last executing test programs: 1m44.30481633s ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='md0\x00', 0x4) close(r0) (async, rerun: 32) write(r0, &(0x7f0000002400)="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", 0x110) (async, rerun: 32) close(0xffffffffffffffff) (async, rerun: 64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x101200, 0x60) (rerun: 64) close(r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f00000022c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002280)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@mon_options]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) (async) ioctl$VIDIOC_S_JPEGCOMP(r1, 0x408c563e, &(0x7f00000001c0)={0x0, 0x8, 0x35, "d96864ebf317acc6c62c2bb2fc3c9631a241dab092180687a13db765a67939aabe8790e0e8d69458517eb30d68b872433d3b0ac65efab911010ca80c", 0x1d, "02dd75b5a108910dc7ce9b459639dd32b970e711eafc1fed7a63d5a8fac09df0ed2f1f3303876a7dc3fdadcce6e78a7cb1defb77fb8a99d37ea0c837", 0xe8}) (async) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async, rerun: 32) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32) read$nci(r5, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00']) read$FUSE(r7, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) (async, rerun: 64) write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xfffffffffffffff5, r8, {0xff}}, 0x18) (rerun: 64) read$FUSE(r7, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r7, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r9}, 0x10) (async) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) fcntl$lock(r10, 0x7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) 1m44.032593381s ago: executing program 3 (id=52): mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") open(&(0x7f0000000140)='./file0\x00', 0x2a4c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x1c2) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0xfffffffffffffd9a) r1 = add_key$fscrypt_provisioning(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)={0x2, 0x0, @b}, 0x48, 0xfffffffffffffffe) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r1, r2, 0x0, 0x1) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") 1m44.028232307s ago: executing program 3 (id=56): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x9, 0x1a}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x801}, 0x4) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='binfmt_misc\x00', 0x800, &(0x7f0000000200)='nl80211\x00') r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000005c0)={0x0, &(0x7f0000000240)=[@nested_create_vm={0x12d, 0x18, 0x2}, @nested_load_code={0x12e, 0x74, {0x1, "420f01320f20e035004000000f22e0b984050000b861740000ba000000000f3045332d0000010066ba200066edc4025db6ccc744240000000000c74424027eb3ab86c7442406000000000f011424420f353e0f01c8c462c0f3542601"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x62, 0x6, 0x7, 0x1}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x4a6, 0xb, 0x4, 0x8}}, @nested_create_vm={0x12d, 0x18}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @set_irq_handler={0xc8, 0x20, {0x5b}}, @nested_create_vm={0x12d, 0x18, 0x1}, @cpuid={0x64, 0x18, {0x4, 0x2}}, @wr_drn={0x68, 0x20, {0x2}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x34b4, 0x1, 0xb583}}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4828, 0x5de, 0x0, 0x2}}, @rdmsr={0x66, 0x18, {0xb3c}}, @nested_create_vm={0x12d, 0x18, 0x3}, @cpuid={0x64, 0x18, {0xfffffa03, 0x4}}, @in_dx={0x69, 0x20, {0xa8f1, 0x3d5de11c27d87473}}, @in_dx={0x69, 0x20, {0x6de8, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x616, 0x5, 0x2}}, @wr_crn={0x67, 0x20, {0x2}}, @wrmsr={0x65, 0x20, {0x39a, 0x7b7}}], 0x354}) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000600)={0x2, 0x0, [{0xc0011022, 0x0, 0xff}, {0x325, 0x0, 0x2f530006}]}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000780)=0xe8) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg2\x00', 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000800)={{0x1, 0x1, 0x18, r1, {0xee01, 0xee01}}, './file0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)=@acquire={0x2b8, 0x17, 0x100, 0x70bd29, 0x25dfdbfe, {{@in6=@empty, 0x4d2, 0x32}, @in=@broadcast, {@in6=@dev={0xfe, 0x80, '\x00', 0x31}, @in=@remote, 0x4e21, 0x100, 0x4e21, 0x1, 0x2, 0x0, 0x80, 0x2c, 0x0, r3}, {{@in6=@loopback, @in=@multicast1, 0x4e21, 0x0, 0x4e22, 0x7, 0x2, 0x40, 0xa0, 0x84, r4, r6}, {0x9, 0xb658, 0x8, 0x52d4663d, 0x5, 0x5, 0x3, 0x3}, {0x8, 0xf65a, 0x0, 0x9}, 0x4, 0x6e6bb9, 0x0, 0x0, 0x1, 0x1}, 0xfffffc00, 0x49f7, 0x4, 0x70bd2b}, [@coaddr={0x14, 0xe, @in=@loopback}, @proto={0x5, 