last executing test programs: 3m9.418334781s ago: executing program 2 (id=236): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x81c0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000180)={0x4000, r1}, 0x0) landlock_restrict_self(r2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x1, 0x0) ioctl$BLKZEROOUT(r0, 0x127c, &(0x7f0000000240)={0x0, 0x1000000}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x2, 0x20841) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r3, 0xc0186449, &(0x7f00000004c0)={0x0, 0x0, {0x28, 0x0, 0x0}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2d, 0xc, 0x9, {0x7, @udp_ip4_spec={@loopback, @multicast1, 0x4e22, 0x4e21, 0xfd}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x9, 0x2, [0x0, 0x1]}, @sctp_ip4_spec={@broadcast, @remote, 0x4e20, 0x4e24, 0x8}, {0x0, @local, 0x3, 0x7, [0xffff, 0x7]}, 0x3, 0xffffffff}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f40000000000000ff0200000000000000000000000000010001c204dc"], 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000070a01030000000000000004000000000000000073797a32000000000900010073797a3000000000ad27faca9326caa6f8fe2ce32e480cf7a6433c51bd48164c11548287f2b14f0dffcd9dc214fb2e6aa30c9edf96c360244d038032ee340338bb30fb1dcba12b44cdf977f834cde9cdf234c6dc0ef99f230dc730f321fef3a683411e428a126fd744f303310d77f90fda53fbc33a472900"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x33}}}, {0xfffffff7, 0x2, @in={0x2, 0x0, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) socket$tipc(0x1e, 0x0, 0x0) 3m9.318267721s ago: executing program 2 (id=237): r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006ac0), 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x39, 0x5, [0x7ff, 0x101, 0xa7e, 0x0, 0x1ff]}}) r2 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x7e, 0x14bc40) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="00070000420091"], 0xfe33) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="78000000070a010200000000000000000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d6080003400000000008000140000000010800014000000009080001400000000b080002400000001e0800014000000015080003"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0x4, 0x6, 0x0, "5622ad01fcd1ae0334d6397297a8fddd516542a02690a41002cae06fc304c867bab9d73b0b4b2deeef847b2439480e092b9b64021553515713ea5083f384e44a", "24955cdfe6d5da3d405f9353f4ffa4436d208e8b3ac2f925ff6f49eec3ea1c9b", [0x7ff, 0x5]}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001940)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}}, 0x20}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040041) fstatfs(r0, &(0x7f0000007580)=""/19) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xe, &(0x7f00000011c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x8, &(0x7f0000000000)={0xfffffffd}, 0x8, 0x10, &(0x7f0000000340), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r7, 0x0, 0x29, 0x0, @val=@iter={0x0}}, 0x20) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r11, 0xae60) ioctl$KVM_CAP_X86_DISABLE_EXITS(r11, 0x4068aea3, &(0x7f0000000840)={0x8f, 0x0, 0x2}) 3m9.078601894s ago: executing program 2 (id=242): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) (async) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f0000000280)) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000000)={0x0, 0x1, 0x1, 0x7, 0x402, 0x258}) 3m8.998029192s ago: executing program 2 (id=245): r0 = syz_io_uring_setup(0x53f, &(0x7f0000000340)={0x0, 0x807734, 0x400, 0xfffffff8, 0xfe}, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @local, 0x0, 0xf500, 0x60, 0x200000000000, 0x100000000000006}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000080)={{@hyper, 0x2}, @local, 0x0, 0xf500, 0x60, 0x200000000000, 0x100000000000006}) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) (async) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x219d88b, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_io_uring_setup(0x1e1b, &(0x7f0000000500)={0x0, 0x80009e36, 0x1, 0x80000, 0x1cf}, &(0x7f0000002000), &(0x7f0000000000)) (async) r4 = syz_io_uring_setup(0x1e1b, &(0x7f0000000500)={0x0, 0x80009e36, 0x1, 0x80000, 0x1cf}, &(0x7f0000002000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) (async) io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)=""/113, 0x71}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone(0x80040000, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='binder\x00', 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x3, 0x0, 0x0, 0x202}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) pread64(r0, &(0x7f0000000600)=""/195, 0xc3, 0x6) r5 = request_key(&(0x7f0000000280)='id_resolver\x00', &(0x7f0000000440)={'syz', 0x2}, &(0x7f0000000480)='proc\x00', 0xfffffffffffffff8) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000004c0)="3a8c904047e4feb3c8ff453d47a04985a25f101ef0ad1c692dece48fd9109e56db93199a4e5ba63e2408", 0x2a, r5) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f00000004c0)="3a8c904047e4feb3c8ff453d47a04985a25f101ef0ad1c692dece48fd9109e56db93199a4e5ba63e2408", 0x2a, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 3m8.928274561s ago: executing program 2 (id=246): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000001c0)={0x0, 0x2, 0x6, 0x0, 0xfffffff7, 0x7}, &(0x7f0000000280)=0x14) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000002c0)=@sack_info={r1, 0x1, 0x2}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x5c, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@assoc_value={r1, 0x99}, 0x8) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x20000000, 0x40800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000001c0), 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18}, './file0\x00'}) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x15}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x20}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) 3m8.528463804s ago: executing program 2 (id=251): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = getpgrp(0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x6}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x1}, 0x81}}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x120800, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x200, 0x3, 0x6, 0x1b77, 0x8, 0x5, 0x661, {r6, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x8, 0x0, 0x7, 0xbdcca100, 0x7fffffff}}, &(0x7f0000000280)=0xb0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r1) r7 = socket$alg(0x26, 0x5, 0x0) shutdown(r7, 0x1) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000300)={0x6, 0x8, 0x7c, 0x0, 0x2, 0x1, 0x2}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x10001, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) fcntl$setown(r3, 0x8, r1) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r10, 0x40044103, &(0x7f00000003c0)=0x5d) r11 = syz_open_dev$usbfs(&(0x7f0000000400), 0x0, 0x200080) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000480)={0x20, 0x7, 0x37ec, 0x6, 0x10, 0x5, &(0x7f0000000440)="3ffec0fb92ac8c4f9925cda87bdff478"}) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000c40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000540)={0x698, r12, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x60ea}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4a4, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xe, @remote, 0xfffffffa}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88b42727a2a91abe9469cf3bba7e525cd17823f4e75b9655825646eab6e9f8b1"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e84ac2019c23230c54f3e28072fb706f99c789dce339063109deb82cf855062e"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private0, 0x1c}}]}, {0x354, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x49e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfff, @remote, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010100}}]}]}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @remote, 0x1}}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2096e5d27c255dae2ba356e95a440f511e4c5682782b1a704905fb4591b1d484"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7dc3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x698}}, 0x20049080) r13 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$DVB_DEMUX_DMX_EXPBUF(r10, 0xc00c6f3e, &(0x7f0000000c80)={0x1, 0x0, r13}) readv(r13, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/169, 0xa9}], 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) fchdir(r2) ioctl$FE_DISEQC_RESET_OVERLOAD(r5, 0x6f3e, 0x0) 3m8.494551269s ago: executing program 32 (id=251): ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) r1 = getpgrp(0x0) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r3 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, r2, &(0x7f0000000040)={r3, 0xffffffffffffffff, 0x6}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RLOPEN(r4, &(0x7f00000000c0)={0x18, 0xd, 0x2, {{0x8, 0x1, 0x1}, 0x81}}, 0x18) r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100), 0x120800, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x8}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x200, 0x3, 0x6, 0x1b77, 0x8, 0x5, 0x661, {r6, @in6={{0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x8, 0x0, 0x7, 0xbdcca100, 0x7fffffff}}, &(0x7f0000000280)=0xb0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f00000002c0)=r1) r7 = socket$alg(0x26, 0x5, 0x0) shutdown(r7, 0x1) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000300)={0x6, 0x8, 0x7c, 0x0, 0x2, 0x1, 0x2}) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000340), 0x10001, 0x0) r9 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, r9) fcntl$setown(r3, 0x8, r1) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000380), 0x105000, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r10, 0x40044103, &(0x7f00000003c0)=0x5d) r11 = syz_open_dev$usbfs(&(0x7f0000000400), 0x0, 0x200080) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000000480)={0x20, 0x7, 0x37ec, 0x6, 0x10, 0x5, &(0x7f0000000440)="3ffec0fb92ac8c4f9925cda87bdff478"}) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000500), r5) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000c40)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000540)={0x698, r12, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x60ea}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x4a4, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xe, @remote, 0xfffffffa}}]}, {0x4}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x10}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x98, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "88b42727a2a91abe9469cf3bba7e525cd17823f4e75b9655825646eab6e9f8b1"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "e84ac2019c23230c54f3e28072fb706f99c789dce339063109deb82cf855062e"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x5, @private0, 0x1c}}]}, {0x354, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x49e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xfff, @remote, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x2ec, 0x9, 0x0, 0x1, [{0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x41}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @private=0xa010100}}]}]}, @WGDEVICE_A_PEERS={0x1ac, 0x8, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @remote, 0x1}}]}, {0x17c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xf4, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x35}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "2096e5d27c255dae2ba356e95a440f511e4c5682782b1a704905fb4591b1d484"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x7, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7dc3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x80000001}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x698}}, 0x20049080) r13 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$DVB_DEMUX_DMX_EXPBUF(r10, 0xc00c6f3e, &(0x7f0000000c80)={0x1, 0x0, r13}) readv(r13, &(0x7f0000000d80)=[{&(0x7f0000000cc0)=""/169, 0xa9}], 0x1) socket$inet6_icmp(0xa, 0x2, 0x3a) fchdir(r2) ioctl$FE_DISEQC_RESET_OVERLOAD(r5, 0x6f3e, 0x0) 2m40.662869557s ago: executing program 3 (id=671): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000004, 0x5d032, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000002, 0x42031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000001000df2500"/20, @ANYRES32=0x0, @ANYBLOB="41000000120003001800128008000100677470000c00028008000200", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x0) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 2m40.537649417s ago: executing program 3 (id=673): ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r0 = socket$inet6(0xa, 0x6, 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x103, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) (async) socket$inet6(0xa, 0x6, 0x5) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x103, 0x3, @dev={0xfe, 0x80, '\x00', 0x9}, 0x9}, 0x1c) (async) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) (async) 2m40.448217233s ago: executing program 3 (id=674): socket$inet6_udplite(0xa, 0x2, 0x88) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000)=0x3, 0x4) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r2, 0x4, 0x8, 0x0, 0x4, 0x50, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0x1, 0x8001}}) write$cgroup_int(r1, &(0x7f0000000440)=0xffffffff, 0x12) 2m40.395715003s ago: executing program 3 (id=677): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x1}, 0x8) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000006100)=@delchain={0x24, 0x65, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000040)=0x8000, 0x4) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000ffdbdf250b0000002c000980080002000d000000080001000300000008000100060000000800010000080003080001000a00000048000280040004000800010003000000040004002c00038008000200000000800800020035ba00000800020006000000080001000400000008000100260a0000040004000400040044000980080001007e0000000800010005000000080002000400000008000200ff0000000800010009000000080002000800000008000200e127000008000100050000002400078008000100080000000c00044003000000000000000c00040001000000010000000c0006800800060002000000"], 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0xc004) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r6, &(0x7f0000000000), 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000580), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1000, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r9, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000001c0)={r11, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e23, 0x7, @loopback, 0x7fff}}, 0x8001, 0x7, 0x1, 0x3, 0x4}, &(0x7f00000001c0)=0x98) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(r8, 0x40096100, 0x0) listen(r7, 0x7) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r12, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f00000018c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{0xb799, 0x3}, {0x0}, &(0x7f0000001800)=[{&(0x7f00000002c0)=""/89, 0x59}], 0x1, 0x30, 0xee}}], 0x90}, 0x0) 2m40.390972518s ago: executing program 3 (id=679): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x78, r2, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'macvlan0\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 2m40.088123522s ago: executing program 3 (id=685): socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x3}}}}}}}}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) connect$caif(r1, &(0x7f0000000000)=@util={0x25, "c074e4fa6ac41a50c1102416dff2451d"}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x767ff83e, 0x1}, 0x0, 0x0, 0x0, 0x0) 2m40.064973428s ago: executing program 33 (id=685): socket$nl_route(0x10, 0x3, 0x0) symlink(&(0x7f0000000bc0)='./file0/file0/..\x00', &(0x7f0000000000)='./file0\x00') rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000100)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x65, 0x0, 0x0, 0x2f, 0x0, @remote, @broadcast}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x1, {0x3}}}}}}}}, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x1) connect$caif(r1, &(0x7f0000000000)=@util={0x25, "c074e4fa6ac41a50c1102416dff2451d"}, 0x18) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x767ff83e, 0x1}, 0x0, 0x0, 0x0, 0x0) 6.23508087s ago: executing program 5 (id=2540): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000080), &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f00000000c0)={0x0, 'netdevsim0\x00', {0x3}, 0x7}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r2, 0x7, 0xb9, 0xffffffffffffffff, 0x3}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) removexattr(0x0, &(0x7f0000000180)=@random={'user.', '%[$:}#$+:.\x00'}) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x7}, 0x4) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0xfd44) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="1ca12d394eaa", @empty, @void, {@ipv4={0x892f, @igmp={{0x5, 0x4, 0x1, 0x3, 0x1c, 0x66, 0x0, 0xa, 0x2, 0x0, @multicast2, @loopback}, {0x14, 0x5, 0x0, @multicast2}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000040)="f8", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0) 6.167971378s ago: executing program 5 (id=2543): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) syz_emit_ethernet(0x7c, &(0x7f0000000c40)={@random="856b934629fa", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x46, 0x2f, 0x0, @private0={0xfc, 0x3}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88f7, 0x0, 0xfffd, [0x401]}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0xfe}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 6.165171975s ago: executing program 5 (id=2545): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$PTP_EXTTS_REQUEST(r0, 0x40103d02, &(0x7f0000000040)={0x70, 0x1}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040000000800000004"], 0x48) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000a50000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='attr/fscreate\x00') close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00b467eca20700000037000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e64000000000c00028008000500ffffffff"], 0x3c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200026bd70564cd3df440100000014000700fe88000000000000e479946c08000001050002000a000000c7fb3573c347f830f7e6b9d36bdfe27879d6c3066486a48cdd4ab0844ad3d257007b9bc615c7ce182803ff82b0c6cef4907bee6a130b608921dda6d28e00b9aacb3a883d6bd8ae0f994930aaf196b50e2c689cff9f7c6947dfcde1d83a26593628261f68845492020690809fcecf3d82a562118e8166287efd5e6422dc"], 0x30}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) 6.060318856s ago: executing program 5 (id=2546): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000300)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xffffffffffffff72}}]}}, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000001c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000001480)=""/4096, 0x1000, 0x5, 0xb6, 0x9, 0x1ade12f3, 0xb9a0}}, 0x120) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$inet6(r4, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000240)={0x0, 0x2}, 0x8) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2) write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2) read(r2, &(0x7f0000000140)=""/90, 0x5a) r5 = socket$kcm(0x23, 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000940)={r6}) write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000040), 0x2) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000a40)=ANY=[@ANYBLOB=',debug=0x0000007,version=9p20\\++},%{!