.2252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 225.503334][T15775] netlink: 'syz.2.2254': attribute type 5 has an invalid length. [ 225.649249][T15871] ref_ctr_offset mismatch. inode: 0x866 offset: 0x7 ref_ctr_offset(old): 0x200000000980 ref_ctr_offset(new): 0x24 [ 225.719017][T10753] IPVS: stop unused estimator thread 0... [ 225.763644][ T1470] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 225.893354][T15887] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15887 comm=syz.5.2267 [ 225.927394][ T1470] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 225.930833][ T1470] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.933826][ T1470] usb 7-1: Product: syz [ 225.935695][ T1470] usb 7-1: Manufacturer: syz [ 225.937534][ T1470] usb 7-1: SerialNumber: syz [ 225.941077][ T1470] usb 7-1: config 0 descriptor?? [ 225.942748][T15890] vlan2: entered promiscuous mode [ 225.944568][T15890] vlan2: entered allmulticast mode [ 225.948433][T15890] hsr_slave_1: entered allmulticast mode [ 226.172892][ T1470] usb 7-1: USB disconnect, device number 14 [ 226.555907][ T1470] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 226.581093][T15934] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2273'. [ 226.584846][T15933] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2273'. [ 226.666689][T15937] overlayfs: failed to clone upperpath [ 226.666781][T15939] overlayfs: failed to clone upperpath [ 226.734273][ T40] audit: type=1400 audit(1770968798.468:1359): avc: denied { append } for pid=15953 comm="syz.6.2278" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 226.749271][ T1470] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 226.752909][ T1470] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.757019][ T1470] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 226.769441][ T1470] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.773755][ T1470] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.779136][ T1470] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 226.783269][ T1470] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 226.789196][ T1470] usb 7-1: Product: syz [ 226.791374][ T1470] usb 7-1: Manufacturer: syz [ 226.802452][ T1470] cdc_wdm 7-1:1.0: skipping garbage [ 226.804779][ T1470] cdc_wdm 7-1:1.0: skipping garbage [ 226.812467][ T5930] Bluetooth: hci4: command tx timeout [ 226.816144][ T1470] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 226.826742][ T1470] cdc_wdm 7-1:1.0: Unknown control protocol [ 226.859847][T15982] fuse: Bad value for 'fd' [ 226.875719][ T40] audit: type=1400 audit(1770968798.599:1360): avc: denied { map } for pid=15989 comm="syz.4.2283" path="socket:[61483]" dev="sockfs" ino=61483 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 227.030952][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.037719][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.045884][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.052940][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.059721][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.063929][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.068607][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.073328][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.078590][T15917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.084529][T15917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.095156][ T40] audit: type=1800 audit(1770968798.805:1361): pid=16024 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2288" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 227.095665][ T1470] usb 7-1: USB disconnect, device number 15 [ 227.707976][T16049] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2291'. [ 228.093060][T16075] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 228.234176][T16090] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '#! [ 228.234176][T16090] cct.usage_percpu_sys' [ 228.237347][T16087] vlan3: entered promiscuous mode [ 228.240501][T16087] bridge0: entered promiscuous mode [ 228.373008][ T40] audit: type=1400 audit(1770968800.001:1362): avc: denied { setattr } for pid=16101 comm="syz.6.2304" name="nbd6" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 228.410198][T16105] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.656605][T16130] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2308'. [ 228.823505][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2309'. [ 228.827424][T16139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2309'. [ 228.846072][T16139] genirq: Flags mismatch irq 34. 00200000 (comedi_parport) vs. 00200000 (eth1-tx-0) [ 229.026580][ T5930] Bluetooth: hci4: command tx timeout [ 231.100406][T16056] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.239255][ T40] audit: type=1400 audit(1770968802.675:1363): avc: denied { connect } for pid=16170 comm="syz.6.2313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 231.250951][T16174] netlink: 'syz.6.2313': attribute type 5 has an invalid length. [ 231.299659][T16155] QAT: Device 2 not found [ 231.363176][T16173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2312'. [ 231.367021][T16195] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 231.370237][T16195] IPv6: NLM_F_CREATE should be set when creating new route [ 231.373401][T16195] IPv6: NLM_F_CREATE should be set when creating new route [ 231.376593][T16195] IPv6: NLM_F_CREATE should be set when creating new route [ 231.653108][T16211] syzkaller0: entered promiscuous mode [ 231.655501][T16211] syzkaller0: entered allmulticast mode [ 232.329563][T16219] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 232.338250][ T40] audit: type=1400 audit(1770968803.712:1364): avc: denied { map } for pid=16217 comm="syz.2.2320" path="socket:[61230]" dev="sockfs" ino=61230 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 232.602878][T16230] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 232.642583][ T40] audit: type=1400 audit(1770968803.992:1365): avc: denied { execmod } for pid=16228 comm="syz.2.2322" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=62635 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 233.737578][ T5930] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 233.855381][ T40] audit: type=1400 audit(1770968805.123:1366): avc: denied { setopt } for pid=16307 comm="syz.6.2326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 233.865381][T16308] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2326'. [ 233.868511][T16308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2326'. [ 233.920952][T16326] netlink: 'syz.6.2329': attribute type 1 has an invalid length. [ 233.959661][T16326] 8021q: adding VLAN 0 to HW filter on device bond1 [ 234.010985][T16373] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2332'. [ 234.054493][T16377] bond5: Removing last arp target with arp_interval on [ 234.070009][T16413] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 234.080698][T16380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2333'. [ 234.131476][T16425] netlink: 'syz.6.2337': attribute type 10 has an invalid length. [ 234.137697][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.141003][T16425] bridge_slave_1: left allmulticast mode [ 234.142892][T16425] bridge_slave_1: left promiscuous mode [ 234.144853][T16425] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.157711][T16427] netlink: 'syz.4.2338': attribute type 29 has an invalid length. [ 234.160162][T16427] netlink: 'syz.4.2338': attribute type 3 has an invalid length. [ 234.163436][T16427] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2338'. [ 234.173444][T16427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2338'. [ 234.191820][ T40] audit: type=1400 audit(1770968805.441:1367): avc: denied { watch_reads } for pid=16426 comm="syz.4.2338" path="pipe:[61623]" dev="pipefs" ino=61623 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 234.247659][T16436] loop7: detected capacity change from 0 to 2640 [ 234.251077][ T7345] buffer_io_error: 56 callbacks suppressed [ 234.251094][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.257048][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.261537][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.265036][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.268440][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.273011][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.276365][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.280574][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.283708][ T7345] ldm_validate_partition_table(): Disk read failed. [ 234.287025][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.290947][ T7345] Buffer I/O error on dev loop7, logical block 0, async page read [ 234.294285][ T7345] Dev loop7: unable to read RDB block 0 [ 234.298862][ T7345] loop7: unable to read partition table [ 234.312040][T16436] ldm_validate_partition_table(): Disk read failed. [ 234.314329][T16436] loop7: unable to read partition table [ 234.316533][T16436] loop_reread_partitions: partition scan of loop7 (3 ) failed (rc=-5) [ 234.446946][T16454] netlink: 'syz.4.2345': attribute type 29 has an invalid length. [ 234.452762][T16454] netlink: 'syz.4.2345': attribute type 29 has an invalid length. [ 234.457150][T16454] netlink: 500 bytes leftover after parsing attributes in process `syz.4.2345'. [ 234.500755][T16459] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2344'. [ 234.510856][T16460] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16460 comm=syz.2.2344 [ 234.622212][T16473] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 234.626183][T10753] Bluetooth: hci2: Frame reassembly failed (-84) [ 234.689914][T16477] overlayfs: upper fs does not support tmpfile. [ 234.783761][T16493] fuse: Bad value for 'fd' [ 234.787283][T16494] netlink: 'syz.6.2353': attribute type 4 has an invalid length. [ 234.817140][ T40] audit: type=1400 audit(1770968806.030:1368): avc: denied { create } for pid=16497 comm="syz.6.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.826939][ T40] audit: type=1400 audit(1770968806.030:1369): avc: denied { setopt } for pid=16497 comm="syz.6.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 234.835020][ T40] audit: type=1400 audit(1770968806.030:1370): avc: denied { connect } for pid=16497 comm="syz.6.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 235.224771][T16538] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2362'. [ 235.348688][T16541] bridge0: port 3(ipvlan2) entered blocking state [ 235.351618][T16541] bridge0: port 3(ipvlan2) entered disabled state [ 235.354377][T16541] ipvlan2: entered allmulticast mode [ 235.356662][T16541] bridge0: entered allmulticast mode [ 235.360731][T16541] ipvlan2: left allmulticast mode [ 235.362862][T16541] bridge0: left allmulticast mode [ 235.468755][ T40] audit: type=1400 audit(1770968806.638:1371): avc: denied { bind } for pid=16549 comm="syz.5.