0x19, 0xff}, @lastused={0xc, 0xf, 0xb9}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}, @algo_comp={0xb3, 0x3, {{'lzs\x00'}, 0x358, "a6f679c9c573255d595b01d5c7ca73f1b61d2cb84e2825c32e560bd1f8ba5cd0bd2b4aa457a03655963a5932f3aa8a55c06f025c1648c1f4ed772b754438e41f6a8ea0ad352892150074e707abd352db0202a475929106bc37936b862c85e10d474f82c619a0f472d16dcd"}}, @srcaddr={0x14, 0xd, @in6=@mcast2}, @algo_auth_trunc={0x5e, 0x14, {{'md5-generic\x00'}, 0x90, 0xc0, "78c98da3e7cbd2bfb7ed3cf2bc5f410365ef"}}, @lifetime_val={0x24, 0x9, {0x4, 0x0, 0x5fb4, 0x2}}, @srcaddr={0x14, 0xd, @in6=@empty}]}, 0x2b8}, 0x1, 0x0, 0x0, 0x24040054}, 0x8800) (async) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000bc0), r5) sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, r7, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xffff}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8010}, 0x40) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000d40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r5, &(0x7f0000001500)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000014c0)={&(0x7f0000000d80)={0x734, r0, 0x300, 0x70bd28, 0x80, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x52}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PEER_MEASUREMENTS={0x54c, 0x111, 0x0, 0x1, {0x548, 0x5, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x1bc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_REQ={0x1a0, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x7c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xfffd}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1f}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x110, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7ff}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xf}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x38, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xe}]}, @NL80211_PMSR_TYPE_FTM={0x14, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}, {0x36c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_REQ={0x15c, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_DATA={0x84, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x9}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x76f}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0xd0, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1a}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x2}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0xedc}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xe}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}]}]}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_REQ={0x200, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_DATA={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x5}]}, @NL80211_PMSR_TYPE_FTM={0x8, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x3c, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x24, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x4}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x114, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x30, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x40, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x12}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xa}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0xb}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x20, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0xf}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8, 0x2, 0x1}]}, @NL80211_PMSR_TYPE_FTM={0x2c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_BURST_DURATION={0x5, 0x5, 0x3}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x6}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x1}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_PREAMBLE={0x8}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_BURST_PERIOD={0x6, 0x4, 0x7f}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x4}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x15}]}, @NL80211_PMSR_TYPE_FTM={0x18, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x9}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_CIVICLOC={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x18}]}, @NL80211_PMSR_TYPE_FTM={0xc, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x19}]}]}, @NL80211_PMSR_REQ_ATTR_DATA={0x74, 0x1, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x34, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xc}, @NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0x8}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_LMR_FEEDBACK={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x2}]}, @NL80211_PMSR_TYPE_FTM={0x1c, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_NUM_BURSTS_EXP={0x5, 