(6,afid=0x000000003f5689cf,nodevmap,fscache,afid=0x0000000000000f9c,msize=0x0', @ANYRESDEC]) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$RTC_RD_TIME(r7, 0x80247009, &(0x7f0000000380)) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r8) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x44, r9, 0x917, 0x70bd2c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) close(r1) listen(r0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) socket$netlink(0x10, 0x3, 0x8000000004) 4.24461175s ago: executing program 4 (id=2555): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x80, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_tunnel_key={0x68, 0x1, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xc, @local}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r1, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000100)="0691a464ffc28918a2e9ed864055b11ea5c023f52c44c132d8979e819eac4a0c2e27067786ffd596b47392a2f2b2e474a05ad0052cda7da561c4dfce9373cd0fa498b20df82e32d8a00211cb3f5663040c8df94bbce672c1f430dd2c87c56f853139a21b8d62ed92dedc5c4107e9f2155b0b5f21db646b8ca0758ba51bd432ba3ab52556fb5b5970fe75d8a34704af696ef9f4792faa49beb6c5f9aeec7853fbc0908e542fc9", 0xa6}, {&(0x7f0000000200)="dcd945c05912a280ad405399348bda7b39cc2170a293813fd859af195bc5396c6401af5e1cada7e616105c040bb4e1d61eedf49b0b4463a10b259ffab1b14362d3e6de41a699f2492f2c9c3e02344570bd0b5afeb31cd24cae0feccb02e5e36d9f215e58c71632a74bfd0b941fb3a012ef7d6a9e2c11d1df3d7ff9302e71f6d53ce9c07749e5d300d1c481a0b7ee136fa7b59b0b2e28c66ab5b050e55b17c188590ba913ddad00441ba0ff59cc0e30460db027f08490fad0288ebc5f3e8cac3fc28a6a9163c4a464772e64d93e5d42a0f204", 0xd2}, {&(0x7f0000000080)="89d22b2603bb1bc5b8159a7116727e4670d238005e99967a6893225514e902b5bbcafb1c9d0ad1894f538479d2", 0x2d}, {&(0x7f0000000300)="fa632fc303f6f6d180870eb89bd41043059961f7feb64d9952b947dfd517324edfe168fa5a72e6698806f62159feb6d0cc8ada4affd335f0d2c6f64812dfb2004f4b05793a2bd8e2607f2f2c8b0087cad4f6ba27049350a83955b7eca69dd5fba182d8b9b61b0e01f51aeb4b93d54418ce111964c67c650d051dcf7245bb3367e15d3abad4faa38c3b2caf304aa85c47d04086f637182b5d29a3f228a4d9b0adcb144957b8783b5e5fe0d9149404a9f483b392e97f9fc1e2e4b01a3393f07ca2a235bbf31dba0121706544de442817dc6ff2cc6aefb564aed412b63394f6fa25a2292cfb2c2f96996a1ada7a3fa9e64c56156beb0d57c7c85209963320533f66bac757f56759f1444b448362a65a7a7ace2b9dd1df9158e3635e636bf9a3bd025960a5c119da1ab825f22ed284f0eb64091a978d5055cd40da877bcec4a103653a3b83cfc32e7e7eaf898bf0f6ff5805fc0fdc93cd69f5c1c3325c09724b5a996c54a4fa7b9dc7db82b58f830e163f697de05a3169cf76d43a627eecfbf1f2f2c0b42729c1cb871aeedc3bbd67e0c677cb82695f5acfab55d09e00950f8b4ef5391a6fb393751b60a39960fd83a38ccc7f18c25944847a2042cd80fa72edccc0272bfe8ff413bf7583f79f989e321c8d7382733bed4ee8721746a22e9ebb72fcaf70c491eb8f6c52c244b96bcfa02423ec0cdedc4c118aae5af374e6245387934d9a300bea6723d6f99816465a11d8d0618aefe5b1c7987df18a060ecd38bd3f1f32a3cb35b8cfb626045167b33ad146d48487a87d349fd3cec064454503365c37411bf526e6d036d3fcdc90b7c756be30355821d995b8cdd134035ea4024853682bd2df8ac43b7548d2eaf7dd828f5f33ce4ca2b0c8371a94c995659b40651f4be6dab5a34f39ffda3183d8ebb2c2be7c9afe27fdf6bc5ae0e5244e9c1ae116c3d0fba38b32b20bd4ffca8b96965623ecf3427446e31d54b65a85069a599e2e4f58d179755285703a2d1813d0b7059ad1408fc50c5921c492526ae453d19afdebad3d483590db249ec776ecd6fb02423d3667fba917ed95f5b46d5e447f4def37366497548770ea8e330708eacd470b47df83b0abac49088613ccaa37d7b37b061d7e0d9fb2e808e335694b36e4142d31ec9c92819a66a4c8dc38e65eae60736f007fb4d713cd0aeea93aa3ee2b508d71a22d294ceeae233f692ffde3f72e1085872bbf7bcad903115596a9b81f7c167e05fdb170e3a79fd4ac3ee39b9a84e8c0d88f657cca815c0dc39c195586a56e39e2732a0b7190138656ff4879ee18fdfa0069c2567b746be46cd51a4df520de259f64c90d80f3753e30083cd6f02fc37790edbd120ebea00a46de931ddac21c0eaa893a48eb26c0d2b91a1305c2a9c54ff969519194740fa0ce10d2c51a496580540d9717e0e5abc29e5d857725f03b5dace9fb71c578902f56b1f002d14ccd07fa90a81bcea8b2b70e2e79f5b78d6e36466f78c46b21cdff26ab6adc536426fe7a586b5b8724004e85630706a8e0c39df57d8822eeec29e88248078682d14c804eddccc562c128fd628f5ef776be9d28a2ad179070c4a8bc56af8a0fbcc8909b756ddc871348cb8e186363e2765e9c4822d133694099cea42613f11e6ce0586c48800d9a1b9e501d7108e11d8ce3dcb055d89a11dba7631062e6b710cfac4833522142570e4946a0e8cb7a1d9548880af87fee8d48f63c472828e5be65506291c4339d86492953699fab79d482f90e03e95f2d8a82ea00f1569105c5c88026604e2066474def55f4c51caceca6300d367bf798cac9ecbaaa8d29f41bce48dd2f9f2130df8f192eeab45c4c49a1ff9b25d97305faa03ee2dfcf22fe30fb515eafc60b7bd2e52fb4206a0bff3c76514fd43cc28dfc36abc3c8c4713a0209eb1ef905f127a00f84e2dd56e18d87d3720883e5e53253364c4f5b046a7a2b3f81067dac5259c4d9794bbb8800e661c237cfad19830c8f701b2b00f7649a47f6a39089e5b452cdd0e562aadc0c71a07edf5059ecfc582067268cf95715f70c6e1a557ede7e2588c0ffe7cd4060caaf3ee032cf5e129c0d31125b9c3691839a9aabc78e07aaf0d235e8cae8850cc37f434d113b212aaf6808a6361605b901007af133f176146a9e1a957157f19e0bf4dec67a26ca1076e2bcb9d3c2cae069a20c8555ad9b450418be3e2aeab3ca00e54b91c06e1c5c333f9d2f2474c9487a260cbd0e46ae13bbf12160119cfae328c1dac0a05718179c0f46f4d083303cd01985dcd1a4e1d4d96ee1e16e61254ae95ff34548cae30063ec189fb3388f46e35ed4a17a03138d0000fbe8035e8a7e6031b9adb74cec2416c4e6a7787167f2dd3ac6e935490685de94b47169b064ff6a4228ba4186066ed641b9facee4f3e392f472cb609e36b8c2bae19023ee89b60c6dcb0c42f72cf50e954d68bb3e7dca6f8678ce7ba83c3b99af55fca073009a74f9f836f4e9603a14306b038cf0fc772b2f609cba59bc2ec4cb0758c3a71ee6d68de456a288c9112546467da6d43da9aedba126facd480d68852b0359bb8d44fdffea958f4e2c89d34d0efb86531298896535ae2284a1bae37c68f199c320431dfd201bc0f7a5dc9d3edc2252672d00a9f1410121ef787f5eeafe9ce9969fdd28774993124d9b799ea35a9b8cfc8b1a66b7a7d174e7eb13dff206468a6895db90845e70c653761988a13fdec8d38089af5c83175d7d5768f6fbf49ac7e37c672e538c16be710c9481154077392e229e02742e46b446772e0ee5c59cd724c6806b66677a4e4583680cf80731ec285904e24befd189ee4a86bae80e9924433e642c32be477c942b49ca0acb80fd98d79ae26a9d89bfda9eb307e515ceae68fc6e18a90fb0f5a655144f2cf293521bbc15f244a839d58006ef99e6452e4ae6340859edbbd4f658dfe51a9997869f904d10de97abb22496f81d5b0935d9e40c60d618ccb346e944af5123eb239f079e7c214397ef530c370c107ab7d34d79430639f487b7bc28ebffef611ba3d25eb376097f35fc9f40ad93a0925ce284863fc68bffb149673f91441f527d222bbb53b00f019d426cb67566320aa902517bc2b6a94a8a1d246f7595f4773df0c51df81f4d80b42f5eba9f45e60263f7aed95f790cfef5b976119747db1b268578d4676aa9df3f07e17d62d2846908e00a9076a7ba369bf9a61d7612604ba08f870b8c361c9ef21bf39183190add7e7b3531629742dd0b25de0fc64874f4c1dfe4b3a14c8f628a756f4e2b5f17cf30bc1582dcd1c983be51ea3101761584e74e016cc7b1a38ed1bc377c339479956f9638fa9f2bc10ad7ce9f9b84d10c4ec70cc1cae0848b0578686ea0a573741c2a44e647268553af27ee92dcd6483257c1357a21b7ecb51495adb18971f867748d1efc8debf873096acb8ced6d3767eea15868d899d84ff135606cece14c289bbb6fbbeedc97ce0d21b803645b510470e6cb54b9a9c25f9a8c8b3e13e8f5f4de76d9d95bbdd548c4ca4842ac5619e4895cff83ab6479dfc3a5c72e5efdab27ce226d0fe06a42fb2e3dafce35f47b5b26a9e6a9dd10ff5616b9b3562475de095b3f3a576b88f3656f2b09da659d179b201ef6b56453009ab70b52d92587f5565ab95db7087922b7f6c905c4b5d2946b0fd662a93edce0b315728fdad87b8830fd93807344ab2cddd54d1938cca87c5e8360ef93d0d2390d2ca8608e793a38d8f16395bb2ac74f9c3514295d15f6bac2a00ebe9701043c78985761c312e3c5e2189cef806055bf46a2cf6aa40a695612010b13be8ddbfbd60bb41cef22e58a9370237a3c75386ff01ba57b49b09b326f14be5a765a6bfdda65fc75c43a706bccbc44334498bfe2b7e75149b42913d7570f8148378dd2c7557dc16988ef40f6ac416be085c371f079910c0c06c0a31cfda5f04d2963917a449871aa65449c26860428fa626b94ba4ae133de23ccba6956464c0558508ad5731a9f89c37aab8419fe17cdcf15dd60fe8f718263716d62117cdf32321e732301f7feab83268857fe73f0e1f21fe596164e0e19ac51ebdcd3d18d1b8bff7bc7cad0f140abbce6b35addff9521f56815171951867055c1ae2c9ad048485d7656b226aa847889740e89f35d244073d2cdbf36e94293c589f84ac9679d5b4811f94e175f07e6d79ee2eb8297430d5db89c06add953b874f4f1d95b7de5441df9c3756984141cef230f4f9a59a5a19cdfbead02538e529a83a2c38df1be55fb8574f64d9403d325227b4ce42e7ed6228545d0bf494d57f627a7e54d99d4b81e9bc0e2aef178f9e70cccb8b914ac3c05fa60876651740ec196a0966cd07db40b2ef454d66d72f20bc2ae48cc2026601525d29a3e62e1361993900d75fd9b78348fbc23a456a0e1611c953033e9ef129d606e513fa7cde077a2e37ea75a99bf031f3cadd001653e222ff438130ce48613f2e037f5d9cba649d381d379d3b4f975f602cc226b2bacf74a1809e6f88750c27f2e4c7c2b6e3a4b1ee01e605506631d5385e232c5c41a0f4dbaf6de4adae20774efce9b3197d38f54fc654b722b14df97c5c9ae0e67cdf2accde23df0380f0b6c95f88a92e12912aae6b05e58f0a6a5d95757056417a1356065bb5f7d721eabbbcb17c5b7380d3c7b347c57f7ec0bb11e5c5184dc38703c81ba1708c8d649f18e8cdc872a3b29941a7be077138a06a703d5c584dc16af7f2d635cdaa0151573ede5dba61f219c05e319bdca1457b332dc7b505ba8ead1761040d17856825fe925084e30b15d60857e1a3a21811353a417a407c2e90d117d9d29e8a7a2bc0553bd691ee1af2432f88b853b8418643411e966fad67f9d4552cdec7fea46a2cad7d5f5923da5cf9c1a595b94e9182ba5c3e581264b27ae95c2a21c530e41482649b46ad4f14b721505eb208b83f9d6d95ece3fbfc0dcdc54b942afd965e193217cf4aede1a357ebc8fa1d967b385399586621ebca20e0a6b9d2033d90e8398637973998e4047f7dc2b2eaa2f22fdd9bb30a409e276cc9e10ab1e67b7149b0549c34e24092ad895ac642e5a1594ee0df343b403f5609b462b4da46915391cb527e666b0d819132eb03222f0f14e98f5109be8e33270aaf247be802ffeec48eb7a3978ad3b99a9ffe1f81df58d6b4c0fa1faaa07b63fa9aa456c5136d34ecdbd184d049e0b5837f8cea81d3495b82456c7334712408b53a130f4a6d4525baa797a5ae483a45cb8b5b7d9e2da627d86bed75994f999e9de8730b9af8a8f7ed82bc8063137c0cd18082538a521c4aea8004b4685613ad5568a9444fa2333976780eacc3e0535998b8225273b1528ad1adb08187fc1d14a45e17507a7aabf603ad5fb15b5af9ae7114955897e3e942f15e6b6b7ff56cb530461072ae624887afce0e02f1f73a4140ea02d64a884b22940afe5e18917d31792a5885932119706cdfd1960d9ad8d8842c559d53354c76e2ac35b013dbdb63c31b5641198dd506ec1b7a0cc6600a9e9a9b72ec2f3fd87f5d8549c9895ca3117d21a3b62b335fe564196003087868fe17ad33f5fe832aee7d9d3651c23ca23e76ee678fc0b7a0e35cd3acab51923b95fadefa7130d649e67b25eab57d535df4c47892cc819b453b800e5a8fc61e22a4b473e0caed3e9ab10912bd0dfab38faaada2985c3618ec8666aad5409b0a343e9fa888320ca35a84cfc9c91d33239dcb537d1d5f213ba006f50e4b2dd0e12ff7619e2fccf633c93d88be098e196dbfac296a60bf8a6d14dd5773b2f6a21d34717c61967f2", 0x1000}, {&(0x7f0000001300)="8251d63eaf6fdf3380f062596f1482e994bc612cd98f683208964f35293399c41c4063847b7e95509c92ad6379090d624b078d3dce9acbfdfd340de093bbc8004e477ce744d549767687b9634d2aaa1122fb2218eabd9ff409ad7f7e6abdc9c9ec6335d9b5337de62b27a520e3c9fe6cca9c01b9cbccfbe436161f199aecfcc9a72bded5b3984b936351f4ae27430b50e7522d98240411cf894c298249bda71fa0c8a1e0530418", 0xa7}, {&(0x7f00000013c0)="8caa5ee5a73878ceaa79d47eb69131a3a9d2a3f7f646edbd32e19b1cf02f978b2b7d29f41c9153c577f67657d796946aeeaab7cd7538872d273d47d7a7fbddfd499bab59f3ba6c0453e6ca1957a912cabbdeb1196a7ff6d6c382b5cc5ca99ea15b5e62167e090f023ba27db4a478be03168994853c2f0370c57aac9a61b277ea0b57dcd4f2f9fff23c78392b197d61e5e837e1b89d3c7731bd443c24651f025f3b37c7b74343fd2f27ac06b77a5d8516b51e0cd1dcd352d2e003a20290b787af35d9b07b55d097ea7c95b263c10529f0807b5437916c968ef702f789823815eb7a30b1783d6a8a5ecbaa3cb341353c1b80b7a125ca", 0xf5}, {&(0x7f00000014c0)="eec52dee3629a1a3878c357ebcfd6136c8d267d993f99ca734ec9290938e114c33c69c9fa19dff181ba6dd1e052c142788e7fabed54fdc87323f8a8e", 0x3c}], 0x7}}, {{&(0x7f0000001580)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001600)="97b6c46b202e386cd6249e2901f2421b0af86e9505034c97d432910313", 0x1d}, {&(0x7f0000001640)="507f3f3fe1d1eaa42acc33590f46a427247b2898becb06ab940ed5b69059af8fd8099d4f86ab80e723a288be9ad8cb5ae6dbbb1868cb84df8a1e0e15", 0x3c}, {&(0x7f0000001680)="08f1e0ddb30672b3b3612766106c7de51cc72e", 0x13}], 0x3, &(0x7f0000003780)=[{0x80, 0x114, 0x800, "25328fbb718fb4ffba930a34984dd7e45e0c4a407110fa6ff81447b35e98d653fa84619adc7323cbc69cc387806c22cc0deb7a788bb1064510808529b7bdf67fcde14b36ecfd4b54d982cce33fd62121f249ff48a960960f7e06e4c0bf2142c717b591fc5e2b1305ff939883d8b41f"}, {0x178, 0x1f0, 0x8, "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"}], 0x1f8}}, {{&(0x7f0000001880)=@ieee802154={0x24, @none={0x0, 0x2}}, 0x80, &(0x7f0000001d00)=[{&(0x7f0000001900)="fad26d9ecfe093dd2bc2e1", 0xb}, {&(0x7f0000001940)="afa1bd1c4f46fd93ec2315fc8916d098c42e4fe32ed044710b229d39eec27c8e542287d77f4c9808b6c436778409071b62f893d55f3069ecf6bfacb403bcb0e77c1dbb59f871a4dfca06bdad4853e6945dc1d3ec127c629af617058084be73642e030e2fdd03c96dc3014b6fb59dd12b425b54fffcf642c07ab0ccc3937b23fd92e00d64273ab2206ca30b57584a684275f74e26e1dc191da07343696f03085d3144bca3c103cc481a5dde4ca11c190d39d76e0f54311b3fa604f7b66aefcd89066933e9da9bcac91fee6b81be490ad81d3561ebe8b99452c56f57cf18577fc8a6a6d6ddcc24f6514a", 0xe9}, {&(0x7f0000001a40)="31b2f531973e98471a5a2faf3dbe97e10110abd142d46a061dad10e0da02d5400a942682c0039c417ee92270b7b8e9b2c010963cbb913c3b5da75cf67851331ebf187a3a84d3ef6823b53995540b9eb9446849dd3d84eaddd5a8daca83063db299c47bd229443470eaf5d0d0f2cf055145cb2c9ab38f7766c6f929b98df45285c7d6f71535635d90c5bd7e9fde0d971f4d305c4232e23cc86b87b6399ac7daf47bdf500bcc5848ec7af5b884177d4cbc9fed900d7084ebc45d68aba83b26392c8cf8a9d92dd5922de8eb155dc6bd", 0xce}, {&(0x7f0000001b40)="ef41deab74674423dc3ff5e7cb6f71e72566a39efcfc6997ae6f99a1e544a2e77d82b0a704d85c331bb6ddc9fb864b91d2619e0920d01bdf0f93bf20c0133b8d905cf396094242b7da1811046b6aecd6bebd2e2971959d0562ed742e4dabf96ecfaa6b02ce394f631cfb30a020c1d5b4a29a75e51525016a1a1d16cf2b9dfb18a2c748ad995f8f27423ff973a2017acbc8d338e83757587ba5886ea7afc81e7a83ad2b74e76084b7e789bdf308cc8e671563f1c80372a6370b6b34dc2b2e414844654b37bc3adcdd5ec6346415851c28554bbf3ac6b89bf9d474adf8477bddb02cc6cc2888b1415d1fd5828ad52b95108582eecf4471fd41bf", 0xf9}, {&(0x7f0000001c40)="40a7bdea005dd7dd3b047030b159d95f112c1ee1cb1a83390073633a659cb9a6b38f02ed0a22f884ac6123a349cedc3dad3c9ded4fbff8a8f52bba384c3957500d64f64e9a3093e3c6c3911eac58ad1cff0db557a79d95ca04189774d319bf16fc22d5dba447c4975d5a6f38cf2b0c6299ce6a4378a7c8a064b92109f86fc1a0f8efda2c346b401cbbf3f226606b673f7ff9cfad0dd35e8645e07ae956f17cb70b84038b7799160c533d75068c8663707defd2b3a1056e2e1028df6eda574076", 0xc0}], 0x5, &(0x7f0000001d80)}}, {{&(0x7f0000002e80)=@phonet={0x23, 0x85, 0x1, 0x7}, 0x80, &(0x7f0000003540)=[{&(0x7f0000002f00)="aa94eed45a20641246f14283de9d33c6d0695d2bad1848dc84b22a17d70101f5f8911d77514727fc7d5752a9cdd54af60e7c2ca0f507cd07ed89356282842bc522eacbb0a7fee40dce77b9dab0d9cd7c220a4d3915a1b6de9be86239374db61b0b7d6f8917a0da6d0e2e3b5b2837b32483853233ff02c68c1f968000ad95a882db7c802ee9fb461781d63c6e014eff7c", 0x90}, {&(0x7f0000002fc0)="94737842dec70254cb14591dc2f40bd314626773ce9cba828a3bca90f4485fd1c3011d915ca6ed9712e14246e4a1031111dc905ae7ad4a64dc1e0679c628aa80f5083b8b7de8170cf20373b355455db8f9acd2fefadc7df4662b8291aecc66dda52c89871edd1edebbae5fbd22a6", 0x6e}, {&(0x7f0000003040)="b81874b332c8ab875eae3b22669b693276bf0f491940377e99835b7f8a096a576fbd268540f7bdc83cb887a6b700b9af3a9f0e3547ff8dd96403334c92e009c09aec7ca3717f15c4d5ae31c26f155d44d32ac9215d8e84825954b966b98a8cee469a7e6700f61e087a405792f5e44c91692f1d4779b1783733ffe57cf070978a02462cd954066199b2e2bd9ef98c3ef8aa8877c1ae8317e1ad7da6704f079c2f649546da134f5a683738d18c01d04bfcec51d646a5f0ded8dc677a12d73ef20570b6161161fe", 0xc6}, {&(0x7f0000003140)="4ae0736b8d876b6c22cbc464e064bc3152cda6f8b9b3a2cd7e29bc6793306cbc9fdeb67da6e2aa15fa99c24257bcc1439e2888ca081310f5f5bbbefd3191867fa361fe1bc53c05190813453cdfc40826777b718b42785d0edfd36ec592d35076c3b77b8e316895e5ccb50fffffa164ac11c737886d130d6adafdfb14018d89fd1f66aa4e9975221f614d116fb122723b413edc565de9b765373c0f129f1163208d1a8ad016b53a078f7603192a0ef60a7b36502312", 0xb5}, {&(0x7f0000003200)="912b9a9fcb5a460d7df5f3f91c108d91d04d19638a69e41ddea8df89c43de5f68e964538685ec8ba7afac97a9c41b2d01a73e2c3758991b6ed53dc0a7159639cc7bfe475e04b070f8f8cfd980a72f207374335a7e1fe06025eccbcf0ecbc7067b23a4d9aa14f650b31cf8a7f674d271b105df1bebc5e45c5da62d3c250ba441289c8367dc4e1f78bd39271e79ccb152d865261ab944373c8c68702012dd6199574f0c18fa0bce30e9f3da41c0c378199995cbc86d284d6c42918fcd9462a1567e4c7928df466cde73ebf939d65124097f2f8da19f3bd3ce8bb", 0xd9}, {&(0x7f0000003300)="265f2e3b941580da1a3880217663a577c09060777481564f491daae67c0ca5943b6e24f72d14b7fad7f24bae9122ed50dcc2963ce8c6729a2ca5bf4941ca88d402ddab790d74bf98794e3f924fa017f5e6091010c0aff3d4bdeab71c74e1b353068b884c4e8274d9e17e03d20d7f48", 0x6f}, {&(0x7f0000003380)="c392b9", 0x3}, {&(0x7f00000033c0)="ee187e06f40c7c6d309475383410983c087bb1e9c0fdc6492ee467f8de74e8d0b282fde3b1a21e921c96b2bc62ea70401924957e976664a30e4ca796e9cf6e275b9dbd5f06e66aafdaa13ccc4398b35f0502f9bda939f3908899433b613954a2f35dee36dc46355dcfae0500c356c44fb63e4176a2e096a3bbf1401001a609e949b6aa6c10c68a9cb175073652b0f60bab793ddf49b9", 0x96}, {&(0x7f0000003480)="2c79374fd951609f225ef79de8efe7f01e9e3f4be347e9239a936d9df79bd6fdd053f1ad3d14b79c3b9f5c75c9aa5a64e92d7139e3db7427b5a3deafeb18214a25fc0dc71fe370bbec8a80d02bf774de9e6e484dcfc293e6210b4437ffb2ca09409217c3519c9fe7d8887e085da25b1df4dd54be53ad04f03526fcfce805997ebd2545864d7422a5ec989091a0868a8614dbf58e24ad512e7b3d78dd7b1dbbd3cf66cd3044ade6c9aadb82d1", 0xac}], 0x9, &(0x7f0000003600)=[{0x60, 0x1, 0x7ff, "eb037f7421cca9730f793f955e0b05578a662adf4df900f576afd3f5f15968200566c59cabf7c9155db41480aefc041bd876a3e65eff04c9d93823cecb41427efe81ad2667c6a38e88b35c8a4e"}], 0x60}}], 0x4, 0x20040008) 4.169753961s ago: executing program 4 (id=2557): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xff, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x5) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000001c0)=@gcm_256={{0x304}, "9548e9f236ae6ff4", "5d658951e86338b07dbf2ff5f46a7b9c320222be7c4825a253f322460c11268e", "b94b719e", "30ebe6bd5755f2e0"}, 0x38) recvfrom$inet6(r1, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x10000008ebc, 0x0) write$binfmt_misc(r0, &(0x7f0000000300)="68cd3736e08e1beb53a57ecdbc19f50b66f5cecf2224ecbe5731a94f916bedc01e6e61154cc654687d64348ee2d7bd4a819550214ecc74d37ff77e69465d81131262dc3379ea770888026bd27a7c2c6937c8075a5e84013480324ed90ac4cbf6541039924b197e54423f504e996c4acb336577", 0x73) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r7, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0xc114) 1.177409396s ago: executing program 4 (id=2596): mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0) lstat(&(0x7f0000000200)='./cgroup\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, r0, &(0x7f00000002c0)) getxattr(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)=@known='com.apple.system.Security\x00', &(0x7f0000000180)=""/68, 0x44) 1.120031047s ago: executing program 4 (id=2597): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000300)={0x55, &(0x7f0000000340)}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x10004, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB="2c726f6f7430303034303030725f69643d00000000000036aa00"/37, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x206c) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x1000, 0x0) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r4, {0x7, 0x28, 0x2, 0x400c8460, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000034000104000000000000004007008759355d27514450d2c19042dc4a1d2716dfc47c28b4c0f29c158902435e17ff6a0c67d2d8acd27180b83e30000000000000000000000029b6f107c008cd3e82f6238dfd447ee4bf3d9f1c70970c95c5bc3408a145f0374c625b45e8848d29d3a1b09f7500bc865eb29b7bc9a4d413e2ee2fb253c8e00d044bbfe73161e2a1e1df64504e39211c7a5b72f785e0f72395af040f13aa6565a3c57a52601f658ba51fd7b06185c5c6ba42a024c614d226d37720ff1aab74070cd7af90dc2cad9dec78e9aaef39dc4d460cf3107b73d725a90efb4fbd291d646d45a55f", @ANYRES32=r9, @ANYBLOB="0200ee050a0002"], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xe0000000, {0x0, 0x0, 0x400, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0xfffffffffffffffc, 0x4, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006680)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x90, 0x0, 0x7, {0xffffffffffffffff, 0x3, 0x16, 0x3, 0x40, 0x0, {0x2, 0x8000000010000000, 0xe, 0x2, 0x3, 0x800001, 0xf5, 0x10000, 0x100ff1, 0x8000, 0x7effffff, r5, r6, 0x1, 0x46}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_open_procfs(r7, &(0x7f0000000100)='numa_maps\x00') setsockopt$inet_tcp_TLS_RX(r10, 0x11a, 0x2, &(0x7f00000000c0)=@ccm_128={{0x304}, "b2cddba395412000", "d01144e1ce1d232c24ad72057d785370", "a06f6b58", "08000020f90f00"}, 0x28) r11 = syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r11, 0xc0405665, &(0x7f0000000140)={0x8001, 0x2, 0x10000, 0x20, 0xe, 0x1, 0x4}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r10, 0x3ba0, &(0x7f0000000140)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f00000001c0)={0x28, 0x0, r12, 0x99, &(0x7f0000000640)=""/153}) 869.701324ms ago: executing program 0 (id=2601): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @local, 0xffffffffffffffff, "68e1dd5d0fb8a26475bfc155abab3dc0864b1d02ab2b55d3ba53b297677fe8e4", 0x1, 0x2, 0x9, 0x40}, 0x3c) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x4389cf13bdbf833b, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='vegas', 0x5) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 819.111975ms ago: executing program 0 (id=2603): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86"], 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f00000001c0), 0x3078004, &(0x7f0000000280)=ANY=[]) (async) chdir(&(0x7f0000000140)='./file0\x00') (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001240)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_QUANTUM={0x8, 0x12, 0x468fe4e8}]}}]}, 0x38}}, 0x4048000) (async) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8010, r2, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(r1) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) (async) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@time={{0x38}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@ip={@local, @local, 