last executing test programs: 1m21.767762708s ago: executing program 0 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="14220100000000002400128009000100626f6e640000000014000280050001000600000008000700000000003709cb0ee2e9d3824d69b5814db946c03f07ee695966e2"], 0x44}, 0x1, 0x0, 0x0, 0x400c0}, 0x0) 1m21.58352671s ago: executing program 0 (id=256): prctl$PR_SET_ENDIAN(0x14, 0x0) capset(&(0x7f0000000440)={0x20071026}, &(0x7f0000000500)={0x0, 0x10002000, 0xffffffff, 0x0, 0x0, 0x7}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000004500000002"], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10) r2 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000200)={'geneve0\x00', &(0x7f0000000100)=@ethtool_drvinfo={0x3, "02c7eafb2c0caca8b02a09a29bc39f97117e2ab9091a9ba307985452b442a278", "2ca066fb2fe381377267e10df925ab3d10e073ee5f5e0da362680a3468ccec4d", "7508a49563f98a48b65a92f0edacff5df5c106980c2dc8cbd7b99269d38dc31e", "1634ca397b134b9410c32e04e2e2e149ef7e72e382ac4eff98f1b35a90e6bbb1", "c3ffbfbd751386b7ca0142b3e8f626e310587aa17c3c7b9f5d2b7c735073d7af", "c1ea5b85854c5b3cd4c7514b", 0x3, 0x1, 0x0, 0x7, 0x2}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00v\x00\t', @ANYRES32=0x0, @ANYBLOB], 0x24}, 0x1, 0x5502000000000000}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29, 0x0, @remote, @broadcast}}}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r4, 0x6, 0x28000000}, 0x0) r5 = syz_io_uring_setup(0x297c, &(0x7f0000000340)={0x0, 0xff49, 0x800, 0x0, 0x2c}, &(0x7f0000000280), &(0x7f00000003c0)) r6 = io_uring_setup(0x1b7b, &(0x7f0000000180)={0x0, 0xcf67, 0x200, 0x0, 0x39b, 0x0, r5}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r6, 0x8ae, 0x6931, 0x17, 0x0, 0x0) r7 = getpgrp(0xffffffffffffffff) syz_open_procfs(r7, &(0x7f0000000040)='net/rt_cache\x00') 1m20.27495599s ago: executing program 0 (id=263): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r1, &(0x7f0000000080)=[{0x2e, 0x0, 0x2, 0xfd, @tick, {}, {0xe}, @queue={0xa, {0x7, 0x2}}}], 0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) r2 = landlock_create_ruleset(&(0x7f0000000140)={0xc244, 0x1}, 0x18, 0x2) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x2, r1}, 0x0) 1m20.274416399s ago: executing program 0 (id=264): syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/pid_for_children\x00') r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e224e0000", 0x58}], 0x1) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000480), 0x103400) read$qrtrtun(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$sock_inet6_udp_SIOCINQ(r2, 0xc02063a1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000010000305000020000000000000000000a67f2b6792fcdfbd8e62013d22ec459079ae3ec0d3799def4b4dcf9a91b056663311096236b352cf0095de2f621753d859b2fd86c3313e1e56", @ANYRES32=0x0, @ANYBLOB="115a01000000000010001280080001006873720004000280"], 0x30}}, 0x44) sendmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="c3dfc45b5a3b68be0b5173eb552c70ba6dc8612f490499b2d678bf4f0610c9a5e132bdc3fcb43cdfe2774e878523457d413ee5803de74711caf713e11f2ca20bc2bed5c0bcf5415c4acbf2d3446a979fe8750f8e1c905b71ba2dcc3ed8c2058ea88f4b406148fc2384362a5c5d318f7a14eab0989a683ebe2312862593d223b2268774ccb54c5f9358229a14ee76b62642b55ceed42c122b27d4ffc082eb05b5566d17d9bb4f336b6e1a4c3f48400937b0c86b908eaf1bdc584d176defcafac0c6b9b1e54678feb1cae4bd76ca6b71e701743da61fbe05bf1367ca5c7f1794ded047", 0xe2}], 0x1, &(0x7f00000004c0)=[{0xd0, 0x112, 0x1, "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"}, {0xd8, 0x88, 0x9, "a655c78fba0f8d304fde9fbbaf80f93210811f4bbd3edd6d0b1440a9f823a5dfbfcad011c8f19497245368c7552029f5d77955de5e38738fe4644071865210fc68faf0dca8c491849c5756173bdeafa8c49f4c59e1ef3e86b24ca66da2b277535439e376c10125bce11256f23a4295757f862422f92ecdf52caf39afd5cbe59385455619b1a75c0b2f6ece2d2b4417e022adc6657260b7d6eb334efd6a898f2c2cd9e078d21a3e3cdbad75ce8febdf930fde0df9da943bffc1f83049115150b3beb089"}, {0x88, 0xff, 0x9a5, "ce1c278cd2074f5ed27082430506ae3a536a7b75baa97cec5a1913ebb98fa4385444a0078326353cd3631abf231508a93385bd27ba4181747bdec6a94373db35ef721993b54edd211356e2b1c26ed6076efec5ce7fde15607882fa8af7d03ad802cd94f6e23cf0c59357a66a8ba018a072fc9d38eb8cda21f10aab435531e5fa63de08a4ca03393f8f860131dc9f4fbaf707588d22d01335276f121fe3b8d163ef6969e3e753fcf68056aa0e510beecb57f954736e7204d015cca10b9a420dad91d0ddffbcaceb3ba4d36d25f4f0ede178cefad283de2e1b3bd249d560863fb7e0"}, {0xa0, 0x10c, 0x9, "f6aa0cb90112a9f18b2251d70198618d0bd0e97045d4fbfd7db718f3fe7263a1f0a154a326b5f974f8e936d569f0196029ead10b89ff76494401a5b89f8bb772cef9d3f177512160b0f9bef0b33ab308e9d963351a6bdfacf424f3a2add06b11d1c9c26b0fc87ac36b80863c22f8e0d061f431c64c0fe81fed9c2f1ec0c9e315c6d0bc272b8ad1a1561c36a2cf20b2c1d375fdb0e272a101fa5e9ace7169f7dcf4b252a5efb111ad23bb6f69514abfbebd42e3c0c31ba4a7f9dd2af36e45cdf75d8875de082ec2e15ce6d42045ff3017f2632bfac1d25486651b463261889047d1d1d134a8e3ad56d688e81ae00f3e27b03bfa82"}, {0x0, 0x10b, 0x8b0, "4b123d59bd4f744f910a2024b812dedf0b2b05d6143129601c12bc157b39be64025d3a2d82acf9030a36c39c36c73ccb960c42e6cbfd14ed791cc59b9ca2bbb1cf28ba07c392adfe6f80effeba14d92c929ecf3f7c46e32c80dc1563d2829903083f188b6180496b0d42529aa6c9280b33396d0bfb31c6f0110a0bff36e9897f0da1160a9485bf36344ed8f066bc6e7ffe992ed302aef8a0e1eb3ae2fb610c3594ea65f1c4c2f28f87869321d80106d6ccc5d82db705e535f0ba48d62432b851e363b154767a89d19570207b54665e5502905ad4433c5a88443952b6a7d83f"}, {0x0, 0x114, 0xfffffd0d, "13fd4f7975acc2b1a05ec43484efa42a993cd0f34155706e8dd917b193418c8b67617ad6f61ef65bcff865dab35bf72650746beb23761082e82d27ddd32a11b9a2efb8d8fa477102eb9c1364342194a8c0c7b214da0ee79f6a88cb5f4815988d13f3dc11802178f776cc6107585a5234d47fb8d886c3c2e229164f7bf4a6d7cee14b14c773bf9ec784782a3b6e368460f2d9112a20d69d29bcfba906d8dac82662745b2163be4dad638571f708c4d6e970a147e9cbb4bde043fb87b8d9332d4fd28f6bd44d32a7fe5421bf1491417eb7d456324afd2ccdf3e61ebff6dda0e2abe590d178e757b0c6d91b7a"}], 0xfe36}, 0x4010) 1m20.023739796s ago: executing program 0 (id=268): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) (async, rerun: 32) r2 = socket(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newqdisc={0x34, 0x24, 0x1, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}, {0x4, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) ioctl$DRM_IOCTL_MODE_CURSOR2(r1, 0xc02464bb, &(0x7f0000000080)={0x2, 0x0, 0x5, 0x2, 0xbc15, 0x6, 0xca, 0x44e1, 0x3}) (async) write$cgroup_int(r0, &(0x7f0000000040)=0x2, 0x12) 1m19.964216254s ago: executing program 0 (id=270): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x0, {}, [@NHA_ID={0x8}]}, 0xffffffffffffff49}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r3, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000000)="d6a74f86", 0x0, 0xc30, 0x30, 0x0, 0x8008}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x002'], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x18bb41) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x8, 0xcb, 0x0, 0x0, 0x4, 0x10000}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x24048885) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) ioctl$USBDEVFS_RESET(r8, 0x4004550c) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x200) fspick(r2, &(0x7f0000000200)='./bus\x00', 0x0) 1m4.868986969s ago: executing program 32 (id=270): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001100)=@ipv6_getnexthop={0x20, 0x6a, 0x1, 0x70bd27, 0x0, {}, [@NHA_ID={0x8}]}, 0xffffffffffffff49}}, 0x0) r2 = fsmount(r0, 0x0, 0x0) fchdir(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r3, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, &(0x7f0000000000)="d6a74f86", 0x0, 0xc30, 0x30, 0x0, 0x8008}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f00000007c0), 0xffffffffffffffff) r6 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000f00000008000300", @ANYRES32=r7, @ANYBLOB='\b\x002'], 0x2c}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, 0x0, 0x0) dup(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x18bb41) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd2a, 0x25dfdbfe, {0x2, 0x14, 0x14, 0x8, 0xcb, 0x0, 0x0, 0x4, 0x10000}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48080}, 0x24048885) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x0) ioctl$USBDEVFS_RESET(r8, 0x4004550c) syz_open_dev$sg(&(0x7f0000000040), 0x7, 0x200) fspick(r2, &(0x7f0000000200)='./bus\x00', 0x0) 47.790374506s ago: executing program 3 (id=463): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = getpid() ptrace$ARCH_SHSTK_DISABLE(0x1e, r1, 0x1, 0x5002) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x4, 0xfb, 0x53, 0x3, 0x63, @private2, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xd01}}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r5, &(0x7f00000005c0)={0xa, 0x4e20, 0x8, @local, 0xa}, 0x1c) 46.854240035s ago: executing program 3 (id=470): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x20002) io_setup(0x8, &(0x7f0000004200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) 46.65399824s ago: executing program 3 (id=472): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b922, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xe, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000002400)="80", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0x3}, 0x14) 46.524302923s ago: executing program 3 (id=476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = fsopen(&(0x7f00000001c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) 45.584304276s ago: executing program 3 (id=483): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000040)=0x6) 45.431118007s ago: executing program 3 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) getrlimit(0x5, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) personality(0xfe47fef9f5ff7379) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r4, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick=0x2, {0x7, 0x10}, {0x3, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x3, 0x5, 0xff, 0xff, @tick=0x6, {0x1}, {0x9, 0x10}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x10000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x108) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4b8, 0x208, 0x208, 0xffffffff, 0x208, 0x118, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x40}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @gre_key=0x6, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @ipv4=@remote, @port=0x4e24, @gre_key=0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@broadcast, @port=0x4e21, @icmp_id=0x68}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xff, 0xff, 0xff, 0xffffff00], 'syzkaller0\x00', 'dvmrp0\x00', {}, {0xff}, 0x16, 0x96, 0x3}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0xb, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 30.434277181s ago: executing program 33 (id=484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) getrlimit(0x5, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x1ff) personality(0xfe47fef9f5ff7379) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0xff) write$sndseq(r4, &(0x7f0000000180)=[{0x0, 0x47, 0xd, 0x0, @tick, {0x40, 0xff}, {0x10, 0x9}, @note={0xa, 0x8, 0xb0, 0x9, 0x3}}, {0x0, 0x0, 0x0, 0x0, @tick=0x46f, {}, {0x80, 0x1}, @connect={{0x40, 0x7}, {0x80, 0xf6}}}], 0x38) write$sndseq(r4, &(0x7f00000005c0)=[{0x3, 0x4, 0x5, 0x1, @tick=0x2, {0x7, 0x10}, {0x3, 0x10}, @raw32={[0x4, 0x1, 0x81]}}, {0x3, 0x5, 0xff, 0xff, @tick=0x6, {0x1}, {0x9, 0x10}, @connect={{0x62, 0x83}, {0x1, 0x40}}}], 0x38) read$snapshot(r4, 0x0, 0xffffffbf) read$FUSE(r4, 0x0, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x6}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x1, 0x10000, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}}}, 0x108) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x4b8, 0x208, 0x208, 0xffffffff, 0x208, 0x118, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, &(0x7f0000000280), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x40}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x2, @ipv4=@multicast1, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @gre_key=0x6, @icmp_id=0x68}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x2, @ipv4=@dev={0xac, 0x14, 0x14, 0x1e}, @ipv4=@remote, @port=0x4e24, @gre_key=0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@broadcast, @port=0x4e21, @icmp_id=0x68}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, [0xffffffff, 0xff000000, 0x0, 0xffffff00], [0xff, 0xff, 0xff, 0xffffff00], 'syzkaller0\x00', 'dvmrp0\x00', {}, {0xff}, 0x16, 0x96, 0x3}, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x10, @ipv4=@remote, @ipv4=@broadcast, @gre_key=0xb, @icmp_id=0x65}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 1.554141156s ago: executing program 4 (id=1240): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=@ipv6_getroute={0x34, 0x1a, 0x10, 0x70bd29, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, [@RTA_PRIORITY={0x8, 0x6, 0x4}, @RTA_OIF={0x8}, @RTA_MARK={0x8}]}, 0x34}}, 0x20000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 1.553790019s ago: executing program 4 (id=1241): r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000040), 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x42ab, 0x4) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x40000020, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f00000000c0), 0x10) 1.052829674s ago: executing program 1 (id=1243): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0010015, 0x0, 0x8}]}) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x7, 0x0, &(0x7f00000000c0)) 708.648401ms ago: executing program 1 (id=1246): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r3) sendmsg$NL802154_CMD_GET_SEC_KEY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="579f29bd700003dccf25160000000c00060001000000010000002f29dd6dea53a6d671bd112c93642cd0c22dd9dd542e957c"], 0x20}, 0x1, 0x0, 0x0, 0x4018010}, 0x4000) keyctl$assume_authority(0x10, r0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000440), 0x180, 0x0) fcntl$lock(r5, 0x5, &(0x7f00000031c0)={0x1, 0x1, 0x0, 0x4}) pipe2$watch_queue(&(0x7f0000002340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r6, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x32, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x33, 0x35, 0x0, 0x30, 0x63, 0x34, 0x0, 0x64, 0x64]}, &(0x7f00000000c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r9, 0x107, 0xc, 0x0, &(0x7f0000000180)) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r8, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) ppoll(&(0x7f00000001c0)=[{0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x4000}], 0x2, &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000240)={[0x8]}, 0xffffffffffffff92) keyctl$KEYCTL_WATCH_KEY(0x20, r7, r8, 0x0) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x2, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x32}, @loopback}, 0x10) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r7, 0xbe, 0x11}, &(0x7f0000000200)=ANY=[@ANYBLOB="656e633d6f61657020686173893d626c616b6532732d3235414b52d642012a000000000000000000000000e2ffffff00"/78], &(0x7f0000000340)="10a3f2109b0df4023d7dc252ca78794dd59141c1ca75ca02816caa6d098d6f171c0f88290360434e64f4ea2490888387a1e368b47fe54a92431cfc18d1d1005360d2da8bc7597d465e4ec2571d62e27163b13df10017c10cbc46949a54caba4f90d90e5108b6b26fc15d0bce28863d20e1580545ab45fc2d7f25f75cf63b4533fffee96d8ef35379fa1cba98a160019bb780d6cd9619ce74ee2bf1cef05de57a8392a3e8a488bc4bf77693958bb4de43e6f73654708abc17c2d827291b99", &(0x7f0000000180)=""/17) keyctl$KEYCTL_WATCH_KEY(0x3, r0, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) 707.505337ms ago: executing program 1 (id=1248): r0 = memfd_create(&(0x7f0000000340)='-&:{-\xaa]{\x00', 0x2) r1 = syz_open_dev$dmmidi(&(0x7f0000000080), 0xdad3, 0x80880) writev(r1, &(0x7f0000000040)=[{&(0x7f00000000c0)="2cebfbf712b20b0303910abe93b85412729bdb57dceb9b2b67d031db8e0bfcde2364eaa4920ac971b98fa6b266d22ec5b3674c63c2e1bacbcb6071ef0dee0348e719d801c3ea74ab2c69ae1d4f1ddd8443d7d78dbe7cecd3ab71da033fc1d0df6e91683900"/113, 0x71}, {&(0x7f0000000380)="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", 0x102}, {&(0x7f0000000000)="d2c102ec870865cdbc893da40f6283e1b795dee5", 0x14}], 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000000c0)='syzkaller\x00', 0x7}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) fcntl$addseals(r0, 0x409, 0xc) 652.474955ms ago: executing program 4 (id=1249): mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x204001, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r1, &(0x7f0000004100)="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", 0x2000, &(0x7f0000000580)={&(0x7f0000000500)={0x50, 0x0, 0x3, {0x7, 0x29, 0x8000, 0x48100400, 0x1, 0x3, 0xb, 0x2, 0x0, 0x0, 0x40, 0x9b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f000000db40)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)={0x78, 0x0, 0xa, {0xf, 0x0, 0x0, {0x9, 0x9, 0x400000001000, 0x90000005, 0x40000000000003, 0x2, 0x9ec, 0x6, 0xfffffffd, 0x8000, 0xfffffff9, 0x0, 0x0, 0x3d, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000980)='./file0\x00', 0x0, 0x1000) syz_fuse_handle_req(r1, &(0x7f0000002100)="920f1bf72b95cdb0592eec93fe648d7cb0404af21997a68685398b51bacec0c173e18cebb62ba83e7a2ee3d732d95ce8358162a9c4ab6cd5b1d8b86d7b453a4bbca822c99e97fcf818bea32c2facd260d79e4605c4a73692307db72e8fdfc0edfe08fe99fc9872a0f44b28f45f742a05b0a4d53acbbd554dfbaac14bd85bfd6315c0152e717cf2d133fbc0431a11f90e7b424c1483a64fc3ab96b1479f17ade485096e4bddddc4fb37a287ff11b307699d88a274ea1b9f8a84bba6371040485dc183b8938e5b3f4a02b05efb3eec01f68cbfb3375b8c79b22821e9f27bbfe939da5d056794d7bb68b817333284b77e62079cb570ef66cf83b7e7b1caff4a9ab1cee912b6bb320cf0017977856f4acac4beb152f2d5fba5d062a101067c2467c065d72a2b9406f2237b1f511c471fd4b176933bf451048759924e55ff2f09bfd82c16dbf0798ff00d50081f52d7a8d77bb5a8ad4d9000326b3287a46e90c18cd4bcfa3d8004d891290d19123775d857501c47f8d791b6a86bca18cf3d1f5de9042a0962a8e3c6126a596af13e39b6bbcfc0c23e93bf2a1fa094fe7f94867d27dacf64907c7fe12960714787a2affd581e3c1d8a65efa5ee798bf93a462d8affd59634e7c365a0edd0681dd67079bf7a6467b862b7543625544b898487ccb013e0db28222b511eac463dcee133cb50177b31d7116175139ed3cc92c4059278c71e5462d434c5438811b461e2ce75ad530842deff99ba3136b9f82b5cec2d377e9054b3d301ac8afea313d227f1804bcd7fa772bbfd8f1d13119e40a3a2dd3ad0407dd0637db4e559447e521cd70f5403e00bb223a86ae680c8b0dc70340a921b698ad1a0d9e35db08c991f1aa3d31d3d3d1506ed5617ab5e1763996bcd05369aca31a933ae0239f42399aeef02167c451f868db326534f9cc34212d76d8373017777e38cdd2bbc23375f382aaf4159defe7915695523b5735ade287516826feb57273ab786fd6146e2c4b3ed99bb588faf7a6c6eb381bbeee87b2968afcb772390247de6d3344608584f0ccd9f98c6be8e23273da5d2a0e257ddee16804b78359c85a023ee3f3a0fd6765492d6b99ae164a6f7d6be4f65cd0dcc5b98f30ebd0a148cfa728df4fa7c386a56269bd92e2d0b5008ea2f8d253d27c5fdc5a3b16a84a7dcacd950d44a86cc28d17328595c9dd8dc324053e38368102b2f1d1c21aa05d2c91e69dfdb76d781412762e07fd457d91bddc376d4882e132d9b2697c83bdea2143f31815c0acfda36b4b5b3eddae7105d6d9d85b38a938671eead1f0bd5547135617d2db5435dedcc6264af155beeb72025301cdd5e2755be04a7bb70ce2d9af8b6966e2db5df8173f160ebefd9c0079e2011483da5cc10fa93f10df7a55dbab8dc155279932547536d68a1658646e4536311a5fe54e79d57cfa1531cbfa18ef2b4a4bc86fb01549f6591c67ea39771ba0f0512942db39ad0b09bc060b86f78998eba3c5e3c36352aa3cb12b3892272cceeb2c6c31a4fc8c1efdef34bed0f083372343c4e396c7af5a63190f4c8e6b57fed0e4f64731e525eedd706a0217bf13ab06606966c941d710efe92ca74b248b0c8b724101130cfad9e148f17fd65ab8ceede6f00d22c42e6558da6e295ba8515d03cc19e6f1b6d1bd95693edbd1a65e0c1eb516a0cce11d98ec5bd740fb56024590ae813360c0eca3d976f4130c57888c0fe13798eeac175d9a77bd9ae0b42a1e50cad1a8bcc421adfbe662189a3f2b1d2ce148232c865bfea9607893cc4e3476c0268a1165767592adaec1467febec7df403d61218b46d5827fe2adfbbd1aa35c09c772f956e07c147b133669fabfac71960273da10784ebe4a5618ef67e9e508413bf74d25b15f93529789d61946f0b3c2e70dcb729ed48e8f76ba0a7c332f711806dd309149690c277c0829646b55a2dc4e8a734994a7f1c390a0828522e8106fb66c637961790a010c50d5893f432255ac1e8c499b26d439eebe4408b6b4771d6c953df9f23fabf83e10663d9632ee20110c243b443e8e02b0ef8b95f7982114cfd4d31cfa41f6abe7677ae17e7e8d39e65eebb84d362c1d1644990ae0564b37d29ca7a1185c9b706fb6b7512082d36768b8e96602f7d092ab41089a015f4e57819e15b93a546d0aa1dddeaefa45c599b8acff0323c9bedaf047031e1fe4f8fb1e9b89774a4b7d3defb1db95b6d039cb367c527ac9d1ddff6becf67199dfbdbad4a840eb0b0b3fcb41fc75a920c5fa5abbcf1c94781ec835b71ed0ba6caa0158c03bf568ca6d75e2ac355b986fe7d42e9e02de8430aefad2a520a09b1e7b5ab4717b3e0e194542b1234810fa1fb0a34dcef3a299a404441cb4957248562df6e918c66d550b8b04c785dbcd4c3c29e8b46ba602b8ef99703ced06f61bbc84413e85842a779a311594a2d16a7cd0a7ff27aa3b69f18e083f88765b1ac2914636b149f78fba65ec4bbc3414a94597ce35bb37a5c8e9886de9425304703d66f0be9405d8d35681dc4d6380695b6e7bc24aa0c28e6d2792c91a2a7eb1933ed3534fadadeeb80dcd61602d1c200c7ca6dfe30c75ac854aec24f2f8169ebc1d379cdce7e5c2499595a9904321f590e8226caed23d0671a6aaf5a147557ec059f18cc863fcd12784eea3f9b4491f1d8e824cea3ebae1c73c3e4cec588fa7f3753ccbf09ba09758bf01452a0e090f1a5f4790125d284c8bb65dd78f99ca12b0f9e028f2df441b1954f93756dca58aafb93809f0def7e4390c29991a7a819057017cae41ee919c374b21fbc0ed44166b62715f618fc8f8cdbf1e8cf4a63524578c65e116b5930db5cb6a98094cd84be55a06b49be3d0d6412be03a26397a781c60f90feca151759eba2933662752b942076f5511cfa02a13179510defe530bff52069cd6197596aa676988750192f89211bd608c350c98a60644fa7e7771b52bedd2f216b5a81c4e9ea7889561aeceefdca00a03459fcf284b8c653c3c84298f914871c4307152bfacfb18004325332cba9eb6268010fbd44a4eac7de9fc4d3e3c737a4708da43591187bc89dc096a3