0x3, 0xd}, @NL80211_PMSR_FTM_REQ_ATTR_NUM_FTMR_RETRIES={0x5, 0x7, 0x7}, @NL80211_PMSR_FTM_REQ_ATTR_ASAP={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_NON_TRIGGER_BASED={0x4}]}, @NL80211_PMSR_TYPE_FTM={0x10, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_REQ_ATTR_REQUEST_LCI={0x4}, @NL80211_PMSR_FTM_REQ_ATTR_FTMS_PER_BURST={0x5, 0x6, 0x3}]}]}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_PEER_MEASUREMENTS={0xa4, 0x111, 0x0, 0x1, {0xa0, 0x5, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x24, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffc0}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}]}, {0x5c, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @device_b}]}]}}, @NL80211_ATTR_PEER_MEASUREMENTS={0xe4, 0x111, 0x0, 0x1, {0xe0, 0x5, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@NL80211_PMSR_PEER_ATTR_CHAN={0x34, 0x2, 0x0, 0x1, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x11d}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_CHAN={0x1c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x21}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xdef}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0x4c, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xd1}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x23}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2f}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x51}]}, @NL80211_PMSR_PEER_ATTR_CHAN={0xc, 0x2, 0x0, 0x1, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}]}, @NL80211_PMSR_PEER_ATTR_ADDR={0xa, 0x1, @broadcast}, @NL80211_PMSR_PEER_ATTR_REQ={0xc, 0x3, 0x0, 0x1, [@NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}, @NL80211_PMSR_REQ_ATTR_GET_AP_TSF={0x4}]}]}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x100}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x734}, 0x1, 0x0, 0x0, 0x1}, 0x40885) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000001580)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x0, 0x118, 0x1e8, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000001540), {[{{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, [0xff000000], [0xffffffff, 0xffffffff, 0xffffffff], 'sit0\x00', 'batadv0\x00', {}, {}, 0x2, 0x7, 0x4, 0x19}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x4, 0x1, [0x7fff, 0x1, 0xd8, 0x3, 0x101, 0x6, 0xc2c, 0x101, 0x0, 0x800, 0x1, 0x9, 0x3, 0x3, 0x9, 0x3], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@ipv6={@private0, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0x0, 0xff, 0xffffffff], [0xffffffff, 0x0, 0xff000000, 0xff], 'veth1_to_bond\x00', 'ip6tnl0\x00', {0xff}, {}, 0x3c, 0xfa, 0x0, 0x9}, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x2e, 0x68c}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private0, [0xff, 0xffffff00, 0x0, 0xff0000ff], [0x0, 0x0, 0xffffffff, 0xffffff00], 'ipvlan1\x00', 'veth1_macvtap\x00', {0xff}, {0xff}, 0x3b, 0x2d, 0x0, 0x10}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x9, 0x1], 0x6, 0x1}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000019c0)={0x5, 0x1, 0xc000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) sendmsg$SOCK_DESTROY(r5, &(0x7f0000003ec0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003e80)={&(0x7f0000001a40)={0x2420, 0x15, 0x200, 0x70bd2a, 0x25dfdbfc, {0x9, 0x5}, [@INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x8a, 0x1, "04b4ddff87a7b5c827ebff29186b2dad4dd659f0aa196b26e33b647e633907b76bc50e95f79fc0a245e80632df8f0f5db8823370ad4b72d6754ed478817fbca4209cdd1ec40169dfdc2ccf062aa871f6d7b8890bdd4cb6550267f839bb786cbc494675c3372d2510a760fd6cfdc20f2e120759b57061e9deb12e1dfd9f7d07d4822b67c84902"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "4b0858391e40af7db04be03f6e0b0818c3fbe34a33d0bef86e158d06a29ab0dcdb3818ddfa0cfdc30033d4b1172d8544c2373968f085d75560927d29715e9ebff6ccc121fa478d1bb8d374e519bb7d72312b19acbf57286a52482e03c10a5104761b0ad2fe95c57297128876ecb2618f75636a57d67c0c9a7d1bcc8890f029ddd297de7c9c4bed345cabae440331bbd0aa1841aac91498a1371145abd32f1d0086cccf4b48f3473a4af70f91441501164ee977116a68f7b821c72fa431b692c924154c9c21d2ee8484abb8a5b8b7cbaef5584fb9cf4e764da586cde9bde47b26797c5151223e186997239f4b8b5c"}, @INET_DIAG_REQ_BYTECODE={0x28, 0x1, "6b6a5975567fccd4d7e7a89f4819b96f2ee53ae2a5db6fddabd567c77b717b2eaa151b0b"}, @INET_DIAG_REQ_BYTECODE={0x8c, 