0x0, 0x0, 'veth0_to_team\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) (async) r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) r7 = dup3(r5, r6, 0x0) ioctl$MON_IOCG_STATS(r7, 0xc0109207, &(0x7f00000001c0)) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 730.404721ms ago: executing program 0 (id=2605): r0 = socket$inet(0x2, 0x2, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') close(r0) open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000003"], 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x4, 0x40) ioctl$DVB_DEMUX_DMX_EXPBUF(r2, 0xc00c6f3e, &(0x7f00000000c0)={0x800286, 0x0, r0}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000740)={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xfffffffffffffe58) 729.856517ms ago: executing program 1 (id=2606): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x84, 0x1, 0x2, 0xe, 0x4}) ftruncate(r0, 0x6000000) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x2, 0x70bd26, 0x25dfdbfc, {0x3c}}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x20000010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f00000002c0)='./file3\x00', &(0x7f0000000000), 0x810000, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) truncate(&(0x7f0000000140)='./file0/file0\x00', 0xd1) 729.50091ms ago: executing program 0 (id=2607): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x10000}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/16, 0x10}], 0x1, 0xffff, 0x0) 630.680335ms ago: executing program 0 (id=2608): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x54, 0x0, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_b, @device_b, @random, {0xa, 0xe0}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1}}, 0x2, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x5, 0x6]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0xfe00, 0xce]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x40) 630.426029ms ago: executing program 1 (id=2609): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1842, 0x136) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) write$FUSE_INIT(r0, &(0x7f0000000300)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x80000000, 0x200200, 0x8001, 0x9, 0x2, 0x5, 0x0, 0x0, 0x100, 0x401}}, 0x20000) 549.962406ms ago: executing program 0 (id=2610): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global=@item_012={0x0, 0x1, 0x5}, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "9e3ce079"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_io_uring_setup(0x65ca, &(0x7f0000000080)={0x0, 0x1a6, 0x2, 0x2, 0x3c5}, &(0x7f0000000100), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_FILES2(r2, 0xd, &(0x7f0000000400)={0x3, 0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/220, 0xdc}, {&(0x7f0000000180)=""/105, 0x69}, {&(0x7f0000000580)=""/4096, 0x1000}], &(0x7f0000000280)=[0x5, 0x3]}, 0x20) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) (async) mremap(&(0x7f0000dde000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000bb3000/0x1000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) (async) munmap(&(0x7f000060f000/0x4000)=nil, 0x4000) (async) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) (async) munmap(&(0x7f0000694000/0x3000)=nil, 0x3000) (async) mremap(&(0x7f0000807000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f000061c000/0x13000)=nil, 0x13000, 0x4000, 0x3, &(0x7f0000fb0000/0x4000)=nil) (async) mremap(&(0x7f00007b2000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) (async) madvise(&(0x7f0000a30000/0x3000)=nil, 0x3000, 0x10) (async) mremap(&(0x7f000046b000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000769000/0x1000)=nil) (async) mremap(&(0x7f0000b89000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f00006e6000/0x3000)=nil) userfaultfd(0x1) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x1, 0xffffffff, 0x7, 0x7, 0x2, 0x3}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 460.631953ms ago: executing program 1 (id=2611): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000040010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x20) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@bridge_dellink={0x24, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_AF_SPEC={0x4}]}, 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r2, &(0x7f0000000040), 0x2) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1c}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x18}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6, 0x2}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x4000084) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000240)={0x5, 0xffffffffffffffff}) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$P9_RVERSION(r4, &(0x7f0000000c40)=ANY=[], 0x13) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000400)={0xfffffff, 0x4, 0x1, r4, 0x0, &(0x7f00000003c0)={0x990a72, 0x1ff, '\x00', @string=&(0x7f0000000340)}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00", @ANYRES32=r1, @ANYBLOB="080004007f00", @ANYRES64=r1], 0x50}}, 0x0) ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, &(0x7f0000000300)={0x666666666666799}) 460.256428ms ago: executing program 1 (id=2612): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000380080015"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x39e15000) 389.850164ms ago: executing program 1 (id=2613): r0 = socket$netlink(0x10, 0x3, 0x1) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@setlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfc}, 0x20}, 0x1, 0x0, 0x0, 0x8011}, 0x4041c44) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x33}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x18, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x4, 0x1a}]}, 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x84) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)={0x14, 0x25, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}]}, 0x14}], 0x1}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) 320.006869ms ago: executing program 1 (id=2614): setresgid(0x0, 0x0, 0xee00) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa88a}]}}}]}, 0x3c}}, 0x4008080) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa88a}]}}}]}, 0x3c}}, 0x4008080) r1 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001009, 0x114}) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r2) (async) fchdir(r2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r3, &(0x7f0000000100)='maps\x00') syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) close_range(r1, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02002000010004ecff0000002d0004000000000010000000000000202000050000000000"], 0x24, 0x2) (async) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="02002000010004ecff0000002d0004000000000010000000000000202000050000000000"], 0x24, 0x2) rmdir(&(0x7f0000000000)='./file0\x00') (async) rmdir(&(0x7f0000000000)='./file0\x00') 170.312284ms ago: executing program 4 (id=2615): syz_emit_ethernet(0x22, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x1, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x23}}}}}}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000d40)={0x0, 0x32, 0x3, 0xf02a, 0x9}) 169.504653ms ago: executing program 4 (id=2616): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x70, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xb}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x6, 0x2, 0xf5, '\x00', 0xf}, {0x1, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x5, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x9b, 0x6, 0xf}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdd}, {0x7f, 0x1, 0x5, '\x00', 0x21}, {0xfe, 0x3, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0xa, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x11, 0xb0, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x5}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe88000000000000e6ffffffffffff00fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ff02000000000000000000000000000100000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000200000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd700000350000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="680100001a000100feffffff0001000000000000000000000000ffffe0000002fe8800000000000000000000000001010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff000000008000000000350000020001002000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000008001f0003"], 0x168}, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 233.297µs ago: executing program 5 (id=2617): r0 = syz_open_dev$dvb_demux(&(0x7f0000000400), 0x0, 0x700) r1 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000190a01020000000000000000000000000900010073797a30"], 0x20}}, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x94) 0s ago: executing program 5 (id=2618): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='auxv\x00') exit(0xf) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020030000b02d25a806f8c2d94f90724fc602f1a03", 0x17}], 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r2, 0x8949, &(0x7f0000000000)) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000340)=ANY=[@ANYBLOB="477f0868b45f78e785bbc4dfd1120ef4e4e19f12763b27e4c9bbc779ff24238008d32cff558f820031551cd98968a6e2501faddb267b1a0fb2bcbe0ee5f0b4115b6714549815b38b271c1f212e7e51617c4fb21d54b47bcf991c74ecbf7da7b84949ce5c570a9ddf59a3ab3cef029072c9cc1605bbe1df5f", @ANYRES16=r5, @ANYBLOB="210f28bd7000fadbdf251c00000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="310428bd7000ffffffff1600000018000180140002006e657464657673696d3000000000600005000200000000000500040001000000050003"], 0x44}}, 0x0) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCAUSEDIAG(r8, 0x89e6, &(0x7f0000000200)={0x8, 0x9}) r9 = socket$isdn_base(0x22, 0x3, 0x0) ioctl(r9, 0x8b32, &(0x7f0000000040)) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0x16c, 0x10, 0x713, 0x0, 0x25dfdbfe, {{@in=@rand_addr=0x64010101, @in6=@loopback, 0x0, 0x0, 0x4e21, 0x2, 0x2, 0x0, 0x0, 0x1d}, {@in=@loopback, 0x4d6, 0x32}, @in6=@mcast2, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x543}, {0x4, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0x2, 0x0, 0x0, 0x50}, [@encap={0x1c, 0x4, {0x2, 0x4e23, 0x4e20, @in6=@dev={0xfe, 0x80, '\x00', 0x2d}}}, @algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "210466d38547aa140db9a200000000c538c7cb7a"}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') kernel console output (not intermixed with test programs): d.1-1/input0 [ 189.245614][T12381] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 189.249809][ T6880] Bluetooth: hci4: Frame reassembly failed (-84) [ 189.313824][ T40] audit: type=1400 audit(445.136:1306): avc: denied { watch } for pid=12383 comm="syz.4.1804" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 189.320757][ T40] audit: type=1400 audit(445.136:1307): avc: denied { watch_sb watch_reads } for pid=12383 comm="syz.4.1804" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 189.328881][ T6092] usb 6-1: USB disconnect, device number 25 [ 189.469513][T12390] sch_tbf: peakrate 5120 is lower than or equals to rate 4294927007 ! [ 189.867890][ T5976] usb 9-1: new full-speed USB device number 19 using dummy_hcd [ 190.029154][ T5976] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 190.033974][ T5976] usb 9-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 190.037096][ T5976] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.039745][ T5976] usb 9-1: Product: syz [ 190.041162][ T5976] usb 9-1: Manufacturer: syz [ 190.042689][ T5976] usb 9-1: SerialNumber: syz [ 190.045858][ T5976] usb 9-1: config 0 descriptor?? [ 190.051952][ T5976] hub 9-1:0.0: bad descriptor, ignoring hub [ 190.054046][ T5976] hub 9-1:0.0: probe with driver hub failed with error -5 [ 190.058613][ T5976] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input38 [ 190.478164][ T829] usb 9-1: USB disconnect, device number 19 [ 190.776622][T12413] tmpfs: Bad value for 'mpol' [ 190.956595][T12421] binder: 12420:12421 ioctl 8008743f 200000000000 returned -22 [ 191.132164][ T40] audit: type=1107 audit(446.946:1308): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 191.277818][ T5929] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 191.278337][ T5935] Bluetooth: hci4: command 0x1003 tx timeout [ 191.356302][T12441] geneve1: entered allmulticast mode [ 191.481627][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 191.484469][T12452] netlink: 'syz.1.1824': attribute type 20 has an invalid length. [ 191.493396][T12452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1824'. [ 191.496230][T12452] netlink: 'syz.1.1824': attribute type 20 has an invalid length. [ 191.498991][ T6880] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.501920][ T6880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.504494][ T6880] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.507056][ T6880] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.678294][ T5976] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 191.950582][T12486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1831'. [ 192.088479][T11168] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 192.218836][T11168] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 199.200894][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.202915][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.905249][ T40] audit: type=1400 audit(457.726:1309): avc: denied { read } for pid=12516 comm="syz.5.1836" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 201.907759][T12519] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1835'. [ 201.915039][ T40] audit: type=1400 audit(457.726:1310): avc: denied { open } for pid=12516 comm="syz.5.1836" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 201.928965][ T40] audit: type=1400 audit(457.726:1311): avc: denied { ioctl } for pid=12516 comm="syz.5.1836" path="/dev/cachefiles" dev="devtmpfs" ino=4 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 201.930189][ T40] audit: type=1400 audit(457.756:1312): avc: denied { getopt } for pid=12518 comm="syz.4.1835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 201.968861][T12513] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 202.060215][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1839'. [ 202.107534][T12545] netlink: 'syz.5.1843': attribute type 23 has an invalid length. [ 202.122057][T12545] team0: Device gtp0 is up. Set it down before adding it as a team port [ 202.185467][T12547] netlink: 'syz.4.1844': attribute type 7 has an invalid length. [ 202.223742][ T40] audit: type=1400 audit(458.046:1313): avc: denied { bind } for pid=12548 comm="syz.5.1845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 202.227544][T12552] netlink: 'syz.4.1846': attribute type 11 has an invalid length. [ 202.230857][ T40] audit: type=1400 audit(458.046:1314): avc: denied { write } for pid=12551 comm="syz.4.1846" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 202.237857][ T5976] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 202.271946][T12559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1848'. [ 202.291793][T12560] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12560 comm=syz.4.1848 [ 202.391471][T12576] hugetlbfs: Unknown parameter 'mize' [ 202.391835][ T40] audit: type=1400 audit(458.216:1315): avc: denied { remount } for pid=12574 comm="syz.0.1854" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 202.409041][ T5976] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 202.412290][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.414804][ T5976] usb 6-1: Product: syz [ 202.416160][ T5976] usb 6-1: Manufacturer: syz [ 202.424066][ T5976] usb 6-1: SerialNumber: syz [ 202.430407][ T5976] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 202.455294][ T5976] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 202.550311][T12607] netlink: 252 bytes leftover after parsing attributes in process `syz.0.1863'. [ 202.669976][ T53] usb 6-1: USB disconnect, device number 26 [ 202.734054][T12628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 202.745005][T12628] orangefs_devreq_open: device cannot be opened in blocking mode [ 202.745085][ T40] audit: type=1400 audit(458.566:1316): avc: denied { read } for pid=12618 comm="syz.4.1866" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 202.766110][ T5929] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 202.791441][T12635] lo: entered promiscuous mode [ 202.793034][T12637] SELinux: Context system_u:object_r:unconfined_execmem_exec_t:s0 is not valid (left unmapped). [ 202.797245][ T40] audit: type=1400 audit(458.616:1317): avc: denied { relabelto } for pid=12636 comm="syz.0.1872" name="cpu.stat" dev="tmpfs" ino=2355 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 202.813136][ T40] audit: type=1400 audit(458.636:1318): avc: denied { associate } for pid=12636 comm="syz.0.1872" name="cpu.stat" dev="tmpfs" ino=2355 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:unconfined_execmem_exec_t:s0" [ 202.836185][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 202.841457][T12643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1873'. [ 202.841480][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1873'. [ 203.345749][T12685] netlink: 750 bytes leftover after parsing attributes in process `syz.0.1885'. [ 203.528288][ T5976] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 203.530621][ T5976] ath9k_htc: Failed to initialize the device [ 203.534627][ T53] usb 6-1: ath9k_htc: USB layer deinitialized [ 203.847788][ T5998] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 203.998512][ T5998] usb 10-1: too many configurations: 9, using maximum allowed: 8 [ 204.001895][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.005055][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.008723][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.011639][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.015224][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.019622][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.023077][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.026757][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.031029][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.033922][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.037787][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.042120][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.045424][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.048492][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.052048][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.055013][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.058088][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.061608][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.064522][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.067531][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.071109][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.074027][ T5998] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 204.077022][ T5998] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 204.080537][ T5998] usb 10-1: config 0 interface 0 has no altsetting 0 [ 204.084239][ T5998] usb 10-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 204.087261][ T5998] usb 10-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 204.090170][ T5998] usb 10-1: Product: syz [ 204.091605][ T5998] usb 10-1: Manufacturer: syz [ 204.093185][ T5998] usb 10-1: SerialNumber: syz [ 204.096624][ T5998] usb 10-1: config 0 descriptor?? [ 204.102366][ T5998] yurex 10-1:0.0: USB YUREX device now attached to Yurex #0 [ 204.123495][T12703] netlink: 'syz.4.1892': attribute type 8 has an invalid length. [ 204.127848][T12704] netlink: 'syz.4.1892': attribute type 8 has an invalid length. [ 204.247223][T12711] netlink: 'syz.4.1894': attribute type 8 has an invalid length. [ 204.340695][ T5998] usb 10-1: USB disconnect, device number 15 [ 204.353318][ T5998] yurex 10-1:0.0: USB YUREX #0 now disconnected [ 204.384180][T12732] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1898'. [ 205.160848][T12760] sp0: Synchronizing with TNC [ 205.221720][T12761] [U] [ 205.325011][T12764] netlink: 'syz.4.1907': attribute type 12 has an invalid length. [ 205.328188][T12764] netlink: 'syz.4.1907': attribute type 12 has an invalid length. [ 205.357455][T12766] xt_hashlimit: size too large, truncated to 1048576 [ 205.474835][T12772] openvswitch: netlink: Unknown key attributes 2 [ 205.697959][T12795] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 205.811482][T12778] befs: Unknown parameter 'debugyH`' [ 205.988989][T12823] fuse: Bad value for 'user_id' [ 205.990656][T12823] fuse: Bad value for 'user_id' [ 206.259598][T12851] tipc: Can't bind to reserved service type 2 [ 206.403672][T12875] fuse: Unknown parameter 'nd' [ 206.463397][T12882] SELinux: failure in selinux_parse_skb(), unable to parse packet [ 206.547543][T12892] exFAT-fs (nbd5): mounting with "discard" option, but the device does not support discard [ 206.551508][T12892] exFAT-fs (nbd5): unable to read boot sector [ 206.554110][T12892] exFAT-fs (nbd5): failed to read boot sector [ 206.556227][T12892] exFAT-fs (nbd5): failed to recognize exfat type [ 206.715909][T12896] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 206.722846][T12896] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3415122576 (109283922432 ns) > initial count (6907418368 ns). Using initial count to start timer. [ 207.025922][T12913] can: request_module (can-proto-0) failed. [ 207.096719][T12918] __nla_validate_parse: 11 callbacks suppressed [ 207.096769][T12918] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1955'. [ 207.307795][ T10] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 207.451653][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1958'. [ 207.458912][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 207.461681][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 207.464992][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 207.468811][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 207.471669][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 207.474237][ T10] usb 9-1: Product: syz [ 207.475707][ T10] usb 9-1: Manufacturer: syz [ 207.477228][ T10] usb 9-1: SerialNumber: syz [ 207.480199][ T10] usb 9-1: config 0 descriptor?? [ 207.483927][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 207.485950][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 207.489741][ T10] usb 9-1: selecting invalid altsetting 0 [ 207.643626][T12932] netlink: 120 bytes leftover after parsing attributes in process `syz.1.1962'. [ 207.647581][T12932] netlink: 'syz.1.1962': attribute type 1 has an invalid length. [ 207.651092][T12932] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1962'. [ 207.819212][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 207.819224][ T40] audit: type=1326 audit(463.646:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.827814][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 207.829215][ T40] audit: type=1326 audit(463.646:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.839275][ T40] audit: type=1326 audit(463.646:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.846188][ T40] audit: type=1326 audit(463.646:1345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.853072][ T40] audit: type=1326 audit(463.646:1346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.860676][ T40] audit: type=1326 audit(463.646:1347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.861928][T12939] syzkaller1: entered promiscuous mode [ 207.862222][T12940] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1964'. [ 207.869138][ T40] audit: type=1326 audit(463.646:1348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.871530][T12939] syzkaller1: entered allmulticast mode [ 207.874887][ T40] audit: type=1326 audit(463.646:1349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12908 comm="syz.5.1955" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b8bb9bf79 code=0x7fc00000 [ 207.927738][ T60] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 207.977742][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 207.980902][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 207.983211][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 207.986387][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.990481][ T10] usb 5-1: config 0 descriptor?? [ 208.078368][ T60] usb 6-1: no configurations [ 208.079904][ T60] usb 6-1: can't read configurations, error -22 [ 208.158548][T12945] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 208.192869][T12948] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 208.208920][ T60] usb 6-1: new low-speed USB device number 28 using dummy_hcd [ 208.248900][T12953] netlink: 'syz.5.1968': attribute type 21 has an invalid length. [ 208.251460][T12953] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1968'. [ 208.254989][T12952] netlink: 'syz.5.1968': attribute type 21 has an invalid length. [ 208.258039][T12952] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1968'. [ 208.358430][ T60] usb 6-1: no configurations [ 208.360230][ T60] usb 6-1: can't read configurations, error -22 [ 208.363910][ T60] usb usb6-port1: attempt power cycle [ 208.369354][ T6025] usb 9-1: USB disconnect, device number 20 [ 208.398552][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 208.400842][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 208.403049][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 208.405279][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 208.407494][ T10] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0 [ 208.418063][ T10] mcp2221 0003:04D8:00DD.000B: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 208.517710][ T6025] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 208.594100][T12959] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.1969'. [ 208.595473][ T53] usb 5-1: USB disconnect, device number 31 [ 208.597276][T12959] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 208.605094][T12959] overlayfs: failed lookup in lower (newroot/330, name='file0', err=-40): overlapping layers [ 208.679221][ T6025] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 208.682518][ T6025] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 208.686460][ T6025] usb 9-1: config 0 interface 0 has no altsetting 0 [ 208.691226][ T6025] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 208.694816][ T6025] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 208.698348][ T6025] usb 9-1: Product: syz [ 208.700035][ T6025] usb 9-1: Manufacturer: syz [ 208.701940][ T6025] usb 9-1: SerialNumber: syz [ 208.706658][ T6025] usb 9-1: config 0 descriptor?? [ 208.707801][ T60] usb 6-1: new low-speed USB device number 29 using dummy_hcd [ 208.713166][ T6025] hub 9-1:0.0: bad descriptor, ignoring hub [ 208.715582][ T6025] hub 9-1:0.0: probe with driver hub failed with error -5 [ 208.720743][ T6025] usb 9-1: selecting invalid altsetting 0 [ 208.728630][ T60] usb 6-1: no configurations [ 208.730487][ T60] usb 6-1: can't read configurations, error -22 [ 208.867765][ T60] usb 6-1: new low-speed USB device number 30 using dummy_hcd [ 208.889207][ T60] usb 6-1: no configurations [ 208.891146][ T60] usb 6-1: can't read configurations, error -22 [ 208.893953][ T60] usb usb6-port1: unable to enumerate USB device [ 209.135237][T12962] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1970'. [ 210.001054][T12974] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1974'. [ 210.009467][T12974] syzkaller1: entered promiscuous mode [ 210.011339][T12974] syzkaller1: entered allmulticast mode [ 210.111319][T12976] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=12976 comm=syz.4.1975 [ 210.153116][T12978] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 210.188294][ T6025] usb 9-1: USB disconnect, device number 21 [ 210.568964][T12997] overlayfs: failed to resolve '/de=00000000000000000040000': -2 [ 210.738981][T12972] kexec: Could not allocate control_code_buffer [ 210.802195][T13010] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 211.041112][T13017] kvm: apic: phys broadcast and lowest prio [ 211.054468][ T40] audit: type=1800 audit(466.876:1350): pid=13013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1986" name="bus" dev="overlay" ino=2563 res=0 errno=0 [ 211.512944][ T40] audit: type=1400 audit(467.336:1351): avc: denied { unlink } for pid=13038 comm="syz.4.1995" name="file1" dev="9p" ino=72614023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.275461][T13013] kexec: Could not allocate control_code_buffer [ 212.363625][T13069] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2003'. [ 212.424226][T13076] netlink: 'syz.4.2006': attribute type 10 has an invalid length. [ 212.426742][T13076] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2006'. [ 212.574075][T13080] fuse: Unknown parameter '$' [ 212.719621][T13087] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(4) [ 212.722437][T13087] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 212.727054][T13087] vhci_hcd vhci_hcd.0: Device attached [ 212.733065][T13088] vhci_hcd: connection closed [ 212.733369][ T1146] vhci_hcd vhci_hcd.5: stop threads [ 212.737695][ T1146] vhci_hcd vhci_hcd.5: release socket [ 212.740009][ T1146] vhci_hcd vhci_hcd.5: disconnect device [ 212.877758][ T5935] Bluetooth: hci4: command 0x1003 tx timeout [ 212.881705][ T5929] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 213.348327][T13113] 9p: Bad value for 'version' [ 213.356230][T13113] tmpfs: Cannot change global quota limit on remount [ 213.421065][T13115] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2018'. [ 213.424057][T13115] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2018'. [ 213.605226][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 213.605242][ T40] audit: type=1400 audit(469.426:1354): avc: denied { getopt } for pid=13117 comm="syz.5.2020" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 213.615215][ T40] audit: type=1400 audit(469.436:1355): avc: denied { setattr } for pid=13117 comm="syz.5.2020" name="SCTPv6" dev="sockfs" ino=47621 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 213.642125][T13121] program syz.4.2019 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 213.724274][T13126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2023'. [ 213.763213][ T40] audit: type=1400 audit(469.586:1356): avc: denied { write } for pid=13127 comm="syz.4.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 213.788830][ T40] audit: type=1400 audit(469.616:1357): avc: denied { listen } for pid=13127 comm="syz.4.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 213.794757][ T40] audit: type=1400 audit(469.616:1358): avc: denied { accept } for pid=13127 comm="syz.4.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 214.016812][T13153] tmpfs: Bad value for 'mpol' [ 214.098754][T13162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2035'. [ 214.117787][ T10] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 214.189534][ T40] audit: type=1400 audit(470.016:1359): avc: denied { append } for pid=13172 comm="syz.5.2039" name="mouse1" dev="devtmpfs" ino=1297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 214.245363][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2041'. [ 214.287889][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 214.290823][ T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 214.293468][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.296722][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 214.299913][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 214.303000][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.308407][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 214.311325][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.311365][T13184] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.316466][T13184] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.404359][T13193] lo speed is unknown, defaulting to 1000 [ 214.407123][T13193] lo speed is unknown, defaulting to 1000 [ 214.410216][T13193] lo speed is unknown, defaulting to 1000 [ 214.411453][T13191] cgroup: Setting release_agent not allowed [ 214.414449][T13193] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 214.425757][T13193] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 214.446033][T13193] lo speed is unknown, defaulting to 1000 [ 214.450078][T13193] lo speed is unknown, defaulting to 1000 [ 214.452906][T13193] lo speed is unknown, defaulting to 1000 [ 214.455753][T13193] lo speed is unknown, defaulting to 1000 [ 214.526308][ T10] usb 5-1: usb_control_msg returned -32 [ 214.528832][ T10] usbtmc 5-1:16.0: can't read capabilities [ 214.697732][ T10] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 214.781941][T13213] netlink: 'syz.5.2052': attribute type 4 has an invalid length. [ 214.784444][T13213] netlink: 152 bytes leftover after parsing attributes in process `syz.5.2052'. [ 214.792681][T13213] .`: renamed from bond0 (while UP) [ 214.800086][T13213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2052'. [ 214.849376][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 214.852115][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 214.855296][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 214.862075][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 214.865885][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 214.869212][ T10] usb 9-1: Product: syz [ 214.872297][ T10] usb 9-1: Manufacturer: syz [ 214.874297][ T10] usb 9-1: SerialNumber: syz [ 214.884254][ T10] usb 9-1: config 0 descriptor?? [ 214.884954][T13217] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 214.889297][T13135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 214.895391][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 214.897584][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 214.902578][ T10] usb 9-1: selecting invalid altsetting 0 [ 214.908128][ T6535] usb 5-1: USB disconnect, device number 32 [ 214.992260][T13222] xt_policy: output policy not valid in PREROUTING and INPUT [ 214.997341][T13223] xt_policy: output policy not valid in PREROUTING and INPUT [ 215.008250][ T40] audit: type=1400 audit(470.836:1360): avc: denied { remount } for pid=13216 comm="syz.1.2054" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 215.095322][T13230] syzkaller0: entered promiscuous mode [ 215.097162][T13230] syzkaller0: entered allmulticast mode [ 215.949180][ T829] usb 9-1: USB disconnect, device number 22 [ 216.536224][ T40] audit: type=1400 audit(472.356:1361): avc: denied { write } for pid=13248 comm="syz.0.2060" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 216.547346][ T40] audit: type=1400 audit(472.356:1362): avc: denied { open } for pid=13248 comm="syz.0.2060" path="/475/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 216.578413][ T5929] Bluetooth: hci1: connection err: -111 [ 216.584524][ T40] audit: type=1400 audit(472.406:1363): avc: denied { mounton } for pid=13248 comm="syz.0.2060" path="/475/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 216.944798][T13261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.998530][T13263] smc: adding net device bond0 with user defined pnetid S [ 217.002824][T13263] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.012510][T13263] bond0: entered allmulticast mode [ 217.277814][ T5998] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 217.427736][ T5998] usb 9-1: Using ep0 maxpacket: 16 [ 217.430787][ T5998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.434352][ T5998] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.437708][ T5998] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 217.441852][ T5998] usb 9-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 217.444822][ T5998] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.449356][ T5998] usb 9-1: config 0 descriptor?? [ 217.536716][T13272] netlink: 'syz.0.2068': attribute type 39 has an invalid length. [ 217.747813][ T829] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 217.860162][ T5998] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 217.864145][ T5998] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 217.867104][ T5998] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 217.869534][ T5998] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 217.871736][ T5998] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 217.876320][ T5998] input: HID 0955:7214 Haptics as /devices/virtual/input/input40 [ 217.903162][ T5998] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 217.906760][ T5998] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 217.919037][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.923557][ T829] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.926980][ T829] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 217.931195][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.936476][ T829] usb 6-1: config 0 descriptor?? [ 218.062376][T13266] random: crng reseeded on system resumption [ 218.145531][T13268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.148730][T13268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.154041][ T829] usbhid 6-1:0.0: can't add hid device: -71 [ 218.156103][ T829] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 218.161239][ T829] usb 6-1: USB disconnect, device number 31 [ 218.171905][ T6092] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 218.172014][ T60] usb 9-1: USB disconnect, device number 23 [ 218.175385][ T6092] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.181065][ T6092] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.184874][ T6092] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 218.273389][T13289] ALSA: mixer_oss: invalid OSS volume ';' [ 218.537281][T13307] syzkaller0: entered promiscuous mode [ 218.540969][T13307] syzkaller0: entered allmulticast mode [ 218.545015][T13307] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 218.549978][T13307] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 218.675046][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 218.675058][ T40] audit: type=1400 audit(474.496:1367): avc: denied { write } for pid=13311 comm="syz.5.2079" name="file1" dev="9p" ino=72614023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 218.684842][ T40] audit: type=1400 audit(474.516:1368): avc: denied { open } for pid=13311 comm="syz.5.2079" path="/366/file0/file1" dev="9p" ino=72614023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 219.328417][T13349] __nla_validate_parse: 4 callbacks suppressed [ 219.328429][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.428066][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.430896][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.433784][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.436973][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.440072][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.443120][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.446130][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.449157][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.452177][T13349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2088'. [ 219.505524][T13354] netlink: 'syz.4.2090': attribute type 3 has an invalid length. [ 219.510227][T13355] netlink: 'syz.4.2090': attribute type 3 has an invalid length. [ 219.518253][T13360] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 219.562158][T13368] xt_connbytes: Forcing CT accounting to be enabled [ 219.568823][T13368] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.639556][T13374] gfs2: error -5 reading superblock [ 219.649058][T13376] netlink: 'syz.0.2097': attribute type 27 has an invalid length. [ 219.657561][T13376] macsec1: left promiscuous mode [ 219.657581][ T40] audit: type=1800 audit(475.476:1369): pid=13379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2098" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 219.669878][T13376] macsec1: left allmulticast mode [ 219.672050][T13376] xfrm1: left allmulticast mode [ 219.833435][T13394] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 219.835579][T13394] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 219.838270][T13394] vhci_hcd vhci_hcd.0: Device attached [ 219.840837][T13395] vhci_hcd: connection closed [ 219.842445][ T6881] vhci_hcd vhci_hcd.5: stop threads [ 219.846411][ T6881] vhci_hcd vhci_hcd.5: release socket [ 219.850527][ T6881] vhci_hcd vhci_hcd.5: disconnect device [ 220.017720][ T10] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 220.147755][ T10] usb 9-1: device descriptor read/64, error -71 [ 220.378077][T13398] xt_CT: You must specify a L4 protocol and not use inversions on it [ 220.382762][T13398] rdma_rxe: rxe_newlink: failed to add bond_slave_1 [ 220.397764][ T10] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 220.537991][ T10] usb 9-1: device descriptor read/64, error -71 [ 220.594702][T13404] kvm: kvm [13403]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 220.649666][T13408] rtc_cmos 00:05: Alarms can be up to one day in the future [ 220.660168][ T10] usb usb9-port1: attempt power cycle [ 221.017911][ T10] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 221.037757][ T6092] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 221.038730][ T10] usb 9-1: device descriptor read/8, error -71 [ 221.039836][ T5976] rtc_cmos 00:05: Alarms can be up to one day in the future [ 221.041019][ T5976] rtc_cmos 00:05: Alarms can be up to one day in the future [ 221.041977][ T5976] rtc_cmos 00:05: Alarms can be up to one day in the future [ 221.059484][ T5976] rtc_cmos 00:05: Alarms can be up to one day in the future [ 221.062541][ T5976] rtc rtc0: __rtc_set_alarm: err=-22 [ 221.197742][ T6092] usb 6-1: Using ep0 maxpacket: 8 [ 221.202776][ T6092] usb 6-1: unable to get BOS descriptor or descriptor too short [ 221.207498][ T6092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 221.215963][ T6092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 221.222032][ T6092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 221.225627][ T6092] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 221.229255][ T6092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 221.232716][ T6092] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 221.236419][ T6092] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 221.243768][ T6092] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 221.248049][ T6092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.251457][ T6092] usb 6-1: Product: syz [ 221.253307][ T6092] usb 6-1: Manufacturer: syz [ 221.255350][ T6092] usb 6-1: SerialNumber: syz [ 221.260894][ T6092] usb 6-1: config 0 descriptor?? [ 221.264855][T13426] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.268788][T13426] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.275113][ T6092] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 221.317732][ T10] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 221.338250][ T10] usb 9-1: device descriptor read/8, error -71 [ 221.440156][T13431] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 221.443625][T13431] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 221.447153][T13431] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 221.450778][ T10] usb usb9-port1: unable to enumerate USB device [ 221.454771][T13431] befs: (nullb0): No write support. Marking filesystem read-only [ 221.465802][T13431] befs: (nullb0): invalid magic header [ 221.676160][ T6092] usb 6-1: USB disconnect, device number 32 [ 222.240938][ T40] audit: type=1400 audit(478.066:1370): avc: denied { read append } for pid=13442 comm="syz.1.2118" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 222.249510][ T40] audit: type=1400 audit(478.066:1371): avc: denied { open } for pid=13442 comm="syz.1.2118" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 222.263449][ T40] audit: type=1400 audit(478.086:1372): avc: denied { ioctl } for pid=13442 comm="syz.1.2118" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 222.354309][T13445] trusted_key: encrypted_key: master key parameter '' is invalid [ 222.674889][ T40] audit: type=1400 audit(478.496:1373): avc: denied { getopt } for pid=13463 comm="syz.1.2124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 222.789655][ T40] audit: type=1326 audit(478.616:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13482 comm="syz.1.2130" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2b8639bf79 code=0x0 [ 222.859160][T13491] 9p: Unknown access argument syBB|嬓ϾW$姟<.n8: -22 [ 222.868928][ T40] audit: type=1326 audit(478.696:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13499 comm="syz.0.2137" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f333e79bf79 code=0x0 [ 222.964499][T13502] fuse: Unknown parameter '' [ 223.630460][T13518] netlink: 'syz.5.2141': attribute type 3 has an invalid length. [ 223.634029][T13518] netlink: 'syz.5.2141': attribute type 3 has an invalid length. [ 223.824547][ T40] audit: type=1400 audit(479.646:1376): avc: denied { mounton } for pid=13525 comm="syz.5.2144" path="/383/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 224.049668][ T5976] usb 10-1: new full-speed USB device number 16 using dummy_hcd [ 224.103142][ T40] audit: type=1400 audit(479.926:1377): avc: denied { ioctl } for pid=13570 comm="syz.1.2153" path="socket:[50576]" dev="sockfs" ino=50576 ioctlcmd=0x4944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 224.184561][ T40] audit: type=1400 audit(480.006:1378): avc: denied { connect } for pid=13580 comm="syz.1.2155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.196344][ T40] audit: type=1400 audit(480.016:1379): avc: denied { write } for pid=13580 comm="syz.1.2155" path="socket:[50158]" dev="sockfs" ino=50158 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.203931][ T40] audit: type=1400 audit(480.016:1380): avc: denied { ioctl } for pid=13580 comm="syz.1.2155" path="socket:[50157]" dev="sockfs" ino=50157 ioctlcmd=0x6721 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 224.211129][ T5976] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x24, changing to 0x4 [ 224.217874][ T5976] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 224.222125][ T5976] usb 10-1: config 0 interface 0 has no altsetting 0 [ 224.227224][ T5976] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 224.232006][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 224.235382][ T5976] usb 10-1: Product: syz [ 224.237347][ T5976] usb 10-1: Manufacturer: syz [ 224.241101][ T5976] usb 10-1: SerialNumber: syz [ 224.254765][ T5976] usb 10-1: config 0 descriptor?? [ 224.264245][ T5976] usb 10-1: selecting invalid altsetting 0 [ 224.414138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 224.464229][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.469186][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.474488][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.478549][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.482359][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.486205][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.499383][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.502292][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.505964][T13528] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.522560][T13528] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.530251][ T40] audit: type=1400 audit(480.356:1381): avc: denied { ioctl } for pid=13606 comm="syz.1.2159" path="socket:[52274]" dev="sockfs" ino=52274 ioctlcmd=0x941e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 224.561618][ T5976] usb 10-1: USB disconnect, device number 16 [ 224.576233][ T40] audit: type=1400 audit(480.396:1382): avc: denied { unmount } for pid=8474 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 224.824555][T13627] __nla_validate_parse: 62 callbacks suppressed [ 224.824601][T13627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2166'. [ 224.999194][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 225.002283][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 225.081047][T13643] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 225.084791][T13643] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2171'. [ 225.113015][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 225.160084][T13656] netlink: 'syz.4.2174': attribute type 10 has an invalid length. [ 225.189129][T13658] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2175'. [ 225.192940][T13658] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2175'. [ 225.242798][T13667] fuse: Unknown parameter '0xffffffffffffffff' [ 225.531402][T13684] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 225.545289][T13684] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2184'. [ 225.754144][T13692] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2187'. [ 225.806006][T13690] comedi comedi3: s526: I/O port conflict (0x8000,64) [ 226.510090][T13732] netlink: 'syz.1.2198': attribute type 10 has an invalid length. [ 226.523707][T13732] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 226.550327][T13732] sp0: Synchronizing with TNC [ 226.631016][T13731] [U] ` [ 226.801162][T13754] openvswitch: netlink: IP tunnel TTL not specified. [ 226.815241][T13757] 9pnet_fd: p9_fd_create_tcp (13757): problem binding to privport [ 227.283632][T13786] syzkaller0: entered promiscuous mode [ 227.285512][T13786] syzkaller0: entered allmulticast mode [ 227.297819][ T5976] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 227.446080][T13793] random: crng reseeded on system resumption [ 227.456378][T13793] Hibernate inconsistent memory map detected! [ 227.457760][ T5976] usb 10-1: Using ep0 maxpacket: 8 [ 227.458844][T13793] PM: hibernation: Image mismatch: architecture specific data [ 227.462443][ T5976] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 227.466700][ T5976] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 227.469850][ T5929] Bluetooth: hci3: unexpected event 0x0f length: 36 > 4 [ 227.470043][ T5929] Bluetooth: hci3: unexpected event for opcode 0x010c [ 227.470312][ T5976] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 227.473060][ T5929] Bluetooth: hci3: unexpected event 0x0f length: 36 > 4 [ 227.475497][ T5976] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.475519][ T5976] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.475552][ T5976] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 227.479813][ T5929] Bluetooth: hci3: unexpected event for opcode 0x010c [ 227.482029][ T5976] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.543608][T13807] netlink: 'syz.0.2219': attribute type 1 has an invalid length. [ 227.582909][T13814] netlink: 'syz.0.2220': attribute type 21 has an invalid length. [ 227.585754][T13814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=13814 comm=syz.0.2220 [ 227.707951][ T5976] usb 10-1: usb_control_msg returned -32 [ 227.709766][ T5976] usbtmc 10-1:16.0: can't read capabilities [ 227.735163][T13825] overlayfs: failed to clone upperpath [ 227.908506][ T40] audit: type=1400 audit(483.736:1383): avc: denied { remount } for pid=13830 comm="syz.1.2228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 228.064257][ T40] audit: type=1400 audit(483.886:1384): avc: denied { mounton } for pid=13837 comm="syz.1.2230" path="/524/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 228.064308][T13846] overlay: ./file0 is not a directory [ 228.075001][T13845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.081747][T13845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.087279][ T40] audit: type=1400 audit(483.906:1385): avc: denied { unlink } for pid=13780 comm="syz.5.2210" name="file1" dev="9p" ino=72614023 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 228.097205][T13845] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.105344][T13845] usbtmc 10-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 228.238465][T13858] 9pnet_virtio: no channels available for device syz [ 228.312191][ T839] usb 10-1: USB disconnect, device number 17 [ 228.462535][T13884] 9pnet_virtio: no channels available for device syz [ 228.490744][T13886] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=65290 sclass=netlink_xfrm_socket pid=13886 comm=syz.4.2245 [ 228.999187][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.002773][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.005629][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.008843][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.011497][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.014074][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.017911][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.022244][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.024883][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.028167][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.030982][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.033735][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.038076][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.041866][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.046560][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.055091][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.059197][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.062076][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.065257][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.068352][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.071027][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.074726][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.078500][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.081420][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.085193][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.088738][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.091612][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.096490][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.099812][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.102668][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.106204][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.109484][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.112420][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.115821][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.120894][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.123761][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.127273][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.130567][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.133346][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.138747][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.141709][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.144436][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.169090][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.171958][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.174816][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.180908][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.183752][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.186572][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.197343][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.201551][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.204222][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.207377][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.210314][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.213394][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.216114][T13918] netlink: 'syz.4.2253': attribute type 16 has an invalid length. [ 229.219652][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.222361][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.225007][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.234259][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.237280][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.242654][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.247455][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.251463][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.254776][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.260384][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.263380][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.266751][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.271281][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.274396][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.277009][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.280963][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.284410][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.286947][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.290784][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.294573][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.302012][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.306689][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.310459][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.313984][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.320281][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.323287][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.326226][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.329963][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.332780][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.335401][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.339166][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.341901][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.344466][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.350500][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.353272][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.356027][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.359756][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.362733][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.366461][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.370766][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.373564][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.376116][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.380013][T13898] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 229.382744][T13898] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 229.385261][T13898] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 229.727760][ T5976] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 229.879472][ T5976] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.883004][ T5976] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 229.887117][ T5976] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.890838][ T5976] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 229.895272][ T5976] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 229.901372][ T5976] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.905090][ T5976] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.908578][ T5976] usb 10-1: Product: syz [ 229.910337][ T5976] usb 10-1: Manufacturer: syz [ 229.920299][ T5976] cdc_wdm 10-1:1.0: skipping garbage [ 229.922600][ T5976] cdc_wdm 10-1:1.0: skipping garbage [ 229.927202][ T5976] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 229.929946][ T5976] cdc_wdm 10-1:1.0: Unknown control protocol [ 230.087528][T13940] : entered promiscuous mode [ 230.162738][T13948] netlink: 'syz.4.2263': attribute type 1 has an invalid length. [ 230.168585][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.171225][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.174080][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.176958][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.179805][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.182639][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.185365][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.186123][T13949] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 230.187487][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.191508][T13949] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 230.193097][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.197192][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.199367][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.201803][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.204432][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.206799][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.210063][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.212713][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.213026][T13948] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 230.215131][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.220678][T13948] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 230.220932][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.226436][ C3] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 230.228572][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 230.230751][ T6092] usb 10-1: USB disconnect, device number 18 [ 230.233285][ C3] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 230.254030][T13953] gretap1: entered promiscuous mode [ 230.257359][T13953] bond6: (slave gretap1): making interface the new active one [ 230.260254][T13953] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 230.263972][T13949] __nla_validate_parse: 7 callbacks suppressed [ 230.263980][T13949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2263'. [ 230.271650][T13949] macvlan2: entered promiscuous mode [ 230.273373][T13949] macvlan2: entered allmulticast mode [ 230.273530][T13954] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2259'. [ 230.275588][ T40] audit: type=1400 audit(486.096:1386): avc: denied { name_bind } for pid=13947 comm="syz.4.2263" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 230.336995][T13957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2264'. [ 230.782427][T13971] xt_hashlimit: size too large, truncated to 1048576 [ 230.839174][T13973] overlayfs: failed to clone upperpath [ 230.842766][T13973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2268'. [ 230.914114][T13975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2269'. [ 230.922453][T13975] xfrm1: entered promiscuous mode [ 230.924296][T13975] xfrm1: entered allmulticast mode [ 230.985951][T13979] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=13979 comm=syz.4.2271 [ 230.989696][T13981] xt_hashlimit: max too large, truncated to 1048576 [ 231.071403][T13987] netlink: 'syz.4.2271': attribute type 5 has an invalid length. [ 231.450951][T14002] netlink: 'syz.1.2277': attribute type 28 has an invalid length. [ 231.616896][T14022] kAFS: unable to lookup cell '(,cL' [ 231.621402][T14022] kAFS: unable to lookup cell '(,cL' [ 231.623879][T14022] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2284'. [ 231.864460][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2285'. [ 231.875814][ T91] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.875866][T14029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2285'. [ 231.878885][ T91] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.885314][ T91] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.888710][ T91] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.893940][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 231.901065][T14029] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2285'. [ 232.111789][T14050] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 232.115700][T14050] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 232.120362][ T40] audit: type=1400 audit(487.946:1387): avc: denied { firmware_load } for pid=14049 comm="syz.0.2292" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 232.126778][T14050] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 232.173935][ T40] audit: type=1107 audit(487.996:1388): pid=14065 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='̢d芙YsK$htC_|G ֑m\屒PΓ  +!7i@uaj&~qs)fE{WAсWA [ 232.173935][ T40] 'q(>D]RsѕW ƺǾ:kؚLid~ 3+l8ɉxDq4cucꊌ[\5=;s>Bo›?w!