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 235.908261][T16577] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2374'. [ 235.947912][T16526] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 235.950178][T16526] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 235.952476][T16526] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 235.954736][T16526] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 235.963526][T16526] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 235.971794][T16526] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 235.974054][T16526] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 235.979020][T16526] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 236.104995][ T40] audit: type=1800 audit(1770968808.229:1372): pid=16600 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2378" name="nullb0" dev="tmpfs" ino=1354 res=0 errno=0 [ 236.825696][ T5940] Bluetooth: hci2: command 0x1003 tx timeout [ 236.827025][ T5930] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 236.916738][T16635] netlink: 'syz.4.2386': attribute type 39 has an invalid length. [ 236.952978][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 236.952990][ T40] audit: type=1400 audit(2000000000.224:1375): avc: denied { read } for pid=16636 comm="syz.2.2387" path="socket:[63590]" dev="sockfs" ino=63590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 237.197942][T16659] trusted_key: encrypted_key: keylen parameter is missing [ 237.323493][T16679] netlink: 'syz.5.2401': attribute type 1 has an invalid length. [ 237.340636][ T5930] Bluetooth: hci3: command 0x0c1a tx timeout [ 237.439282][T16677] netlink: 'syz.2.2400': attribute type 4 has an invalid length. [ 237.443289][ T40] audit: type=1400 audit(2000000000.682:1376): avc: denied { getopt } for pid=16676 comm="syz.2.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 237.443600][T16677] netlink: 'syz.2.2400': attribute type 23 has an invalid length. [ 237.522121][ T54] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 237.604084][T16733] fuse: Bad value for 'fd' [ 237.691802][ T54] usb 9-1: Using ep0 maxpacket: 8 [ 237.703717][ T54] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 237.707163][ T54] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 237.711205][ T54] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 237.721081][ T54] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.727031][ T54] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.729106][T16731] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.737220][ T54] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 237.740960][ T54] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.971806][ T54] usb 9-1: usb_control_msg returned -32 [ 237.977346][ T54] usbtmc 9-1:16.0: can't read capabilities [ 237.984740][T16768] netlink: 'syz.2.2414': attribute type 4 has an invalid length. [ 238.055701][T16775] netlink: 'syz.2.2416': attribute type 8 has an invalid length. [ 238.059382][T16775] dlm: no locking on control device [ 238.098607][ T5930] Bluetooth: hci0: command 0x0c1a tx timeout [ 238.098643][ T5940] Bluetooth: hci1: command 0x0c1a tx timeout [ 238.161212][T16787] netlink: 'syz.5.2421': attribute type 4 has an invalid length. [ 238.178549][T16789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=16789 comm=syz.2.2422 [ 238.184021][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 238.209411][T16800] overlayfs: failed to clone upperpath [ 238.213986][ T40] audit: type=1400 audit(2000000001.393:1377): avc: denied { ioctl } for pid=16794 comm="syz.6.2423" path="socket:[62997]" dev="sockfs" ino=62997 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 238.301674][ T5940] Bluetooth: hci0: unexpected event for opcode 0x0c13 [ 238.331681][T16820] block nbd0: Unsupported socket: should be TCP or UNIX. [ 238.332407][T16807] netlink: 'syz.5.2426': attribute type 2 has an invalid length. [ 238.334720][T16818] netlink: 'syz.6.2428': attribute type 4 has an invalid length. [ 238.342448][T16807] !: entered promiscuous mode [ 238.347205][T16807] netlink: 'syz.5.2426': attribute type 2 has an invalid length. [ 238.350800][T16807] !: left promiscuous mode [ 238.387268][T16827] loop2: detected capacity change from 0 to 4096 [ 238.619694][T16858] binder: 16856:16858 ioctl c0306201 0 returned -14 [ 238.745625][T16872] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 238.805216][T16882] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 238.824178][T16890] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 239.061215][ T7622] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 239.070822][T16912] vlan2: entered promiscuous mode [ 239.074496][T16912] bridge0: entered promiscuous mode [ 239.118519][T16917] vlan3: entered allmulticast mode [ 239.120276][T16917] macsec0: entered allmulticast mode [ 239.122031][T16917] veth1_macvtap: entered allmulticast mode [ 239.221715][ T7622] usb 11-1: Using ep0 maxpacket: 8 [ 239.225060][ T7622] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 239.228935][ T7622] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 239.232540][ T7622] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 239.236007][ T7622] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 239.240527][ T7622] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 239.246207][ T7622] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.303907][T16929] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.402258][T16933] __nla_validate_parse: 11 callbacks suppressed [ 239.402275][T16933] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2452'. [ 239.468220][ T7622] usb 11-1: GET_CAPABILITIES returned 0 [ 239.470142][ T7622] usbtmc 11-1:16.0: can't read capabilities [ 239.510725][T16946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2455'. [ 239.683224][ T40] audit: type=1400 audit(2000000002.786:1378): avc: denied { connect } for pid=16881 comm="syz.6.2441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 239.759254][ T1347] usb 11-1: USB disconnect, device number 5 [ 239.838072][ T40] audit: type=1400 audit(2000000002.926:1379): avc: denied { shutdown } for pid=16979 comm="syz.2.2461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 240.031646][T16990] ip6t_srh: unknown srh invflags 4000 [ 240.358740][T17000] geneve2: entered promiscuous mode [ 240.409049][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 240.469964][ T40] audit: type=1400 audit(2000000003.515:1380): avc: denied { getopt } for pid=17007 comm="syz.2.2469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 240.483460][ T1347] usb 9-1: USB disconnect, device number 24 [ 240.534017][ T5940] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 240.538404][ T5940] Bluetooth: hci4: ACL packet for unknown connection handle 1 [ 240.635247][T17041] can0: slcan on ttynull. [ 240.670394][T17049] netlink: 766 bytes leftover after parsing attributes in process `syz.4.2475'. [ 240.827256][T17053] can0 (unregistered): slcan off ttynull. [ 240.836463][ T40] audit: type=1400 audit(2000000003.852:1381): avc: denied { create } for pid=17074 comm="syz.5.2479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 240.849421][T17078] netlink: 'syz.4.2480': attribute type 11 has an invalid length. [ 240.855050][T17078] tmpfs: Bad value for 'mpol' [ 240.881152][T17084] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2481'. [ 240.884483][T17084] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2481'. [ 240.966425][T17067] dlm: no locking on control device [ 241.039721][T17096] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 241.053054][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2483'. [ 241.215564][T17121] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2488'. [ 241.219383][T17121] netlink: 1 bytes leftover after parsing attributes in process `syz.5.2488'. [ 241.223110][T17121] netlink: 658 bytes leftover after parsing attributes in process `syz.5.2488'. [ 241.853930][T17150] bond2: entered promiscuous mode [ 241.856001][T17150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.869631][T17150] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.872477][T17150] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 241.879218][T17150] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 241.883202][T17150] bond2: (slave xfrm1): making interface the new active one [ 241.885836][T17150] xfrm1: entered promiscuous mode [ 241.888768][T17150] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 241.976256][T17196] bond3: (slave bond_slave_1): Device is not our slave [ 241.978585][T17196] bond3: option active_slave: invalid value (bond_slave_1) [ 241.984125][T17196] bond3 (unregistering): Released all slaves [ 242.143295][T17272] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'. [ 242.224059][T17278] sctp: [Deprecated]: syz.5.2500 (pid 17278) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.224059][T17278] Use struct sctp_sack_info instead [ 242.224198][ T40] audit: type=1400 audit(2000000005.151:1382): avc: denied { read } for pid=17276 comm="syz.5.2500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 242.423937][ T40] audit: type=1400 audit(2000000005.348:1383): avc: denied { shutdown } for pid=17311 comm="syz.2.2507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 242.491520][T17339] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 242.506955][T17335] gretap0: entered promiscuous mode [ 242.580111][T17394] usb usb8: usbfs: process 17394 (syz.6.2513) did not claim interface 0 before use [ 242.633215][ T5940] Bluetooth: hci4: command 0x0c1a tx timeout [ 242.735651][T17437] SELinux: policydb version 1402900228 does not match my version range 15-35 [ 242.740243][T17437] SELinux: failed to load policy [ 242.789244][T17445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59920 sclass=netlink_route_socket pid=17445 comm=syz.2.2529 [ 242.923050][T17474] sctp: [Deprecated]: syz.4.2530 (pid 17474) Use of struct sctp_assoc_value in delayed_ack socket option. [ 242.923050][T17474] Use struct sctp_sack_info instead [ 243.263901][T17549] team0: Device gtp0 is of different type [ 243.349060][ T40] audit: type=1326 audit(2000000006.208:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e93f9aeb9 code=0x7ffc0000 [ 243.360348][ T40] audit: type=1326 audit(2000000006.208:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9e93f9aeb9 code=0x7ffc0000 [ 243.367631][ T40] audit: type=1326 audit(2000000006.208:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.378659][ T40] audit: type=1326 audit(2000000006.208:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.386952][ T40] audit: type=1326 audit(2000000006.208:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.399132][ T40] audit: type=1326 audit(2000000006.208:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.414058][ T40] audit: type=1326 audit(2000000006.208:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.423339][ T40] audit: type=1326 audit(2000000006.208:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.435874][ T40] audit: type=1326 audit(2000000006.217:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17569 comm="syz.5.2534" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9e93f5b78e code=0x7ffc0000 [ 243.531284][T17586] validate_nla: 8 callbacks suppressed [ 243.531329][T17586] netlink: 'syz.6.2538': attribute type 30 has an invalid length. [ 243.630949][T17604] fuse: Unknown parameter 'gW)i;roup_id' [ 243.768567][T17618] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 244.052768][T17627] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.055519][T17627] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.084692][T17634] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 244.093064][T17629] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.112338][T17637] openvswitch: netlink: Unexpected mask (mask=4000040, allowed=10048) [ 244.132418][T17618] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 244.313578][T17655] netlink: 'syz.6.2553': attribute type 3 has an invalid length. [ 244.316043][T17655] netlink: 'syz.6.2553': attribute type 1 has an invalid length. [ 244.318471][T17655] NCSI netlink: No device for ifindex 0 [ 244.434818][T17671] netlink: 'syz.4.2556': attribute type 21 has an invalid length. [ 244.439330][T17671] netlink: 'syz.4.2556': attribute type 21 has an invalid length. [ 244.506950][T17675] netlink: 'syz.6.2558': attribute type 10 has an invalid length. [ 244.510983][T17675] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 244.690415][T17691] netlink: 'syz.5.2563': attribute type 1 has an invalid length. [ 244.737022][T17691] bond6: entered promiscuous mode [ 