0x1, "d6cda5585219ed7a22f9debccd180aa96be09286e7d15b34fe562a9e9a9ce293097afbf63977e80e0d07e520ed9e75b93fe0afb31d8f1286168d345a8e0d8350f891b6103f47785e748d5d3defd4bb2082c1bc90c7586083e4e64bb52c3c39878562eed9f700f3e078303d16bb2c2f6e43b6069114372a8ba2e5e176dc87eef296d33dbdf5452e75"}, @INET_DIAG_REQ_BYTECODE={0xcb, 0x1, "eb64ea8dd727208e00b05c13904bba3de36be80145f34b6ce3828477c2488927be834086cb5e9b5050fed2762b3a73df90b8e0e41923059d8f293e216710adb1242263de608133bc1630d3100957c6e433928e5d1fd425cda79fda06c1c9554222ab60291f05bdda0b0b03ffe40eba4c0a7bdb926fed6852e73421f958cbcc4b7147c2914612159c5f633e5a2603cd7478071569a3a2b4fad8b5ea6fb7147c4ccbff90a8f703cbbca250d7560a4924f2bcc3a88ae807ec3ccfc104c6d8159afc188c69bc8d9a5b"}, @INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0x100, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}]}, 0x2420}, 0x1, 0x0, 0x0, 0xc014}, 0x14) (async) accept4$inet6(0xffffffffffffffff, &(0x7f0000003f00)={0xa, 0x0, 0x0, @private1}, &(0x7f0000003f40)=0x1c, 0x800) r9 = syz_open_procfs$userns(0x0, &(0x7f0000003f80)) ioctl$NS_GET_NSTYPE(r9, 0xb703, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000004000), r10) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000004100)={&(0x7f0000003fc0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000040c0)={&(0x7f0000004040)={0x5c, r12, 0x1, 0x70bd26, 0x25dfdbff, {}, [@GTPA_FAMILY={0x5, 0xd, 0x27}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_PEER_ADDR6={0x14, 0xb, @private0}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) (async) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000004200)={&(0x7f0000004140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x3c, r12, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_TID={0xc}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMK(r11, &(0x7f0000004300)={&(0x7f0000004240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000042c0)={&(0x7f0000004280)={0x2c, r0, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x5, 0x2f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async) ioctl$HIDIOCGUCODE(r5, 0xc018480d, &(0x7f0000004340)={0x2, 0x2, 0x8, 0xffff, 0x1, 0x200}) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x2801372f6416fda4}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)={0x1c, r12, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200040c0}, 0x4800) (async) r13 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000004480)) 1m43.934026261s ago: executing program 3 (id=58): syz_open_dev$evdev(&(0x7f0000000040), 0x3d, 0x0) mq_notify(0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000006d") write(r0, &(0x7f0000000138)="0000000000000000008000000000000000000000000000007468696e2d706f6f6c00000000000000373a3020373a31203132382030", 0xfffffffffffffd9a) ioctl(r0, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000006e0100003801000001") r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SIGNAL_MSI(r2, 0x4020aea5, &(0x7f0000000100)={0xdddd1000, 0xffffffff, 0x8, 0x1, 0x4c}) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000040)={0x2, 0x40000000, 0x0, 0x0}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$UBLK_U_CMD_START_DEV(r0, 0xc0207506, &(0x7f0000000500)={0x0}) r7 = syz_clone(0x1000000, &(0x7f0000000ac0)="62fe0eef5a32bfefeae26004f1cd53966d49e3fc9d4ffef4", 0x18, &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="90f705112b4a92bccb5733f5cafc49c50964954911cdfb4f1ed1c4b6700275f8c77fc74b8390955ae203c0ed11c3b9c2e377705cf3b593453577bc6299064570fcb40f9cbd22f61568a98f961480b4d73de2296ad30d1ad83ee7041e61f51ba241951aa5a1affcded2a247bebf895de0552107dff8b0b06cc9aa51d03e98b0752e937153dfc75d5fe48ed8b5ccaf384e30d6aa23267f0f68583698ad55c792d6b79c7b379d7feec3679b8241e1941498cac5ea2cca425d308722f92dc0") ioctl$UBLK_U_CMD_END_USER_RECOVERY(r0, 0xc0207511, &(0x7f0000000c40)={r6, 0xffff, 0x0, 0x0, r7}) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r8, 0x4048587b, &(0x7f0000000940)={{r5, &(0x7f0000000140)='\x00', 0x228040, &(0x7f0000000180)={@align=0x4, {0x4, 0x8d, 0x0, 0x3fc6f600}}, 0x114a2faa, &(0x7f0000000280)={@_ha_fsid}, &(0x7f00000002c0)=0x7fffffff}, 0x6, &(0x7f0000000880)=[{0x2, 0x4, &(0x7f0000000300)='/dev/input/event#\x00', &(0x7f0000000340)="263e1bf46e8535bcdb232fecb2dcacfa9e48b95ffc327a08a5d43cac32249b3957a58996cba2d30de53e7152a10d229c7ac9eb56c738d61e52c278cadd33f94c50f152dd9292d5468823239ad388824791701dc56b2751436a14ae51280e93ecccd1fc45578503935ab533e968751f3b2c57e9a02cdfbe7d321c13e0e89b380dfb4cc01b32ca6bf680b364706ec4bfef308a968e76009136684edfdc3af8776f4e3e1ff0f72cea1175db26576e1c5cdf35852a5573eea53206c77dcb66f5758a2d04e61071279ce538f512f16718f55859224a7c3b60dcca97d116173b6094d661ae2e2f5377fe8b8da66f26ee", 0xed, 0x20}, {0x2, 