da94575972618f3122290de4595faff81b43e054be605693796c19da3d1953fbcd0bfda82adae61b09173c16c0efa76451c633a62b019ec4d037a9f7cc7b0dd29c6e850dce0f1702068fa1cce660de5b28addcc14d20b0607e704613d17ee451f763d082ee4a836a759cfaeb5bee24b943c87fc9eb4a93e2c4db6e402ac1548c55989e1c35848532e8d54996f532e49d5ff8bb1949653cba1ae48aba580cfbd88d0fa05c48055df87396fa811eb5dadbb2458f312d62d9b520cf28fb6b28b1bfac2bb07ad4e5b7106d60b90cae8661f0b56cd5e9e081d7226aa28dac9bda6e0980a54931286bede7a527615437ef4b871ff0eed63d46fc909a2acafda990a08c9e51c5686bcb5608e453579b4a07bc6887446225d7de96288a7cb2021668b8ae8a321ecd788ec7710e28c63e4f84f5599ae5d883d7f7ed5e59e356c75b62d1804c7684e791c92e0288c5067f70b6ea3526592d8ec7c77492f21ad252ad7762844f91aef293c1e97bc64bf94fa072a9f3fff9f2fe87200c28aa091258b5b489104cc4577da9599e34a55e6d15f843c6c494107cbcf54f5809f4f891587b46a99ac475eec405c8f218ac03a3d51daa5264aedb111ba578e0aaaf1d179f4ea374207c1d9f4d6e3ad6ec7334619c9302ba87bf3d1a8a9fec4fa2c2f0a72b81da2a9267aacde2e3f33318abcba06d81cc8a6339ea72aad871c6945e3daeb16d67786ca2f609a22706c15cf4e9c2a264b4f35f59bd7330c2fd903fe35cdcadb636e6aa3287e4967fc4c11ad150d085ca6901a1c3115e51c48daac230bfa8da70a2b7c10376484094e7b5320334ab35571036c547741b0575360ebf2af48da430176ab4d98db2aff05708a6cc000f2bb25d7f7dd83fe65d62fa6562e7e0162669047e670ffda22dc96d4b053fd61fe3486d18dad6707a828f482e7e7c4f463980f6165333192e4abc1c515e8996c577b94991c23891372bf4c6396088f2277544020c49d87f6dff6638e366479a08737d735cb7e8fbd77a98021d9bb7e1848c5de78f00105d49401f151f28880c979c5e66677a8b22c4074820ad5dfd3675f87a8da51762da36bab0267a4a2b58cecd6738332ab23227371500cbf22c2dd52ddb16649f8b1a3848167a0dfda09c697b3428379c171871d52856f73bcd6efd6c50286282570c4276cdb2655fe9a203e0b9bc29d7c1e24c858781785f6cde3244c607acc5170cec86d0cb3ee312829fd7abec8ff2093ba38a7e867f93238e0215846b0c09bfe6fd6edc3a7b638bae2e65ab6e6e095cd8818a15b6cb94e896ad7b4629ed65516b581c5bbd5aa73372bec6f07b3b3cbc60a7e61230af43796bf972ff2bcde153d793dafdde320fac7241c7f7edf60c43cb7de52f62619d7f59f2be280683998c407980d43636c2fa25077cc014bc23209d0a4e9f671f1421195502e2f7f13be069e6c9d04a395951910b93a2dce243f273f5ec33a0d1195742f81d70eb68bf38418f9561fbed3f369dba6830859e23cc95a4d834661cc0ee47c7eb555eba9f46e4fb55d85b6fa2f77dcc8f28ea8b9c6cc9b71af89446c38d985361483228dccdcb94738c58ee6d393f709709c95706828a3daf7460fb223fef30461e9296c279edd2235f4fa150e3f403dc7e860ccf1b0e48c1ec86fcbc1334889f08632f617f95291661caf8ded993cbf49b8cef24e96c60cd425a6c759bc116fede5b3014ba7f10984d1ad77b437887abc07e9996114a3506d5633119ffb2a8aadc7654f609e5e937526a67a1639f3d4b2b30e16a19f6d308c8f2a4b302305e8872d677ff3c4ed7c65ae0c5a8baf6911e4c84ca29cd2795db8019aac24b79165fa5bf26cac350735c25270718b36fb66580dd9341bb1fcc17a78f97a510bb1a185fcf95ae7115e5b3ed538e94dd75e41641bcd935b20afc437675b95cd96d66470ccdf1fe76a384774162de722c4c65caa98b5ceb0ef502a974485b0a9b1e5d4bad7e58e210bad25419826e9bce996a647e462ebddafbc30a8a567b6ebfe1505404e11863db5d85067451d6e65e1715425b223ae143cc2ab097da2a55ad0be891fc38520631c5f34188814d7ef82ba8c2eb6e4d39506df98f1ebcadfaf9559e1c06dc78598d1ea9113140c6ccc82e1854093a8fa1de8b600efe2e0f5038110a836508a632c562132eb613a9e825c1075f03ae13345fe434e9f70a344f04a469903a1a661e01610293b9c22947448d411e3dabbb6a963145a2be86b47662b62dee6c04671f922490a05dee4281da1837ea3d0be2b64b8b64852b0c67bfbe2278c71e42e8c9afa8d4cc8dbfdf0afdd5011913ff11e4726c9fc818128c35b51459d6a6023a952c8e8a64a56187819855869dd13ba22587c59316ba36434ce38684bfc328e57592d6419b65e9f962dc8c60893e907d753d82787d9acb25647ea1886d7483ff08bce84fb709764753852d92f25b534ed4807f6567a283b38d6e2871c7558220c717229158deb00d91ef0d221ca2039b8357c5e095982dfcda0140cd20b738abff470791c1d9e70cd8e3f405a600443d8faf363f6589129945b94ccfe5aa33b2dda3607c7204ce7587c79c403a0ed3b087683677d7f6eadc2909ed382d8492a1c5408f78a81d26282805aff1492f5d6e8116653d69a2f29144c238a0aac0a4fb2ef52341bf75e0b512a64f40c55bd87cb5e1458464e638821a840424b6c83ab9e544e5b8c4ef2f2b3f957b89daa43953f5a4f8a621e43d16a84cb26dd65d66ea133b6d79806a48cb20c2c79cd67c9c6ea7808f29c8111f36c2d042c37d47308ee428b1f9b9e0793d51a0d47c31e8d16f0dfdbf81b3ff5480d271e2794060b4456f9f62c38efa012f7216c89ce01d74400bc2ea3d1baf4a2ecd734f5136fdba7766d0eccc64f77f145af116832842f219ffcb71b839abf44cb9e4dc9601ee624a6f459277c7f6c6918161520fab43f76d033bacff8b2ea2c97edd55a84706772d3d961157a928bdb794472231315804448040b08e66c61c86603910335641c58033e32993e37d4ceac715c987b458d3d95b032a1d38c9aa3fc9b70fef8adfb1f67e26f3d93e270f7fc6a7d512625283a550269a98774b93a59de5b359f5ef1b58e62a45a8f40036bef0b074ac9ad2401d35ae9ff2a48cd1f879534b8eab1965561e40655ba787e02a34a7e16be76c6924f140b88a11dc6caef2660abb123413669b8c7824272586e62937f8704a7c02d9cd2522798db53d5e02f8ab885018f2f9e2d20475930598bcfb49e3c89fc77b3fa4f9595a67202cd382fc8973f7ac41fad6d80b28c1bfe357c1d777cee1652d36dadebb0a2a4baa53ffb9e329553d74ce8435dcf5ce4b3c34b87c0f725a5aa20a84f386b6efd72597b8d50442f869f4039b87e282585dd2f57a644eb643aa7f552f6a228f1d0606829403d5af31e81bb18ccb7f9c12074f21f7560739ee6e90495eb4aecbd029032889b3eff2a704f448f5df9f32a5ad73bbbb4de70c89435d9c6f4b57af4bf6a17b7129612f7d4fdd6f1258f05f689541f49ec89400ea83862b4753d4ca41e00a0aae38dc983422264e79e7097d694107ac446dffe55f5b88191b9422aa18643c2f22eb95deddb16626153aaea2e3d6706e20da857204fc87aa7a61fbdc96a24c6b8d4e1d511fd0465f5866f3034ae06d7e846768bb6cd91b5fe89659cf281630c5c9b440b83f95aa8cd64da239f43b7b1c7ac856d336d97d70816e62f8a5186a09b7f7dd367004c218eb61cfebae6eeb7098df682c95ea83e3df0d301c2e5c9a8cda46fa4094a5f4eeaac1d1ea75e39797f3f61370e339552efd29bb0acac4d0be0f5d0e4e40658bcdef700c47f49dd0a77fabe5214abb597499a66e05f8b223e3f4db713d4e4ec3818f98df3b2c98d168913ab11578512928723c76391902c50babaea81ee0ac7a04523b3d02f1416fd0b2735b4eeab7c77675047f70c90ce6a59207c7e5d47aa47e33613d26ba4f132cef979820b11dde9bd4b52d433fb5def9b17c59309b6a4295faefcda36476cc71137ea9f4cd78f547a010e114dfb78f5fe49f128aff803fb6dc60ba80f4af0c69fdc2349b34327f67a1f8c73fef31898e051640b6fc39d3505295e405fe4dc555439bc07d0deb34670234cc371bdb327e6d12536fd8d7d56abbda3601cc01a45c645215ebb5c1dcdfcd55dc0c2620378751e71f78be67f7d964ca1f894606f9993a1ecf58a8e26010c16626fc1f1a25998c73eedd9b4ebee4fc7c28c653dbb79e483391c4e7cda3f2fba227fc41232b757c66e9e30d9402a5e3f1d888406834bc51b2e8968d70e5d8b8f1071d2c0479e98492760243df00cd560437151e4cb8a1e379044129220713c98b00891d5bca945650c705708e8ce0f4c50485d881aa7dc2458d43c4119599f9cfba0f837e717ab9e006de26e3c76f2ea98e4a55d753d3bdd48471d687995b4b0f0ad2e520ce2f558391024caa68849240abab166f9fba589a8845a373d45dc25e727aa84aa952a360fcd04d543a9cde054817177949c6d5d5ddb038f437bdf115a95e180cc76e10b51a4581504eb31d6f9fc037a13ca25fa8ba46522be88947c7c2c4a1a000b19107553f6d6afb4b828151d55b0a8ace68e4a074c81f329df23c884712ee5881d54284366aecac4ec4dd8caddfd8cb1f7b8fe7dd1c52b2ffcfaefca34d111644096ff128fc094ec548c548fbab0cabe99579b3b0bdad539a63b41a3fd73220ad8d64b6529ffcb386ac98c62d11feb45bdf07764f5699a70f2d6afe2d989d8d562c6a646de03e25e7d526c2ab50e34f23fe052ef195ee6a3c73ae1a57474c8ce5db85ba58ec7af5ccbc8835b512085dbdc6edb442201b363d49cf83eb60e5594126b1cb13bfe619cf3d8001d6f174bbbcc14d55ba59429bdaadbf1a17ce96c92e65e850cd3068ab042ebba69dfd1466b52045405e87f0c7e0abe4af7f01c12f31c8905fb670257c3b1f3bcdc1026705545d5174532aa1d20d705ec86da09d78f7d0bc44895c9d89fe68283e5458b74acce3eb2e39f847bc69a490d9b2ce17601cf69b089635143c17c9ef3842aa46aa5052d8c89a1b5c2a003b7fb15815d096286d74474f0f7c9240069c8a6e0b9ed068e11f29ae1033ffaf38d49507503d6420b2b8fa73d3593f9af0f5f33e95dd49ef0904f0e1eec616dee8dc33febfdadcd3c6641772c096bbb040aac338940ffe606edfd6e38ae39ebf57bd014300ec9cb40e8de324c0ad0c3b025e555c6d0b631b96a3f59f355580138ee79f855562ff65acd82b8cae10b1ca743c096fff227a86f2ea5a3744c9c3e613299e9bcecb43bc48b1579cf8e0856a31579fb5de917b87cc50e5f32a54833e9991a6760bbbc9b8b54a31c1a7553ea002b865dfe6fa544eddae6c7d7d845b8b041186565120255b71fe30bf9a36fad9d934610153fac9bfc5b0d15ab21d9d73ef8ca3d9f2ab084b57b80826050697bc918d550c62909f0f0d1df90f6e320a848c9ee39d5c6420b5ab6545948acc82c48cb57274e01b5cefb0aa8616d69658ff39fd99305fac21434f0a3dfcfb2d9b6f9421d7ef0b5bb4624d7a24c51014312f745aeaaa7ab4bd7bd5152266d03e7a4b581dea1341b5387bcb74cd39be77bc2995f08bfdf9ea618f860b11d5cd5b4d554a5192f0789496ed7adbc9b17b085d25689e8350ac7c08461cbd4336b24a96706e58deb0942c890aa9fd0377b82f2dcf39b532f0ab37e2a2399774a5e94413b0ce9b7897fab7788af61b048b14433fec6f1cd03476b028ba373e6bace618987a46baaf837ac7d545a0c24cb8a0621796be88a362c2833c8250256751803e58bcafbd4da63107ff559cdc0b32d7d704180b59faf599db986fbb519755ace83072bccae34c5497210490d99f3ddc373627555678308c4038537ab930cb2b02be12de62404386f9fc841c07944949253dc6df5589edbfa18421e684c92431b26447bbfec8e6394b2d9e8b0ec342aadfeda31fed254a50b5e5fb24b5f8a092fe02ad2f993f11cb33c96a8486fcf0abe43a26318e5042cb55686d51824e8a5826c8add03bc71750aaec7725e390ce2a4109ee3d7f9bef9d30d087988d21c424c46a301d8f11900c0e5389463f26a9fb7957a2a86e20ce0aea1d15531197b29bc60db418688cdf56e1372ba49165b066aa0ebba3d5467e5ebe842e06f86f35a935cc48fe4e4e82044e1af8d3461891b6137ce24e56334951fab0a4afceada298168716c07129d1fffe2a661e27df14ea087334843311446c79f2a302d1893964c7110f5bc667cc3b560ffe045c13f2d8c886ad9f823c32ee8f45543c243da95fe0d1cf542451ec8e5ea0913fef9427664c36f0d6af9c155a59f0d8f3c0934e0f3d946a6892620555ad9596a5badccf36ebfd3caac8d98ecdec871874c273f82e3743de58096d6bae8fb7b5d776576eae89463cf8bad641cc1e16c19c585a710ca48c620c1792eda4d5ac9bfc65b6e03bd0ee0020a97d0b7a6d9dd9946814f40548ce92043b6ea962a1d797e12cd302caf8fb76529bb9395b6f2753d8e7c8180afd2a7d047285ea9ad7c92e2b0a602764d705060e214ee9c9f6e0549047ec01e5c9c44b7db6ee2e00da85a6bfb449b1f5c7f2e62390a5908218b851a489c4c53d8272b9ff33c68c1c41cf93654f8a399b8c6ddf880f293a5f67d850137bbda4212175265aed387d3aede4d2303757057063f8ed294f29fbc816ce5be2d735411f96bef3bbc9ebe0bc7b5e91a292fe6f754554f9c0d0d2ee559e01005fd67607c1f4fedbaeeb0c5088ca70a320091bbd2d6c0e2323d1f72d0d22a19e3aa0aa891112c0f23bc1a10f8cf9ac91c05f9b0540ea479c5f2151e3938ad0d151f50659de4e8e1d996fbb484f43d812509158b0d84f6ef010648e29fedb0f291a3fb72b298396cba229a319d447d64d3769a5f26904eb57eca062231b6b5f51ab4cde84ebdf0722852fb14af81d802683c6f1e77b3d7c6ca99e74f9182defe8c85766e588038c1b5ea07ffc71c9346ce30a4a3b7f4c4e168f35a2154a906fc68bc485336f67d55c1dc6913d786a60bb963c1d63b7ae03b38c9e369a77eb9284a0dde9ef1c077ab95e531129f9e28cdc83b1fc2f4982db3336cd0e585aaf1e51633bcc63369644b0b038ad0e34558c055c73d95ec048929e5deb1dfaefce1eacc75db26bae0f3b524785ce757badb3e17ddec810d55803a7a1c7e6fb598dc2a052639daa32d554b03eb136b7912921769c3eb44d35cb8b28e662ee7934c65c4ce4c49986f81c1db7098dc02cb9a680d6af61ae55b46fc09f86886b7f27eb09629581daa296e566e77f7f8e06f8c8075bc7623d1a65d9df37cc022b3bb885e7249e98bb072049df70a80847d79aefb5d105ab5a21ee8379dea717d9cb5ba91d1d44bb22453899c9429915103ced13ce8ad0fbfbfa0a646de37d6cb05b2458bf0103824df33d8be9816a7abc4764fd925238fa9fdfb71efd9e59f3f39332a2442166588729b1cc4cca76fd591a9a2a4283a0fd6557ff9465dccfe962fc761cb5af810a280a80357efd7b865858e8d4a04ed42e6322df96ec54917181869c3a09a6c8b32fe7a7845bbf619db89366b82f753350d312ef97df259101af8c459239815d1236863224972a03f2c37733a5698c55f081b6e2f64f4198f0aadd5f5b44cb7749fabf787561fc612787f878d47cd9c230972b9cee81b608d1632191c9a96940ddbc0b58e3f76897774a6a7f90a847b5e74993469f39efe5263236a29a18d010bcd673b5755f2c085a21ae0331f64476fabd8b5a13f1a5f2fb383ba83c7579d7bf70d7c91196e3033ea7b868b48f42c80569b920a9f8832fef63c46544e66aa9afd027d3432a5c4ed9f0755c770f373ba083f665ffe2dc001902a3baf9f0ce583630d4bfc4f083a35116db66e6d85beb9e7ddfa883f8fb8bb210c0447b59412cce1d7f3a4a503aa7b2ab7b7919169d68b4e2697a82c7828c7fe61342851992a10fc409a934488f5e3e0fe3e1d1a796052660f6ded4c2f51521edb335524230da086c3fb61e5896d75766168b034cb29a4f5ac0177c2d13c44812e1863b84df3d6feaca00e19eb0774f98f44ab3303598051af1d6d40cdddb85e07f20dbdd8d1c5f7e41bf6456436da552ebdd2370b841bf128ae37614d5a463d959891ca49bd6519d4470b0fb6125710220f3af983cdc04c9d6b1a85952e52e6a603e5fd91ddb830c99f3002a909b67b70eb42b25fc05f3d1ceab5d11d16428955c1e698453e25de5bc903f328be11055ffb77974d1ba44304b391da87de063ac4b3425e7dbde2981ab5b8215536647f975cdd6cd923bbcadd49e37e8ba3e9b45de2dbd4a7ce5efee9425b75d3e8fe59a703d8508ca900657b3ae0f110868c13a85f0a78128a02d30e13c4dc23e7b6d8ac687d591266f3d3b3bc69272ea0858edf24094ba1575ba370254633b9ea17cdb8999a5a0b8300072da51d0172fb216cbde8684448d47ce8b5d267e0e10c09efd2", 0x2000, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x78, 0x0, 0xfffffffffffffffa, {0x3ff, 0x1, 0x0, {0x3, 0x80, 0x1, 0x559, 0x7fffffff, 0x2, 0x10, 0x0, 0x1, 0x8000, 0x9, 0x0, 0x0, 0x8, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0) 651.562757ms ago: executing program 1 (id=1252): syz_open_procfs(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd, 0x6, &(0x7f0000000380)=[{0x0}], 0x1}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0xc80183}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r1, 0x708, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x0, 0x8}}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x1, 0x1}}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x41}, 0x4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYBLOB="88020000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x48040) 593.802434ms ago: executing program 1 (id=1253): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x118, 0xc8, 0x8, 0x0, 0x5803, 0x228, 0x2e8, 0x2e8, 0x228, 0x2e8, 0x3, 0x0, {[{{@ipv6={@mcast2, @private0, [0xffffffff, 0xffffff00, 0xff, 0xff], [0xff, 0xff, 0x0, 0xff000000], 'wlan0\x00', 'syzkaller1\x00', {}, {0xff}, 0x32, 0x3, 0x3, 0x4}, 0x0, 0xd8, 0x118, 0x0, {0x0, 0x2000000000000}, [@common=@inet=@esp={{0x30}, {[0x4d4, 0x4d3], 0x1}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x81, 0xff, {0x4}}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@frag={{0x30}, {[0x6, 0x4], 0x81, 0x32, 0x1}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x1}, {0x1, 0x4, 0x4}, {0x0, 0x3, 0x1}, 0x4, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fsetxattr$security_evm(r2, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x5, 0x2, 0x15, 0x8, 0x3d, "215720e8670e984f68e78e9c3aeaefb3290a7ae95f16b5d9320cc240a34e34d452a54e7474140d5832956d7bd27ff595030cbb81c276a5abfd1fc296cc"}, 0x46, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96854305", 0xe, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="b80900152066"}, 0x14) 593.219812ms ago: executing program 1 (id=1254): r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0xa, 0x7}, {0x0, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x2, 0x2, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x6, 0xfff, 0x9, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x6, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x5, 0xa000000, 0x0, 0x5, 0x8, 0x3, 0x0, 0x401, 0x5, 0x8, 0x4ad1, 0x1, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x3ff, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3b, 0x0, 0x60df8662, 0x2, 0x5, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0x9, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x40, 0x1, 0x1f1f, 0x3, 0x665195e5, 0x5, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x2, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x8, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x1, 0x690c, 0x0, 0x9, 0x2, 0xe, 0xb, 0x8, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x4, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x2, 0x9f85, 0x65, 0x85, 0x0, 0x2, 0x2, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x4007, 0x1, 0x41632842, 0x6, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x3, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x8001, 0x10001, 0x5, 0xb, 0x7]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40000}, 0x8010) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'pcl812\x00', [0x8001, 0x3, 0x4, 0x4, 0xedc5, 0xfffffffc, 0x2, 0x7, 0x1, 0x6, 0x60, 0x1, 0x8, 0x2, 0x6, 0xa, 0x1, 0x5, 0x43, 0x547, 0x89, 0x10c, 0xf27, 0x4, 0xc, 0x8, 0x5, 0x6, 0x8, 0xbf, 0xffffffb4]}) 528.509868ms ago: executing program 5 (id=1258): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz2\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f00000002c0)={{0x2, 0x0, @empty}, {0x0, @random="e2fecc0c5bb1"}, 0x8, {0x2, 0x0, @remote}, 'sit0\x00'}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) fstat(0xffffffffffffffff, &(0x7f0000000240)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0xff}) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, &(0x7f0000000180)={0xd2, @time={0x5}}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000006000000140008"], 0x28}}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0xc, {0x2, 0x4e20, @rand_addr=0x64010102}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x1c, 0x21, 0x9, 0x2, 0x25dfdbff, {0x2}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 528.342857ms ago: executing program 4 (id=1259): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000001000000080000000b"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) write$eventfd(r1, &(0x7f0000000640)=0x9, 0x8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYBLOB="ef00000000000000140012"], 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x8010) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="340000001900150000000000000000000a"], 0x34}], 0x1, 0x0, 0x0, 0x4010}, 0x50) 464.282358ms ago: executing program 5 (id=1260): r0 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x600200) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000002c0)={0x0, 0xc1, 0x3, 0x6, 0x1, [0x2], [0x80ffff, 0xfffffffa, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x8001], [0x6, 0x0, 0x4]}) (async) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x280, 0x5a) (async) r2 = socket(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e24, 0xa6e, @dev={0xfe, 0x80, '\x00', 0x18}, 0x4}, 0x1c) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000080)={@loopback, r4}, 0x14) (async) name_to_handle_at(r1, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ceph_nfs_confh={0x10, 0x2, {0x9}}, &(0x7f00000000c0), 0x1200) 464.027561ms ago: executing program 4 (id=1261): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = epoll_create(0xfff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000001c0)={0x10000001}) epoll_pwait2(r2, &(0x7f0000000000)=[{}], 0x1, 0x0, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001e00d7"], 0x24}], 0x1, 0x0, 0x0, 0x4040094}, 0x24000044) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1000}, @IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6a21}]}}}]}, 0x44}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a48000000180a05000000000000000000020000001c0003801800038014000100776732000000000000000000000000000900020073797a30000000000900010073797a30"], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@typedef={0x2}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0xb, r7, 0x8, 0x0, 0x0, 0x14, 0x0, 0x14}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00ed00", 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @mcast1}}}}}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x808}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x10001d}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa8}}, 0x20000000) 463.84158ms ago: executing program 5 (id=1262): r0 = syz_open_dev$I2C(&(0x7f00000000c0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x318, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x318, 0xffffffff, 0xffffffff, 0x318, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x3, 0xf, 0x0, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @dev={0xfe, 0x80, '\x00', 0xd}, [0xff000000, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xffff00, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xff000000, 0xffffff00], 0x0, 0x25e8}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x17}, @local, [0xff], [], 'lo\x00', 'gre0\x00', {}, {}, 0x0, 0x5}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x8, 0xfb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x378) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs2/custom1\x00', 0x2, 0x0) (async) r1 = add_key$user(&(0x7f0000000380), &(0x7f0000000000), &(0x7f00000003c0)='X', 0x1, 0xfffffffffffffffe) (async) r2 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f00000006c0)={r1, r2, r2}, 0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)={'wp384-generic\x00'}}) (async) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000001c0)={0x0, 0xf, 0x5, &(0x7f0000000140)={0xf, "25f210caf4d99a17ffffff7f066cc1d80085469289ab99912870fe4a59784bc987"}}) 404.12936ms ago: executing program 5 (id=1263): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f00000000c0)="ad57877f678615cea5858470ef9a9ce63f4388845b68d100479307c5d3db3216b7807206e76d92cff1013bd30a2e69ed768a65bc12b293c353bfd1a7c490b96aa3b3ee5d2f8197de941b151d00e13907b094edaa74621c59ccb3f96c04cacc0a81e98e6c72427f5a9775c5e4f2c8d78f12cdff12ebf387c786566c3de8cbf582d7", &(0x7f0000000000), 0x2}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xd, 0x3, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x26, 0x0, &(0x7f00000006c0)="e460cdfbef2408002900119343056a0f000000072beb3014cd3ec8a755c1e1380081ffad0004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r6 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r5, 0x3ba0, &(0x7f00000003c0)={0x48, 0x7, r6, 0x0, 0x1, 0x0, 0x8, 0x1fbf95, 0xd0822}) r7 = socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x18000800}, 0xc, &(0x7f0000000340)={&(0x7f0000000440)=@newqdisc={0x9c, 0x24, 0x400, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0x7}, {0x2}, {0x6476a89b0972e7de, 0xffe0}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x8, 0x3f4, 0x400, 0x5}, 0x4, 0x0, 0x100, 0x400, 0xfffffffb, 0x18, 0x16, 0x17, 0x7, 0x9, {0x6417, 0x99, 0x3, 0x10, 0x1, 