Ͱr"B'?ܯy|Y:' [ 232.349968][T14084] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 232.474914][ T5929] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 232.536688][T14099] QAT: Device 2 not found [ 232.542491][ T40] audit: type=1326 audit(488.366:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.550324][ T40] audit: type=1326 audit(488.366:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.557578][ T40] audit: type=1326 audit(488.376:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.567355][ T40] audit: type=1326 audit(488.376:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.569136][T14093] netlink: 'syz.0.2304': attribute type 1 has an invalid length. [ 232.574597][ T40] audit: type=1326 audit(488.376:1393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.583976][ T40] audit: type=1326 audit(488.376:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.618754][T14099] loop6: detected capacity change from 0 to 7 [ 232.621119][ T40] audit: type=1326 audit(488.446:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14096 comm="syz.1.2305" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2b8639bf79 code=0x7ffc0000 [ 232.625582][ C0] blk_print_req_error: 26 callbacks suppressed [ 232.625594][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 232.645006][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.649267][ C1] buffer_io_error: 25 callbacks suppressed [ 232.649280][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.656569][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.660794][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.665136][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.668476][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.671415][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.674733][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.678104][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 232.681426][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 232.687883][T14110] Process accounting resumed [ 232.774749][T14127] netlink: 'syz.1.2316': attribute type 11 has an invalid length. [ 232.818162][ T5976] usb 10-1: new low-speed USB device number 19 using dummy_hcd [ 232.821196][T14136] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 232.883005][T14134] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(12) [ 232.885842][T14134] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 232.890617][T14134] vhci_hcd vhci_hcd.0: Device attached [ 232.901175][T14145] vhci_hcd: connection closed [ 232.901619][ T1199] vhci_hcd vhci_hcd.1: stop threads [ 232.905436][ T1199] vhci_hcd vhci_hcd.1: release socket [ 232.907568][ T1199] vhci_hcd vhci_hcd.1: disconnect device [ 232.958845][ T5976] usb 10-1: device descriptor read/64, error -71 [ 233.207732][ T5976] usb 10-1: new low-speed USB device number 20 using dummy_hcd [ 233.339352][ T5976] usb 10-1: device descriptor read/64, error -71 [ 233.409398][ T5935] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 233.414519][ T5935] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 233.421300][ T5935] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 233.425279][ T5935] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 233.429628][ T5935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.459222][ T5976] usb usb10-port1: attempt power cycle [ 233.601088][T14176] lo speed is unknown, defaulting to 1000 [ 233.698549][T14176] chnl_net:caif_netlink_parms(): no params data found [ 233.750200][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.752573][T14176] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.755134][T14176] bridge_slave_0: entered allmulticast mode [ 233.757996][T14176] bridge_slave_0: entered promiscuous mode [ 233.763148][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.765761][T14176] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.768271][T14176] bridge_slave_1: entered allmulticast mode [ 233.771582][T14176] bridge_slave_1: entered promiscuous mode [ 233.792584][ T6896] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.807789][ T5976] usb 10-1: new low-speed USB device number 21 using dummy_hcd [ 233.813547][T14176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.818386][T14176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.828128][ T5976] usb 10-1: device descriptor read/8, error -71 [ 233.835330][T14176] team0: Port device team_slave_0 added [ 233.839030][T14176] team0: Port device team_slave_1 added [ 233.853564][T14176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.855875][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.864323][T14176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.875043][ T6896] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.885461][T14176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.888601][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.898574][T14176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.921647][T14176] hsr_slave_0: entered promiscuous mode [ 233.924301][T14176] hsr_slave_1: entered promiscuous mode [ 233.926494][T14176] debugfs: 'hsr0' already exists in 'hsr' [ 233.928379][T14176] Cannot create hsr debugfs directory [ 233.931306][ T6896] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.043084][ T6896] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.067951][ T5976] usb 10-1: new low-speed USB device number 22 using dummy_hcd [ 234.088067][ T5976] usb 10-1: device descriptor read/8, error -71 [ 234.200706][ T5976] usb usb10-port1: unable to enumerate USB device [ 234.218055][ T6896] bridge_slave_1: left allmulticast mode [ 234.219978][ T6896] bridge_slave_1: left promiscuous mode [ 234.222016][ T6896] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.226158][ T6896] bridge_slave_0: left allmulticast mode [ 234.228549][ T6896] bridge_slave_0: left promiscuous mode [ 234.230601][ T6896] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.382217][ T6896] bond6 (unregistering): (slave gretap1): Releasing active interface [ 234.802832][ T6896] bond1 (unregistering): Released all slaves [ 234.814424][ T6896] bond2 (unregistering): Released all slaves [ 234.825363][ T6896] bond3 (unregistering): Released all slaves [ 234.836897][ T6896] bond4 (unregistering): Released all slaves [ 234.852200][ T6896] bond5 (unregistering): Released all slaves [ 234.863301][ T6896] smc: removing net device bond0 with user defined pnetid S [ 234.867140][ T6896] bond0 (unregistering): Released all slaves [ 234.890396][ T6896] bond6 (unregistering): Released all slaves [ 235.014774][ T6896] : left promiscuous mode [ 235.403262][T14176] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 235.408303][T14176] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 235.419988][T14176] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 235.426069][T14176] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 235.439936][ T5935] Bluetooth: hci4: command tx timeout [ 235.467267][T14176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.491844][T14176] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.500271][ T1199] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.503097][ T1199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.510441][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.513240][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.577755][ T6896] hsr_slave_0: left promiscuous mode [ 235.580608][ T6896] hsr_slave_1: left promiscuous mode [ 235.583025][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.585843][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.598618][ T6896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.601259][ T6896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.610664][ T6896] veth1_macvtap: left promiscuous mode [ 235.612453][ T6896] veth0_macvtap: left promiscuous mode [ 235.614275][ T6896] veth1_vlan: left promiscuous mode [ 235.724247][ T6896] vlan0 (unregistering): left allmulticast mode [ 235.726300][ T6896] veth0_vlan (unregistering): left allmulticast mode [ 235.778702][ T6896] team0 (unregistering): Port device team_slave_1 removed [ 235.785625][ T6896] team0 (unregistering): Port device team_slave_0 removed [ 236.232746][T14227] trusted_key: syz.1.2337 sent an empty control message without MSG_MORE. [ 236.276240][T14176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 236.296948][T14227] netlink: 'syz.1.2337': attribute type 32 has an invalid length. [ 236.352005][T14229] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2306 sclass=netlink_xfrm_socket pid=14229 comm=syz.1.2337 [ 236.515189][T14176] veth0_vlan: entered promiscuous mode [ 236.529343][T14176] veth1_vlan: entered promiscuous mode [ 236.572620][T14176] veth0_macvtap: entered promiscuous mode [ 236.580696][T14176] veth1_macvtap: entered promiscuous mode [ 236.601701][T14176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.608241][T14176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.615203][ T6879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.625809][ T6879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.641306][ T6879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.649897][ T6896] IPVS: stop unused estimator thread 0... [ 236.659347][ T6879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.678186][T14251] __nla_validate_parse: 4 callbacks suppressed [ 236.678197][T14251] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2341'. [ 236.686393][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.692898][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.708786][T14251] tipc: Enabling of bearer rejected, media not registered [ 236.713030][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.715539][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.725053][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 236.725062][ T40] audit: type=1400 audit(492.546:1398): avc: denied { mounton } for pid=14176 comm="syz-executor" path="/syzkaller.2FgbI2/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=57932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 236.882608][ T5935] Bluetooth: Wrong link type (-71) [ 236.900374][T14255] lo speed is unknown, defaulting to 1000 [ 236.940375][T14262] kvm: kvm [14261]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0x0 [ 237.160763][T14273] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2346'. [ 237.313398][T14273] openvswitch: netlink: IPv4 tun info is not correct [ 237.397960][ T40] audit: type=1804 audit(493.216:1399): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2349" name="/newroot/3/file0" dev="tmpfs" ino=34 res=1 errno=0 [ 237.398054][T14280] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: 1 [ 237.410086][T14280] ref_ctr increment failed for inode: 0x22 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032211880 [ 237.415684][T14280] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -17959, delta: -1 [ 237.420024][T14280] ref_ctr decrement failed for inode: 0x22 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888032211880 [ 237.423687][T14280] uprobe: syz.4.2349:14280 failed to unregister, leaking uprobe [ 237.517862][ T5935] Bluetooth: hci4: command tx timeout [ 237.819268][ T5991] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 237.890348][ T40] audit: type=1400 audit(493.716:1400): avc: denied { write } for pid=14316 comm="syz.0.2363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 237.949767][ T10] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 237.954625][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2365'. [ 237.957944][T14324] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2365'. [ 237.962454][T14325] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2365'. [ 237.968183][ T5991] usb 6-1: device descriptor read/64, error -71 [ 237.987289][T14323] bond5: entered promiscuous mode [ 237.990109][T14323] 8021q: adding VLAN 0 to HW filter on device bond5 [ 238.100232][ T10] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 238.103854][ T10] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 238.108781][ T10] usb 9-1: config 0 interface 0 has no altsetting 0 [ 238.115959][ T10] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.126311][ T10] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 238.129172][ T10] usb 9-1: Product: syz [ 238.130668][ T10] usb 9-1: Manufacturer: syz [ 238.132217][ T10] usb 9-1: SerialNumber: syz [ 238.135389][ T10] usb 9-1: config 0 descriptor?? [ 238.142780][ T10] hub 9-1:0.0: bad descriptor, ignoring hub [ 238.144729][ T10] hub 9-1:0.0: probe with driver hub failed with error -5 [ 238.150466][ T10] usb 9-1: selecting invalid altsetting 0 [ 238.227993][ T5991] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 238.357692][ T5991] usb 6-1: device descriptor read/64, error -71 [ 238.450935][ T10] usb 9-1: USB disconnect, device number 28 [ 238.468671][ T5991] usb usb6-port1: attempt power cycle [ 238.827862][ T5991] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 238.848195][ T5991] usb 6-1: device descriptor read/8, error -71 [ 239.108328][ T5991] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 239.128886][ T5991] usb 6-1: device descriptor read/8, error -71 [ 239.248471][ T5991] usb usb6-port1: unable to enumerate USB device [ 239.324143][T14358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 239.331508][T14357] IPVS: Error connecting to the multicast addr [ 239.334775][T14360] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2375'. [ 239.398591][ T40] audit: type=1400 audit(495.226:1401): avc: denied { listen } for pid=14368 comm="syz.5.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 239.407139][T14369] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000' [ 239.445976][T14372] binder: 14371:14372 ioctl c0306201 2000000003c0 returned -14 [ 239.520734][T14372] orangefs: client-core tried to read wrong size [ 239.597709][ T5935] Bluetooth: hci4: command tx timeout [ 239.827120][T14380] geneve2: entered promiscuous mode [ 239.829383][T14380] geneve2: entered allmulticast mode [ 240.037753][ T829] usb 9-1: new low-speed USB device number 29 using dummy_hcd [ 240.046486][T14387] raw_sendmsg: syz.0.2386 forgot to set AF_INET. Fix it! [ 240.201696][ T829] usb 9-1: config 0 has no interfaces? [ 240.206016][ T829] usb 9-1: string descriptor 0 read error: -22 [ 240.208134][ T829] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 240.211262][ T829] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.215020][ T829] usb 9-1: config 0 descriptor?? [ 240.370732][ T40] audit: type=1800 audit(496.196:1402): pid=14406 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2389" name="nullb0" dev="tmpfs" ino=3133 res=0 errno=0 [ 240.407074][T14410] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2391'. [ 240.417890][T14410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2391'. [ 240.442084][ T839] usb 9-1: USB disconnect, device number 29 [ 240.455276][T14414] netlink: 'syz.0.2393': attribute type 2 has an invalid length. [ 240.462033][T14415] netlink: 'syz.0.2393': attribute type 2 has an invalid length. [ 240.562699][T14427] overlayfs: failed to clone lowerpath [ 240.594087][T14429] netlink: 'syz.0.2398': attribute type 1 has an invalid length. [ 240.606677][T14429] bond6: entered promiscuous mode [ 240.608878][T14429] 8021q: adding VLAN 0 to HW filter on device bond6 [ 240.645138][T14436] openvswitch: netlink: IP tunnel TTL not specified. [ 240.653248][T14438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2400'. [ 240.694458][T14440] netem: change failed [ 240.698440][T14440] netlink: 'syz.0.2401': attribute type 10 has an invalid length. [ 240.986701][T14461] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 240.995044][T14477] fuse: Bad value for 'fd' [ 241.002324][T14477] netlink: 'syz.0.2410': attribute type 1 has an invalid length. [ 241.020986][T14482] 9pnet_virtio: no channels available for device syz [ 241.362854][T14519] tipc: Started in network mode [ 241.364542][T14519] tipc: Node identity 7f000001, cluster identity 4711 [ 241.368375][T14519] tipc: Enabling of bearer rejected, failed to enable media [ 241.381211][T14519] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 241.384780][T14519] tipc: Enabled bearer , priority 10 [ 241.677759][ T5935] Bluetooth: hci4: command tx timeout [ 241.744060][ T40] audit: type=1400 audit(497.566:1403): avc: denied { create } for pid=14542 comm="syz.4.