0x8, &(0x7f0000000440)='/dev/input/event#\x00', &(0x7f0000000480)="9a5e75784b8b87e7b98ec4932815cac006a41760258ca6b1c28d1261402b", 0x1e, 0x3a}, {0x2, 0x2, &(0x7f00000004c0)='/dev/kvm\x00', &(0x7f00000009c0)="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", 0xfd, 0x18}, {0x2, 0x0, &(0x7f0000000580)='/dev/input/event#\x00', &(0x7f00000005c0)="c4fda4754bbaa1eaba5de91136670c226edb4b07130cbb754a556ca8f5689ba6aaf48d8b8294c049692f273e559bbb9c9d6bc2ab9c1789e528cea1dc62c4633c742279656f856cf0", 0x48, 0x12}, {0x3, 0x3ff, &(0x7f0000000640)='/dev/input/event#\x00', &(0x7f0000000680)="bf9dcd5ca25582bb047cb33873a3726f54255bd2fb56114457f06b3d157840f169bfe294b2a02c89c072f5cebcc6e7d4d2cd559ad09f79d081be5e8b0d8b0d0f59329cd43c8244d9ab7fd6d0b2cb407a4b967739726f55ac3e4b73fb8c92aac133aeab5c871fb1c5fef607b11dec65ab65e4063541c7cd34cf3a5501d5692d05ce29abc3ed5c6c36964a", 0x8a, 0xa}, {0x3, 0x0, &(0x7f0000000740)='/dev/kvm\x00', &(0x7f0000000780)="8d1083c89c367a791cdba25e8cd5d34cb9ccd2fcecffe1e3e3a8869e04f489d0c883f9040f88881f1f6b40ac3178c4c230c7f9f7bf6b532315cb08f66a03f1eedf5be4109af5c836d7252ab4ee62d5aa8d6c0b889eed91ac623273e613e7d8888590222853faeb835cb49a99b0df2fb0ae7539e1ee9e799c242a6f495b70e9fd3a37b10519f16fb9d03bf7c4fc31ceb6fde8f75f72a6d1a0219882756d8975e7330e81e9fe51ab458fc967fe87f9887b0350a01840a11ec7aafb2e01c3f8c5ec55ab8bf44a283a3dbf0e5332392809cc7873254af5ebb53698f6f375c2", 0xdd, 0x2a}]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x22, {"48c7c01d00000048c7c7010000000f01c1"}}], 0x22}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m43.683619476s ago: executing program 3 (id=63): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x2, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "192fda58069c5fd06577b63e42"}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "25a5094697"}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0xd4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x44, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}}, 0x80) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f0000000d00)={0xfffffffffffffffc, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)={0x7d4, r1, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE_ASSOC_RESP={0xa, 0x80, [@ext_channel_switch={0x3c, 0x4, {0x0, 0x40, 0x54, 0xfd}}]}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_FTM_RESPONDER={0x320, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_LCI={0x95, 0x2, "2bc1a3b789dcf62fb9b963fbd8ca75797bd2d4bbae2188613d76d237c5be478395d9cc5b12c308b24ce8d0c99ff6ec3cb1bddbb44967a77180024b080e3d560e2c5580f3eebc21c1db2f860ae12b3e965b487045051fb211cf79d08f5e554b6344f88f781b256f65ffaf781e1804ce9e092b290030a5bf0b38929c6e9a1044c98f98fe79750949ce3ba335dd78757c780c"}, @NL80211_FTM_RESP_ATTR_LCI={0x72, 0x2, "a398302ae33f88e44e4cc51cbbdcea53877616bdeac60bc38716a94d09aad81f413026c848430956ae17a0fc30e13896f77534745f5b59244193d04dea10f6bdfa4bf6dda5d2f8848471eca39a8990ad695d73e39903720dde3af589bc8f5318559f817fb012f8146798f49a1162"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xd3, 0x3, "75c31e2c7c29b5dad292e2e2928f891edbb1160d17655c8c41e79c472e6a830e7ecf40469414a84995e1286736ca8e018f999b822d1e3ef7a3c772eb83828b1c2bf1bde1f7f3ac364bf0871ec091ff315b55780e8e0990b107cd7fe045c1d8828458020ba5e163225b2da354e54ecbdc43903257663f406f1c6b2122f97271706819c3c97ac9abb1c54e04aff8548c56cc84956ebf028312703cd65c1751ce1169a87c129d4418c0256ce09ebf274b82bcc6b2b54601cc4a57ac48d0a195d942eb905356bbd20f2e9fd58fa84f19c9"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x2f, 0x3, "34c02bc66c47f6de8cb2b79e67ce085623d4c505bd9fd49cb024675007c040b8e4afe2f904d311d7590941"}, @NL80211_FTM_RESP_ATTR_LCI={0xe7, 0x2, "efe5586dc4f5a9f648ebb5d595374440b4f3d9b8bf310511ee7302c9fac3537b1e4b675d4fae8c331e472aeabf111bf25d73b1df3758d246e7381c2d0d9ac8cc07d7bd4953d719791e86a9aed14f0db99664c027e7b6d879f4fa0a26cbf18961de4b5f2856e01ebb940f48439f86a17eadbe341f3556a0cd1e947b397c6e08231bf5b8841393a3fcbd797fa66fd1f6cf499fa08270c68b27db9638f7c32bc90873c91890eee82c91225d70bff4e05795d490dc4bdc469d6e9f699bc09551be712acc7bfd6c5309333147ddfbd41ce654d089a3a91e5ee4f24fa6492200cca6bb5deca7"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x1f, 0x3, "408fa1ef10274bb36d0e2e5bcb48566231b98dd2241442fe215185"}]}, @NL80211_ATTR_BEACON_HEAD={0x2b5, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x7}, @device_a, @broadcast, @from_mac=@device_b, {0x5, 0x3}, @value=@ver_80211n={0x0, 0x5709, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}}, 0xf, @random=0x7, 0x110a, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @val={0x4, 0x6, {0x5, 0x4, 0x6, 0x4}}, @val={0x6, 0x2, 0x2}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0xa, 