0xfffffffd}}}}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xdb5, "c700caaeb039a05c7d3edd87db64f4cf"}}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) prctl$PR_MCE_KILL(0x35, 0x1, 0x8) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r10, &(0x7f0000001300)={0x2020}, 0x2020) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f0000000100)=0x6, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a3030"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050) sendto$packet(r11, &(0x7f0000000180)="0b032200e0ff25a60200475400f6a13bb1000000080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000280)={0x48, 0x7, r6, 0x0, 0x8001, 0x0, 0x9, 0x2b9ec6, 0x2c5c01}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xa, 0xe}, {}, {0xc, 0xf}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r1, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) setsockopt$bt_BT_CHANNEL_POLICY(r4, 0x112, 0xa, &(0x7f0000000180), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 344.283615ms ago: executing program 2 (id=1264): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x4024004) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x28, @loopback, 0xd}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000003c0)={[{0x122e, 0x3, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0xff, 0x1f}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x9, 0x0, 0x0, 0x40, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1000000}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="200000000104"], 0x28}, 0x1, 0x0, 0x0, 0x4004054}, 0x40) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x10608, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 194.115564ms ago: executing program 4 (id=1265): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000007000/0x18000)=nil, &(0x7f000001fac0)=[@text64={0x40, 0x0}], 0x1, 0x2, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r3}, 0x38) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000340)=""/71, 0x47, 0x0, &(0x7f00000005c0)=""/167, 0xa7}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000900)={r0, 0xe0, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc3, &(0x7f0000000700), 0x0, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x2d, 0x8, 0x8, &(0x7f00000007c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000940)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000000000000b7fb0000000000007b8af8ff00000000bfa2000000b7de00000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getrandom(&(0x7f0000000240)=""/23, 0x17, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000052c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000053c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r7, 0x402c5342, &(0x7f0000005480)={0x0, 0x8, 0x3cdb, {0x0, 0x10000}}) syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x101000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000040)=[{0x27, '\x00', @st={0x4, [{0x2, @svalue=0x8000000000000001}, {0x2, @uvalue=0xfff}, {0x1, @svalue=0xdf03}, {0x1, @uvalue=0x7c31}]}, 0x3}]}) getrandom(&(0x7f00000002c0)=""/82, 0x52, 0x3) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0xfffffffffffffff8, 0x10000}, {0x1ff, 0xdb}, 0xab4, [0xf37, 0x7a, 0x1, 0x4000000005, 0x40, 0x66, 0x1, 0x5f, 0x75, 0x1, 0x10, 0x4, 0x6, 0xffdffffffffffff7, 0x621, 0xa]}) openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000340)={"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"}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60}) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) 143.691406ms ago: executing program 2 (id=1266): r0 = socket(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x14000, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000001600)=@newqdisc={0x88, 0x24, 0xd0f, 0x70bd2d, 0x3, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x10, [0x2, 0x1, 0x6, 0x9, 0x8, 0x9, 0xa, 0x9, 0x5, 0x2, 0x2, 0xd, 0x8, 0xe, 0x2, 0xf], 0x0, [0x0, 0x3, 0xd, 0x6, 0x5, 0xf, 0x7, 0x1ff, 0x2, 0xfb42, 0xc4b, 0x7ff, 0x9, 0x0, 0xb, 0x54], [0xfff9, 0x9, 0xffff, 0xff, 0x2, 0x9f1, 0x1, 0x3b27, 0x1, 0xd, 0x337, 0x5, 0x91b, 0x3, 0x20, 0x7]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) 142.406796ms ago: executing program 2 (id=1267): r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x1, 0x0) (async) r1 = socket(0x10, 0x80003, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @exit, @exit, @jmp={0x5, 0x0, 0xb, 0xb, 0x8, 0x100}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f0000000440), &(0x7f0000000040)=@udp=r2}, 0x20) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) 74.206166ms ago: executing program 2 (id=1268): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) fadvise64(r0, 0x63eb, 0x0, 0x1) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r6 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$NL80211_CMD_ASSOCIATE(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRES32=r6, @ANYRES64=r0], 0x70}, 0x1, 0x0, 0x0, 0x4040881}, 0x4000000) connect$pppoe(r6, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0xf, 0x0, &(0x7f0000000000)="1ffdfaae35289d4f333173846fe86c", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) sendmmsg(r6, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 65.069495ms ago: executing program 5 (id=1269): r0 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2, 0x2003) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000b40)={0x1, 0x0, 0x1, &(0x7f0000000b00)={0x0, "5a54f9e02cb612f2ab8371533b1a289255cf9fdfebfb57089d8a86a476506dd5e4"}}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r3, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32, @ANYBLOB="14000600fe8000000000000000000000000000aa1400070000000000000000000000000000bb"], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r1, &(0x7f0000000440)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="100000000000000000000000070000001c00000000000000ffffff0000000000", @ANYRES32=r3, @ANYBLOB="00000000ac1e000100000000"], 0x30}}], 0x1, 0xc0) 1.414702ms ago: executing program 5 (id=1270): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000880)={0x7f0, r2, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x290, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0x6, 0x0, 0x0, 0x1}, {0x8}, @device_a, @broadcast, @from_mac, {0x6, 0x6}}, @a_msdu=[{@broadcast, @device_a, 0x72, "2e5a8d8d7daa6e15c22a85d34dcca129b8a08da7c5a4320f859ab0c0478130c07b042aec0d324427a814614c2f6029eee9fd94f03cf04ea94bf6c10f26f3a849fc0a953f00713eb3affc78d415525580814cf3abd4111bc7ee8e501c22acf573199ee4507893aa374d6dada07f69bf299df7"}, {@device_a, @device_b, 0xb6, "9715bcbf471658d0a793c3be92942b208cdadb0122ca6e305e61ef2afbcddaca45fb7a8201280d0ac363dd4412ad31746649795624b33a0fb16b8e37d8d4ec0668815056cc5ae9062c1251d68f91ea05e9815340c5866d8589838a30ae67f139cf879b3779f2f79d0d209db5741d22b19e8d1b177b666f59eb3bc9b274357c1f0cc80841b0af42d171287208425c45cc33e4e19f4b7e8039613ffb1f5279fbb3c7853e571498047e080b0ea86374c3ec7ef2597a96f3"}, {@broadcast, @device_a, 0x23, "8de3a2d2e269be13417228697152bac5b1a30254a62292643e3e4e825429a2c9e7e044"}, {@broadcast, @device_b, 0xec, "376ecb27865386d757a17cc02da2aee59bd89fadccdfe2d3da729fb2d1a27c684933cdfbd95b85cad12588f311bf17e081523c1fa271539be1a6281ca92a77e73a73caf4142fc38f2bf0c5874d915e83f1c8a7bc1e017be93c06a67fde9afaab0b19e9ddc0063d9a09e72ef1cb84d492b65762f77325da674cc2a3948c297b137a9d406543ad3e45b59bfba0eabf9451d1dc8a1770e832eccb0424e52bd32847b1b82c401a51190e3bbf5627e958ddade5e7a1e3c6bd1e7f7cf817da456008d81c905a60af37fca6e85d09f13377f2fd35bd87aa6554bfc030860401daf888bded46c76a4ef94007c10eb363"}]}}, @NL80211_ATTR_FRAME={0x51a, 0x33, @mgmt_frame=@assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x5}, @device_a, @broadcast, @initial, {0x7, 0x5}, @value=@ver_80211n={0x0, 0x7ffa, 0x0, 0x3, 0x0, 0x2, 0x1, 0x0, 0x0, 0x1}}, 0x20, 0x26, @random=0xffff, @void, @val={0x2d, 0x1a, {0x8000, 0x1, 0x1, 0x0, {0x4, 0x8, 0x0, 0x3d0, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x4}}, [{0xdd, 0xae, "349aa52de488e04093d9cdb0329e06e999f9e0eec42166047c36450b70c4a59d69408376c5e5e53a1753f9ea94dbd3c677ff7936994b744c7e6b65f33cf285df51e710ac5d8f6aa8337a40d1a710d90ef50f0ee21dc4c7b3499ea3fedfe932c12d54504f42c1bb132a7728b425b786f174354da8b69f67139f3853b6205689c2f37bf68ad36f9c237b9e15106b8a9014b366b4ef78f7d78ba7d5fdd4ee6be4c3774fd07111b69103118f090f3aa0"}, {0xdd, 0xfa, "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"}, {0xdd, 0xaf, "688aabd558c1a489a98f39ce16b4758e5f95ee3a8fda9c4c27a383e8a6f3091e138271f67d036d7d74a3725a9b0b67762b02e5a0d12609b2a35d9e9d01fab795b1660bcb9c64ca1c4b24bb1d9ec3febf7bf7d00819218b2fa1998f78e49398448e7a62bc0d3f3648273748c7fe53cc3af5a31439bc9cdaf9aeae64525f46b43d124fd2ece8ba57f5c80caf4d781c84b45197b8a01edeacd8d7313c39ca4e6799b1718b90fce0242a1aaf780331a9de"}, {0xdd, 0x98, "ba8e65fa8a5821f7d62b3b0fd54bb785393ca577c4d54bbc1174f24fcde62a92b9fa3f16d71e3c6d5fddf1961bf8d4617235aff37f48d6451a2a4ba1865652c17f0e5e30added381c44933e80ab0379e1f9f8e9b53fb8d494e4b360f47b6e796dffc249b82609cd30661833b6bfc80d3cb3ce346790460c6dcd79ec64993e006fe6781517309a1ef42886b0696f78ade69998f4a1de13d4b"}, {0xdd, 0x11, "f0669c5829b6db3dae1b5c205cb4c52cd9"}, {0xdd, 0x81, "2f82a9cb6ec072c5437718330a6613f5764503566f7aeb55b33a3ac7d2d4abc8ecc97650c438ad19f8fa54652d9f1ef2698d47ab3f4b013edaeeda83878c541f5a49b8381058fdd2f3f6aff48281fbfea7fef8d04cbccba84b4b9eaba458ff535fbedd27a49e2a1ae3deeb188eb4c7ec82c65a393d655d248aac11ae12ef551bf3"}, {0xdd, 0x5a, "036d1b87674c5a93f92c73b5d7de182ec326c6682edd706cffe5b6773bf99410d61210db320ca18077b6f6f09256d242fde292d6bb302d55789d702e5e5e2fed5d9dd86c80d908a2a849556f3c4c256fb7d041b3251e426b6f39"}, {0xdd, 0xed, "b9d085f57cc053aa518282432f3f071b8ae727c4231e91e58462f9f415cf2704fe0e9de237c4ec592bcb79a268c3696b69128468bae816492b1d0c3c297996666dc306c3edef8fc70ed6452e48ffaead8d9a9c5977dc0bb795fc4f1dc35185fe3529ac765c9626faf78d9e8247074cf06363dac440fa96626cdb438cc60f7660640b380695e403f01349f277de4da267987a7a019e4cd87e363d32ccccc716bf6fae1590322e69d3d8242e32c641edd4940a9eb1db454cc4a117a8fb93dde44068dbf852ee4175e1320f194a9ecd1a32c95f8f9a2e3408b15e48b156c26d7b2acefb4a06d32e4ee82f237c225e"}]}}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7f0}, 0x1, 0x0, 0x0, 0x4008040}, 0x8000) listen(r1, 0x5) socket$vsock_stream(0x28, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r5 = socket$packet(0x11, 0x3, 0x300) unshare(0x22020600) setsockopt$packet_fanout_data(r5, 0x107, 0x16, 0x0, 0x0) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000808}, 0x10) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x1c) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r7) sendmsg$NFC_CMD_DISABLE_SE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x20000010) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1f, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 475.778µs ago: executing program 2 (id=1271): r0 = inotify_init1(0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0xd0, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x74, 0xf, [@peer_mgmt={0x75, 0x8, {0x0, 0x40, @val=0x4, @val=0x1, @void}}, @random={0x1, 0x10, "137290a56a2d730c571720f8c9edfea5"}, @fast_bss_trans={0x37, 0x52, {0xc0, 0x0, "d7b0f40d7f1b3b7bbffabb7eaac5b93a", "82a39ea0cb3668e3f68e5cf5f69bd762d881c8fbfe340581d796699693623e7d", "49ed31689ec88c41dbf176afd2eafb51273b68f31e64392afdf9a44af809d475"}}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xd0}}, 0x0) (async) inotify_add_watch(r0, &(0x7f0000000040)='.\x00', 0xc0000484) symlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 0s ago: executing program 2 (id=1272): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x50}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x400c0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f4000000080003000dac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) kernel console output (not intermixed with test programs): ][ T7029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.307'. [ 86.565988][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 86.566005][ T40] audit: type=1400 audit(1773801061.229:6129): avc: denied { execute } for pid=7048 comm="syz.3.314" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 86.595613][ T53] cfg80211: failed to load regulatory.db [ 86.730486][ T40] audit: type=1326 audit(1773801061.389:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7050 comm="syz.3.315" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d9c19c799 code=0x0 [ 86.762854][ T6052] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 86.831376][ T5938] block nbd3: Receive control failed (result -32) [ 86.832813][ T5939] block nbd3: Receive control failed (result -32) [ 86.843536][ T7051] block nbd3: shutting down sockets [ 86.924011][ T6052] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.928526][ T6052] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 86.932789][ T6052] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 86.936903][ T6052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.801770][ T7067] syzkaller0: entered promiscuous mode [ 87.808402][ T7067] 0: reclassify loop, rule prio 0, protocol 800 [ 88.102321][ T6052] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 88.116112][ T6052] input: Aiptek as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:17.0/input/input8 [ 88.124004][ T6052] input: failed to attach handler kbd to device input8, error: -5 [ 88.141037][ T6052] usb 6-1: USB disconnect, device number 8 [ 88.646270][ T40] audit: type=1400 audit(1773801063.309:6131): avc: denied { bind } for pid=7081 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.653461][ T40] audit: type=1400 audit(1773801063.309:6132): avc: denied { listen } for pid=7081 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.660210][ T40] audit: type=1400 audit(1773801063.309:6133): avc: denied { accept } for pid=7081 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.700845][ T40] audit: type=1400 audit(1773801063.359:6134): avc: denied { connect } for pid=7081 comm="syz.1.326" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 88.800924][ T40] audit: type=1400 audit(1773801063.459:6135): avc: denied { create } for pid=7079 comm="syz.3.325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 89.236557][ T7097] 8021q: VLANs not supported on gre0 [ 89.282787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.285845][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.288900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.302870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.306057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.544640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.548435][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.569278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.663546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.668570][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 90.496124][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.499124][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.510084][ T6779] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.514130][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.523192][ T6779] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.535523][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.335'. [ 90.545479][ T6779] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.558449][ T6779] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 92.659773][ T7132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.342'. [ 92.665040][ T7132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.342'. [ 92.668608][ T7132] netlink: 60 bytes leftover after parsing attributes in process `syz.2.342'. [ 93.219118][ T40] audit: type=1400 audit(1773801067.879:6136): avc: denied { write } for pid=7139 comm="syz.3.345" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.605737][ T7150] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 93.608855][ T7150] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 93.615147][ T7150] vhci_hcd vhci_hcd.0: Device attached [ 93.883047][ T34] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 94.322974][ T7151] vhci_hcd: connection reset by peer [ 94.343319][ T40] audit: type=1400 audit(1773801069.009:6137): avc: denied { setopt } for pid=7165 comm="syz.2.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 94.444633][ T1146] vhci_hcd vhci_hcd.1: stop threads [ 94.448236][ T1146] vhci_hcd vhci_hcd.1: release socket [ 94.451468][ T1146] vhci_hcd vhci_hcd.1: disconnect device [ 94.839038][ T40] audit: type=1400 audit(1773801069.499:6138): avc: denied { execute } for pid=7170 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 94.864782][ T40] audit: type=1400 audit(1773801069.499:6139): avc: denied { execute_no_trans } for pid=7170 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 94.962674][ T5938] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 94.966869][ T5938] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 94.970461][ T5938] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 94.974850][ T5938] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 94.978606][ T5938] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 95.069537][ T7180] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 95.275389][ T7182] kvm: pic: level sensitive irq not supported [ 95.275950][ T7182] kvm: pic: non byte read [ 95.317386][ T7177] chnl_net:caif_netlink_parms(): no params data found [ 95.387687][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.398216][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.401286][ T7177] bridge_slave_0: entered allmulticast mode [ 95.409385][ T7177] bridge_slave_0: entered promiscuous mode [ 95.414653][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.417936][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.421150][ T7177] bridge_slave_1: entered allmulticast mode [ 95.426787][ T7177] bridge_slave_1: entered promiscuous mode [ 95.454122][ T7177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.461018][ T7177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.489633][ T7177] team0: Port device team_slave_0 added [ 95.494763][ T7177] team0: Port device team_slave_1 added [ 95.523251][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.526428][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.538090][ T7177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.544484][ T7177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.547701][ T7177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.562218][ T7177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.590543][ T7177] hsr_slave_0: entered promiscuous mode [ 95.593005][ T7177] hsr_slave_1: entered promiscuous mode [ 95.595295][ T7177] debugfs: 'hsr0' already exists in 'hsr' [ 95.597187][ T7177] Cannot create hsr debugfs directory [ 95.745520][ T7177] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.754651][ T7177] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.761724][ T7177] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.768205][ T7177] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.791411][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.794248][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.796686][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.798861][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.830409][ T7177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.839719][ T7177] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.842664][ T40] audit: type=1400 audit(1773801070.439:6140): avc: denied { create } for pid=7198 comm="syz.1.360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.999824][ T7177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.213918][ T7177] veth0_vlan: entered promiscuous mode [ 96.219443][ T7177] veth1_vlan: entered promiscuous mode [ 96.247726][ T7177] veth0_macvtap: entered promiscuous mode [ 96.254276][ T7177] veth1_macvtap: entered promiscuous mode [ 96.264918][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.272063][ T7177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.278850][ T6781] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.282123][ T6781] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.285934][ T6781] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.289051][ T6781] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.337653][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.337672][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.359967][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.359981][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.372672][ T40] audit: type=1400 audit(1773801071.029:6141): avc: denied { mounton } for pid=7177 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2840 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 96.372711][ T40] audit: type=1400 audit(1773801071.029:6142): avc: denied { mounton } for pid=7177 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 96.409619][ T40] audit: type=1400 audit(1773801071.069:6143): avc: denied { create } for pid=7219 comm="syz.2.361" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.453402][ T40] audit: type=1400 audit(1773801071.119:6144): avc: denied { unlink } for pid=5931 comm="syz-executor" name="file0" dev="tmpfs" ino=649 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 96.539874][ T40] audit: type=1400 audit(1773801071.199:6145): avc: denied { create } for pid=7221 comm="syz.4.