244.742873][T17691] 8021q: adding VLAN 0 to HW filter on device bond6 [ 244.809879][ T5940] Bluetooth: hci4: SCO packet for unknown connection handle 201 [ 245.095606][ T5930] Bluetooth: hci1: unexpected event for opcode 0x2006 [ 245.100525][ T5292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.109235][ T5292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.113293][T17740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 245.113562][ T5292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.120970][ T5292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.126777][ T5292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.281040][T17792] __nla_validate_parse: 20 callbacks suppressed [ 245.281062][T17792] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2573'. [ 245.305563][T17812] omfs: Unknown parameter 'discard' [ 245.384391][T17761] chnl_net:caif_netlink_parms(): no params data found [ 245.424567][T17844] bridge3: entered promiscuous mode [ 245.432114][T17844] bridge3: entered allmulticast mode [ 245.491470][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.493884][T17761] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.496353][T17761] bridge_slave_0: entered allmulticast mode [ 245.499064][T17761] bridge_slave_0: entered promiscuous mode [ 245.503387][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.505736][T17761] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.508255][T17761] bridge_slave_1: entered allmulticast mode [ 245.511243][T17761] bridge_slave_1: entered promiscuous mode [ 245.521454][ T1347] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 245.528315][T17761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.534653][T17761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.551922][T17761] team0: Port device team_slave_0 added [ 245.555979][T17761] team0: Port device team_slave_1 added [ 245.570196][T17761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.572787][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.581512][T17761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.585983][T17761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.588179][T17761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.596728][T17761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.627842][T17761] hsr_slave_0: entered promiscuous mode [ 245.630372][T17761] hsr_slave_1: entered promiscuous mode [ 245.684630][T18038] openvswitch: netlink: IP tunnel dst address not specified [ 245.702734][ T1347] usb 7-1: Using ep0 maxpacket: 8 [ 245.711324][ T1347] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.719033][ T1347] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.722386][ T1347] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.757505][ T1347] usb 7-1: config 0 descriptor?? [ 245.860264][T17761] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 245.869579][T17761] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 245.876887][T17761] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 245.884544][T17761] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 245.924663][T18109] tipc: Started in network mode [ 245.926334][T18109] tipc: Node identity , cluster identity 4711 [ 245.928713][T18109] tipc: Failed to obtain node identity [ 245.930636][T18109] tipc: Enabling of bearer rejected, failed to enable media [ 245.934010][T18112] tipc: Started in network mode [ 245.936079][T18112] tipc: Node identity , cluster identity 4711 [ 245.938267][T18112] tipc: Failed to obtain node identity [ 245.940017][T18112] tipc: Enabling of bearer rejected, failed to enable media [ 245.944929][T18109] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1500) ! [ 245.959456][T17761] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.961840][T17761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.964329][T17761] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.966607][T17761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 245.981569][ T1347] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 246.018730][T18124] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18124 comm=syz.5.2593 [ 246.021195][T17761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.033951][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.037171][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.051586][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.068807][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.071039][T10748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.082177][T10748] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.084434][T10748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.228764][T17761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 246.256673][T18135] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.261984][T18135] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.399042][T17761] veth0_vlan: entered promiscuous mode [ 246.404381][T17761] veth1_vlan: entered promiscuous mode [ 246.425419][T17761] veth0_macvtap: entered promiscuous mode [ 246.431621][T17761] veth1_macvtap: entered promiscuous mode [ 246.441305][T17761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.455214][T17761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.467713][T10753] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.470537][T10753] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.476177][T10753] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.479931][T10753] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.556648][T10769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.561751][T10769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.584788][T10741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.588106][T10741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.756548][T18161] netlink: 6032 bytes leftover after parsing attributes in process `syz.7.2595'. [ 247.339168][ T5940] Bluetooth: hci2: command tx timeout [ 247.340637][ T6095] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 247.354268][ T24] usb 7-1: USB disconnect, device number 16 [ 247.499573][ T6095] usb 11-1: Using ep0 maxpacket: 16 [ 247.503389][ T6095] usb 11-1: config 0 has an invalid interface number: 132 but max is 0 [ 247.506881][ T6095] usb 11-1: config 0 has no interface number 0 [ 247.511728][ T6095] usb 11-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 247.515615][ T6095] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.519031][ T6095] usb 11-1: Product: syz [ 247.521656][ T6095] usb 11-1: Manufacturer: syz [ 247.523678][ T6095] usb 11-1: SerialNumber: syz [ 247.532276][ T6095] usb 11-1: config 0 descriptor?? [ 247.539131][ T6095] hub 11-1:0.132: bad descriptor, ignoring hub [ 247.541827][ T6095] hub 11-1:0.132: probe with driver hub failed with error -5 [ 247.547998][ T6095] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.132/input/input34 [ 247.626454][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.629934][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.633278][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.636795][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.640229][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.643500][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.646869][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.650329][T18200] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 247.721873][ T24] hid_parser_main: 4086 callbacks suppressed [ 247.721887][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.727545][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.730024][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.732361][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.734815][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.737466][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.739791][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.742229][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.744581][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.747182][ T24] hid-generic 0005:000B:0009.0005: unknown main item tag 0x0 [ 247.780205][ T24] hid-generic 0005:000B:0009.0005: hidraw1: BLUETOOTH HID v0.01 Device [syz0] on syz1 [ 247.944887][T18225] nfs: Unknown parameter '#&@[):' [ 247.946626][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 247.946639][ T40] audit: type=1400 audit(2000000010.509:1410): avc: denied { mounton } for pid=18224 comm="syz.2.2606" path="/80/file0/file0" dev="9p" ino=72614171 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 247.981702][T18213] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2604'. [ 248.046498][T18146] usb 11-1: USB disconnect, device number 6 [ 248.248262][ T24] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 248.419557][ T24] usb 12-1: Using ep0 maxpacket: 8 [ 248.423529][ T24] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 248.426972][ T24] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.430654][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.434776][ T24] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.439339][ T24] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.445614][ T24] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.449734][ T24] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.668434][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 248.672415][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2612'. [ 248.682734][ T24] usb 12-1: GET_CAPABILITIES returned 0 [ 248.685052][ T24] usbtmc 12-1:16.0: can't read capabilities [ 248.757053][T18276] nvme_fabrics: missing parameter 'transport=%s' [ 248.760911][T18276] nvme_fabrics: missing parameter 'nqn=%s' [ 248.762998][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2615'. [ 248.766158][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2615'. [ 248.769193][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2615'. [ 248.772161][T18280] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2615'. [ 249.285704][T18146] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 249.457190][T18146] usb 7-1: Using ep0 maxpacket: 32 [ 249.461159][T18146] usb 7-1: config 1 has an invalid interface number: 130 but max is 0 [ 249.464740][T18146] usb 7-1: config 1 has an invalid interface descriptor of length 8, skipping [ 249.469300][T18146] usb 7-1: config 1 has an invalid interface number: 210 but max is 0 [ 249.472653][T18146] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 1 [ 249.476400][T18146] usb 7-1: config 1 has no interface number 0 [ 249.479049][T18146] usb 7-1: config 1 has no interface number 1 [ 249.481599][T18146] usb 7-1: config 1 interface 130 altsetting 129 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 249.486147][T18146] usb 7-1: config 1 interface 130 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 16 [ 249.491977][T18146] usb 7-1: too many endpoints for config 1 interface 210 altsetting 98: 202, using maximum allowed: 30 [ 249.496661][T18146] usb 7-1: config 1 interface 210 altsetting 98 has a duplicate endpoint with address 0xD, skipping [ 249.501135][T18146] usb 7-1: config 1 interface 210 altsetting 98 has 1 endpoint descriptor, different from the interface descriptor's value: 202 [ 249.506620][T18146] usb 7-1: config 1 interface 130 has no altsetting 0 [ 249.509343][T18146] usb 7-1: config 1 interface 210 has no altsetting 0 [ 249.514993][T18146] usb 7-1: New USB device found, idVendor=0bfd, idProduct=0113, bcdDevice=19.82 [ 249.518939][T18146] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.522699][T18146] usb 7-1: Product: ࠁ [ 249.524511][T18146] usb 7-1: Manufacturer: Л [ 249.526473][T18146] usb 7-1: SerialNumber: Э [ 249.563897][ T5940] Bluetooth: hci2: command tx timeout [ 249.749771][T18299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.752646][T18299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.753682][T18318] net_ratelimit: 