0xa5, 0x4}}, @val={0x2d, 0x1a, {0x40, 0x3, 0x5, 0x0, {0x6, 0xa82, 0x0, 0x4, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x400}}, @val={0x72, 0x6}, @void, @void, [{0xdd, 0x93, "6ddc65fc818dcf4e963529d5e010114923ad8966d6a2c5aa1b400ce1d81ea91975c97ff5563953d534ae172b9aa9250b8a40540a4bc654472fb38dfb1404a4a20804247775cda7682f6868c00cddb081fcf4741ed616cfe50195832ee3633c5822a2bf86fd7d45d3b18cff69dffe208d2cb66d21b6d30f8b34d59a99a7e3875d7531557c82aafcb86ae9f5fc9e9ba525f8bd79"}, {0xdd, 0x2b, "59b20768ebdb3bb18376941ed8081002891034b5c2983c8b95205b07c6bb77de79aa4c86635db7a290b413"}, {0xdd, 0x66, "ec778fef3d155ce954f96c176f79ec4ef3d6408fb3fdc61b753c201fabf498cb4b30c36284f42340d072bb1e2f31a618476ee53e8e078113ee0a5ac843f3e65e17657e845fbb91df3253917e35fdb9b1d8c82b3deeffd1e96a31cf8274ef2886d229acf9db63"}, {0xdd, 0x72, "f504fdeafe6d2814b41d4624dbf73a2c6650e06977e749e5375663fec5aab3463159c0e398a614879d185ad63e96c38b543413b3b5814642eb59cd07521b4a1c2ac9d737436a508ab9e8233e59d30e63b6c9351ccbb93d9771500b7ac81b96e72618c77c2f064e873ab6fdd0223492f43ce7"}, {0xdd, 0xa8, "c07e1a63acac789eb3011db0e541deac5760a5ed6a2b5ac8008973890458b5c4fe69c6f223db421c33849199f875a233d9161471c331b950f4e6738795b6dfb21949d55ff66f5e622bddd71fca673a6ab1c33be346f37a6d5f60c837375f24c4c2ceb978c67098c5f33219403fb482be897dcf4a0f8398067004aacc154b3564bb39509a5d9488d0f99f0165c2ce63bc27c5a638f0269e75c4bece05db960380d616822c678e9040"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x59, 0x7f, [@measure_req={0x26, 0x4b, {0xf2, 0x4, 0x8, "9428a257ecae90001376d49d9e58c03c1b58e90895750e1334f368c6433ea1b638c18add8e1dd255846db888c1547670d50403ebb87fbe07c4309b8bc921cca0a67b1b2fa3e66538"}}, @mesh_id={0x72, 0x6}]}, @NL80211_ATTR_IE_ASSOC_RESP={0x89, 0x80, [@tim={0x5, 0x1b, {0x7, 0xe1, 0x2, "b75931df889317310e23e6b53cd57e58b0ddb6da6819f66e"}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x2, @broadcast, 0xa, @value=@broadcast, 0x5, 0x7ba4, @device_a, 0x8000}}, @ext_channel_switch={0x3c, 0x4, {0x0, 0xff, 0x24}}, @challenge={0x10, 0x1, 0x16}, @ibss={0x6, 0x2, 0x4}, @link_id={0x65, 0x12, {@initial, @broadcast, @broadcast}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x3, 0x48}}, @rann={0x7e, 0x15, {{0x0, 0x1f}, 0x0, 0xc4, @device_a, 0xa5, 0x5, 0xfffffff8}}]}, @NL80211_ATTR_IE_PROBE_RESP={0xed, 0x7f, [@mic={0x8c, 0x10, {0x70b, "0b62f44bacb9", @short="338a7a24fbfc6e95"}}, @mic={0x8c, 0x18, {0x53c, "5d46e9c02e31", @long="bd0fc60eff758a68949552c833fcc760"}}, @ibss={0x6, 0x2, 0x9}, @mic={0x8c, 0x18, {0xc8d, "453796770ffa", @long="cf68ce4ea033d7ee55abdb8a9b8a4b5b"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x80, 0x74, 0x5}}, @preq={0x82, 0x51, {{}, 0x8, 0xa, 0xffff, @device_a, 0x2, @void, 0x4, 0x7, 0x5, [{{}, @device_b, 0xf}, {{0x1, 0x0, 0x1}, @device_a, 0xe8cf}, {{0x0, 0x0, 0x1}, @device_a, 0x40}, {{0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0xc4d}]}}, @challenge={0x10, 0x1, 0x5c}, @preq={0x82, 0x41, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x2, 0x2, 0x3, @device_a, 0x7, @value, 0x4, 0x8, 0x3, [{{0x1}, @broadcast, 0xffffffff}, {{0x0, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x3}]}}]}]}, 0x7d4}, 0x1, 0x0, 0x0, 0x2000040}, 0x8000) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000dc0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000e00)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r3, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x3c, r11, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240080c0}, 0x4001) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x70, r1, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x1}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}, @NL80211_ATTR_BANDS={0x8, 0xef, 0xc}, @NL80211_ATTR_NAN_MASTER_PREF={0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xbe}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfc}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x830}, 0x10) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000001040)) r15 = openat$nci(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) read$nci(r15, &(0x7f00000010c0)=""/206, 0xce) r16 = socket$inet6_sctp(0xa, 0x4327697cc62ce81, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r16, 0x84, 0x1a, &(0x7f00000011c0)={0x0, 0x45, "da4d3e48d6ac9fe4dd60b31eb9cb896a9a90632b54be5b6da8ba1ff848770b2ebae3ffae5a5516ae9a2a08c061bc585390cd7c02e54bba574add7895e0fcf2c5bc2b302575"}, &(0x7f0000001240)=0x4d) syz_emit_ethernet(0x7d, &(0x7f0000001280)={@multicast, @local, @val={@void, {0x8100, 0x4, 0x0, 0x3}}, {@llc={0x4, {@snap={0xab, 0x1, 'o', "658fd1", 