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 96.992822][ T5939] Bluetooth: hci4: command tx timeout [ 97.261793][ T7237] vivid-000: ================= START STATUS ================= [ 97.265756][ T7237] vivid-000: Generate PTS: true [ 97.268040][ T7237] vivid-000: Generate SCR: true [ 97.270200][ T7237] tpg source WxH: 720x576 (Y'CbCr) [ 97.272507][ T7237] tpg field: 4 [ 97.274127][ T7237] tpg crop: (0,0)/16x576 [ 97.276015][ T7237] tpg compose: (0,0)/64x576 [ 97.278058][ T7237] tpg colorspace: 1 [ 97.279765][ T7237] tpg transfer function: 0/0 [ 97.281853][ T7237] tpg Y'CbCr encoding: 0/0 [ 97.283896][ T7237] tpg quantization: 0/0 [ 97.285724][ T7237] tpg RGB range: 0/2 [ 97.287487][ T7237] vivid-000: ================== END STATUS ================== [ 98.098807][ T7250] netlink: 'syz.3.367': attribute type 10 has an invalid length. [ 98.306543][ T7250] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 98.552849][ T5802] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 98.609031][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 98.609043][ T40] audit: type=1400 audit(1773801073.269:6154): avc: denied { read } for pid=7257 comm="syz.3.370" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 98.712896][ T5802] usb 6-1: Using ep0 maxpacket: 16 [ 98.721299][ T5802] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.726200][ T5802] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 98.736547][ T5802] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 98.742306][ T5802] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 98.746240][ T5802] usb 6-1: Product: syz [ 98.747709][ T5802] usb 6-1: SerialNumber: syz [ 98.768075][ T5802] usb 6-1: config 0 descriptor?? [ 98.982721][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 98.989101][ T24] usb 6-1: USB disconnect, device number 9 [ 99.072681][ T5939] Bluetooth: hci4: command tx timeout [ 99.314550][ T40] audit: type=1400 audit(1773801073.979:6155): avc: denied { mounton } for pid=7277 comm="syz.3.375" path="/64/file0" dev="tmpfs" ino=349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 99.371587][ T40] audit: type=1400 audit(1773801074.029:6156): avc: denied { mounton } for pid=7277 comm="syz.3.375" path="/64/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 99.371934][ T7279] 9pnet_fd: p9_fd_create_unix (7279): problem connecting socket: ./file0: -13 [ 99.419293][ T7283] netlink: 12 bytes leftover after parsing attributes in process `syz.3.377'. [ 99.461299][ T40] audit: type=1400 audit(1773801074.119:6157): avc: denied { bind } for pid=7286 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.506247][ T40] audit: type=1400 audit(1773801074.169:6158): avc: denied { setopt } for pid=7286 comm="syz.4.378" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 99.508660][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.4.378'. [ 101.085668][ T40] audit: type=1400 audit(1773801075.669:6159): avc: denied { getopt } for pid=7315 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 101.152679][ T5939] Bluetooth: hci4: command tx timeout [ 101.671483][ T7324] -1: renamed from syzkaller0 [ 102.229551][ T40] audit: type=1400 audit(1773801076.889:6160): avc: denied { module_request } for pid=7334 comm="syz.4.393" kmod="netdev-syzkaller1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 102.520118][ T7341] input: syz0 as /devices/virtual/input/input9 [ 103.055575][ T7347] tipc: Started in network mode [ 103.058268][ T7347] tipc: Node identity 264c700b71bb, cluster identity 4711 [ 103.063039][ T7347] tipc: Enabled bearer , priority 0 [ 103.067259][ T7347] syzkaller0: entered promiscuous mode [ 103.069627][ T7347] syzkaller0: entered allmulticast mode [ 103.133217][ T7347] tipc: Resetting bearer [ 103.153193][ T7346] tipc: Resetting bearer [ 103.208578][ T7346] tipc: Disabling bearer [ 103.242711][ T5939] Bluetooth: hci4: command tx timeout [ 103.947243][ T7364] netlink: 28 bytes leftover after parsing attributes in process `syz.4.400'. [ 104.007885][ T7368] netlink: 4 bytes leftover after parsing attributes in process `syz.4.406'. [ 104.035998][ T40] audit: type=1400 audit(1773801078.699:6161): avc: denied { read } for pid=7369 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 104.625083][ T40] audit: type=1400 audit(1773801078.809:6162): avc: denied { write } for pid=7372 comm="syz.1.404" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 104.983747][ T7395] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 105.041117][ T7399] faux_driver vkms: [drm] Unknown color mode 7; guessing buffer size. [ 105.487139][ T5939] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 105.745198][ T7409] netlink: 'syz.2.416': attribute type 10 has an invalid length. [ 107.683747][ T7435] netlink: 'syz.1.426': attribute type 10 has an invalid length. [ 107.689531][ T7435] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.827404][ T7445] syzkaller1: entered promiscuous mode [ 107.829805][ T7445] syzkaller1: entered allmulticast mode [ 108.791844][ T40] audit: type=1400 audit(1773801084.448:6163): avc: denied { watch } for pid=7463 comm="syz.2.436" path="/144/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 108.799507][ T40] audit: type=1400 audit(1773801084.448:6164): avc: denied { watch_sb watch_reads } for pid=7463 comm="syz.2.436" path="/144/file0" dev="tmpfs" ino=768 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 108.820232][ T7466] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.957058][ T7466] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.012533][ T40] audit: type=1400 audit(1773801084.668:6165): avc: denied { call } for pid=7467 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.022661][ T40] audit: type=1400 audit(1773801084.678:6166): avc: denied { transfer } for pid=7467 comm="syz.1.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 109.128790][ T7466] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.244802][ T7466] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.517649][ T6778] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.520947][ T6778] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.523995][ T6778] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.527822][ T6778] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.109192][ T7495] netlink: 7952 bytes leftover after parsing attributes in process `syz.3.446'. [ 110.355967][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 110.395375][ T7497] netlink: 36 bytes leftover after parsing attributes in process `syz.4.447'. [ 110.838581][ T7514] comedi: valid board names for 8255 driver are: [ 110.840883][ T7514] 8255 [ 110.841820][ T7514] comedi: valid board names for vmk80xx driver are: [ 110.844712][ T7514] vmk80xx [ 110.845795][ T7514] comedi: valid board names for usbduxsigma driver are: [ 110.848065][ T7514] usbduxsigma [ 110.849269][ T7514] comedi: valid board names for usbduxfast driver are: [ 110.851496][ T7514] usbduxfast [ 110.853282][ T7514] comedi: valid board names for usbdux driver are: [ 110.855404][ T7514] usbdux [ 110.856407][ T7514] comedi: valid board names for ni6501 driver are: [ 110.858608][ T7514] ni6501 [ 110.859633][ T7514] comedi: valid board names for dt9812 driver are: [ 110.861763][ T7514] dt9812 [ 110.862847][ T7514] comedi: valid board names for ni_labpc_cs driver are: [ 110.865099][ T7514] ni_labpc_cs [ 110.866262][ T7514] comedi: valid board names for ni_daq_700 driver are: [ 110.868676][ T7514] ni_daq_700 [ 110.869818][ T7514] comedi: valid board names for labpc_pci driver are: [ 110.872357][ T7514] labpc_pci [ 110.873693][ T7514] comedi: valid board names for adl_pci9118 driver are: [ 110.875960][ T7514] pci9118dg [ 110.877110][ T7514] pci9118hg [ 110.878208][ T7514] pci9118hr [ 110.879669][ T7514] comedi: valid board names for 8255_pci driver are: [ 110.882222][ T7514] 8255_pci [ 110.883369][ T7514] comedi: valid board names for s526 driver are: [ 110.885429][ T7514] s526 [ 110.886368][ T7514] comedi: valid board names for multiq3 driver are: [ 110.888591][ T7514] multiq3 [ 110.890042][ T7514] comedi: valid board names for pcmuio driver are: [ 110.892379][ T7514] pcmuio48 [ 110.893549][ T7514] pcmuio96 [ 110.894620][ T7514] comedi: valid board names for pcmmio driver are: [ 110.897416][ T7514] pcmmio [ 110.898478][ T7514] comedi: valid board names for pcmda12 driver are: [ 110.901385][ T7514] pcmda12 [ 110.902886][ T7514] comedi: valid board names for pcmad driver are: [ 110.905730][ T7514] pcmad12 [ 110.907164][ T7514] pcmad16 [ 110.908587][ T7514] comedi: valid board names for ni_labpc driver are: [ 110.911493][ T7514] lab-pc-1200 [ 110.913436][ T7514] lab-pc-1200ai [ 110.914649][ T7514] lab-pc+ [ 110.915728][ T7514] comedi: valid board names for atmio16 driver are: [ 110.917880][ T7514] atmio16 [ 110.919080][ T7514] atmio16d [ 110.920158][ T7514] comedi: valid board names for ni_at_ao driver are: [ 110.922331][ T7514] at-ao-6 [ 110.923449][ T7514] at-ao-10 [ 110.924524][ T7514] comedi: valid board names for ni_at_a2150 driver are: [ 110.926790][ T7514] ni_at_a2150 [ 110.927951][ T7514] comedi: valid board names for adq12b driver are: [ 110.930105][ T7514] adq12b [ 110.931118][ T7514] comedi: valid board names for mpc624 driver are: [ 110.933451][ T7514] mpc624 [ 110.934462][ T7514] comedi: valid board names for c6xdigio driver are: [ 110.936666][ T7514] c6xdigio [ 110.937752][ T7514] comedi: valid board names for aio_iiro_16 driver are: [ 110.940151][ T7514] aio_iiro_16 [ 110.941509][ T7514] comedi: valid board names for aio_aio12_8 driver are: [ 110.944605][ T7514] aio_aio12_8 [ 110.946124][ T7514] aio_ai12_8 [ 110.947617][ T7514] aio_ao12_4 [ 110.949102][ T7514] comedi: valid board names for fl512 driver are: [ 110.951594][ T7514] fl512 [ 110.952753][ T7514] comedi: valid board names for dmm32at driver are: [ 110.955363][ T7514] dmm32at [ 110.956663][ T7514] comedi: valid board names for dt282x driver are: [ 110.959237][ T7514] dt2821 [ 110.960434][ T7514] dt2821-f [ 110.961735][ T7514] dt2821-g [ 110.963115][ T7514] dt2823 [ 110.964495][ T7514] dt2824-pgh [ 110.965874][ T7514] dt2824-pgl [ 110.967323][ T7514] dt2825 [ 110.968674][ T7514] dt2827 [ 110.970058][ T7514] dt2828 [ 110.971657][ T7514] dt2829 [ 110.973292][ T7514] dt21-ez [ 110.974743][ T7514] dt23-ez [ 110.976170][ T7514] dt24-ez [ 110.977569][ T7514] dt24-ez-pgl [ 110.979090][ T7514] comedi: valid board names for dt2817 driver are: [ 110.981863][ T7514] dt2817 [ 110.983271][ T7514] comedi: valid board names for dt2815 driver are: [ 110.986012][ T7514] dt2815 [ 110.987346][ T7514] comedi: valid board names for dt2814 driver are: [ 110.990099][ T7514] dt2814 [ 110.991441][ T7514] comedi: valid board names for dt2811 driver are: [ 110.994571][ T7514] dt2811-pgh [ 110.996052][ T7514] dt2811-pgl [ 110.998450][ T7514] comedi: valid board names for dt2801 driver are: [ 111.000379][ T7521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 111.001279][ T7514] dt2801 [ 111.001305][ T7514] comedi: valid board names for das6402 driver are: [ 111.001313][ T7514] das6402-12 [ 111.001320][ T7514] das6402-16 [ 111.001327][ T7514] comedi: valid board names for das1800 driver are: [ 111.001336][ T7514] das-1701st [ 111.001342][ T7514] das-1701st-da [ 111.018549][ T7514] das-1702st [ 111.020103][ T7514] das-1702st-da [ 111.021706][ T7514] das-1702hr [ 111.023293][ T7514] das-1702hr-da [ 111.024905][ T7514] das-1701ao [ 111.026433][ T7514] das-1702ao [ 111.027939][ T7514] das-1801st [ 111.029426][ T7514] das-1801st-da [ 111.031066][ T7514] das-1802st [ 111.032443][ T7514] das-1802st-da [ 111.033759][ T7514] das-1802hr [ 111.034873][ T7514] das-1802hr-da [ 111.036121][ T7514] das-1801hc [ 111.037231][ T7514] das-1802hc [ 111.038336][ T7514] das-1801ao [ 111.039447][ T7514] das-1802ao [ 111.040552][ T7514] comedi: valid board names for das800 driver are: [ 111.043164][ T7514] das-800 [ 111.044197][ T7514] cio-das800 [ 111.045305][ T7514] das-801 [ 111.046334][ T7514] cio-das801 [ 111.047461][ T7514] das-802 [ 111.048491][ T7514] cio-das802 [ 111.049591][ T7514] cio-das802/16 [ 111.050778][ T7514] comedi: valid board names for isa-das08 driver are: [ 111.053053][ T7514] isa-das08 [ 111.054133][ T7514] das08-pgm [ 111.055220][ T7514] das08-pgh [ 111.056310][ T7514] das08-pgl [ 111.057392][ T7514] das08-aoh [ 111.058470][ T7514] das08-aol [ 111.059562][ T7514] das08-aom [ 111.060640][ T7514] das08/jr-ao [ 111.061776][ T7514] das08jr-16-ao [ 111.063088][ T7514] pc104-das08 [ 111.064239][ T7514] das08jr/16 [ 111.065365][ T7514] comedi: valid board names for das16m1 driver are: [ 111.067503][ T7514] das16m1 [ 111.068546][ T7514] comedi: valid board names for dac02 driver are: [ 111.070629][ T7514] dac02 [ 111.071602][ T7514] comedi: valid board names for rti802 driver are: [ 111.074184][ T7514] rti802 [ 111.075183][ T7514] comedi: valid board names for rti800 driver are: [ 111.077332][ T7514] rti800 [ 111.078326][ T7514] rti815 [ 111.079325][ T7514] comedi: valid board names for pcm3724 driver are: [ 111.081453][ T7514] pcm3724 [ 111.082501][ T7514] comedi: valid board names for pcl818 driver are: [ 111.084669][ T7514] pcl818l [ 111.085696][ T7514] pcl818h [ 111.086753][ T7514] pcl818hd [ 111.087823][ T7514] pcl818hg [ 111.088875][ T7514] pcl818 [ 111.089855][ T7514] pcl718 [ 111.090841][ T7514] pcm3718 [ 111.091886][ T7514] comedi: valid board names for pcl816 driver are: [ 111.094064][ T7514] pcl816 [ 111.095060][ T7514] pcl814b [ 111.096151][ T7514] comedi: valid board names for pcl812 driver are: [ 111.098238][ T7514] pcl812 [ 111.099200][ T7514] pcl812pg [ 111.100244][ T7514] acl8112pg [ 111.101287][ T7514] acl8112dg [ 111.102328][ T7514] acl8112hg [ 111.103430][ T7514] a821pgl [ 111.104451][ T7514] a821pglnda [ 111.105542][ T7514] a821pgh [ 111.106536][ T7514] a822pgl [ 111.107539][ T7514] a822pgh [ 111.108549][ T7514] a823pgl [ 111.109577][ T7514] a823pgh [ 111.110585][ T7514] pcl813 [ 111.111550][ T7514] pcl813b [ 111.112558][ T7514] acl8113 [ 111.113617][ T7514] iso813 [ 111.114569][ T7514] acl8216 [ 111.115597][ T7514] a826pg [ 111.116558][ T7514] comedi: valid board names for pcl730 driver are: [ 111.118571][ T7514] pcl730 [ 111.119556][ T7514] iso730 [ 111.120522][ T7514] acl7130 [ 111.121538][ T7514] pcm3730 [ 111.122553][ T7514] pcl725 [ 111.123583][ T7514] p8r8dio [ 111.124589][ T7514] acl7225b [ 111.125620][ T7514] p16r16dio [ 111.126679][ T7514] pcl733 [ 111.127631][ T7514] pcl734 [ 111.128591][ T7514] opmm-1616-xt [ 111.129724][ T7514] pearl-mm-p [ 111.130822][ T7514] ir104-pbf [ 111.131888][ T7514] comedi: valid board names for pcl726 driver are: [ 111.134007][ T7514] pcl726 [ 111.134974][ T7514] pcl727 [ 111.135937][ T7514] pcl728 [ 111.136933][ T7514] acl6126 [ 111.137958][ T7514] acl6128 [ 111.139026][ T7514] comedi: valid board names for pcl724 driver are: [ 111.141132][ T7514] pcl724 [ 111.142111][ T7514] pcl722 [ 111.143149][ T7514] pcl731 [ 111.144131][ T7514] acl7122 [ 111.145163][ T7514] acl7124 [ 111.146190][ T7514] pet48dio [ 111.147258][ T7514] pcmio48 [ 111.148287][ T7514] onyx-mm-dio [ 111.149416][ T7514] comedi: valid board names for pcl711 driver are: [ 111.151516][ T7514] pcl711 [ 111.152503][ T7514] pcl711b [ 111.153594][ T7514] acl8112hg [ 111.154672][ T7514] acl8112dg [ 111.155760][ T7514] comedi: valid board names for amplc_pc263 driver are: [ 111.158008][ T7514] pc263 [ 111.159016][ T7514] comedi: valid board names for amplc_pc236 driver are: [ 111.161233][ T7514] pc36at [ 111.162219][ T7514] comedi: valid board names for amplc_dio200 driver are: [ 111.164538][ T7514] pc212e [ 111.165517][ T7514] pc214e [ 111.166516][ T7514] pc215e [ 111.167505][ T7514] pc218e [ 111.168478][ T7514] pc272e [ 111.169457][ T7514] comedi: valid board names for comedi_parport driver are: [ 111.171786][ T7514] comedi_parport [ 111.173062][ T7514] comedi: valid board names for comedi_test driver are: [ 111.175286][ T7514] comedi_test [ 111.176633][ T7514] comedi: valid board names for comedi_bond driver are: [ 111.178843][ T7514] comedi_bond [ 111.460451][ T40] audit: type=1400 audit(1773801087.118:6167): avc: denied { bind } for pid=7532 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 111.527912][ T7534] xt_ecn: cannot match TCP bits for non-tcp packets [ 111.558640][ T40] audit: type=1400 audit(1773801087.138:6168): avc: denied { setopt } for pid=7532 comm="syz.4.458" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 112.388856][ T7560] netlink: 20 bytes leftover after parsing attributes in process `syz.1.466'. [ 112.983842][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.4.471'. [ 113.039049][ T7575] syzkaller0: entered promiscuous mode [ 113.041722][ T7575] syzkaller0: entered allmulticast mode [ 113.198413][ T40] audit: type=1400 audit(1773801088.858:6169): avc: denied { mount } for pid=7584 comm="syz.3.476" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 113.528745][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 113.532842][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 113.537304][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 113.541006][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.1.478'. [ 113.892653][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.042645][ T34] usb 6-1: Using ep0 maxpacket: 16 [ 114.046517][ T34] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.049954][ T34] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.054087][ T7601] netlink: 'syz.2.481': attribute type 10 has an invalid length. [ 114.058424][ T34] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.061344][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.066500][ T34] usb 6-1: Product: syz [ 114.067893][ T34] usb 6-1: Manufacturer: syz [ 114.069474][ T34] usb 6-1: SerialNumber: syz [ 114.090705][ T40] audit: type=1400 audit(1773801089.748:6170): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 114.289858][ T34] usb 6-1: 0:2 : does not exist [ 114.297581][ T34] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 114.320022][ T34] usb 6-1: USB disconnect, device number 10 [ 114.343922][ T5948] udevd[5948]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.362709][ T6000] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 115.512877][ T6000] usb 6-1: Using ep0 maxpacket: 16 [ 115.517289][ T6000] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 115.520211][ T6000] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.523014][ T6000] usb 6-1: Product: syz [ 115.524384][ T6000] usb 6-1: Manufacturer: syz [ 115.526114][ T6000] usb 6-1: SerialNumber: syz [ 115.529484][ T6000] usb 6-1: config 0 descriptor?? [ 115.533144][ T6000] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 115.735596][ T6000] ssu100 6-1:0.0: probe with driver ssu100 failed with error -32 [ 115.741463][ T6000] usb 6-1: USB disconnect, device number 11 [ 116.398712][ T7633] netlink: 'syz.1.491': attribute type 10 has an invalid length. [ 116.433163][ T7637] netlink: 56 bytes leftover after parsing attributes in process `syz.4.494'. [ 116.481480][ T40] audit: type=1400 audit(1773801092.138:6171): avc: denied { add_name } for pid=7638 comm="syz.4.495" name="nbd" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 116.492216][ T40] audit: type=1400 audit(1773801092.138:6172): avc: denied { create } for pid=7638 comm="syz.4.495" name="nbd" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 116.501356][ T40] audit: type=1400 audit(1773801092.138:6173): avc: denied { associate } for pid=7638 comm="syz.4.495" name="nbd" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 116.510908][ T40] audit: type=1800 audit(1773801092.148:6174): pid=7639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.495" name="nbd" dev="9p" ino=71827921 res=0 errno=0 [ 116.519484][ T40] audit: type=1400 audit(1773801092.168:6175): avc: denied { connect } for pid=7640 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.526891][ T40] audit: type=1400 audit(1773801092.178:6176): avc: denied { bind } for pid=7640 comm="syz.1.496" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 116.542695][ T40] audit: type=1400 audit(1773801092.188:6177): avc: denied { bpf } for pid=7640 comm="syz.1.496" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.550997][ T40] audit: type=1400 audit(1773801092.188:6178): avc: denied { perfmon } for pid=7640 comm="syz.1.496" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 116.607386][ T7649] netlink: 'syz.1.499': attribute type 10 has an invalid length. [ 116.739989][ T7654] evm: overlay not supported [ 116.927775][ T7664] netlink: 24 bytes leftover after parsing attributes in process `syz.4.503'. [ 117.002683][ T5939] Bluetooth: hci4: command 0x0406 tx timeout [ 117.020220][ T7668] netlink: 56 bytes leftover after parsing attributes in process `syz.2.504'. [ 117.060982][ T40] audit: type=1400 audit(1773801092.718:6179): avc: denied { lock } for pid=7669 comm="syz.2.506" path="/dev/video36" dev="devtmpfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 117.074464][ T7670] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 117.080675][ T7670] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 117.186703][ T7674] netlink: 'syz.2.507': attribute type 10 has an invalid length. [ 117.189888][ T7674] syz_tun: entered promiscuous mode [ 117.285968][ T7688] netlink: 'syz.2.511': attribute type 1 has an invalid length. [ 117.303376][ T7688] bond0: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 117.307251][ T7688] bond0: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 