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 242.201053][T14560] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2434'. [ 242.336224][ T40] audit: type=1400 audit(498.156:1404): avc: denied { map } for pid=14567 comm="syz.0.2437" path="socket:[58383]" dev="sockfs" ino=58383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.347139][ T40] audit: type=1400 audit(498.156:1405): avc: denied { read } for pid=14567 comm="syz.0.2437" path="socket:[58383]" dev="sockfs" ino=58383 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 242.505035][ T5929] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.511991][ T5929] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.516004][ T5929] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.519483][ T29] tipc: Node number set to 2130706433 [ 242.521154][ T5929] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.525965][ T5929] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.625325][T14579] lo speed is unknown, defaulting to 1000 [ 242.713758][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.732448][T14579] chnl_net:caif_netlink_parms(): no params data found [ 242.809898][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.815374][T14593] netlink: 'syz.4.2442': attribute type 9 has an invalid length. [ 242.851368][T14579] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.855715][T14579] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.859192][T14579] bridge_slave_0: entered allmulticast mode [ 242.863271][T14579] bridge_slave_0: entered promiscuous mode [ 242.868262][T14579] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.871609][T14579] bridge0: port 2(bridge_slave_1) entered disabled state [ 242.874771][T14579] bridge_slave_1: entered allmulticast mode [ 242.878449][T14579] bridge_slave_1: entered promiscuous mode [ 242.898128][T14579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.912866][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 242.920135][T14599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2444'. [ 242.926011][T14579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.960544][T14579] team0: Port device team_slave_0 added [ 242.963983][T14579] team0: Port device team_slave_1 added [ 242.972847][T14600] ref_ctr_offset mismatch. inode: 0xc30 offset: 0x0 ref_ctr_offset(old): 0x24 ref_ctr_offset(new): 0x0 [ 242.977008][T14579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.980637][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.989651][T14579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.007118][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.013112][T14579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.015545][T14579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.024191][T14579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.050831][T14579] hsr_slave_0: entered promiscuous mode [ 243.053272][T14579] hsr_slave_1: entered promiscuous mode [ 243.055676][T14579] debugfs: 'hsr0' already exists in 'hsr' [ 243.057681][T14579] Cannot create hsr debugfs directory [ 243.293201][ T13] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 243.329466][ T13] bond3 (unregistering): (slave bridge0): Releasing active interface [ 243.503159][ T13] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.507062][ T13] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.510249][ T13] .` (unregistering): Released all slaves [ 243.518413][ T13] bond1 (unregistering): (slave bond2): Releasing backup interface [ 243.522270][ T13] bond1 (unregistering): Released all slaves [ 243.529591][ T13] bond2 (unregistering): Released all slaves [ 243.535967][ T13] bond0 (unregistering): Released all slaves [ 243.542422][ T13] bond3 (unregistering): Released all slaves [ 243.548896][ T13] bond4 (unregistering): Released all slaves [ 243.555367][ T13] bond5 (unregistering): Released all slaves [ 243.562343][ T13] bond6 (unregistering): Released all slaves [ 243.658315][ T13] !: left promiscuous mode [ 243.739842][T14634] Mount JFS Failure: -22 [ 244.024352][T14657] : renamed from vlan0 (while UP) [ 244.107686][ T6092] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 244.190447][T14678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2460'. [ 244.213926][ T13] hsr_slave_0: left promiscuous mode [ 244.216159][ T13] hsr_slave_1: left promiscuous mode [ 244.224835][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.227817][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.257700][ T6092] usb 6-1: Using ep0 maxpacket: 16 [ 244.261124][ T6092] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.264941][ T6092] usb 6-1: config 0 has no interfaces? [ 244.270354][ T6092] usb 6-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 244.273272][ T6092] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.275866][ T6092] usb 6-1: Product: syz [ 244.277243][ T6092] usb 6-1: Manufacturer: syz [ 244.279487][ T6092] usb 6-1: SerialNumber: syz [ 244.286591][ T6092] usb 6-1: config 0 descriptor?? [ 244.286656][T14683] program syz.4.2462 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 244.346473][ T6886] smc: removing ib device syz2 [ 244.499204][T14645] Bluetooth: MGMT ver 1.23 [ 244.521208][ T6092] usb 6-1: USB disconnect, device number 37 [ 244.558411][ T5929] Bluetooth: hci0: command tx timeout [ 244.649614][T14579] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.656522][T14579] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.672730][T14579] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 244.690999][T14579] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 244.754888][T14579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.765231][T14579] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.771410][ T6879] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.773739][ T6879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.779473][ T6879] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.781817][ T6879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.790550][T14712] xt_TCPMSS: Only works on TCP SYN packets [ 244.897341][T14579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.907341][ T13] IPVS: stop unused estimator thread 0... [ 244.924764][T14579] veth0_vlan: entered promiscuous mode [ 244.929861][T14579] veth1_vlan: entered promiscuous mode [ 244.960254][T14579] veth0_macvtap: entered promiscuous mode [ 244.966518][T14579] veth1_macvtap: entered promiscuous mode [ 244.976352][T14579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.983967][T14579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.990880][ T6886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.995052][ T6886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.999896][ T6886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.004089][ T6886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.031823][ T6886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.034369][ T6886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.039753][T14732] PID 14732 killed due to inadequate hugepage pool [ 245.057919][ T6886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.061632][ T6886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.103641][ T40] audit: type=1400 audit(500.926:1406): avc: denied { watch } for pid=14737 comm="syz.0.2439" path="/0/file0" dev="9p" ino=72613981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.113500][ T40] audit: type=1400 audit(500.926:1407): avc: denied { watch_reads } for pid=14737 comm="syz.0.2439" path="/0/file0" dev="9p" ino=72613981 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.118841][T14740] xt_hashlimit: max too large, truncated to 1048576 [ 245.125239][ T40] audit: type=1400 audit(500.926:1408): avc: denied { watch watch_reads } for pid=14737 comm="syz.0.2439" path="/0/file0/file1" dev="9p" ino=72614225 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 245.153663][T14742] 9pnet_virtio: no channels available for device syz [ 245.220829][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2479'. [ 245.383107][ T40] audit: type=1400 audit(501.206:1409): avc: denied { read } for pid=14748 comm="syz.4.2480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 245.633501][ T40] audit: type=1400 audit(501.456:1410): avc: denied { getopt } for pid=14762 comm="syz.5.2482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 245.707732][ T53] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 245.847681][ T53] usb 9-1: device descriptor read/64, error -71 [ 246.009889][T14794] netlink: 'syz.0.2484': attribute type 2 has an invalid length. [ 246.019935][T14794] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2484'. [ 246.099564][ T53] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 246.126334][T14805] netlink: 'syz.0.2487': attribute type 12 has an invalid length. [ 246.247718][ T53] usb 9-1: device descriptor read/64, error -71 [ 246.321259][T14810] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2488'. [ 246.357899][ T53] usb usb9-port1: attempt power cycle [ 246.372113][T14811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 246.372143][T14812] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 246.463245][ T40] audit: type=1400 audit(502.286:1411): avc: denied { audit_read } for pid=14815 comm="syz.5.2490" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 246.463425][T14816] veth0: entered promiscuous mode [ 246.476245][T14816] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2490'. [ 246.633891][ T5935] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 246.639552][ T5935] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 246.643002][ T5935] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 246.645988][ T5935] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 246.648713][ T5935] Bluetooth: hci0: command tx timeout [ 246.652339][ T5935] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 246.671089][T14829] lo speed is unknown, defaulting to 1000 [ 246.717923][ T53] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 246.748233][ T53] usb 9-1: device descriptor read/8, error -71 [ 246.764704][T14829] chnl_net:caif_netlink_parms(): no params data found [ 246.807407][T14829] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.810450][T14829] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.812892][T14829] bridge_slave_0: entered allmulticast mode [ 246.815822][T14829] bridge_slave_0: entered promiscuous mode [ 246.820107][T14829] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.822799][T14829] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.825102][T14829] bridge_slave_1: entered allmulticast mode [ 246.827801][T14829] bridge_slave_1: entered promiscuous mode [ 246.843775][T14829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.848777][T14829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.860463][T14843] netfs: Couldn't get user pages (rc=-14) [ 246.867280][T14829] team0: Port device team_slave_0 added [ 246.871387][T14829] team0: Port device team_slave_1 added [ 246.884273][T14829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.886542][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.894711][T14829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.899794][T14829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.902003][T14829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.910466][T14829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.933062][T14829] hsr_slave_0: entered promiscuous mode [ 246.935308][T14829] hsr_slave_1: entered promiscuous mode [ 246.937444][T14829] debugfs: 'hsr0' already exists in 'hsr' [ 246.940459][T14829] Cannot create hsr debugfs directory [ 247.007759][ T53] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 247.038276][ T53] usb 9-1: device descriptor read/8, error -71 [ 247.066424][T14829] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.071509][T14829] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.087346][T14848] ip6gre1: entered allmulticast mode [ 247.091227][T14848] team0: Device ip6gre1 is of different type [ 247.137106][T14829] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.140795][T14829] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.147853][ T53] usb usb9-port1: unable to enumerate USB device [ 247.262249][T14829] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.265427][T14829] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.442216][T14829] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.445569][T14829] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.594269][T14829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.600223][T14829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.604295][T14829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.608519][T14829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.611153][ T40] audit: type=1400 audit(503.436:1412): avc: denied { write } for pid=14876 comm="syz.0.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 247.644984][T14829] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.647856][T14829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.654113][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2509'. [ 247.663965][T14887] tmpfs: Bad value for 'mpol' [ 247.702369][T14829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.715098][ T1199] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.727415][T14829] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.733383][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.735679][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.743143][ T1199] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.745463][ T1199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.800862][T14897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14897 comm=syz.5.2513 [ 247.810552][T14906] No buffer was provided with the request [ 247.849763][T14897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2566 sclass=netlink_route_socket pid=14897 comm=syz.5.2513 [ 247.880724][T14829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.902499][T14829] veth0_vlan: entered promiscuous mode [ 247.907340][T14829] veth1_vlan: entered promiscuous mode [ 247.923767][T14829] veth0_macvtap: entered promiscuous mode [ 247.931610][T14829] veth1_macvtap: entered promiscuous mode [ 247.939502][T14829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.944957][T14829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.951415][ T1199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.954242][ T1199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.963812][ T1199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.966714][ T1199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.004113][ T6886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.006750][ T6886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.007458][T14920] Cannot find add_set index 65532 as target [ 248.030125][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.033353][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.252902][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2518'. [ 248.310542][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 248.456232][T14940] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 248.468467][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 248.479349][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.483449][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.487518][ T10] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 248.491925][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.499390][ T10] usb 6-1: config 0 descriptor?? [ 248.583104][T14952] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 248.589368][ T40] audit: type=1400 audit(504.416:1413): avc: denied { accept } for pid=14949 comm="syz.4.2523" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 248.719178][ T5935] Bluetooth: hci1: command tx timeout [ 248.826769][T14962] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 248.829319][T14962] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 248.833231][T14962] vhci_hcd vhci_hcd.0: Device attached [ 248.837886][T14968] netlink: 'syz.5.2527': attribute type 6 has an invalid length. [ 248.846243][T14968] netlink: 'syz.5.2527': attribute type 4 has an invalid length. [ 248.850087][T14968] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2527'. [ 248.885650][T14966] can: request_module (can-proto-5) failed. [ 248.899098][T14977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2528'. [ 248.915367][ T10] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 248.930449][ T40] audit: type=1400 audit(504.746:1414): avc: denied { create } for pid=14979 comm="syz.0.2529" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.937373][ T40] audit: type=1400 audit(504.756:1415): avc: denied { mounton } for pid=14979 comm="syz.0.2529" path="/17/file0" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 248.941399][T14976] : entered promiscuous mode [ 249.079976][ T6092] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 249.097754][ T5969] usb 9-1: new full-speed USB device number 34 using dummy_hcd [ 249.214135][ T6025] usb 6-1: USB disconnect, device number 38 [ 249.229157][ T5969] usb 9-1: device descriptor read/64, error -71 [ 249.478676][ T5969] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 249.607786][ T5969] usb 9-1: device descriptor read/64, error -71 [ 249.717930][ T5969] usb usb9-port1: attempt power cycle [ 249.753320][ T40] audit: type=1400 audit(505.576:1416): avc: denied { connect } for pid=14997 comm="syz.5.2533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 249.754952][T14998] ALSA: mixer_oss: invalid OSS volume '' [ 249.762226][T15000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2532'. [ 249.833891][T15012] binder: 15011:15012 ioctl c018620c 200000000140 returned -1 [ 249.950834][T15026] SELinux: unknown common  [ 249.952441][T15026] SELinux: failed to load policy [ 250.064655][ T40] audit: type=1400 audit(505.886:1417): avc: denied { read } for pid=15033 comm="syz.1.2544" name="file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.073278][ T40] audit: type=1400 audit(505.886:1418): avc: denied { open } for pid=15033 comm="syz.1.2544" path="/7/file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.082370][ T40] audit: type=1400 audit(505.886:1419): avc: denied { ioctl } for pid=15033 comm="syz.1.2544" path="/7/file0" dev="tmpfs" ino=54 ioctlcmd=0x1285 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.090044][ T5969] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 250.107667][ T40] audit: type=1400 audit(505.926:1420): avc: denied { unlink } for pid=14829 comm="syz-executor" name="file0" dev="tmpfs" ino=54 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 250.118233][ T5969] usb 9-1: device descriptor read/8, error -71 [ 250.143942][T15041] netlink: 'syz.1.2547': attribute type 8 has an invalid length. [ 250.185402][T15043] netlink: 'syz.1.2548': attribute type 21 has an invalid length. [ 250.187981][T15043] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2548'. [ 250.246936][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 250.248616][T15043] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 250.251273][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.258287][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 250.261413][ C1] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.265152][ C1] Buffer I/O error on dev loop6, logical block 1, async page read [ 250.268354][ C1] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.272106][ C1] Buffer I/O error on dev loop6, logical block 2, async page read [ 250.275213][ C1] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.279304][ C1] Buffer I/O error on dev loop6, logical block 3, async page read [ 250.282450][ C1] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.285621][ C1] Buffer I/O error on dev loop6, logical block 4, async page read [ 250.288154][ C1] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.288939][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 250.291145][ C1] Buffer I/O error on dev loop6, logical block 5, async page read [ 250.296534][ C1] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.297779][ T6025] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 250.299584][ C1] Buffer I/O error on dev loop6, logical block 6, async page read [ 250.305235][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.309545][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 250.312694][ C3] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 250.316552][ C3] Buffer I/O error on dev loop6, logical block 1, async page read [ 250.319858][ C3] Buffer I/O error on dev loop6, logical block 2, async page read [ 250.354499][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2550'. [ 250.357809][ T5969] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 250.388395][ T5969] usb 9-1: device descriptor read/8, error -71 [ 250.429938][T15054] openvswitch: netlink: Missing key (keys=40, expected=80) [ 250.449161][ T6025] usb 10-1: config index 0 descriptor too short (expected 65394, got 72) [ 250.454417][ T6025] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 250.459495][ T6025] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.462792][ T6025] usb 10-1: Product: syz [ 250.464638][ T6025] usb 10-1: Manufacturer: syz [ 250.466701][ T6025] usb 10-1: SerialNumber: syz [ 250.474080][ T6025] usb 10-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 250.489123][ T9] usb 10-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 250.498168][ T5969] usb usb9-port1: unable to enumerate USB device [ 250.546063][T15056] fuse: Bad value for 'fd' [ 