0x8863, "71fc6860b222fc4d30f8fa9c66a600d2b0e224a7ebceccc84c3ddc205eaab58d81d8537acb89a3f8fae2c3a583963727b16694f82580ad91ee1c0f1c82516ee66e8b22cb4f168f5c5653c924619141d027ff1a396c8c80d1c82d6e16f3367aa423525c"}}}}}, &(0x7f0000001300)={0x1, 0x3, [0x986, 0x0, 0x272, 0xf36]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000013c0)={'pim6reg\x00', &(0x7f0000001340)=@ethtool_gstrings={0x1b, 0x4, 0x70, "fe74dba29a77203e31e33ee8f84cd4b108997718f49c2d1c63995431d99fa968f75aacf7bab2727a61b3dab77ca55d21e7ca1d48667b8991e0cac515c97e6d0ab0edaf7cf6696fd88aba64b3cb2cff5b66aea9bf7309aa4a60b075c8c2544f75550a46e63de2f64a1339ae3f67d91bf3"}}) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001400), 0x8000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001440)={'vxcan0\x00'}) sendmsg$NLBL_MGMT_C_ADDDEF(r14, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x60, 0x0, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @mcast1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) 1m42.984491947s ago: executing program 3 (id=74): syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x204002) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=virtio,ver{ion=9p2000.u,access=client,\x00']) 1m42.905041629s ago: executing program 32 (id=74): syz_open_dev$hiddev(&(0x7f0000000000), 0x1ff, 0x204002) mkdir(&(0x7f0000000600)='./file0\x00', 0x102) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=virtio,ver{ion=9p2000.u,access=client,\x00']) 16.091913316s ago: executing program 4 (id=1290): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x18) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8003, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0xa, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff04, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x80000005, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x6, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x9578, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x5, 0x6, 0x7fff, 0x6, 0x400, 0x10000401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8021, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x3, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x6, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x9, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80e2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x10000, 0x93b, 0x2000006, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x2, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff003, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1c, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2d}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xcf, &(0x7f0000000180)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xac, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000940)={'ip_vti0\x00', &(0x7f0000000880)={'syztnl2\x00', r2, 0x1, 0x50, 0x3, 0xa9, {{0x24, 0x4, 0x2, 0x12, 0x90, 0x67, 0x0, 0x5, 0x2f, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2f}, {[@timestamp_prespec={0x44, 0x4c, 0x6c, 0x3, 0x9, [{@private=0xa010102, 0x5}, {@private=0xa010100, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffdc8}, {@multicast2, 0xb1f0}, {@broadcast, 0xa}, {@empty, 0x9}, {@multicast1, 0x4}, {@empty, 0x4}, {@empty, 0x7}]}, @ssrr={0x89, 0x1b, 0xb0, [@loopback, @local, @loopback, @empty, @loopback, @broadcast]}, @timestamp_addr={0x44, 0x14, 0x57, 0x1, 0x2, [{@empty, 0x1}, {@multicast2, 0x2}]}]}}}}}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 16.044447134s ago: executing program 4 (id=1291): r0 = fanotify_init(0x0, 0x400) r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a31000000000800030000000006300004800800010000001234140002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000240)) (async, rerun: 32) openat$cgroup_devices(r3, &(0x7f0000000200)='devices.allow\x00', 0x2, 0x0) (async, rerun: 32) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r5, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f00000004c0)={r6, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x0, 0x3, 0x10000], [0x0, 0x0, 0xfffffffc], [0x1, 0x0, 0x9]}) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000280)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r7, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (rerun: 64) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa080045"], 0x0) (async, rerun: 64) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) (rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r11, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r12, 0xae9a) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000440)={[0x3, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000000)={r9, 