117.313237][ T7688] bond0: (slave ip6gre1): making interface the new active one [ 117.316410][ T7688] bond0: (slave ip6gre1): Enslaving as an active interface with an up link [ 117.340538][ T7691] netlink: 12 bytes leftover after parsing attributes in process `syz.4.512'. [ 117.346393][ T7691] fuse: Unknown parameter 'g>Yh%roup_id' [ 117.349321][ T7691] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 117.480102][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.514'. [ 118.456286][ T7711] netlink: 'syz.1.527': attribute type 21 has an invalid length. [ 118.457897][ T7714] netlink: 'syz.2.519': attribute type 10 has an invalid length. [ 118.458888][ T7711] netlink: 128 bytes leftover after parsing attributes in process `syz.1.527'. [ 118.465339][ T7711] netlink: 'syz.1.527': attribute type 4 has an invalid length. [ 118.467788][ T7711] netlink: 'syz.1.527': attribute type 5 has an invalid length. [ 118.470010][ T7711] netlink: 3 bytes leftover after parsing attributes in process `syz.1.527'. [ 118.507747][ T40] audit: type=1400 audit(1773801094.168:6180): avc: denied { bind } for pid=7715 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.516829][ T7716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.520'. [ 118.842645][ T5802] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 118.846617][ T7745] netlink: 'syz.1.532': attribute type 1 has an invalid length. [ 118.882246][ T7745] 8021q: adding VLAN 0 to HW filter on device bond3 [ 118.887116][ T7745] bond2: (slave bond3): making interface the new active one [ 118.891020][ T7745] bond2: (slave bond3): Enslaving as an active interface with an up link [ 118.901902][ T7745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.532'. [ 118.905410][ T7745] bond2: entered allmulticast mode [ 118.909707][ T7745] bond3: entered allmulticast mode [ 119.014894][ T7750] netlink: 40 bytes leftover after parsing attributes in process `syz.1.533'. [ 119.204292][ T5802] usb 7-1: Using ep0 maxpacket: 32 [ 119.207862][ T5802] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 119.211232][ T5802] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 119.214268][ T5802] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 119.217194][ T5802] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.220317][ T5802] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.223520][ T5802] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 119.227692][ T5802] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 119.230605][ T5802] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.235785][ T5802] usb 7-1: config 0 descriptor?? [ 119.248746][ T7761] netlink: 'syz.4.537': attribute type 10 has an invalid length. [ 119.253977][ T7761] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 119.453086][ T5802] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 119.603435][ T7783] fuse: Bad value for 'fd' [ 119.632300][ T7785] netlink: 'syz.1.547': attribute type 10 has an invalid length. [ 119.647202][ T5802] usb 7-1: USB disconnect, device number 7 [ 119.657599][ T5802] usblp0: removed [ 119.732790][ T921] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 119.788077][ T7791] netlink: 'syz.1.549': attribute type 2 has an invalid length. [ 119.802961][ T5938] Bluetooth: hci0: command 0x0406 tx timeout [ 119.832235][ T7793] JFS: discard option not supported on device [ 119.837869][ T7793] Mount JFS Failure: -5 [ 119.844226][ T7793] tipc: Trying to set illegal importance in message [ 119.892826][ T921] usb 9-1: Using ep0 maxpacket: 8 [ 119.900304][ T921] usb 9-1: config 16 has 0 interfaces, different from the descriptor's value: 1 [ 119.904465][ T921] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 119.908319][ T921] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.048642][ T7799] ucma_write: process 471 (syz.1.553) changed security contexts after opening file descriptor, this is not allowed. [ 120.683012][ T6000] usb 9-1: USB disconnect, device number 2 [ 120.743211][ T7840] hugetlbfs: Unknown parameter 'KAK?qM [ 120.743211][ T7840] <<4 [ 120.743211][ T7840] 1_Q' [ 121.368546][ T7883] netlink: 'syz.1.580': attribute type 10 has an invalid length. [ 121.502918][ T7885] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 121.503397][ T7887] netlink: 'syz.1.582': attribute type 10 has an invalid length. [ 121.507114][ T7885] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 121.600292][ T7892] __nla_validate_parse: 9 callbacks suppressed [ 121.600309][ T7892] netlink: 24 bytes leftover after parsing attributes in process `syz.1.584'. [ 121.651055][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 121.651070][ T40] audit: type=1400 audit(1773801097.308:6193): avc: denied { execute } for pid=7895 comm="syz.1.586" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=20798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 121.652961][ T7896] CIFS mount error: No usable UNC path provided in device string! [ 121.652961][ T7896] [ 121.669130][ T7896] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 121.888121][ T7907] sit0: entered promiscuous mode [ 121.891471][ T7907] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 121.894779][ T7907] netlink: 1 bytes leftover after parsing attributes in process `syz.1.590'. [ 121.934841][ T7912] fuse: Bad value for 'fd' [ 121.995360][ T7918] netlink: 'syz.4.593': attribute type 10 has an invalid length. [ 122.008873][ T40] audit: type=1400 audit(1773801097.668:6194): avc: denied { append } for pid=7919 comm="syz.1.594" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 122.011043][ T7920] vivid-000: ================= START STATUS ================= [ 122.019840][ T7920] vivid-000: Test Pattern: 75% Colorbar [ 122.026036][ T7920] vivid-000: Fill Percentage of Frame: 100 [ 122.028628][ T7920] vivid-000: Horizontal Movement: No Movement [ 122.031544][ T7920] vivid-000: Vertical Movement: No Movement [ 122.034355][ T7920] vivid-000: OSD Text Mode: All [ 122.036476][ T7920] vivid-000: Show Border: false [ 122.038528][ T7920] vivid-000: Show Square: false [ 122.040657][ T7920] vivid-000: Sensor Flipped Horizontally: false [ 122.043360][ T7920] vivid-000: Sensor Flipped Vertically: false [ 122.047048][ T7920] vivid-000: Insert SAV Code in Image: false [ 122.049661][ T7920] vivid-000: Insert EAV Code in Image: false [ 122.052234][ T7920] vivid-000: Insert Video Guard Band: false [ 122.055045][ T7920] vivid-000: Reduced Framerate: false [ 122.057337][ T7920] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 122.060570][ T7920] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 122.072680][ T40] audit: type=1400 audit(1773801097.738:6195): avc: denied { read } for pid=7919 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.084064][ T7920] vivid-000: Enable Capture Cropping: true [ 122.085998][ T7920] vivid-000: Enable Capture Composing: true [ 122.087891][ T7920] vivid-000: Enable Capture Scaler: true [ 122.089767][ T7920] vivid-000: Timestamp Source: End of Frame [ 122.091654][ T7920] vivid-000: Colorspace: SMPTE 170M [ 122.093760][ T7920] vivid-000: Transfer Function: Default [ 122.095538][ T7920] vivid-000: Y'CbCr Encoding: Default [ 122.097232][ T7920] vivid-000: HSV Encoding: Hue 0-179 [ 122.099008][ T7920] vivid-000: Quantization: Default [ 122.101110][ T7920] vivid-000: Apply Alpha To Red Only: false [ 122.103351][ T7920] vivid-000: Standard Aspect Ratio: 4x3 [ 122.105184][ T7920] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 122.107647][ T7920] vivid-000: DV Timings: 640x480p59 inactive [ 122.109608][ T7920] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 122.112071][ T7920] vivid-000: Maximum EDID Blocks: 2 [ 122.115133][ T7920] vivid-000: Limited RGB Range (16-235): false [ 122.117187][ T7920] vivid-000: Rx RGB Quantization Range: Automatic [ 122.119299][ T7920] vivid-000: Power Present: 0x00000001 [ 122.121114][ T7920] tpg source WxH: 720x576 (Y'CbCr) [ 122.123165][ T7920] tpg field: 4 [ 122.124327][ T7920] tpg crop: (0,0)/64x64 [ 122.125732][ T7920] tpg compose: (0,560)/16x16 [ 122.127280][ T7920] tpg colorspace: 1 [ 122.128548][ T7920] tpg transfer function: 0/0 [ 122.128761][ T40] audit: type=1400 audit(1773801097.788:6196): avc: denied { mounton } for pid=7931 comm="syz.4.597" path="/proc/187/task" dev="proc" ino=20880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 122.130163][ T7920] tpg Y'CbCr encoding: 0/0 [ 122.139981][ T7920] tpg quantization: 0/0 [ 122.141348][ T7920] tpg RGB range: 0/2 [ 122.142752][ T7920] vivid-000: ================== END STATUS ================== [ 122.175238][ T40] audit: type=1400 audit(1773801097.838:6197): avc: denied { read } for pid=7919 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 122.231420][ T40] audit: type=1400 audit(1773801097.888:6198): avc: denied { watch } for pid=7937 comm="syz.1.599" path="/184" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 122.240455][ T7939] binder: 7937:7939 ioctl 4008ae93 0 returned -22 [ 122.246774][ T40] audit: type=1400 audit(1773801097.898:6199): avc: denied { set_context_mgr } for pid=7937 comm="syz.1.599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 122.247842][ T7942] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 122.382362][ T7952] netlink: 40 bytes leftover after parsing attributes in process `syz.1.603'. [ 122.382403][ T7951] netlink: 40 bytes leftover after parsing attributes in process `syz.1.603'. [ 122.428467][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 122.480233][ T40] audit: type=1400 audit(1773801098.138:6200): avc: denied { execute } for pid=7957 comm="syz.4.606" path="/file1" dev="ramfs" ino=21895 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 122.538435][ T7966] team0 (unregistering): Port device team_slave_0 removed [ 122.545025][ T7966] team0 (unregistering): Port device team_slave_1 removed [ 122.587474][ T40] audit: type=1400 audit(1773801098.248:6201): avc: denied { write } for pid=7967 comm="syz.1.610" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 122.652264][ T7971] random: crng reseeded on system resumption [ 122.652699][ T40] audit: type=1400 audit(1773801098.308:6202): avc: denied { append } for pid=7970 comm="syz.4.611" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.692707][ T5936] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 122.705867][ T7971] xt_CT: No such helper "pptp" [ 122.738371][ T7975] netlink: 20 bytes leftover after parsing attributes in process `syz.1.612'. [ 122.816545][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.1.616'. [ 122.852747][ T5936] usb 7-1: Using ep0 maxpacket: 32 [ 122.857402][ T5936] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 122.860942][ T5936] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 122.865736][ T5936] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 122.869354][ T5936] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.873988][ T5936] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.878219][ T5936] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 122.883929][ T5936] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 122.887753][ T5936] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.893423][ T5936] usb 7-1: config 0 descriptor?? [ 123.049695][ T7995] netlink: 'syz.4.618': attribute type 10 has an invalid length. [ 123.100636][ T5936] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 123.178918][ T8004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.621'. [ 123.185540][ T8004] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.300985][ T6000] usb 7-1: USB disconnect, device number 8 [ 123.306989][ T6000] usblp0: removed [ 123.475613][ T8016] netlink: 20 bytes leftover after parsing attributes in process `syz.4.625'. [ 123.519152][ T8018] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: 1 [ 123.524652][ T8018] ref_ctr increment failed for inode: 0x1d0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026ce6e40 [ 123.529895][ T8018] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -11243, delta: -1 [ 123.537146][ T8018] ref_ctr decrement failed for inode: 0x1d0 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026ce6e40 [ 123.541808][ T8018] uprobe: syz.4.626:8018 failed to unregister, leaking uprobe [ 123.879723][ T8048] netlink: 'syz.4.634': attribute type 2 has an invalid length. [ 124.051223][ T8052] syz.4.636 (8052): drop_caches: 0 [ 124.054610][ T8052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.636'. [ 124.082718][ T71] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 124.254279][ T71] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.262668][ T71] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.266815][ T71] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 124.272495][ T71] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 124.276939][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.282929][ T71] usb 7-1: config 0 descriptor?? [ 124.349089][ T8065] validate_nla: 1 callbacks suppressed [ 124.349105][ T8065] netlink: 'syz.4.640': attribute type 10 has an invalid length. [ 124.567174][ T8085] dlm: plock device version mismatch: kernel (1.2.0), user (4294967274.0.4294901762) [ 124.721001][ T71] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 124.873445][ T8096] netlink: 'syz.4.650': attribute type 10 has an invalid length. [ 124.908913][ T8046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.917651][ T8046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.975846][ T8099] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 124.983146][ T8099] exFAT-fs (nullb0): invalid boot record signature [ 124.986499][ T8099] exFAT-fs (nullb0): failed to read boot sector [ 124.989320][ T8099] exFAT-fs (nullb0): failed to recognize exfat type [ 125.189102][ T53] usb 7-1: USB disconnect, device number 9 [ 125.562336][ T8120] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 125.649531][ T8124] mkiss: ax0: crc mode is auto. [ 126.020833][ T8144] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 126.294444][ T8154] netlink: 'syz.4.666': attribute type 21 has an invalid length. [ 126.547152][ T8160] Invalid logical block size (-3) [ 126.700753][ T8170] fuse: Bad value for 'group_id' [ 126.703986][ T8170] fuse: Bad value for 'group_id' [ 126.917261][ T8193] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=37 sclass=netlink_tcpdiag_socket pid=8193 comm=syz.4.676 [ 126.940211][ T8196] mmap: syz.2.678 (8196) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 126.949174][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 126.949184][ T40] audit: type=1400 audit(1773801102.608:6223): avc: denied { associate } for pid=8195 comm="syz.2.678" name="pfkey" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 126.959528][ T40] audit: type=1400 audit(1773801102.608:6224): avc: denied { append } for pid=8195 comm="syz.2.678" dev="proc" ino=4026533074 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 127.026704][ T8204] __nla_validate_parse: 3 callbacks suppressed [ 127.026720][ T8204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.681'. [ 127.056443][ T8206] netlink: 12 bytes leftover after parsing attributes in process `syz.1.682'. [ 127.063245][ T40] audit: type=1400 audit(1773801102.718:6225): avc: denied { map } for pid=8205 comm="syz.1.682" path="socket:[21115]" dev="sockfs" ino=21115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.098138][ T40] audit: type=1400 audit(1773801102.718:6226): avc: denied { read } for pid=8205 comm="syz.1.682" path="socket:[21115]" dev="sockfs" ino=21115 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 127.111187][ T40] audit: type=1400 audit(1773801102.728:6227): avc: denied { append } for pid=8205 comm="syz.1.682" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 127.131527][ T8206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.682'. [ 127.134513][ T8206] bridge_slave_1: left allmulticast mode [ 127.136397][ T8206] bridge_slave_1: left promiscuous mode [ 127.138401][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.154167][ T8206] bridge_slave_0: left allmulticast mode [ 127.156450][ T8206] bridge_slave_0: left promiscuous mode [ 127.158434][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.608550][ T8225] qnx6: unable to set blocksize [ 127.759644][ T8236] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 127.770574][ T40] audit: type=1400 audit(1773801103.428:6228): avc: denied { getopt } for pid=8235 comm="syz.1.693" laddr=::ffff:172.20.20.170 lport=54443 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 127.895246][ T8242] netlink: 'syz.1.696': attribute type 10 has an invalid length. [ 128.061009][ T8247] sit0: left promiscuous mode [ 128.095669][ T8252] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8252 comm=syz.2.700 [ 128.103292][ T40] audit: type=1400 audit(1773801103.768:6229): avc: denied { create } for pid=8251 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.111155][ T40] audit: type=1400 audit(1773801103.768:6230): avc: denied { bind } for pid=8251 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.136642][ T8247] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 128.204174][ T5938] Bluetooth: hci0: unexpected subevent 0x19 length: 24 < 28 [ 128.205849][ T40] audit: type=1400 audit(1773801103.868:6231): avc: denied { setopt } for pid=8251 comm="syz.2.700" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 128.246753][ T40] audit: type=1800 audit(1773801103.908:6232): pid=8219 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t op=collect_data cause=failed comm="syz.4.686" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 128.247046][ T8219] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 128.247067][ T8219] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 128.247835][ T8219] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 128.260148][ T8219] syz.4.686 (8219) used greatest stack depth: 19880 bytes left [ 128.280362][ T8263] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1547 sclass=netlink_route_socket pid=8263 comm=syz.4.703 [ 128.335135][ T8267] netlink: 'syz.1.705': attribute type 10 has an invalid length. [ 128.336990][ T8268] Sensor A: ================= START STATUS ================= [ 128.340316][ T8268] Sensor A: Test Pattern: 75% Colorbar [ 128.342371][ T8268] Sensor A: Show Information: All [ 128.346420][ T8269] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 128.348668][ T8269] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 128.351354][ T8268] Sensor A: Vertical Flip: false [ 128.354334][ T8268] Sensor A: Horizontal Flip: false [ 128.357390][ T8268] Sensor A: Brightness: 128 [ 128.359024][ T8268] Sensor A: Contrast: 128 [ 128.360448][ T8268] Sensor A: Hue: 0 [ 128.361686][ T8268] Sensor A: Saturation: 128 [ 128.363726][ T8268] Sensor A: ================== END STATUS ================== [ 128.438844][ T8279] process 'syz.1.708' launched '/dev/fd/4/./file1' with NULL argv: empty string added [ 128.442909][ T5938] Bluetooth: hci2: command 0x0406 tx timeout [ 128.479325][ T8286] netlink: 'syz.2.709': attribute type 2 has an invalid length. [ 128.761661][ T8301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8301 comm=syz.2.715 [ 128.766551][ T8301] netlink: 24 bytes leftover after parsing attributes in process `syz.2.715'. [ 128.789584][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.2.715'. [ 128.936620][ T8305] netlink: 'syz.2.717': attribute type 10 has an invalid length. [ 129.262436][ T8312] netlink: 'syz.4.719': attribute type 2 has an invalid length. [ 129.373786][ T5938] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 129.378995][ T5938] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 129.388032][ T5938] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 129.391668][ T5938] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 129.395299][ T5938] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 129.497632][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.4.725'. [ 129.641692][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.728'. [ 129.674101][ T8321] chnl_net:caif_netlink_parms(): no params data found [ 129.721806][ T8345] netlink: 'syz.1.729': attribute type 2 has an invalid length. [ 129.788636][ T8352] netlink: 'syz.1.731': attribute type 21 has an invalid length. [ 129.810824][ T8352] netlink: 156 bytes leftover after parsing attributes in process `syz.1.731'. [ 129.821359][ T8321] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.829689][ T8321] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.833322][ T8321] bridge_slave_0: entered allmulticast mode [ 129.837787][ T8321] bridge_slave_0: entered promiscuous mode [ 129.843318][ T8321] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.846621][ T8321] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.849327][ T8321] bridge_slave_1: entered allmulticast mode [ 129.853572][ T8321] bridge_slave_1: entered promiscuous mode [ 129.897101][ T8321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.911784][ T8361] syzkaller1: entered promiscuous mode [ 129.914124][ T8361] syzkaller1: entered allmulticast mode [ 129.917987][ T8321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.936210][ T8321] team0: Port device team_slave_0 added [ 129.939312][ T8321] team0: Port device team_slave_1 added [ 129.953025][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.955299][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.963766][ T8321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.968120][ T8321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.970380][ T8321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 129.978787][ T8321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.024263][ T8359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 130.031636][ T8359] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 130.041107][ T8321] hsr_slave_0: entered promiscuous mode [ 130.044088][ T8321] hsr_slave_1: entered promiscuous mode [ 130.046440][ T8321] debugfs: 'hsr0' already exists in 'hsr' [ 130.048340][ T8321] Cannot create hsr debugfs directory [ 130.154545][ T8321] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.159057][ T8321] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.166739][ T8321] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.174752][ T8321] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.182808][ T53] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 130.239317][ T8321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.246894][ T8321] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.260254][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.262645][ T6780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.266199][ T8395] netlink: 32 bytes leftover after parsing attributes in process `syz.2.740'. [ 130.266237][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.272033][ T6780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 130.332858][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 130.338912][ T53] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.343935][ T53] usb 9-1: config 0 has no interfaces? [ 130.346366][ T53] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 130.346387][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.356600][ T53] usb 9-1: config 0 descriptor?? [ 130.380877][ T8321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.529480][ T8321] veth0_vlan: entered promiscuous mode [ 130.534297][ T8321] veth1_vlan: entered promiscuous mode [ 130.547253][ T8321] veth0_macvtap: entered promiscuous mode [ 130.551184][ T8321] veth1_macvtap: entered promiscuous mode [ 130.560140][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 130.567374][ T8321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.575409][ T155] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.578321][ T155] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.581582][ T155] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.585367][ T155] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.628729][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.632512][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.651352][ T6779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.654967][ T6779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.700329][ T8418] kernel read not supported for file /policy (pid: 8418 comm: syz.5.720) [ 130.800397][ T8427] hugetlbfs: syz.5.748 (8427): Using mlock ulimits for SHM_HUGETLB is obsolete [ 130.906111][ T8434] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8434 comm=syz.5.751 [ 130.914549][ T8439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.918618][ T8439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.203006][ T71] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.332660][ T71] usb 6-1: device descriptor read/64, error -71 [ 131.472858][ T5938] Bluetooth: hci5: command tx timeout [ 131.582709][ T71] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 131.713406][ T71] usb 6-1: device descriptor read/64, error -71 [ 131.737725][ T8436] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 131.740897][ T8436] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 131.744275][ T8436] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 131.785202][ T8464] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 131.825079][ T71] usb usb6-port1: attempt power cycle [ 132.092681][ T10] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 132.163225][ T71] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 132.177338][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 132.177353][ T40] audit: type=1400 audit(1773801107.838:6252): avc: denied { create } for pid=8484 comm="syz.5.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 132.189467][ T71] usb 6-1: device descriptor read/8, error -71 [ 132.250261][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 132.257698][ T10] usb 7-1: unable to get BOS descriptor or descriptor too short [ 132.260895][ T10] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.272097][ T10] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 132.276116][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.279624][ T10] usb 7-1: Product: syz [ 132.281413][ T10] usb 7-1: Manufacturer: syz [ 132.290709][ T10] usb 7-1: SerialNumber: syz [ 132.295751][ T8491] netlink: 5 bytes leftover after parsing attributes in process `syz.5.766'. [ 132.423174][ T71] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 132.444068][ T71] usb 6-1: device descriptor read/8, error -71 [ 132.494259][ T40] audit: type=1400 audit(1773801108.158:6253): avc: denied { map } for pid=8502 comm="syz.5.769" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 132.495442][ T8503] netlink: 'syz.5.769': attribute type 1 has an invalid length. [ 132.513092][ T10] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 132.516610][ T10] usb 7-1: MIDIStreaming interface descriptor not found [ 132.553144][ T71] usb usb6-port1: unable to enumerate USB device [ 132.556208][ T10] usb 7-1: USB disconnect, device number 10 [ 132.576095][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.774432][ T9] usb 9-1: USB disconnect, device number 3 [ 132.866127][ T8520] sp0: Synchronizing with TNC [ 132.912985][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.776'. [ 132.917182][ T8525] ceph: No source [ 133.043676][ T40] audit: type=1400 audit(1773801108.708:6254): avc: denied { getopt } for pid=8530 comm="syz.2.778" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 133.127096][ T8536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.780'. [ 133.132464][ T8536] netlink: 'syz.2.780': attribute type 9 has an invalid length. [ 133.136089][ T8536] netlink: 47 bytes leftover after parsing attributes in process `syz.2.780'. [ 133.385405][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.2.785'. [ 133.388340][ T8551] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 133.394631][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 133.451372][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.785'. [ 133.454610][ T8552] netem: incorrect gi model size [ 133.456443][ T8552] netem: change failed [ 133.514088][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.5.787'. [ 133.529645][ T8556] team0: Port device team_slave_1 removed [ 133.539995][ T40] audit: type=1400 audit(1773801109.198:6255): avc: denied { accept } for pid=8560 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.547695][ T40] audit: type=1400 audit(1773801109.198:6256): avc: denied { write } for pid=8560 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.555216][ T40] audit: type=1400 audit(1773801109.198:6257): avc: denied { read } for pid=8560 comm="syz.2.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 133.563409][ T5938] Bluetooth: hci5: command tx timeout [ 133.630213][ T8564] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.789'. [ 134.186942][ T8591] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 134.290154][ T40] audit: type=1400 audit(1773801109.948:6258): avc: denied { mounton } for pid=8592 comm="syz.4.800" path="/132/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 134.290403][ T8593] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 134.304820][ T8593] overlay: Bad value for 'index' [ 134.349643][ T40] audit: type=1400 audit(1773801110.008:6259): avc: denied { unmount } for pid=7177 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 134.393863][ T8597] capability: warning: `syz.4.802' uses 32-bit capabilities (legacy support in use) [ 134.515720][ T8608] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 134.527421][ T40] audit: type=1400 audit(1773801110.188:6260): avc: denied { mounton } for pid=8607 comm="syz.2.806" path="/230/bus/file0" dev="overlay" ino=1214 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 134.549037][ T40] audit: type=1400 audit(1773801110.208:6261): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 134.566321][ T8613] SELinux: policydb version 1786459118 does not match my version range 15-35 [ 134.569290][ T8613] SELinux: failed to load policy [ 134.953174][ T8604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 135.093227][ T8604] netlink: 'syz.4.805': attribute type 4 has an invalid length. [ 135.362932][ T8644] overlayfs: missing 'lowerdir' [ 135.484091][ T8648] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 135.537497][ T8660] netlink: 'syz.1.824': attribute type 9 has an invalid length. [ 135.633488][ T5938] Bluetooth: hci5: command tx timeout [ 135.752272][ T8672] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 136.512450][ T8732] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 136.518793][ T8732] syzkaller1: Linktype set failed because interface is up [ 136.552204][ T8734] netlink: 'syz.4.851': attribute type 10 has an invalid length. [ 137.095078][ T8781] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.192701][ T71] usb 10-1: new low-speed USB device number 2 using dummy_hcd [ 137.203932][ T1116] ata1.00: exception Emask 0x0 SAct 0x4000 SErr 0x0 action 0x6 frozen [ 137.207799][ T1116] ata1.00: failed command: WRITE FPDMA QUEUED [ 137.208906][ T8781] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.210239][ T1116] ata1.00: cmd 61/88:70:3e:1e:08/06:00:00:00:00/40 tag 14 ncq dma 856064 out [ 137.210239][ T1116] res 40/00:00:00:00:00/00:00:00:00:00/00 Emask 0x4 (timeout) [ 137.210293][ T1116] ata1.00: status: { DRDY } [ 137.210356][ T1116] ata1: hard resetting link [ 137.344482][ T71] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 137.347436][ T71] usb 10-1: config 0 has no interface number 0 [ 137.349625][ T71] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 137.353743][ T71] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 137.357816][ T71] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.358976][ T8781] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.360779][ T71] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.369064][ T71] usb 10-1: config 0 descriptor?? [ 137.372269][ T8767] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 137.377559][ T71] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 137.402951][ T6052] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 137.455933][ T8781] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.511423][ T6780] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.521317][ T6778] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.529766][ T6778] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.534156][ T1116] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 137.541374][ T1116] ata1.00: configured for UDMA/100 [ 137.543989][ T6778] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.547519][ T1116] ata1: EH complete [ 137.549967][ C2] sd 0:0:0:0: [sda] tag#16 timing out command, waited 42s [ 137.563024][ T6052] usb 6-1: Using ep0 maxpacket: 8 [ 137.566279][ T6052] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 137.572308][ T6052] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 137.589369][ T6052] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 137.595279][ T6052] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 137.598607][ T6052] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 137.613102][ T5999] usb 10-1: USB disconnect, device number 2 [ 137.615458][ C3] iowarrior 10-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19 [ 137.621230][ T6052] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 137.632326][ T6052] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.691193][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 137.691206][ T40] audit: type=1400 audit(1773801113.338:6282): avc: denied { execute } for pid=8795 comm="syz.4.872" path="/selinux/avc/hash_stats" dev="selinuxfs" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 137.712800][ T5938] Bluetooth: hci5: command tx timeout [ 137.756869][ T6778] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.796547][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.798704][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 137.805828][ T8797] mkiss: ax0: crc mode is auto. [ 137.839783][ T6778] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.849122][ T6052] usb 6-1: GET_CAPABILITIES returned 0 [ 137.852723][ T6052] usbtmc 6-1:16.0: can't read capabilities [ 137.880252][ T5802] usb 6-1: USB disconnect, device number 16 [ 137.948089][ T6778] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.021178][ T8823] __nla_validate_parse: 12 callbacks suppressed [ 138.021193][ T8823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'. [ 138.053670][ T6778] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.055208][ T40] audit: type=1400 audit(1773801113.718:6283): avc: denied { accept } for pid=8824 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 138.108726][ T8843] netlink: 'syz.2.881': attribute type 1 has an invalid length. [ 138.132213][ T8843] bond1: entered promiscuous mode [ 138.141551][ T8843] bond1: entered allmulticast mode [ 138.144231][ T8843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 138.154394][ T8839] erspan1: entered allmulticast mode [ 138.159406][ T8839] bond1: (slave erspan1): making interface the new active one [ 138.164705][ T8839] erspan1: entered promiscuous mode [ 138.167202][ T8839] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 138.170966][ T8846] xt_hashlimit: size too large, truncated to 1048576 [ 138.320468][ T6778] bridge_slave_0: left allmulticast mode [ 138.323743][ T6778] bridge_slave_0: left promiscuous mode [ 138.327502][ T6778] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.448322][ T8865] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 138.450709][ T8865] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.453265][ T8866] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(7) [ 138.456339][ T8866] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 138.459908][ T8866] vhci_hcd vhci_hcd.0: Device attached [ 138.463647][ T8865] vhci_hcd vhci_hcd.0: Device attached [ 138.471037][ T8867] vhci_hcd: connection closed [ 138.471070][ T8868] vhci_hcd: connection closed [ 138.471699][ T6781] vhci_hcd vhci_hcd.5: stop threads [ 138.479337][ T6781] vhci_hcd vhci_hcd.5: release socket [ 138.479862][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz.1.888'. [ 138.481222][ T6781] vhci_hcd vhci_hcd.5: disconnect device [ 138.491347][ T6781] vhci_hcd vhci_hcd.5: stop threads [ 138.494013][ T6781] vhci_hcd vhci_hcd.5: release socket [ 138.496345][ T6781] vhci_hcd vhci_hcd.5: disconnect device [ 138.550685][ T8874] efs: Unknown parameter 'iscar9ɖ' [ 138.552024][ T40] audit: type=1400 audit(1773801114.208:6284): avc: denied { mounton } for pid=8873 comm="syz.4.889" path="/155/bus" dev="tmpfs" ino=852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 138.598600][ T6778] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.605420][ T6778] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.611314][ T6778] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 138.621582][ T6778] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 138.644760][ T6778] bond0 (unregistering): Released all slaves [ 138.693957][ T8882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.893'. [ 138.696980][ T8883] netlink: 4 bytes leftover after parsing attributes in process `syz.4.892'. [ 138.864920][ T8899] netlink: 'syz.1.896': attribute type 10 has an invalid length. [ 138.868261][ T8903] netlink: 'syz.4.892': attribute type 1 has an invalid length. [ 138.880284][ T8904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.888147][ T8904] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.899972][ T8903] macvtap1: entered allmulticast mode [ 139.112922][ T53] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 139.119991][ T6778] hsr_slave_0: left promiscuous mode [ 139.129964][ T6778] hsr_slave_1: left promiscuous mode [ 139.139612][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.146898][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.151629][ T6778] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.154964][ T6778] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.166922][ T6778] veth1_macvtap: left promiscuous mode [ 139.169558][ T6778] veth0_macvtap: left promiscuous mode [ 139.171964][ T6778] veth1_vlan: left promiscuous mode [ 139.176142][ T6778] veth0_vlan: left promiscuous mode [ 139.237397][ T40] audit: type=1400 audit(1773801114.898:6285): avc: denied { bind } for pid=8931 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 139.248862][ T40] audit: type=1400 audit(1773801114.898:6286): avc: denied { connect } for pid=8931 comm="syz.1.905" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 139.264231][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 139.272930][ T53] usb 7-1: unable to get BOS descriptor or descriptor too short [ 139.277255][ T53] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 139.283936][ T53] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 139.288999][ T53] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.292493][ T53] usb 7-1: Product: syz [ 139.294964][ T53] usb 7-1: Manufacturer: syz [ 139.296988][ T53] usb 7-1: SerialNumber: syz [ 139.386809][ T6778] team0 (unregistering): Port device team_slave_1 removed [ 139.402203][ T6778] team0 (unregistering): Port device team_slave_0 removed [ 139.409278][ T8943] netlink: 'syz.5.906': attribute type 10 has an invalid length. [ 139.485047][ T8943] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 139.534320][ T53] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 139.537411][ T53] usb 7-1: MIDIStreaming interface descriptor not found [ 139.602813][ T5936] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 139.604636][ T53] usb 7-1: USB disconnect, device number 11 [ 139.613533][ T8951] hpfs: hpfs_map_sector(): read error [ 139.619390][ T8954] netlink: 188 bytes leftover after parsing attributes in process `syz.5.911'. [ 139.656313][ T6051] udevd[6051]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.773051][ T5936] usb 6-1: Using ep0 maxpacket: 32 [ 139.783570][ T5936] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 139.789497][ T5936] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 139.792983][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 139.796032][ T5936] usb 6-1: Product: syz [ 139.797384][ T5936] usb 6-1: Manufacturer: syz [ 139.798848][ T5936] usb 6-1: SerialNumber: syz [ 139.801876][ T5936] usb 6-1: config 0 descriptor?? [ 139.808398][ T8970] fuse: Bad value for 'fd' [ 139.808854][ T8941] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 139.815230][ T5936] hub 6-1:0.0: bad descriptor, ignoring hub [ 139.817196][ T5936] hub 6-1:0.0: probe with driver hub failed with error -5 [ 139.888521][ T40] audit: type=1400 audit(1773801115.548:6287): avc: denied { create } for pid=8978 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 139.895458][ T40] audit: type=1400 audit(1773801115.548:6288): avc: denied { setopt } for pid=8978 comm="syz.4.916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 140.049185][ T8994] afs: Unknown parameter 'dynv/urandom' [ 140.052183][ T8994] afs: Unknown parameter 'flockrie' [ 140.082702][ T8998] usb usb8: usbfs: process 8998 (syz.4.921) did not claim interface 0 before use [ 140.097330][ T40] audit: type=1400 audit(1773801115.758:6289): avc: denied { create } for pid=8997 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.099669][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.921'. [ 140.104707][ T40] audit: type=1400 audit(1773801115.758:6290): avc: denied { getopt } for pid=8997 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.158230][ T8998] nbd: socks must be embedded in a SOCK_ITEM attr [ 140.158720][ T40] audit: type=1400 audit(1773801115.818:6291): avc: denied { setopt } for pid=8997 comm="syz.4.921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.161258][ T8508] block nbd64: NBD_DISCONNECT [ 140.354182][ T8958] udevd[8958]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 140.370083][ T9011] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.923'. [ 140.627741][ T9021] netlink: 24 bytes leftover after parsing attributes in process `syz.2.927'. [ 140.635683][ T9021] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9021 comm=syz.2.927 [ 140.694702][ T9025] netlink: 28 bytes leftover after parsing attributes in process `syz.2.928'. [ 140.724359][ T8941] usb 6-1: reset high-speed USB device number 17 using dummy_hcd [ 140.893326][ T9036] tls_set_device_offload: netdev not found [ 140.900650][ T8941] usb 6-1: device firmware changed [ 140.903658][ T10] usb 6-1: USB disconnect, device number 17 [ 140.957364][ T9046] random: crng reseeded on system resumption [ 141.062744][ T10] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 141.224561][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 