250.546077][T15057] fuse: Bad value for 'fd' [ 250.723315][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.725271][T15038] 9p: Bad value for 'version' [ 250.725852][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.728156][ T40] audit: type=1400 audit(506.556:1421): avc: denied { read } for pid=15037 comm="syz.5.2546" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 250.730294][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.739499][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.741981][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.744441][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.746840][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.749593][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.751976][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.754322][ T10] hid-generic 0005:00B6:0009.000E: unknown main item tag 0x0 [ 250.782261][ T10] hid-generic 0005:00B6:0009.000E: hidraw1: BLUETOOTH HID v1ade12.f3 Device [syz0] on syz1 [ 250.787972][ T6025] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 250.827943][T15060] fido_id[15060]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 250.937717][ T53] psmouse serio2: Failed to reset mouse on : -5 [ 250.937977][ T6025] usb 6-1: Using ep0 maxpacket: 8 [ 250.943072][ T6025] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 250.945898][ T6025] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 250.949318][ T6025] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 250.952491][ T6025] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 250.955657][ T6025] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 250.959884][ T6025] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 250.962862][ T6025] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.973512][ T6025] usbtmc 6-1:16.0: bulk endpoints not found [ 251.518016][ T9] ath9k_htc 10-1:1.0: ath9k_htc: Target is unresponsive [ 251.520578][ T9] ath9k_htc: Failed to initialize the device [ 251.538983][ T9] usb 10-1: ath9k_htc: USB layer deinitialized [ 251.680084][ T5935] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 251.683294][ T5935] Bluetooth: hci0: Injecting HCI hardware error event [ 251.686652][ T5929] Bluetooth: hci0: hardware error 0x00 [ 251.802631][T14969] vhci_hcd: connection reset by peer [ 251.805049][ T6896] vhci_hcd vhci_hcd.4: stop threads [ 251.806796][ T6896] vhci_hcd vhci_hcd.4: release socket [ 251.808872][ T6896] vhci_hcd vhci_hcd.4: disconnect device [ 251.874767][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 251.877749][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.907520][ T839] usb 6-1: USB disconnect, device number 39 [ 251.913117][T15068] netlink: 'syz.4.2555': attribute type 12 has an invalid length. [ 251.935406][T15070] loop5: detected capacity change from 0 to 2640 [ 251.986195][T15078] netlink: 'syz.1.2558': attribute type 11 has an invalid length. [ 251.990395][T15078] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2558'. [ 252.134776][T15087] tipc: Started in network mode [ 252.136924][T15087] tipc: Node identity ac14140f, cluster identity 4711 [ 252.140428][T15087] tipc: New replicast peer: 255.255.255.255 [ 252.143539][T15087] tipc: Enabled bearer , priority 10 [ 252.146706][T15087] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2561'. [ 252.150828][T15087] tipc: Disabling bearer [ 252.188120][T15091] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 252.318980][ T5935] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 252.322584][ T5935] Bluetooth: hci2: Injecting HCI hardware error event [ 252.325767][ T63] Bluetooth: hci2: hardware error 0x00 [ 252.917951][T15142] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 252.920554][T15142] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 252.923041][T15142] __nla_validate_parse: 1 callbacks suppressed [ 252.923049][T15142] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2577'. [ 252.930165][T15142] netlink: 'syz.1.2577': attribute type 4 has an invalid length. [ 252.932740][T15142] netlink: 'syz.1.2577': attribute type 1 has an invalid length. [ 252.935238][T15142] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2577'. [ 253.063232][T15154] lo speed is unknown, defaulting to 1000 [ 253.071281][T15155] lo speed is unknown, defaulting to 1000 [ 253.291238][ T6535] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 253.447825][ T6535] usb 6-1: Using ep0 maxpacket: 32 [ 253.451093][ T6535] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 253.453810][ T6535] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 253.458603][ T6535] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 253.461570][ T6535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 253.463519][T15159] team0 (unregistering): Port device team_slave_0 removed [ 253.464726][ T6535] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 253.470298][ T6535] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 14385, setting to 1024 [ 253.472045][T15159] team0 (unregistering): Port device team_slave_1 removed [ 253.473816][ T6535] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 253.479723][ T6535] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 253.484147][ T6535] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 253.487054][ T6535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.492009][ T6535] usb 6-1: config 0 descriptor?? [ 253.495049][T15152] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.611407][T15163] input: syz1 as /devices/virtual/input/input45 [ 253.618867][T15163] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2584'. [ 253.701777][T15152] wg2: entered promiscuous mode [ 253.704095][ T6535] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 40 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 253.768120][ T5929] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 253.793926][T15169] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 253.858961][T15167] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 253.909366][ C1] usblp0: nonzero read bulk status received: -71 [ 253.918677][ T6535] usb 6-1: USB disconnect, device number 40 [ 253.923595][ T6535] usblp0: removed [ 254.228648][ T6092] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 254.398324][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 254.449772][T15175] loop4: detected capacity change from 0 to 7 [ 254.453534][T13782] ldm_validate_partition_table(): Disk read failed. [ 254.455772][T13782] Dev loop4: unable to read RDB block 0 [ 254.457792][T13782] loop4: unable to read partition table [ 254.459688][T13782] loop4: partition table beyond EOD, truncated [ 254.462385][T15175] ldm_validate_partition_table(): Disk read failed. [ 254.464619][T15175] Dev loop4: unable to read RDB block 0 [ 254.466532][T15175] loop4: unable to read partition table [ 254.468601][T15175] loop4: partition table beyond EOD, truncated [ 254.470670][T15175] loop_reread_partitions: partition scan of loop4 (Sj %`ր5) failed (rc=-5) [ 254.777772][ T53] misc userio: Buffer overflowed, userio client isn't keeping up [ 254.797778][ T63] Bluetooth: hci1: command tx timeout [ 254.981248][T15202] /dev/nullb0: Can't open blockdev [ 255.084435][T15206] fuse: Unknown parameter 'root0004000r_id' [ 255.442384][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2607'. [ 255.446176][T15234] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2607'. [ 255.451373][T15234] netlink: 'syz.0.2607': attribute type 7 has an invalid length. [ 255.676556][T15248] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2611'. [ 255.711530][T15250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.802648][T15257] netlink: 'syz.1.2614': attribute type 8 has an invalid length. [ 255.803286][T15258] netlink: 'syz.1.2614': attribute type 8 has an invalid length. [ 255.829818][ T53] input: PS/2 Generic Mouse as /devices/serio2/input/input44 [ 255.877749][ T6535] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 256.029986][ T6535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 256.033506][ T6535] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 256.036591][ T6535] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 256.041297][ T6535] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 256.045856][ T6535] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.051199][ T6535] usb 5-1: config 0 descriptor?? [ 256.059817][ T53] psmouse serio2: Failed to enable mouse on [ 256.093213][ T839] usb 10-1: USB disconnect, device number 23 [ 256.125068][T15266] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2616'. [ 256.131285][T15264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2616'. [ 256.308466][ T53] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 256.461118][ T6535] plantronics 0003:047F:FFFF.000F: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 256.610506][T15300] netlink: 'syz.1.2622': attribute type 1 has an invalid length. [ 256.623112][T15300] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.627864][ T53] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 256.633593][T15300] bond2: (slave ip6erspan0): making interface the new active one [ 256.636797][T15300] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 256.718070][ T839] usb 5-1: USB disconnect, device number 33 [ 256.747417][T15307] syzkaller0: entered promiscuous mode [ 256.749791][T15307] syzkaller0: entered allmulticast mode [ 256.792669][ T53] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 256.795705][ T53] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 256.800136][ T53] usb 9-1: Product: syz [ 256.801988][ T53] usb 9-1: Manufacturer: syz [ 256.803754][ T53] usb 9-1: SerialNumber: syz [ 256.811160][ T53] usb 9-1: config 0 descriptor?? [ 256.816483][ T53] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 256.819546][ T53] dvb-usb: bulk message failed: -22 (2/0) [ 256.825846][ T53] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 256.830172][ T53] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 256.832811][ T53] usb 9-1: media controller created [ 256.839676][ T53] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 256.877766][ T63] Bluetooth: hci1: command tx timeout [ 257.014195][T15283] dvb-usb: bulk message failed: -22 (4/0) [ 257.017048][T15283] cxusb: i2c read failed [ 257.027358][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 257.027368][ T40] audit: type=1400 audit(512.846:1424): avc: denied { setopt } for pid=15281 comm="syz.4.2620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 257.142663][ T53] cxusb: set interface failed [ 257.144238][ T53] dvb-usb: bulk message failed: -22 (1/0) [ 257.166522][ T53] DVB: Unable to find symbol mt352_attach() [ 257.168609][ T53] dvb-usb: bulk message failed: -22 (5/0) [ 257.170686][ T53] zl10353_read_register: readreg error (reg=127, ret==-121) [ 257.173097][ T53] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 257.219438][ T53] rc_core: IR keymap rc-dvico-mce not found [ 257.221416][ T53] Registered IR keymap rc-empty [ 257.223561][ T53] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 257.229378][ T53] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input46 [ 257.234038][ T53] dvb-usb: schedule remote query interval to 100 msecs. [ 257.236307][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 257.243638][ T53] usb 9-1: USB disconnect, device number 38 [ 257.285096][ T53] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 260.638429][ C3] ------------[ cut here ]------------ [ 260.641157][ C3] ODEBUG: free active (active state 0) object: ffff888023c1b890 object type: timer_list hint: rose_t0timer_expiry+0x0/0x150 [ 260.646142][ C3] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#3: swapper/3/0 [ 260.650070][ C3] Modules linked in: [ 260.652202][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.652615][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.654542][ T1417] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.658657][ C3] Tainted: [L]=SOFTLOCKUP [ 260.662394][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.666357][ C3] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 260.668769][ C3] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 72 78 ee 0b 41 56 48 8b 14 dd 60 ec 1a 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 9c 48 e4 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 260.676313][ C3] RSP: 0018:ffffc900006f8a38 EFLAGS: 00010246 [ 260.678830][ C3] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 260.682121][ C3] RDX: ffffffff8c1aeba0 RSI: ffffffff8c1ae7c0 RDI: ffffffff90e333c0 [ 260.685294][ C3] RBP: 0000000000000001 R08: ffff888023c1b890 R09: ffffffff8bb2c880 [ 260.688605][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1ae7c0 [ 260.691861][ C3] R13: ffffffff8bb2c8c0 R14: ffffffff8a6eed50 R15: ffffc900006f8b38 [ 260.695113][ C3] FS: 0000000000000000(0000) GS:ffff8880d668b000(0000) knlGS:0000000000000000 [ 260.698822][ C3] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 260.701352][ C3] CR2: 00007f691999a6b0 CR3: 000000000e596000 CR4: 0000000000352ef0 [ 260.704291][ C3] Call Trace: [ 260.705742][ C3] [ 260.706954][ C3] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 260.709378][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 260.711277][ C3] debug_check_no_obj_freed+0x4da/0x630 [ 260.713130][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 260.715729][ C3] ? do_raw_spin_lock+0x128/0x260 [ 260.717390][ C3] ? rose_timer_expiry+0x53f/0x630 [ 260.719021][ C3] kfree+0x343/0x670 [ 260.720293][ C3] rose_timer_expiry+0x53f/0x630 [ 260.721834][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 260.723602][ C3] call_timer_fn+0x19a/0x590 [ 260.725104][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 260.726751][ C3] ? __run_timers+0x747/0xac0 [ 260.728341][ C3] ? __run_timers+0x747/0xac0 [ 260.729866][ C3] ? rcu_is_watching+0x12/0xc0 [ 260.731403][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 260.733217][ C3] __run_timers+0x757/0xac0 [ 260.734894][ C3] ? __pfx___run_timers+0x10/0x10 [ 260.736563][ C3] run_timer_base+0x114/0x190 [ 260.738144][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 260.739759][ C3] ? rcu_is_watching+0x12/0xc0 [ 260.741266][ C3] run_timer_softirq+0x1a/0x50 [ 260.742770][ C3] handle_softirqs+0x1ea/0x910 [ 260.744374][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 260.746096][ C3] __irq_exit_rcu+0xef/0x150 [ 260.747665][ C3] irq_exit_rcu+0x9/0x30 [ 260.748991][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 260.750726][ C3] [ 260.751687][ C3] [ 260.752659][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.754768][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 260.756648][ C3] Code: 0e 91 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 ed 2a 00 fb f4 3c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 260.762669][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000206 [ 260.764700][ C3] RAX: 0000000000236009 RBX: ffff88801ee8a480 RCX: ffffffff8b80ac75 [ 260.767225][ C3] RDX: 0000000000000000 RSI: ffffffff8de6b9c0 RDI: ffffffff8c1adaa0 [ 260.769798][ C3] RBP: 0000000000000003 R08: 0000000000000001 R09: ffffed100d4e6755 [ 260.772319][ C3] R10: ffff88806a733aab R11: 0000000000000000 R12: ffffed1003dd1490 [ 260.774956][ C3] R13: 0000000000000003 R14: ffffffff90d8d0d0 R15: 0000000000000000 [ 260.777388][ C3] ? ct_kernel_exit+0x125/0x180 [ 260.778980][ C3] default_idle+0x9/0x10 [ 260.780383][ C3] default_idle_call+0x6c/0xb0 [ 260.781919][ C3] do_idle+0x35b/0x4b0 [ 260.783328][ C3] ? __pfx_do_idle+0x10/0x10 [ 260.785414][ C3] ? do_idle+0x2b8/0x4b0 [ 260.787291][ C3] cpu_startup_entry+0x4f/0x60 [ 260.789404][ C3] start_secondary+0x21d/0x2d0 [ 260.791376][ C3] ? __pfx_start_secondary+0x10/0x10 [ 260.793498][ C3] common_startup_64+0x13e/0x148 [ 260.795115][ C3] [ 260.796147][ C3] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.798497][ C3] CPU: 3 UID: 0 PID: 0 Comm: swapper/3 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.801843][ C3] Tainted: [L]=SOFTLOCKUP [ 260.803312][ C3] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 260.806640][ C3] Call Trace: [ 260.807719][ C3] [ 260.808698][ C3] dump_stack_lvl+0x100/0x190 [ 260.810205][ C3] vpanic+0x552/0x970 [ 260.811510][ C3] ? __pfx_vpanic+0x10/0x10 [ 260.813274][ C3] panic+0xd1/0xe0 [ 260.814870][ C3] ? __pfx_panic+0x10/0x10 [ 260.816560][ C3] ? check_panic_on_warn+0x1f/0x90 [ 260.818213][ C3] check_panic_on_warn.cold+0x19/0x34 [ 260.819946][ C3] ? debug_print_object+0x18e/0x2a0 [ 260.822022][ C3] __warn.cold+0x191/0x2f8 [ 260.823952][ C3] __report_bug+0x296/0x3d0 [ 260.825589][ C3] ? debug_print_object+0x18e/0x2a0 [ 260.827176][ C3] ? __pfx___report_bug+0x10/0x10 [ 260.828836][ C3] report_bug_entry+0xe1/0x290 [ 260.830394][ C3] ? debug_print_object+0x19b/0x2a0 [ 260.832092][ C3] handle_bug+0x1c9/0x2a0 [ 260.833682][ C3] exc_invalid_op+0x17/0x50 [ 260.835293][ C3] asm_exc_invalid_op+0x1a/0x20 [ 260.836865][ C3] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 260.838712][ C3] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 72 78 ee 0b 41 56 48 8b 14 dd 60 ec 1a 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 9c 48 e4 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 260.844908][ C3] RSP: 0018:ffffc900006f8a38 EFLAGS: 00010246 [ 260.846835][ C3] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 260.849374][ C3] RDX: ffffffff8c1aeba0 RSI: ffffffff8c1ae7c0 RDI: ffffffff90e333c0 [ 260.851899][ C3] RBP: 0000000000000001 R08: ffff888023c1b890 R09: ffffffff8bb2c880 [ 260.854812][ C3] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1ae7c0 [ 260.857944][ C3] R13: ffffffff8bb2c8c0 R14: ffffffff8a6eed50 R15: ffffc900006f8b38 [ 260.860447][ C3] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 260.862249][ C3] ? __pfx_rose_t0timer_expiry+0x10/0x10 [ 260.864274][ C3] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 260.866141][ C3] debug_check_no_obj_freed+0x4da/0x630 [ 260.867906][ C3] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 260.869875][ C3] ? do_raw_spin_lock+0x128/0x260 [ 260.871484][ C3] ? rose_timer_expiry+0x53f/0x630 [ 260.873200][ C3] kfree+0x343/0x670 [ 260.874622][ C3] rose_timer_expiry+0x53f/0x630 [ 260.876228][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 260.877982][ C3] call_timer_fn+0x19a/0x590 [ 260.879499][ C3] ? __pfx_call_timer_fn+0x10/0x10 [ 260.881180][ C3] ? __run_timers+0x747/0xac0 [ 260.882696][ C3] ? __run_timers+0x747/0xac0 [ 260.884313][ C3] ? rcu_is_watching+0x12/0xc0 [ 260.885903][ C3] ? __pfx_rose_timer_expiry+0x10/0x10 [ 260.887743][ C3] __run_timers+0x757/0xac0 [ 260.889590][ C3] ? __pfx___run_timers+0x10/0x10 [ 260.891560][ C3] run_timer_base+0x114/0x190 [ 260.893127][ C3] ? __pfx_run_timer_base+0x10/0x10 [ 260.894792][ C3] ? rcu_is_watching+0x12/0xc0 [ 260.896344][ C3] run_timer_softirq+0x1a/0x50 [ 260.897882][ C3] handle_softirqs+0x1ea/0x910 [ 260.899418][ C3] ? __pfx_handle_softirqs+0x10/0x10 [ 260.901144][ C3] __irq_exit_rcu+0xef/0x150 [ 260.902636][ C3] irq_exit_rcu+0x9/0x30 [ 260.904004][ C3] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 260.905864][ C3] [ 260.906828][ C3] [ 260.907795][ C3] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 260.909722][ C3] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 260.911540][ C3] Code: 0e 91 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 83 ed 2a 00 fb f4 3c 34 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 260.917642][ C3] RSP: 0018:ffffc90000197df0 EFLAGS: 00000206 [ 260.919666][ C3] RAX: 0000000000236009 RBX: ffff88801ee8a480 RCX: ffffffff8b80ac75 [ 260.922211][ C3] RDX: 0000000000000000 RSI: ffffffff8de6b9c0 RDI: ffffffff8c1adaa0 [ 260.924732][ C3] RBP: 0000000000000003 R08: 0000000000000001 R09: ffffed100d4e6755 [ 260.927253][ C3] R10: ffff88806a733aab R11: 0000000000000000 R12: ffffed1003dd1490 [ 260.929707][ C3] R13: 0000000000000003 R14: ffffffff90d8d0d0 R15: 0000000000000000 [ 260.932196][ C3] ? ct_kernel_exit+0x125/0x180 [ 260.933769][ C3] default_idle+0x9/0x10 [ 260.935142][ C3] default_idle_call+0x6c/0xb0 [ 260.936694][ C3] do_idle+0x35b/0x4b0 [ 260.938004][ C3] ? __pfx_do_idle+0x10/0x10 [ 260.939485][ C3] ? do_idle+0x2b8/0x4b0 [ 260.940865][ C3] cpu_startup_entry+0x4f/0x60 [ 260.942399][ C3] start_secondary+0x21d/0x2d0 [ 260.943948][ C3] ? __pfx_start_secondary+0x10/0x10 [ 260.945708][ C3] common_startup_64+0x13e/0x148 [ 260.947292][ C3] [ 260.954630][ C3] Kernel Offset: disabled [ 260.956050][ C3] Rebooting in 86400 seconds..