47 callbacks suppressed [ 249.753696][T18318] openvswitch: netlink: Multiple metadata blocks provided [ 249.755782][T18300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.763499][T18300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.770080][ T40] audit: type=1400 audit(2000000012.220:1411): avc: denied { write } for pid=18298 comm="syz.2.2619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 249.776728][ T40] audit: type=1400 audit(2000000012.220:1412): avc: denied { read } for pid=18298 comm="syz.2.2619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 249.811688][T18325] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2623'. [ 249.823914][ T40] audit: type=1400 audit(2000000012.266:1413): avc: denied { setopt } for pid=18298 comm="syz.2.2619" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 249.844333][T18146] kvaser_usb 7-1:1.130: error -ENODEV: Cannot get usb endpoint(s) [ 249.850958][T18146] kvaser_usb 7-1:1.210: error -ENODEV: Cannot get usb endpoint(s) [ 249.857228][T18146] usb 7-1: USB disconnect, device number 17 [ 250.027426][T18350] netlink: 'syz.2.2629': attribute type 16 has an invalid length. [ 250.030145][T18350] netlink: 'syz.2.2629': attribute type 17 has an invalid length. [ 250.048591][T18350] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.090639][ T5292] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.095796][ T5292] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.101606][ T5292] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.105658][ T5292] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.112764][ T5292] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.118271][T18358] netlink: 'syz.2.2631': attribute type 3 has an invalid length. [ 250.255084][T18352] chnl_net:caif_netlink_parms(): no params data found [ 250.356212][T18352] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.358811][T18352] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.361004][T18352] bridge_slave_0: entered allmulticast mode [ 250.363654][T18352] bridge_slave_0: entered promiscuous mode [ 250.380586][T18352] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.383282][T18352] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.386226][T18352] bridge_slave_1: entered allmulticast mode [ 250.392256][T18352] bridge_slave_1: entered promiscuous mode [ 250.428114][T18352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 250.475009][T18352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 250.505073][T18352] team0: Port device team_slave_0 added [ 250.510221][T18352] team0: Port device team_slave_1 added [ 250.543684][T18352] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.546721][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.558012][T18352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.575767][T18352] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.578390][T18352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 250.590525][T18352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.637135][T18352] hsr_slave_0: entered promiscuous mode [ 250.640588][T18352] hsr_slave_1: entered promiscuous mode [ 250.643717][T18352] debugfs: 'hsr0' already exists in 'hsr' [ 250.646393][T18352] Cannot create hsr debugfs directory [ 250.823680][T18352] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 250.832619][T18352] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 250.834152][T18663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2637'. [ 250.842373][T18663] ip6tnl0: Master is either lo or non-ether device [ 250.845421][T18352] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 250.865341][T18352] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 250.935969][T18352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.958428][T18352] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.966051][T10769] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.968778][T10769] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.975712][T10753] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.978072][T10753] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.044558][T18679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2640'. [ 251.052503][T18679] geneve2: entered promiscuous mode [ 251.055485][T10757] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.058307][T10757] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.061337][T10757] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.063991][T10757] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.129174][T18352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.154932][ T6095] usb 12-1: USB disconnect, device number 2 [ 251.204450][T18707] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2642'. [ 251.240280][ T40] audit: type=1326 audit(2000000013.585:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18712 comm="syz.7.2644" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbdad59aeb9 code=0x0 [ 251.265957][T18716] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2645'. [ 251.313044][T18352] veth0_vlan: entered promiscuous mode [ 251.320746][T18352] veth1_vlan: entered promiscuous mode [ 251.334107][T18352] veth0_macvtap: entered promiscuous mode [ 251.342323][T18352] veth1_macvtap: entered promiscuous mode [ 251.351245][T18352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.359844][T18352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.360681][ T40] audit: type=1400 audit(2000000013.697:1415): avc: denied { mount } for pid=18712 comm="syz.7.2644" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 251.367100][T10753] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.373600][T10753] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.377163][T18725] overlayfs: failed to clone upperpath [ 251.381128][T10753] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.387669][T10753] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.439646][T10753] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.443019][T10753] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.475317][T10757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.479008][T10757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.481272][T18742] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2650'. [ 251.494006][T18742] xfrm1: entered promiscuous mode [ 251.496385][T18742] xfrm1: entered allmulticast mode [ 251.636133][T18758] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 251.685376][T18760] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2654'. [ 251.703970][T18761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.711143][T18761] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.757934][T18766] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 251.760762][T18766] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 251.764943][T18766] vhci_hcd vhci_hcd.0: Device attached [ 251.769193][T18768] usbip_core: unknown command [ 251.770927][T18768] vhci_hcd: unknown pdu 0 [ 251.772403][T18768] usbip_core: unknown command [ 251.774247][T10757] vhci_hcd vhci_hcd.2: stop threads [ 251.775757][T18767] netlink: 'syz.5.2655': attribute type 10 has an invalid length. [ 251.778312][T10757] vhci_hcd vhci_hcd.2: release socket [ 251.781731][T10757] vhci_hcd vhci_hcd.2: disconnect device [ 251.785921][T18767] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 251.788708][ T5940] Bluetooth: hci2: command tx timeout [ 251.828902][T18773] netlink: 'syz.5.2657': attribute type 4 has an invalid length. [ 251.832627][ T29] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 251.874800][ T6001] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.012598][ T29] usb 13-1: config index 0 descriptor too short (expected 45, got 36) [ 252.015403][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.019402][ T29] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.022544][ T29] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.027070][ T29] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.029907][ T29] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.038748][ T29] usb 13-1: config 0 descriptor?? [ 252.050591][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.055568][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.059281][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.063343][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.066117][T18793] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.083075][T18794] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.114841][ T40] audit: type=1326 audit(2000000014.407:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18796 comm="syz.5.2665" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9e93f9aeb9 code=0x0 [ 252.233469][T18802] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 252.312530][ T5940] Bluetooth: hci0: command tx timeout [ 252.338656][T18800] md: could not open device unknown-block(0,0). [ 252.341741][T18800] md: md_import_device returned -6 [ 252.490441][ T29] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 252.562210][T18828] batadv_slave_1: entered promiscuous mode [ 252.571959][T18825] batadv_slave_1: left promiscuous mode [ 252.592983][T10741] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.625324][T18834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2670'. [ 252.742875][T18843] netlink: 'syz.2.2672': attribute type 3 has an invalid length. [ 252.748222][T18843] ext3: Unknown parameter 'Q-%(-' [ 252.829773][T18847] netlink: 212328 bytes leftover after parsing attributes in process `syz.2.2673'. [ 252.919420][T18849] binder: 18848:18849 ioctl 400c620e 2000000001c0 returned -22 [ 253.196569][T18873] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2680'. [ 253.204372][ T40] audit: type=1400 audit(2000000015.426:1417): avc: denied { shutdown } for pid=18872 comm="syz.7.2680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 253.782804][ C2] plantronics 0003:047F:FFFF.0006: usb_submit_urb(ctrl) failed: -1 [ 253.876706][ T40] audit: type=1400 audit(2000000016.053:1418): avc: denied { unlink } for pid=18914 comm="syz.7.2689" name="file1" dev="9p" ino=72614173 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 253.932386][ T40] audit: type=1400 audit(2000000016.109:1419): avc: denied { name_bind } for pid=18926 comm="syz.2.2691" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 254.013464][ T5292] Bluetooth: hci2: command tx timeout [ 254.244012][ T40] audit: type=1326 audit(2000000016.399:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.2697" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fb899aeb9 code=0x0 [ 254.253419][ T40] audit: type=1326 audit(2000000016.408:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18957 comm="syz.2.2697" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4fb899aeb9 code=0x0 [ 254.295009][T18960] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 254.388448][T18964] netlink: 'syz.8.2698': attribute type 10 has an invalid length. [ 254.394540][T18964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.397949][T18964] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 254.487098][T18973] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 254.526855][ T5292] Bluetooth: hci0: command tx timeout [ 254.719929][ T24] usb 13-1: reset high-speed USB device number 2 using dummy_hcd [ 254.881040][ T24] usb 13-1: device firmware changed [ 254.889162][T15407] usb 13-1: USB disconnect, device number 2 [ 255.050627][T15407] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 255.223707][T15407] usb 13-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 255.228577][T15407] usb 13-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 255.233022][T15407] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 255.236801][T15407] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.243604][T18964] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 255.254773][T15407] usb 13-1: Quirk or no altset; falling back to MIDI 1.0 [ 255.261674][ T40] audit: type=1400 audit(2000000017.343:1422): avc: denied { connect } for pid=19001 comm="syz.7.