141.228638][ T10] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.239739][ T10] usb 6-1: string descriptor 0 read error: -22 [ 141.242533][ T10] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.248631][ T10] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.254525][ T10] usb 6-1: config 0 descriptor?? [ 141.258180][ T8996] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 141.262678][ T10] hub 6-1:0.0: bad descriptor, ignoring hub [ 141.265276][ T10] hub 6-1:0.0: probe with driver hub failed with error -5 [ 141.335506][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.941'. [ 141.604029][ T6052] usb 6-1: USB disconnect, device number 18 [ 141.703354][ T9087] loop6: detected capacity change from 0 to 7 [ 141.711698][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.715965][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.718910][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.721868][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.725384][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.728618][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.731366][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.734813][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.737491][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.741713][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.745395][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.748521][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.751315][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.754599][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.757212][ T8958] ldm_validate_partition_table(): Disk read failed. [ 141.760344][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.763670][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.766365][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.770107][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.780790][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 141.783957][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 141.786822][ T8958] Dev loop6: unable to read RDB block 0 [ 141.789255][ T8958] loop6: unable to read partition table [ 141.791302][ T8958] loop6: partition table beyond EOD, truncated [ 141.796175][ T9087] ldm_validate_partition_table(): Disk read failed. [ 141.798689][ T9087] Dev loop6: unable to read RDB block 0 [ 141.800846][ T9087] loop6: unable to read partition table [ 141.804006][ T9087] loop6: partition table beyond EOD, truncated [ 141.806096][ T9087] loop_reread_partitions: partition scan of loop6 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 141.809658][ T9090] sp0: Synchronizing with TNC [ 141.874097][ T5939] Bluetooth: hci5: command 0x0406 tx timeout [ 141.901303][ T9093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.905437][ T9093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.080309][ T9105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 142.139552][ T9109] netlink: 'syz.2.956': attribute type 10 has an invalid length. [ 142.182887][ T6052] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 142.205205][ T9116] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.383219][ T6052] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 142.385815][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.389408][ T6052] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.393356][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.397081][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.408260][ T6052] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 142.410834][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.421138][ T6052] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.426237][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.429978][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.434996][ T6052] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 142.438267][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 142.443261][ T6052] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 142.448138][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 142.462064][ T6052] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 142.478441][ T6052] usb 9-1: string descriptor 0 read error: -22 [ 142.480536][ T6052] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 142.492659][ T6052] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.520324][ T6052] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 142.708940][ T5936] usb 9-1: USB disconnect, device number 4 [ 142.811403][ T9139] netlink: 'syz.1.967': attribute type 10 has an invalid length. [ 142.870851][ T9142] configfs: Unknown parameter '@' [ 142.895456][ T9142] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 143.234922][ T9154] __nla_validate_parse: 5 callbacks suppressed [ 143.234934][ T9154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.970'. [ 143.300238][ T9156] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 143.414115][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 143.414127][ T40] audit: type=1400 audit(1773801119.078:6299): avc: denied { read } for pid=9168 comm="syz.4.975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 143.422934][ T40] audit: type=1400 audit(1773801119.078:6300): avc: denied { ioctl } for pid=9168 comm="syz.4.975" path="socket:[26983]" dev="sockfs" ino=26983 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 143.482083][ T40] audit: type=1400 audit(1773801119.128:6301): avc: denied { append } for pid=9175 comm="syz.4.976" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.491505][ T40] audit: type=1400 audit(1773801119.138:6302): avc: denied { map } for pid=9175 comm="syz.4.976" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.501708][ T40] audit: type=1400 audit(1773801119.138:6303): avc: denied { execute } for pid=9175 comm="syz.4.976" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 143.622629][ T40] audit: type=1326 audit(1773801119.278:6304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.1.974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86179c799 code=0x7fc00000 [ 143.630854][ T40] audit: type=1326 audit(1773801119.278:6305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.1.974" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd86179c799 code=0x7fc00000 [ 143.643938][ T40] audit: type=1326 audit(1773801119.278:6306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.1.974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86179c799 code=0x7fc00000 [ 143.652246][ T40] audit: type=1326 audit(1773801119.278:6307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.1.974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86179c799 code=0x7fc00000 [ 143.653560][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 143.666178][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.979'. [ 143.672888][ T40] audit: type=1326 audit(1773801119.278:6308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.1.974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd86179c799 code=0x7fc00000 [ 143.811047][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 143.832837][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.981'. [ 143.860589][ T9191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.981'. [ 143.882790][ T9191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.981'. [ 144.002909][ T9193] netlink: 'syz.4.982': attribute type 13 has an invalid length. [ 144.092039][ T9198] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 144.139981][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 144.153729][ T9200] bond2: Invalid ad_actor_system MAC address. [ 144.155734][ T9200] bond2: option ad_actor_system: invalid value (255) [ 144.159154][ T9200] bond2 (unregistering): Released all slaves [ 144.288933][ T9207] netlink: 'syz.5.987': attribute type 8 has an invalid length. [ 144.584612][ T9229] loop9: detected capacity change from 0 to 7 [ 144.592869][ T9229] Dev loop9: unable to read RDB block 7 [ 144.594776][ T9229] loop9: unable to read partition table [ 144.596737][ T9229] loop9: partition table beyond EOD, truncated [ 144.598827][ T9229] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 144.605646][ T9224] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 144.787077][ T9237] sg_read: process 811 (syz.1.998) changed security contexts after opening file descriptor, this is not allowed. [ 144.869067][ T9240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.999'. [ 144.923104][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1000'. [ 145.062855][ T9248] f2fs: Unknown parameter 'orec&' [ 145.077737][ T9248] syzkaller0: entered promiscuous mode [ 145.079659][ T9248] syzkaller0: entered allmulticast mode [ 145.563661][ T9286] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 145.566384][ T9286] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 145.568942][ T9286] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 145.572263][ T9286] netlink: 'syz.4.1010': attribute type 1 has an invalid length. [ 145.575658][ T9286] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 145.578989][ T9286] netlink: 'syz.4.1010': attribute type 2 has an invalid length. [ 145.739186][ T9302] tipc: Started in network mode [ 145.742666][ T9302] tipc: Node identity 09d25e90a3000000000000000000008, cluster identity 4711 [ 145.893782][ T9311] tmpfs: Bad value for 'mpol' [ 145.967672][ T5938] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 145.971171][ T5938] CPU: 3 UID: 0 PID: 5938 Comm: kworker/u33:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.971191][ T5938] Tainted: [L]=SOFTLOCKUP [ 145.971195][ T5938] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 145.971203][ T5938] Workqueue: hci4 hci_rx_work [ 145.971230][ T5938] Call Trace: [ 145.971235][ T5938] [ 145.971239][ T5938] dump_stack_lvl+0x100/0x190 [ 145.971260][ T5938] sysfs_warn_dup.cold+0x1c/0x28 [ 145.971276][ T5938] sysfs_create_dir_ns+0x24b/0x2b0 [ 145.971294][ T5938] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 145.971310][ T5938] ? find_held_lock+0x2b/0x80 [ 145.971324][ T5938] ? kobject_add_internal+0x25f/0x930 [ 145.971342][ T5938] ? kobject_add_internal+0x25f/0x930 [ 145.971360][ T5938] ? do_raw_spin_unlock+0x145/0x1e0 [ 145.971374][ T5938] kobject_add_internal+0x2c8/0x930 [ 145.971393][ T5938] kobject_add+0x16a/0x1e0 [ 145.971409][ T5938] ? __pfx_kobject_add+0x10/0x10 [ 145.971424][ T5938] ? class_to_subsys+0x10f/0x150 [ 145.971443][ T5938] ? kobject_put+0xb9/0x640 [ 145.971457][ T5938] ? _raw_spin_unlock+0x28/0x50 [ 145.971473][ T5938] device_add+0x294/0x1950 [ 145.971484][ T5938] ? __pfx_dev_set_name+0x10/0x10 [ 145.971499][ T5938] ? __pfx_device_add+0x10/0x10 [ 145.971511][ T5938] ? mgmt_send_event_skb+0x2fb/0x460 [ 145.971528][ T5938] hci_conn_add_sysfs+0x1a3/0x260 [ 145.971544][ T5938] le_conn_complete_evt+0x11cb/0x1f40 [ 145.971562][ T5938] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 145.971582][ T5938] hci_le_conn_complete_evt+0x23c/0x3a0 [ 145.971595][ T5938] ? skb_pull_data+0x15f/0x1e0 [ 145.971613][ T5938] hci_le_meta_evt+0x34a/0x5f0 [ 145.971626][ T5938] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 145.971640][ T5938] hci_event_packet+0x682/0x11c0 [ 145.971652][ T5938] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 145.971666][ T5938] ? __pfx_hci_event_packet+0x10/0x10 [ 145.971679][ T5938] ? kcov_remote_start+0x374/0x660 [ 145.971694][ T5938] ? lockdep_hardirqs_on+0x78/0x100 [ 145.971711][ T5938] hci_rx_work+0x451/0xfc0 [ 145.971725][ T5938] process_one_work+0xa23/0x19a0 [ 145.971743][ T5938] ? __pfx_process_one_work+0x10/0x10 [ 145.971759][ T5938] ? __pfx_hci_rx_work+0x10/0x10 [ 145.971772][ T5938] worker_thread+0x5ef/0xe50 [ 145.971789][ T5938] ? kthread+0x13a/0x450 [ 145.971798][ T5938] ? __pfx_worker_thread+0x10/0x10 [ 145.971809][ T5938] kthread+0x370/0x450 [ 145.971818][ T5938] ? __pfx_kthread+0x10/0x10 [ 145.971830][ T5938] ret_from_fork+0x754/0xd80 [ 145.971841][ T5938] ? __pfx_ret_from_fork+0x10/0x10 [ 145.971853][ T5938] ? __switch_to+0x7b4/0x1120 [ 145.971867][ T5938] ? __pfx_kthread+0x10/0x10 [ 145.971878][ T5938] ret_from_fork_asm+0x1a/0x30 [ 145.971898][ T5938] [ 145.971912][ T5938] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 146.071873][ T5938] Bluetooth: hci4: failed to register connection device [ 146.081205][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.085832][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.090792][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.096883][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.102117][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.107351][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.111510][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.116318][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.121148][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.125780][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.131125][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.135748][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.139358][ T9327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 146.578893][ T9351] bond1: entered promiscuous mode [ 146.581518][ T9351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.611369][ T9353] program syz.2.1026 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 146.625502][ T9352] [U]  [ 146.811749][ T9374] syz.2.1033 (9374): drop_caches: 0 [ 146.821991][ T9375] syz.2.1033 (9375): drop_caches: 0 [ 146.937669][ T9384] sp0: Synchronizing with TNC [ 146.967913][ T9387] [U] [ 147.064497][ T9391] ipip1: entered promiscuous mode [ 147.066830][ T9391] ipip1: entered allmulticast mode [ 147.390898][ T9421] validate_nla: 5 callbacks suppressed [ 147.390910][ T9421] netlink: 'syz.2.1046': attribute type 1 has an invalid length. [ 147.408725][ T9421] bond2: entered promiscuous mode [ 147.410572][ T9421] 8021q: adding VLAN 0 to HW filter on device bond2 [ 147.546075][ T9430] netlink: 'syz.1.1048': attribute type 10 has an invalid length. [ 147.747969][ T9452] netlink: 'syz.2.1055': attribute type 4 has an invalid length. [ 147.870818][ T9465] netlink: 'syz.4.1059': attribute type 10 has an invalid length. [ 148.078181][ T9471] [U]  [ 148.404017][ T9509] SET target dimension over the limit! [ 148.502696][ T10] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 148.503291][ T9516] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 148.508940][ T9516] overlayfs: missing 'lowerdir' [ 148.509166][ T40] kauditd_printk_skb: 7284 callbacks suppressed [ 148.509180][ T40] audit: type=1400 audit(1773801124.168:13593): avc: denied { mounton } for pid=9518 comm="syz.5.1075" path="/82/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 148.655736][ T10] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 148.660396][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.664583][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.669436][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.674488][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.678574][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.683783][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.687619][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.691524][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.696521][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.700625][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.705430][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.710225][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.714395][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.718321][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.723133][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.726963][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.730861][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.736202][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.741006][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.745073][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.749797][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.754610][ T10] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 148.758943][ T10] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 148.764176][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 148.768939][ T10] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 148.773044][ T10] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 148.776675][ T10] usb 9-1: Product: syz [ 148.778513][ T10] usb 9-1: Manufacturer: syz [ 148.780727][ T10] usb 9-1: SerialNumber: syz [ 148.785044][ T10] usb 9-1: config 0 descriptor?? [ 148.792483][ T10] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 148.908330][ T9536] random: crng reseeded on system resumption [ 148.964282][ T9542] tmpfs: Bad value for 'mpol' [ 148.971903][ T9541] hfsplus: unable to find HFS+ superblock [ 148.982793][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.985780][ T9544] bridge_slave_1: left allmulticast mode [ 148.987711][ T9544] bridge_slave_1: left promiscuous mode [ 148.989690][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.994491][ T5999] usb 9-1: USB disconnect, device number 5 [ 148.998325][ T5999] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 149.004446][ T9544] tmpfs: Unknown parameter 'grpquota(' [ 149.037878][ T9546] __nla_validate_parse: 57 callbacks suppressed [ 149.037896][ T9546] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1084'. [ 149.046397][ T9548] netlink: 'syz.2.1085': attribute type 10 has an invalid length. [ 149.128528][ T40] audit: type=1400 audit(1773801124.788:13594): avc: denied { map } for pid=9551 comm="syz.5.1088" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 149.138993][ T40] audit: type=1400 audit(1773801124.798:13595): avc: denied { relabelfrom } for pid=9552 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.146202][ T40] audit: type=1400 audit(1773801124.798:13596): avc: denied { relabelto } for pid=9552 comm="syz.2.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 149.153317][ T40] audit: type=1400 audit(1773801124.798:13597): avc: denied { accept } for pid=9558 comm="syz.1.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 149.344834][ T40] audit: type=1400 audit(1773801125.008:13598): avc: denied { map } for pid=9575 comm="syz.2.1094" path="socket:[30782]" dev="sockfs" ino=30782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.355599][ T40] audit: type=1400 audit(1773801125.008:13599): avc: denied { read } for pid=9575 comm="syz.2.1094" path="socket:[30782]" dev="sockfs" ino=30782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 149.380359][ T40] audit: type=1400 audit(1773801125.038:13600): avc: denied { ioctl } for pid=9577 comm="syz.5.1095" path="socket:[30481]" dev="sockfs" ino=30481 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.481978][ T9592] CIFS mount error: No usable UNC path provided in device string! [ 149.481978][ T9592] [ 149.492769][ T9592] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 149.547757][ T9598] input input15: cannot allocate more than FF_MAX_EFFECTS effects [ 149.595265][ T9599] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 149.622854][ T9602] overlay: Bad value for 'workdir' [ 149.675180][ T9586] Invalid argument reading file caps for ./file0 [ 149.694211][ T9586] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'. [ 149.695771][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=9619 comm=syz.5.1108 [ 149.698920][ T9586] tc_dump_action: action bad kind [ 149.701613][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=9619 comm=syz.5.1108 [ 149.751762][ T9624] netlink: 'syz.2.1109': attribute type 10 has an invalid length. [ 149.755795][ T9626] program syz.5.1110 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.988589][ T40] audit: type=1400 audit(1773801125.648:13601): avc: denied { ioctl } for pid=9638 comm="syz.5.1114" path="socket:[30936]" dev="sockfs" ino=30936 ioctlcmd=0x9422 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 150.056990][ T9647] binder: BINDER_SET_CONTEXT_MGR already set [ 150.059902][ T9647] binder: 9644:9647 ioctl 4018620d 200000000040 returned -16 [ 150.064450][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 150.067800][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1118'. [ 150.071860][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1118'. [ 150.075927][ T9647] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1118'. [ 150.141541][ T9661] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1120'. [ 150.160960][ T5939] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 150.195286][ T9661] bridge2: entered promiscuous mode [ 150.197073][ T9661] bridge2: entered allmulticast mode [ 150.212832][ T9661] team0: Port device bridge2 added [ 150.335570][ T9674] set match dimension is over the limit! [ 150.416507][ T40] audit: type=1400 audit(1773801126.078:13602): avc: denied { read } for pid=9673 comm="syz.4.1123" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 150.424930][ T9683] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 150.428601][ T9683] block device autoloading is deprecated and will be removed. [ 150.456885][ T9687] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 150.494313][ T9674] md: superblock version 12389 not known [ 150.496920][ T9674] md: couldn't set array info. -22 [ 150.633609][ T9705] netlink: 'syz.5.1129': attribute type 1 has an