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 255.297610][T19017] 9pnet_fd: Insufficient options for proto=fd [ 255.302338][T19020] 9pnet_fd: Insufficient options for proto=fd [ 255.467714][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.602358][ T1470] usb 13-1: USB disconnect, device number 3 [ 255.617529][ T832] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 255.699370][T19054] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2706'. [ 255.778502][ T832] usb 12-1: Using ep0 maxpacket: 16 [ 255.782183][ T832] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 255.787117][ T832] usb 12-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 255.791930][ T832] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.794563][ T832] usb 12-1: Product: syz [ 255.796010][ T832] usb 12-1: Manufacturer: syz [ 255.797717][ T832] usb 12-1: SerialNumber: syz [ 255.800987][ T832] usb 12-1: config 0 descriptor?? [ 255.806390][ T832] em28xx 12-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 255.809798][ T832] em28xx 12-1:0.0: DVB interface 0 found: bulk [ 256.077582][ T832] em28xx 12-1:0.0: unknown em28xx chip ID (0) [ 256.121441][T19086] batman_adv: batadv0: Adding interface: dummy0 [ 256.123512][T19086] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 256.134966][T19086] batman_adv: batadv0: Interface activated: dummy0 [ 256.146363][ T832] em28xx 12-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 256.146676][T19086] net_ratelimit: 6 callbacks suppressed [ 256.146692][T19086] batadv0: mtu less than device minimum [ 256.149472][ T832] em28xx 12-1:0.0: board has no eeprom [ 256.152947][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.162180][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.167388][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.172530][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.177171][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.181929][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.187278][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.192288][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.197284][T19086] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 256.205753][ T6095] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 256.220688][ T832] em28xx 12-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 256.223609][ T832] em28xx 12-1:0.0: dvb set to bulk mode. [ 256.225937][ T5998] em28xx 12-1:0.0: Binding DVB extension [ 256.227782][T19096] netlink: 'syz.8.2713': attribute type 1 has an invalid length. [ 256.228189][T19099] netlink: 'syz.8.2713': attribute type 1 has an invalid length. [ 256.236549][ T832] usb 12-1: USB disconnect, device number 3 [ 256.242394][ T832] em28xx 12-1:0.0: Disconnecting em28xx [ 256.259843][ T5998] em28xx 12-1:0.0: Registering input extension [ 256.262222][ T832] em28xx 12-1:0.0: Closing input extension [ 256.289223][T19099] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2713'. [ 256.296359][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2713'. [ 256.318774][T19111] kvm: kvm [19109]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x40000057) = 0x8 [ 256.332995][ T832] em28xx 12-1:0.0: Freeing device [ 256.399837][ T6095] usb 7-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x36, changing to 0x6 [ 256.403521][ T6095] usb 7-1: config 0 interface 0 has no altsetting 0 [ 256.407415][ T6095] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 256.414372][ T6095] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 256.417050][ T6095] usb 7-1: Product: syz [ 256.418397][ T6095] usb 7-1: Manufacturer: syz [ 256.420194][ T6095] usb 7-1: SerialNumber: syz [ 256.423638][ T6095] usb 7-1: config 0 descriptor?? [ 256.428054][ T6095] usb 7-1: selecting invalid altsetting 0 [ 256.621855][T19180] ISOFS: Unable to identify CD-ROM format. [ 256.647658][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.650311][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.652911][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.657505][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.660075][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.662540][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.666611][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.669224][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.671976][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.674666][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.678330][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.683857][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.688416][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.691543][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.694150][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.696783][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.700693][T19193] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 256.701371][T19071] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 256.736944][T19208] overlayfs: failed to resolve './file0': -2 [ 256.762740][ T5940] Bluetooth: hci0: command tx timeout [ 256.789478][T19213] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input36 [ 256.921934][T19248] netlink: 'syz.5.2734': attribute type 11 has an invalid length. [ 256.924995][T19244] syzkaller0: entered promiscuous mode [ 256.925011][T19244] syzkaller0: entered allmulticast mode [ 257.006677][T19262] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2737'. [ 257.081900][ T40] audit: type=1400 audit(2000000019.045:1423): avc: denied { read } for pid=19270 comm="syz.8.2739" path="socket:[68424]" dev="sockfs" ino=68424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 257.085827][T19271] overlayfs: conflicting options: userxattr,redirect_dir=follow [ 257.113768][T19273] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2740'. [ 257.151351][T19283] program syz.8.2742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 257.242457][T19293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2746'. [ 257.300494][T19304] overlay: Bad value for 'verity' [ 257.369646][ T7345] udevd[7345]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 257.424603][T19317] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2750'. [ 257.654341][ T40] audit: type=1800 audit(2000000019.587:1424): pid=19341 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2755" name="nullb0" dev="tmpfs" ino=1354 res=0 errno=0 [ 257.704750][ T5292] Bluetooth: hci1: command 0x0c1a tx timeout [ 257.747936][ T40] audit: type=1804 audit(2000000019.671:1425): pid=19346 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2757" name="kvm" dev="tmpfs" ino=2049 res=1 errno=0 [ 257.848355][T19356] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2760'. [ 257.852288][T19356] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2760'. [ 257.967678][T19363] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.031300][T19363] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.096037][T19363] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.222470][T19363] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.270105][T19384] 8021q: adding VLAN 0 to HW filter on device bond1 [ 258.304816][T10748] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.313549][T10748] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.322441][T10757] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.331771][T10748] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.372420][T19429] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.434818][T19429] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.508695][T19429] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.555096][T19070] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 258.574846][T19429] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.747675][T19441] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2767'. [ 258.975899][ T5292] Bluetooth: hci0: command tx timeout [ 259.175536][T19455] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2769'. [ 259.348871][ T29] hid_parser_main: 4074 callbacks suppressed [ 259.348885][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.354123][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.357523][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.361219][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.364274][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.366652][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.369086][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.372852][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.375902][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.378846][ T29] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 259.382495][ T29] hid-generic 0000:0000:0000.0007: hidraw1: HID v0.00 Device [sy] on syz0 [ 259.427933][T19468] fido_id[19468]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 259.515521][T19478] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.641346][ T53] usb 7-1: USB disconnect, device number 18 [ 259.844477][ T40] audit: type=1400 audit(2000000021.635:1426): avc: denied { connect } for pid=19525 comm="syz.8.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.847520][T19528] 8021q: VLANs not supported on sit0 [ 259.851521][ T40] audit: type=1400 audit(2000000021.635:1427): avc: denied { write } for pid=19525 comm="syz.8.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.925001][T19537] fuse: Unknown parameter '' [ 259.931955][T19536] QAT: Invalid ioctl 1342215191 [ 259.935051][ T40] audit: type=1400 audit(2000000021.719:1428): avc: denied { write } for pid=19534 comm="syz.8.2784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 259.961014][T19537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 259.993596][T19534] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 260.077781][T19545] team0 (unregistering): Port device team_slave_0 removed [ 260.085418][T19545] team0 (unregistering): Port device team_slave_1 removed [ 260.488609][T10769] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.505401][T10753] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.521786][T10742] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.526959][T10753] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.544457][ T5292] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 261.547766][ T5292] Bluetooth: hci2: Injecting HCI hardware error event [ 261.552153][ T5940] Bluetooth: hci2: hardware error 0x00 [ 261.660789][ T29] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 261.752521][T19661] netlink: 'syz.5.2810': attribute type 4 has an invalid length. [ 261.765094][T19661] netlink: 'syz.5.2810': attribute type 4 has an invalid length. [ 261.776226][T19661] geneve3: entered promiscuous mode [ 261.778931][T19661] geneve3: entered allmulticast mode [ 261.782080][T10753] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20002 - 0 [ 261.784818][T10753] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20002 - 0 [ 261.797223][T10753] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20002 - 0 [ 261.800344][T10741] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20002 - 0 [ 261.819499][T19667] ptrace attach of "/syz-executor exec"[9644] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 261.821948][T19667] net_ratelimit: 12 callbacks suppressed [ 261.821961][T19667] openvswitch: netlink: Missing valid actions attribute. [ 261.857578][T19667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.862090][ T29] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 261.866021][ T29] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 261.872917][ T29] usb 13-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 261.882407][ T29] usb 13-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 261.885211][ T29] usb 13-1: Manufacturer: syz [ 261.888061][ T29] usb 13-1: config 0 descriptor?? [ 261.894886][T19673] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 261.897577][T19673] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 261.900947][T19673] vhci_hcd vhci_hcd.0: Device attached [ 262.153300][ T832] usb 51-1: new low-speed USB device number 2 using vhci_hcd [ 262.174230][ T9] usb 12-1: new high-speed USB device number 4 using dummy_hcd [ 262.322453][ T29] usbhid 13-1:0.0: can't add hid device: -71 [ 262.324723][ T29] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 262.331138][ T29] usb 13-1: USB disconnect, device number 4 [ 262.337752][ T9] usb 12-1: config 0 has no interfaces? [ 262.342732][ T9] usb 12-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 262.347284][ T9] usb 12-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 262.350693][ T9] usb 12-1: Manufacturer: syz [ 262.363014][ T9] usb 12-1: config 0 descriptor?? [ 262.581624][T19676] usb 51-1: recv xbuf, 0 [ 262.584523][T10741] vhci_hcd vhci_hcd.7: stop threads [ 262.586351][T10741] vhci_hcd vhci_hcd.7: release socket [ 262.586854][T19673] mkiss: ax0: crc mode is auto. [ 262.590355][T10741] vhci_hcd vhci_hcd.7: disconnect device [ 262.594304][T18146] usb 12-1: USB disconnect, device number 4 [ 262.655650][ T832] vhci_hcd vhci_hcd.7: vhci_device speed not set [ 263.021933][T19718] __nla_validate_parse: 12 callbacks suppressed [ 263.021951][T19718] netlink: 80 bytes leftover after parsing attributes in process `syz.8.2819'. [ 263.045430][ T40] audit: type=1400 audit(2000000024.627:1429): avc: denied { ioctl } for pid=19726 comm="syz.5.2821" path="/535/file0" dev="tmpfs" ino=2888 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 263.124162][T19732] sctp: [Deprecated]: syz.8.2823 (pid 19732) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.124162][T19732] Use struct sctp_sack_info instead [ 263.363215][T19758] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 263.366031][T19758] overlayfs: failed to set xattr on upper [ 263.367694][T19760] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 263.367937][T19758] overlayfs: ...falling back to redirect_dir=nofollow. [ 263.367944][T19758] overlayfs: ...falling back to index=off. [ 263.380497][T19758] overlayfs: ...falling back to uuid=null. [ 263.386525][T19758] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 263.388806][T19758] overlayfs: failed to set xattr on upper [ 263.389271][T19760] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.2829'. [ 263.390718][T19758] overlayfs: ...falling back to redirect_dir=nofollow. [ 263.397279][T19758] overlayfs: ...falling back to index=off. [ 263.399165][T19758] overlayfs: ...falling back to uuid=null. [ 263.525764][T19773] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 263.751072][T19779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2832'. [ 263.768481][ T5940] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 263.773030][T19786] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.900905][T19801] netlink: 52 bytes leftover after parsing attributes in process `syz.8.2836'. [ 264.136269][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.138737][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.141285][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.144024][T19827] siw: device registration error -23 [ 264.155480][T19826] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 264.175909][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.179259][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.182202][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.191702][T19837] netlink: 'syz.5.2846': attribute type 39 has an invalid length. [ 264.191749][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.199243][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.203251][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.208238][T19826] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.266108][T19846] netlink: 'syz.8.2847': attribute type 7 has an invalid length. [ 264.366554][T19859] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.2851'. [ 264.385855][T19859] overlayfs: failed lookup in lower (newroot/53, name='file1', err=-40): overlapping layers [ 264.389994][T19862] overlayfs: failed lookup in lower (newroot/53, name='bus', err=-40): overlapping layers [ 264.397974][T19863] overlayfs: failed lookup in lower (newroot/53, name='file1', err=-40): overlapping layers [ 264.550539][ T5998] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 264.714100][T19901] netlink: 172 bytes leftover after parsing attributes in process `syz.5.2859'. [ 264.721995][ T5998] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.726351][ T5998] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 264.732621][ T5998] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 264.736720][ T5998] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.746568][ T5998] usb 7-1: config 0 descriptor?? [ 264.757460][ T5998] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 264.791995][T19914] tmpfs: Bad value for 'mpol' [ 264.794738][T19914] syz_tun: entered allmulticast mode [ 264.804295][T19916] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 264.815670][T19914] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2861'. [ 264.824701][T19913] syz_tun: left allmulticast mode [ 264.903844][T19928] virt_wifi0 speed is unknown, defaulting to 1000 [ 264.924959][T10741] Bluetooth: hci3: Frame reassembly failed (-84) [ 265.305482][T19966] virt_wifi0 speed is unknown, defaulting to 1000 [ 265.497754][ T40] audit: type=1400 audit(2000000026.917:1430): avc: denied { accept } for pid=19992 comm="syz.5.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.743637][ T40] audit: type=1400 audit(2000000027.142:1431): avc: denied { setopt } for pid=19992 comm="syz.5.2870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 266.089471][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.145466][T20003] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 266.223202][T20003] netlink: 'syz.8.2872': attribute type 1 has an invalid length. [ 266.263088][T20003] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 266.268351][T20003] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 266.272808][T20003] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 266.556082][T20054] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2874'. [ 266.561277][T20055] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2874'. [ 266.846516][T20075] tmpfs: Group quota inode hardlimit too large. [ 266.850724][T20075] vivid-007: disconnect [ 266.854261][T20075] vivid-007: reconnect [ 266.900831][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.905710][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.911912][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.915491][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.919096][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.923036][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.927315][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.955734][ T40] audit: type=1400 audit(2000000028.282:1432): avc: denied { bind } for pid=20079 comm="syz.5.2879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 267.104589][ T5292] Bluetooth: hci3: command 0xfc11 tx timeout [ 267.108313][ T5940] Bluetooth: hci3: Entering manufacturer mode failed (-110) [ 267.179302][ C0] net_ratelimit: 1800 callbacks suppressed [ 267.179316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.186186][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.189023][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.192702][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.196386][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.200166][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.203114][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.206187][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.209110][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.212053][ T40] audit: type=1400 audit(2000000028.516:1433): avc: denied { read } for pid=20094 comm="syz.8.2882" name="file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.219561][ T40] audit: type=1400 audit(2000000028.516:1434): avc: denied { open } for pid=20094 comm="syz.8.2882" path="/72/file0" dev="tmpfs" ino=403 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.229184][T20080] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 267.234273][ T40] audit: type=1400 audit(2000000028.516:1435): avc: denied { ioctl } for pid=20094 comm="syz.8.2882" path="/72/file0" dev="tmpfs" ino=403 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 267.287706][ T40] audit: type=1400 audit(2000000028.600:1436): avc: denied { listen } for pid=20098 comm="syz.8.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.295595][T20103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20103 comm=syz.8.2883 [ 267.305860][ T40] audit: type=1400 audit(2000000028.600:1437): avc: denied { read } for pid=20098 comm="syz.8.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.314859][ T40] audit: type=1400 audit(2000000028.600:1438): avc: denied { write } for pid=20098 comm="syz.8.2883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.452303][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.455034][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.506794][ T5998] usb 7-1: USB disconnect, device number 19 [ 267.558326][T20128] Cannot find set identified by id 0 to match [ 267.624134][T20136] fuse: Unknown parameter '0x0000000000000003' [ 267.634602][T20136] nfs4: Unknown parameter '' [ 267.638002][T20138] netlink: 'syz.8.2892': attribute type 9 has an invalid length. [ 268.022989][ T40] audit: type=1400 audit(266.465:1439): avc: denied { create } for pid=20190 comm="syz.5.2901" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 268.023031][T20191] (syz.5.2901,20191,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 268.103494][T20196] xt_hashlimit: overflow, rate too high: 0 [ 268.142030][ T5998] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 268.167811][T20201] overlayfs: failed to resolve './cgroup': -2 [ 268.174755][T20201] kAFS: unable to lookup cell 'syz1' [ 268.302488][ T5998] usb 12-1: Using ep0 maxpacket: 32 [ 268.314421][ T5998] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 268.318556][ T5998] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 268.322760][ T5998] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 268.326954][ T5998] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 268.333686][ T5998] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 268.336861][ T5998] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.339882][ T5998] usb 12-1: Product: syz [ 268.341445][ T5998] usb 12-1: Manufacturer: syz [ 268.342802][ T5998] usb 12-1: SerialNumber: syz [ 268.350209][ C3] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 268.353579][ T5998] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input38 [ 268.370919][T20218] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'. [ 268.383117][T20222] __nla_validate_parse: 1 callbacks suppressed [ 268.383129][T20222] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2906'. [ 268.389803][T20222] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2906'. [ 268.443479][T20226] nfs4: Unknown parameter '' [ 268.580413][ T5998] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 268.583616][ T5998] (id 0x00) [ 268.634215][ T5998] rc_core: IR keymap rc-imon-pad not found [ 268.636557][ T5998] Registered IR keymap rc-empty [ 268.638601][ T5998] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 268.642458][ T5998] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 268.758817][T20239] gfs2: error -5 reading superblock [ 268.795129][ T5998] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 268.799971][ T5998] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input39 [ 268.808983][ T5998] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:5> initialized [ 269.277057][ T29] usb 12-1: USB disconnect, device number 5 [ 269.282150][T20168] imon:send_packet: packet tx failed (-71) [ 269.297015][T20168] imon:vfd_write: send packet #1 failed [ 269.308962][T20275] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2916'. [ 269.504450][ T29] hid_parser_main: 22 callbacks suppressed [ 269.504465][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.513289][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.516132][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.518943][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.522192][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.526758][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.529739][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.533160][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.536111][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.539340][ T29] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 269.545402][ T29] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [sy] on syz0 [ 269.589074][T20304] fido_id[20304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 270.639085][T20348] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2926'. [ 270.727921][T20352] netlink: 'syz.2.2927': attribute type 10 has an invalid length. [ 270.735327][T20352] team0: Cannot enslave team device to itself [ 270.815523][T20356] netlink: 'syz.2.2929': attribute type 30 has an invalid length. [ 270.845686][T20356] bond1: option arp_missed_max: invalid value (0) [ 270.850513][T20356] bond1: option arp_missed_max: allowed values 1 - 255 [ 270.860480][T20356] bond1 (unregistering): Released all slaves [ 271.123123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 271.128359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 271.211872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 271.265134][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 271.511121][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 271.532415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 276.513727][T20521] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 276.518960][T20521] block device autoloading is deprecated and will be removed. [ 277.372177][ T5292] Bluetooth: hci0: command 0x0405 tx timeout [ 278.049810][T20549] net_ratelimit: 10 callbacks suppressed [ 278.049823][T20549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.704584][T20611] netlink: 'syz.8.2971': attribute type 9 has an invalid length. [ 278.707605][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2971'. [ 278.738564][T10743] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.738592][T20611] netlink: 'syz.8.2971': attribute type 9 has an invalid length. [ 278.745156][T10743] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.748642][T10743] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.754269][T10743] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 278.768894][T20621] syzkaller0: entered promiscuous mode [ 278.770936][T20621] syzkaller0: entered allmulticast mode [ 278.773243][T20611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2971'. [ 278.780559][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 278.780573][ T40] audit: type=1400 audit(276.526:1442): avc: denied { create } for pid=20590 comm="syz.7.2964" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 278.856316][T20634] netlink: 'syz.8.2977': attribute type 12 has an invalid length. [ 278.860632][T20634] netlink: 'syz.8.2977': attribute type 29 has an invalid length. [ 278.864425][T20634] netlink: 148 bytes leftover after parsing attributes in process `syz.8.2977'. [ 278.867969][T20634] netlink: 'syz.8.2977': attribute type 2 has an invalid length. [ 278.873492][T20634] netlink: 23 bytes leftover after parsing attributes in process `syz.8.2977'. [ 278.959779][ T40] audit: type=1400 audit(276.703:1443): avc: denied { ioctl } for pid=20647 comm="syz.2.2982" path="socket:[71619]" dev="sockfs" ino=71619 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 278.979383][T20639] virt_wifi0 speed is unknown, defaulting to 1000 [ 279.102772][T20681] syzkaller0: entered promiscuous mode [ 279.105530][T20681] syzkaller0: entered allmulticast mode [ 279.229629][T20701] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 279.299047][T20707] virt_wifi0 speed is unknown, defaulting to 1000 [ 279.311099][T20715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.313918][T20715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.316643][T20715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.320587][T20712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.324187][T20712] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 279.345792][T20729] netlink: 'syz.7.2997': attribute type 3 has an invalid length. [ 279.362101][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.366650][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.370797][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.375805][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.380050][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2578 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.384347][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.389786][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.395389][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.400031][T20730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=20730 comm=syz.2.2996 [ 279.411815][T20742] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2999'. [ 279.463706][T20795] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3001'. [ 279.695477][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3013'. [ 279.698429][T20846] netlink: 'syz.5.3013': attribute type 5 has an invalid length. [ 279.700964][T20846] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3013'. [ 279.707782][T20846] geneve4: entered promiscuous mode [ 279.709485][T20846] geneve4: entered allmulticast mode [ 279.712347][T10748] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 256 - 0 [ 279.715333][T10748] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 256 - 0 [ 279.717924][T10748] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 256 - 0 [ 279.720484][T10748] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 256 - 0 [ 279.889887][T20865] virt_wifi0 speed is unknown, defaulting to 1000 [ 279.912884][T20870] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3020'. [ 280.198963][T20915] netlink: 'syz.5.3026': attribute type 13 has an invalid length. [ 280.205835][T20917] ip6gre1: entered promiscuous mode [ 280.209791][T20917] ip6gre1: entered allmulticast mode [ 280.296906][T20929] syzkaller0: entered promiscuous mode [ 280.303815][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.305344][T20929] syzkaller0: entered allmulticast mode [ 280.331467][T20936] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3033'. [ 280.411506][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.516968][T20962] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.520336][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.539949][T20969] block nbd2: not configured, cannot reconfigure [ 280.603114][T20982] syzkaller1: entered promiscuous mode [ 280.604937][T20982] syzkaller1: entered allmulticast mode [ 280.671150][ T5940] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 280.676092][ T5940] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 280.680378][ T5940] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 280.686651][ T5940] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 280.689966][ T5940] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 280.732179][T20987] virt_wifi0 speed is unknown, defaulting to 1000 [ 280.861914][T20987] chnl_net:caif_netlink_parms(): no params data found [ 281.013242][T20987] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.015627][T20987] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.018025][T20987] bridge_slave_0: entered allmulticast mode [ 281.030927][T20987] bridge_slave_0: entered promiscuous mode [ 281.035522][T20987] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.038607][T20987] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.043101][T20987] bridge_slave_1: entered allmulticast mode [ 281.047099][T20987] bridge_slave_1: entered promiscuous mode [ 281.074080][T20987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.081144][T20987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.138546][T20987] team0: Port device team_slave_0 added [ 281.141675][T20987] team0: Port device team_slave_1 added [ 281.167169][T20987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.171702][T20987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.180416][T20987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.185055][T20987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.187204][T20987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.195603][T20987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.219534][ T40] audit: type=1400 audit(278.807:1444): avc: denied { bind } for pid=21219 comm="syz.8.3058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 281.232418][T20987] hsr_slave_0: entered promiscuous mode [ 281.238560][T20987] hsr_slave_1: entered promiscuous mode [ 281.240818][T20987] debugfs: 'hsr0' already exists in 'hsr' [ 281.242720][T20987] Cannot create hsr debugfs directory [ 281.345719][T21226] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 281.509238][T20987] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.515964][T20987] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 281.519232][T20987] netdevsim netdevsim5 eth3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 281.571274][T21326] team0 (unregistering): Port device team_slave_0 removed [ 281.577852][T21326] team0 (unregistering): Port device team_slave_1 removed [ 281.590494][T21330] syzkaller0: entered promiscuous mode [ 281.592436][T21330] syzkaller0: entered allmulticast mode [ 281.598983][T20987] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.604781][T20987] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 281.609207][T20987] netdevsim netdevsim5 eth2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 281.622069][ T40] audit: type=1400 audit(279.190:1445): avc: denied { create } for pid=21341 comm="syz.8.3071" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 281.699805][T20987] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.702978][T20987] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 281.706592][T20987] netdevsim netdevsim5 eth1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 281.736900][ T5940] Bluetooth: hci0: command 0x0405 tx timeout [ 281.796197][ T40] audit: type=1400 audit(279.349:1446): avc: denied { bind } for pid=21359 comm="syz.2.3075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 281.845396][T20987] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.848567][T20987] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20002 - 0 [ 281.863429][T20987] netdevsim netdevsim5 eth0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 282.034079][T20987] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.042097][T20987] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.048959][T20987] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.055290][T20987] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 