invalid length. [ 150.661554][ T9708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 150.757498][ T9721] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1129'. [ 150.762161][ T9705] 8021q: adding VLAN 0 to HW filter on device bond3 [ 150.773974][ T9705] bond2: (slave bond3): making interface the new active one [ 150.776749][ T9705] bond2: (slave bond3): Enslaving as an active interface with an up link [ 150.792796][ T9715] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 150.796681][ T9721] 8021q: adding VLAN 0 to HW filter on device bond2 [ 150.879775][ T9729] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 150.884649][ T9729] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 150.902997][ T9729] overlay: Bad value for 'redirect_dir' [ 151.044495][ T9743] netlink: 'syz.1.1137': attribute type 2 has an invalid length. [ 151.081362][ T9745] netlink: 'syz.1.1138': attribute type 10 has an invalid length. [ 151.230312][ T9750] netlink: 'syz.1.1140': attribute type 1 has an invalid length. [ 151.253534][ T9750] bond4: entered promiscuous mode [ 151.263639][ T9750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.284760][ T9750] 8021q: adding VLAN 0 to HW filter on device bond4 [ 151.288142][ T9750] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 151.292318][ T9750] bond4: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 151.298428][ T9750] bond4: (slave vxcan3): making interface the new active one [ 151.300869][ T9750] vxcan3: entered promiscuous mode [ 151.304000][ T9750] vxcan3: left promiscuous mode [ 151.468259][ T9760] bridge_slave_0: invalid flags given to default FDB implementation [ 151.476414][ T9762] nfs4: Unknown parameter '' [ 151.481091][ T9763] nfs4: Unknown parameter '' [ 151.534639][ T9773] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1143'. [ 151.631113][ T9787] pim6reg: entered allmulticast mode [ 151.668520][ T9789] gfs2: not a GFS2 filesystem [ 151.758279][ T9795] 9p: Could not find request transport: fd5 [ 151.802798][ T53] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 151.945182][ T9808] fuse: Unknown parameter '0x000000000000000300000000000000000000' [ 151.953442][ T53] usb 9-1: Using ep0 maxpacket: 32 [ 151.957396][ T53] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 151.960941][ T53] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 151.965503][ T53] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 151.969429][ T53] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 151.973661][ T53] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 151.977799][ T53] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 151.983594][ T53] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 151.987496][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.994333][ T53] usb 9-1: config 0 descriptor?? [ 152.200812][ T53] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 152.403184][ T5936] usb 9-1: USB disconnect, device number 6 [ 152.408956][ T5936] usblp0: removed [ 152.580580][ T9826] netlink: 'syz.2.1162': attribute type 13 has an invalid length. [ 152.592149][ T9826] netlink: 'syz.2.1162': attribute type 13 has an invalid length. [ 152.595897][ T6781] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.598787][ T6781] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.601475][ T6781] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.605270][ T6781] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.740100][ T9830] openvswitch: netlink: Missing key (keys=40, expected=80) [ 152.787950][ T9822] syz.5.1159 (9822) used greatest stack depth: 19104 bytes left [ 152.832885][ T5938] Bluetooth: hci4: command 0x0406 tx timeout [ 152.905105][ T9841] geneve1: entered allmulticast mode [ 153.114742][ T9871] netlink: 'syz.2.1175': attribute type 12 has an invalid length. [ 154.334990][ T9915] syzkaller0: entered promiscuous mode [ 154.337441][ T9915] syzkaller0: entered allmulticast mode [ 154.602978][ T9] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 154.754531][ T9] usb 10-1: too many configurations: 169, using maximum allowed: 8 [ 154.765914][ T9] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 154.769066][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.771747][ T9] usb 10-1: Product: syz [ 154.773377][ T9] usb 10-1: Manufacturer: syz [ 154.775115][ T9] usb 10-1: SerialNumber: syz [ 155.043493][ T9933] __nla_validate_parse: 10 callbacks suppressed [ 155.043505][ T9933] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1195'. [ 155.264055][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 155.264067][ T40] audit: type=1400 audit(1773801130.928:13613): avc: denied { setopt } for pid=9939 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.286638][ T40] audit: type=1400 audit(1773801130.948:13614): avc: denied { bind } for pid=9939 comm="syz.4.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.293887][ T9940] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1197'. [ 155.359528][ T9945] SELinux: Context system_u:object_r:dhcp_state_t:s0 is not valid (left unmapped). [ 155.363973][ T40] audit: type=1400 audit(1773801131.028:13615): avc: denied { relabelto } for pid=9942 comm="syz.1.1198" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:dhcp_state_t:s0" [ 155.375726][ T40] audit: type=1400 audit(1773801131.028:13616): avc: denied { associate } for pid=9942 comm="syz.1.1198" name="uinput" dev="devtmpfs" ino=943 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dhcp_state_t:s0" [ 155.453751][ T9953] netlink: 'syz.1.1200': attribute type 1 has an invalid length. [ 155.470682][ T9953] bond5: entered promiscuous mode [ 155.478256][ T9953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 155.481274][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1200'. [ 155.851074][ T40] audit: type=1400 audit(1773801131.508:13617): avc: denied { setopt } for pid=9970 comm="syz.2.1204" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.895498][ T40] audit: type=1400 audit(1773801131.558:13618): avc: denied { map } for pid=9974 comm="syz.2.1205" path="socket:[31318]" dev="sockfs" ino=31318 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 155.980119][ T9979] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1207'. [ 156.002808][ T9979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1207'. [ 156.132350][ T9982] 9p: Bad value for 'version' [ 156.303454][ T9988] [U] V3Fپ"S/4:XTZWTLW= [ 156.309057][ T9987] [U] J"E:" [ 156.346042][ T40] audit: type=1800 audit(1773801132.008:13619): pid=9991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1212" name="SYSV00000000" dev="tmpfs" ino=3 res=0 errno=0 [ 156.354100][ T40] audit: type=1400 audit(1773801132.008:13620): avc: denied { map } for pid=9990 comm="syz.2.1212" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 156.361505][ T40] audit: type=1400 audit(1773801132.008:13621): avc: denied { execute } for pid=9990 comm="syz.2.1212" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 156.416730][ T155] Bluetooth: (null): Invalid header checksum [ 156.495239][ T9996] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1214'. [ 156.536147][ T6778] Bluetooth: (null): Invalid header checksum [ 156.557020][ T40] audit: type=1400 audit(1773801132.218:13622): avc: denied { execute } for pid=9998 comm="syz.4.1215" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=31360 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 156.653557][ T155] Bluetooth: (null): Invalid header checksum [ 156.774697][ T6781] Bluetooth: (null): Invalid header checksum [ 156.815159][T10014] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 156.870367][T10014] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 156.883715][ T155] Bluetooth: (null): Invalid header checksum [ 157.152123][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 157.160335][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 157.165424][ T9] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 157.171056][ T9] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 157.209954][ T9] usb 10-1: USB disconnect, device number 3 [ 157.240139][T10038] openvswitch: netlink: Unknown key attributes 2 [ 157.297968][T10042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=261 sclass=netlink_route_socket pid=10042 comm=syz.4.1226 [ 157.305326][T10041] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.1227'. [ 157.354200][T10042] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=10042 comm=syz.4.1226 [ 157.560780][T10062] pimreg9: entered allmulticast mode [ 158.075337][T10038] 9pnet_fd: p9_fd_create_tcp (10038): problem connecting socket to 127.0.0.1 [ 158.691720][T10108] xt_hashlimit: size too large, truncated to 1048576 [ 158.911524][T10114] random: crng reseeded on system resumption [ 158.917941][T10114] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1245'. [ 158.925575][T10114] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1245'. [ 159.001831][T10121] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1247'. [ 159.031732][T10129] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 159.037782][T10128] syzkaller0: entered promiscuous mode [ 159.039698][T10128] syzkaller0: entered allmulticast mode [ 159.043256][T10129] cramfs: wrong magic [ 159.110332][ T5939] Bluetooth: hci5: unexpected event for opcode 0x080f [ 159.138571][T10144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10144 comm=syz.5.1256 [ 159.282695][T10162] IPv4: Oversized IP packet from 172.20.20.24 [ 159.285821][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 159.288039][ C3] IPv4: Oversized IP packet from 172.20.20.24 [ 159.291940][T10162] netlink: 'syz.5.1263': attribute type 39 has an invalid length. [ 159.320162][ T29] hid_parser_main: 5 callbacks suppressed [ 159.320175][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.325009][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.327574][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.330169][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.332549][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.335139][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.337542][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.339942][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.342341][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.345164][ T29] hid-generic 0005:00B6:0009.0004: unknown main item tag 0x0 [ 159.361047][T10163] bond2 (unregistering): Released all slaves [ 159.364120][ T5999] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 159.365899][ T29] hid-generic 0005:00B6:0009.0004: collection stack underflow [ 159.369040][ T29] hid-generic 0005:00B6:0009.0004: item 0 0 0 12 parsing failed [ 159.371765][ T29] hid-generic 0005:00B6:0009.0004: probe with driver hid-generic failed with error -22 [ 159.512737][ T5999] usb 6-1: Using ep0 maxpacket: 32 [ 159.534142][ T5999] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 159.537761][ T5999] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 159.541553][ T5999] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 159.545474][ T5999] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 159.549626][ T5999] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 159.553916][ T5999] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 159.558279][ T5999] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 159.561179][ T5999] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.565304][ T5999] usb 6-1: config 0 descriptor?? [ 159.613455][T10177] netlink: 'syz.2.1268': attribute type 10 has an invalid length. [ 159.622426][T10179] ip6gre1: entered promiscuous mode [ 159.624740][T10179] ip6gre1: entered allmulticast mode [ 159.737110][ C0] ------------[ cut here ]------------ [ 159.739775][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 159.744115][ C0] WARNING: net/mac80211/rate.c:401 at __rate_control_send_low+0x610/0x760, CPU#0: swapper/0/0 [ 159.748591][ C0] Modules linked in: [ 159.750570][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.755224][ C0] Tainted: [L]=SOFTLOCKUP [ 159.757135][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.761332][ C0] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 159.764021][ C0] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 47 be 02 f7 48 8d 3d 50 2f e4 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 2b 4a 6f f7 e9 03 [ 159.770404][T10189] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.770952][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00010246 [ 159.770967][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 159.770975][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90ea3d90 [ 159.770982][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 159.770989][ C0] R10: 000000000000000c R11: 0000000000000000 R12: ffff88802aebfba8 [ 159.770996][ C0] R13: ffff88803986b128 R14: 0000000000000000 R15: dffffc0000000000 [ 159.778362][T10189] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 159.780525][ C0] FS: 0000000000000000(0000) GS:ffff8880d6342000(0000) knlGS:0000000000000000 [ 159.780553][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 159.780563][ C0] CR2: 0000001b2f923ffc CR3: 000000005cc3a000 CR4: 0000000000352ef0 [ 159.780571][ C0] Call Trace: [ 159.799303][ C0] [ 159.800266][ C0] rate_control_send_low+0x2a8/0x7e0 [ 159.801995][ C0] rate_control_get_rate+0x1be/0x5c0 [ 159.803877][ C0] ieee80211_beacon_get_finish+0x45a/0x690 [ 159.805699][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 159.807696][ C0] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 159.809545][ C0] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 159.811448][ C0] ? rcu_is_watching+0x12/0xc0 [ 159.813158][ C0] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 159.815047][ C0] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 159.816877][ C0] ? __lock_acquire+0x4a5/0x2630 [ 159.818582][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 159.819546][ T5999] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 159.820395][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 159.825879][ C0] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 159.827692][ C0] __iterate_interfaces+0x2e6/0x650 [ 159.829455][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 159.831443][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 159.833541][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 159.835843][ C0] mac80211_hwsim_beacon+0x105/0x1b0 [ 159.837574][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 159.839557][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 159.841269][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 159.843245][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 159.845243][ C0] hrtimer_run_softirq+0x17d/0x350 [ 159.846932][ C0] handle_softirqs+0x1eb/0x9e0 [ 159.848559][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 159.850290][ C0] __irq_exit_rcu+0xef/0x150 [ 159.851846][ C0] irq_exit_rcu+0x9/0x30 [ 159.853345][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 159.855172][ C0] [ 159.856129][ C0] [ 159.857095][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 159.859070][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 159.860842][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 61 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 159.866955][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000202 [ 159.868906][ C0] RAX: 00000000002c882f RBX: ffffffff8e4975c0 RCX: ffffffff8b902c75 [ 159.871376][ C0] RDX: 0000000000000000 RSI: ffffffff8de77143 RDI: ffffffff8c1b0a20 [ 159.874049][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d486795 [ 159.876672][ C0] R10: ffff88806a433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 159.879288][ C0] R13: 0000000000000000 R14: ffffffff90d99410 R15: 0000000000000000 [ 159.881841][ C0] ? ct_kernel_exit+0x125/0x180 [ 159.883565][ C0] default_idle+0x9/0x10 [ 159.885003][ C0] default_idle_call+0x6c/0xb0 [ 159.886562][ C0] do_idle+0x43a/0x550 [ 159.887918][ C0] ? __pfx_do_idle+0x10/0x10 [ 159.889501][ C0] cpu_startup_entry+0x4f/0x60 [ 159.891070][ C0] rest_init+0x251/0x260 [ 159.892470][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 159.894381][ C0] start_kernel+0x47f/0x480 [ 159.895909][ C0] x86_64_start_reservations+0x24/0x30 [ 159.897678][ C0] x86_64_start_kernel+0x12b/0x130 [ 159.899413][ C0] common_startup_64+0x13e/0x148 [ 159.901167][ C0] [ 159.902201][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 159.904651][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.908041][ C0] Tainted: [L]=SOFTLOCKUP [ 159.909503][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.912766][ C0] Call Trace: [ 159.913906][ C0] [ 159.914903][ C0] dump_stack_lvl+0x100/0x190 [ 159.916474][ C0] vpanic+0x552/0x970 [ 159.917801][ C0] ? __pfx_vpanic+0x10/0x10 [ 159.919305][ C0] panic+0xd1/0xe0 [ 159.920596][ C0] ? __pfx_panic+0x10/0x10 [ 159.922067][ C0] ? check_panic_on_warn+0x1f/0x90 [ 159.923796][ C0] check_panic_on_warn.cold+0x19/0x34 [ 159.925582][ C0] ? __rate_control_send_low+0x610/0x760 [ 159.927425][ C0] __warn.cold+0x191/0x348 [ 159.928892][ C0] __report_bug+0x296/0x3d0 [ 159.930407][ C0] ? __rate_control_send_low+0x610/0x760 [ 159.932246][ C0] ? __pfx___report_bug+0x10/0x10 [ 159.933934][ C0] ? rcu_is_watching+0x12/0xc0 [ 159.935549][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 159.937426][ C0] report_bug_entry+0xe1/0x290 [ 159.939006][ C0] ? __rate_control_send_low+0x621/0x760 [ 159.940858][ C0] handle_bug+0x1cd/0x2a0 [ 159.942244][ C0] exc_invalid_op+0x17/0x50 [ 159.943734][ C0] asm_exc_invalid_op+0x1a/0x20 [ 159.945313][ C0] RIP: 0010:__rate_control_send_low+0x621/0x760 [ 159.947357][ C0] Code: f7 48 8b 44 24 10 8b ac a8 d4 00 00 00 e8 47 be 02 f7 48 8d 3d 50 2f e4 05 44 8b 44 24 04 48 8b 74 24 10 45 89 f1 89 d9 89 ea <67> 48 0f b9 3a e9 2f fd ff ff 48 8b 7c 24 08 e8 2b 4a 6f f7 e9 03 [ 159.953612][ C0] RSP: 0018:ffffc90000007890 EFLAGS: 00010246 [ 159.955641][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 159.958213][ C0] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff90ea3d90 [ 159.960819][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 159.963459][ C0] R10: 000000000000000c R11: 0000000000000000 R12: ffff88802aebfba8 [ 159.966056][ C0] R13: ffff88803986b128 R14: 0000000000000000 R15: dffffc0000000000 [ 159.968632][ C0] rate_control_send_low+0x2a8/0x7e0 [ 159.970388][ C0] rate_control_get_rate+0x1be/0x5c0 [ 159.972153][ C0] ieee80211_beacon_get_finish+0x45a/0x690 [ 159.974192][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 159.976287][ C0] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 159.978209][ C0] ? __ieee80211_beacon_get_ap+0x7bb/0x10d0 [ 159.980152][ C0] ? rcu_is_watching+0x12/0xc0 [ 159.981803][ C0] __ieee80211_beacon_get_ap+0x76e/0x10d0 [ 159.983720][ C0] __ieee80211_beacon_get+0x14fa/0x1ee0 [ 159.985547][ C0] ? __lock_acquire+0x4a5/0x2630 [ 159.987200][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 159.988919][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 159.990889][ C0] mac80211_hwsim_beacon_tx+0x4d6/0xa00 [ 159.992643][ C0] __iterate_interfaces+0x2e6/0x650 [ 159.994375][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 159.996391][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 159.998368][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 160.000648][ C0] mac80211_hwsim_beacon+0x105/0x1b0 [ 160.002444][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 160.004398][ C0] __hrtimer_run_queues+0x50e/0xa70 [ 160.006156][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 160.008017][ C0] ? ktime_get_update_offsets_now+0x2cd/0x4d0 [ 160.009997][ C0] hrtimer_run_softirq+0x17d/0x350 [ 160.011725][ C0] handle_softirqs+0x1eb/0x9e0 [ 160.013336][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 160.015073][ C0] __irq_exit_rcu+0xef/0x150 [ 160.016626][ C0] irq_exit_rcu+0x9/0x30 [ 160.018014][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 160.019844][ C0] [ 160.020846][ C0] [ 160.021891][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 160.023857][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 160.025683][ C0] Code: 78 82 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d a3 61 1b 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 160.031875][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000202 [ 160.033811][ C0] RAX: 00000000002c882f RBX: ffffffff8e4975c0 RCX: ffffffff8b902c75 [ 160.036404][ C0] RDX: 0000000000000000 RSI: ffffffff8de77143 RDI: ffffffff8c1b0a20 [ 160.038898][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100d486795 [ 160.041492][ C0] R10: ffff88806a433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 160.044227][ C0] R13: 0000000000000000 R14: ffffffff90d99410 R15: 0000000000000000 [ 160.046752][ C0] ? ct_kernel_exit+0x125/0x180 [ 160.048301][ C0] default_idle+0x9/0x10 [ 160.049643][ C0] default_idle_call+0x6c/0xb0 [ 160.051191][ C0] do_idle+0x43a/0x550 [ 160.052583][ C0] ? __pfx_do_idle+0x10/0x10 [ 160.054112][ C0] cpu_startup_entry+0x4f/0x60 [ 160.055684][ C0] rest_init+0x251/0x260 [ 160.057064][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 160.058817][ C0] start_kernel+0x47f/0x480 [ 160.060360][ C0] x86_64_start_reservations+0x24/0x30 [ 160.062193][ C0] x86_64_start_kernel+0x12b/0x130 [ 160.063919][ C0] common_startup_64+0x13e/0x148 [ 160.065509][ C0] [ 160.067225][ C0] Kernel Offset: disabled [ 160.068647][ C0] Rebooting in 86400 seconds..