282.162556][T21425] syzkaller0: entered promiscuous mode [ 282.165885][T21425] syzkaller0: entered allmulticast mode [ 282.208461][T20987] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.218109][T20987] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.225460][T10748] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.228462][T10748] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.242193][T10748] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.243781][T21436] netlink: 'syz.2.3089': attribute type 10 has an invalid length. [ 282.244700][T10748] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.314321][T21443] syzkaller0: entered promiscuous mode [ 282.316627][T21443] syzkaller0: entered allmulticast mode [ 282.360749][T15407] IPVS: starting estimator thread 0... [ 282.441597][T20987] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.450573][T21457] netlink: 'syz.7.3093': attribute type 1 has an invalid length. [ 282.452578][T21450] IPVS: using max 46 ests per chain, 110400 per kthread [ 282.636776][T20987] veth0_vlan: entered promiscuous mode [ 282.647984][T20987] veth1_vlan: entered promiscuous mode [ 282.673614][T20987] veth0_macvtap: entered promiscuous mode [ 282.700949][T20987] veth1_macvtap: entered promiscuous mode [ 282.719195][T20987] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.728052][T20987] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.742165][T10741] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.745309][T10741] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.749357][T10741] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.754409][T10741] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.848844][ T5940] Bluetooth: hci3: command tx timeout [ 283.009521][T10748] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.012061][T10748] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.041839][T10753] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.044781][T10753] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.120747][T21513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.080163][T21599] __nla_validate_parse: 6 callbacks suppressed [ 284.080181][T21599] netlink: 64 bytes leftover after parsing attributes in process `syz.7.3120'. [ 284.151006][ T40] audit: type=1400 audit(281.546:1447): avc: denied { create } for pid=21602 comm="syz.7.3122" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.161948][ T40] audit: type=1400 audit(281.546:1448): avc: denied { map } for pid=21602 comm="syz.7.3122" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.170315][ T40] audit: type=1400 audit(281.546:1449): avc: denied { read write } for pid=21602 comm="syz.7.3122" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=76895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.266192][ T40] audit: type=1400 audit(281.659:1450): avc: denied { bind } for pid=21610 comm="syz.2.3125" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 284.395029][ T40] audit: type=1400 audit(281.780:1451): avc: denied { ioctl } for pid=21616 comm="syz.2.3128" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=75182 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 284.559909][ C0] net_ratelimit: 2 callbacks suppressed [ 284.559929][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.825979][T21638] loop6: detected capacity change from 0 to 7 [ 284.832382][ C2] blk_print_req_error: 10 callbacks suppressed [ 284.832394][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.838335][ C2] buffer_io_error: 344 callbacks suppressed [ 284.838350][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.846279][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.849382][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.852197][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.855298][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.859634][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.862576][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.866759][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.869927][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.873383][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.877167][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.880555][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.882775][T21642] netlink: 64 bytes leftover after parsing attributes in process `syz.8.3134'. [ 284.883664][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.889899][T21638] ldm_validate_partition_table(): Disk read failed. [ 284.893240][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.897126][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.906430][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.910095][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.915365][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 284.919214][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 284.922794][T21638] Dev loop6: unable to read RDB block 0 [ 284.942344][T21638] loop6: unable to read partition table [ 284.945390][T21638] loop6: partition table beyond EOD, truncated [ 284.947747][T21638] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 285.093355][ T5940] Bluetooth: hci3: command tx timeout [ 285.315365][T21663] loop5: detected capacity change from 0 to 7 [ 285.323079][ T7345] Dev loop5: unable to read RDB block 7 [ 285.325285][ T7345] loop5: unable to read partition table [ 285.327357][ T7345] loop5: partition table beyond EOD, truncated [ 285.364245][T21668] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3303861288 (422894244864 ns) > initial count (241705619456 ns). Using initial count to start timer. [ 285.371593][T21663] Dev loop5: unable to read RDB block 7 [ 285.376715][T21663] loop5: unable to read partition table [ 285.378718][T21663] loop5: partition table beyond EOD, truncated [ 285.389030][T21663] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 285.502694][ T5940] Bluetooth: hci0: unexpected event for opcode 0x041c [ 285.634243][T20987] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 285.638460][T20987] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 285.641198][T20987] CPU: 3 UID: 0 PID: 20987 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 285.644618][T20987] Tainted: [L]=SOFTLOCKUP [ 285.645963][T20987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.649096][T20987] RIP: 0010:klist_put+0x4d/0x1d0 [ 285.650672][T20987] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c ee 0c [ 285.656596][T20987] RSP: 0018:ffffc9000cdf7950 EFLAGS: 00010202 [ 285.658497][T20987] RAX: dffffc0000000000 RBX: ffff88802c954060 RCX: 0000000000000000 [ 285.660981][T20987] RDX: 000000000000000b RSI: ffffffff8b6cc295 RDI: 0000000000000058 [ 285.663668][T20987] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff213514c [ 285.666327][T20987] R10: ffffffff909a8a63 R11: 0000000000000001 R12: 0000000000000000 [ 285.668917][T20987] R13: 0000000000000001 R14: ffffffff909a8a20 R15: dffffc0000000000 [ 285.671692][T20987] FS: 0000000000000000(0000) GS:ffff8880d68d9000(0000) knlGS:0000000000000000 [ 285.675143][T20987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.677759][T20987] CR2: 00005607a584c300 CR3: 00000000329f5000 CR4: 0000000000352ef0 [ 285.681058][T20987] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 285.684537][T20987] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 285.687928][T20987] Call Trace: [ 285.689347][T20987] [ 285.690604][T20987] klist_remove+0x14c/0x2e0 [ 285.692545][T20987] ? __pfx_klist_remove+0x10/0x10 [ 285.694721][T20987] ? kobject_move+0x15d/0x260 [ 285.696812][T20987] ? __pfx_kobject_move+0x10/0x10 [ 285.698985][T20987] ? kobject_put+0xb9/0x640 [ 285.700947][T20987] device_move+0x12d/0x1140 [ 285.702921][T20987] hci_conn_del_sysfs+0x86/0x1a0 [ 285.705125][T20987] hci_conn_del+0x506/0x1180 [ 285.707134][T20987] hci_conn_hash_flush+0x186/0x280 [ 285.709366][T20987] hci_dev_close_sync+0x5a7/0x1240 [ 285.711584][T20987] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 285.713936][T20987] ? up_write+0x290/0x4f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 285.715738][T20987] hci_dev_do_close+0x2e/0xb0 [ 285.717448][T20987] hci_unregister_dev+0x227/0x670 [ 285.719054][T20987] vhci_release+0x17d/0x230 [ 285.720535][T20987] ? __pfx_vhci_release+0x10/0x10 [ 285.722152][T20987] __fput+0x3ff/0xb40 [ 285.723513][T20987] task_work_run+0x150/0x240 [ 285.725070][T20987] ? __pfx_task_work_run+0x10/0x10 [ 285.726696][T20987] do_exit+0x829/0x2a30 [ 285.728043][T20987] ? do_raw_spin_lock+0x128/0x260 [ 285.729740][T20987] ? __pfx_do_exit+0x10/0x10 [ 285.731455][T20987] ? do_group_exit+0x1bd/0x2a0 [ 285.733432][T20987] ? do_group_exit+0x1bd/0x2a0 [ 285.735379][T20987] ? rcu_is_watching+0x12/0xc0 [ 285.737477][T20987] do_group_exit+0xd5/0x2a0 [ 285.739442][T20987] __x64_sys_exit_group+0x3e/0x50 [ 285.741799][T20987] x64_sys_call+0x14fd/0x1510 [ 285.743832][T20987] do_syscall_64+0xc9/0xf80 [ 285.745813][T20987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.748322][T20987] RIP: 0033:0x7f186e59aeb9 [ 285.750234][T20987] Code: Unable to access opcode bytes at 0x7f186e59ae8f. [ 285.753177][T20987] RSP: 002b:00007fff866153b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 285.756672][T20987] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f186e59aeb9 [ 285.759974][T20987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 285.763219][T20987] RBP: 00007f186e60abb4 R08: 0000000000000000 R09: 00000000000927c0 [ 285.766557][T20987] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000001e [ 285.769859][T20987] R13: 00000000000927c0 R14: 0000000000043b4e R15: 00007fff86615570 [ 285.773222][T20987] [ 285.774586][T20987] Modules linked in: [ 285.777134][T20987] ---[ end trace 0000000000000000 ]--- [ 285.782401][ T40] audit: type=1400 audit(282.996:1452): avc: denied { write } for pid=5859 comm="syz-executor" path="pipe:[6419]" dev="pipefs" ino=6419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 285.803027][ T40] audit: type=1400 audit(283.098:1453): avc: denied { read } for pid=5322 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 285.809646][ T40] audit: type=1400 audit(283.098:1454): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.821970][ T40] audit: type=1400 audit(283.098:1455): avc: denied { search } for pid=5322 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.828696][ T40] audit: type=1400 audit(283.098:1456): avc: denied { add_name } for pid=5322 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.848251][T20987] RIP: 0010:klist_put+0x4d/0x1d0 [ 285.857633][T20987] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c ee 0c [ 285.867348][T20987] RSP: 0018:ffffc9000cdf7950 EFLAGS: 00010202 [ 285.869668][T20987] RAX: dffffc0000000000 RBX: ffff88802c954060 RCX: 0000000000000000 [ 285.872343][T20987] RDX: 000000000000000b RSI: ffffffff8b6cc295 RDI: 0000000000000058 [ 285.877638][T20987] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff213514c [ 285.880423][T20987] R10: ffffffff909a8a63 R11: 0000000000000001 R12: 0000000000000000 [ 285.883234][T20987] R13: 0000000000000001 R14: ffffffff909a8a20 R15: dffffc0000000000 [ 285.886361][T20987] FS: 0000000000000000(0000) GS:ffff8880d68d9000(0000) knlGS:0000000000000000 [ 285.889832][T20987] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.891787][T20987] CR2: 0000561a808a3000 CR3: 0000000026931000 CR4: 0000000000352ef0 [ 285.894244][T20987] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083 [ 285.897510][T20987] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 285.900278][T20987] Kernel panic - not syncing: Fatal exception [ 285.903114][T20987] Kernel Offset: disabled [ 285.904703][T20987] Rebooting in 86400 seconds..