0x0, 0x4, 0x0, 0x2, [], [0x0, 0x8, 0x0, 0x10000], [0x0, 0x0, 0xfffffbfc], [0x1]}) (async, rerun: 64) close_range(r0, 0xffffffffffffffff, 0x0) (rerun: 64) 15.994166264s ago: executing program 4 (id=1293): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0xf0, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@local, @in6=@mcast1, 0x1, 0x4, 0x4e23, 0x0, 0x0, 0x0, 0x0, 0x3a, 0x0, 0xee00}, {@in=@loopback, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0x83}, {0xfffffffffffffffc, 0x7fff, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x0, 0x2, 0x0, 0xfd, 0x20}}, 0xf0}, 0x1, 0x0, 0x0, 0xc801}, 0x10) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "b0f5ea"}}}, 0xd) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=@migrate={0xa0, 0x29, 0x1, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2={0xfc, 0x2, '\x00', 0xff}, 0x0, 0x5, 0x0, 0x2, 0xa, 0x0, 0x0, 0xff}, 0x6e6bbf}, [@migrate={0x50, 0x11, [{@in6=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x4}, 0x32, 0x4, 0x0, 0x3504, 0xa, 0x2}]}]}, 0xa0}}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f2, 0x800, 0x70bd2c, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4044000}, 0x40) 15.988955822s ago: executing program 4 (id=1294): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x1, 0x4, 0x2}) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 15.925010731s ago: executing program 4 (id=1295): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r4, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 15.873955108s ago: executing program 4 (id=1297): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, 0x0, 0x0, 0x0) setgid(0xee00) r1 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, 0x101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x1080) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb579b67d261e0a0c}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) fchdir(r2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f0000000080)=""/11, 0xb, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000100)='./sys\x00', 0x80401, 0x19a) socket(0xf, 0x800, 0x7) write(r8, &(0x7f0000000200)='0', 0x1) 15.815823078s ago: executing program 33 (id=1297): openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101800, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000002, 0x100010, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)=0x9) ppoll(&(0x7f0000000a40)=[{r0}], 0x1, 0x0, 0x0, 0x0) setgid(0xee00) r1 = syz_clone(0x87002100, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r3, 0x1000) r4 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r4, 0x1}], 0x1, 0x101) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x1080) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40) close_range(r3, 0xffffffffffffffff, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0xb579b67d261e0a0c}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0xb7, 0x2, 0xfffffffe}}, 0xe8) fchdir(r2) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r7 = syz_open_procfs(r1, &(0x7f0000000400)='stat\x00') pread64(r7, &(0x7f0000000080)=""/11, 0xb, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r8 = openat(r7, &(0x7f0000000100)='./sys\x00', 0x80401, 0x19a) socket(0xf, 0x800, 0x7) write(r8, &(0x7f0000000200)='0', 0x1) 3.957921783s ago: executing program 0 (id=1506): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100004000000000000020000000002000000070000000900010073797a3000000000140000001000010000"], 0x48}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40483, 0x2c01}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8", @ANYRES32=r3], 0x2c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)=ANY=[@ANYBLOB="200000001100010003000000000000000000000064"], 0x20}}, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='minix\x00', 0x204001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@newspdinfo={0x54, 0x24, 0x4, 0x70bd29, 0x25dfdbff, 0x2, [@XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV6_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}, @XFRMA_SPD_IPV4_HTHRESH={0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x184002, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000200)=0xd0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0xffff, 0x100000, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x3, 0x0, 0x20000000, 0x1883}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_1\x00', 0x0}) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f00000003c0)={0x7ff, 0x0, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x1c, 0x7, 0xffe, 0xb1, 0x1, 0x1, 0x8, '\x00', r5, r6, 0x3, 0x5, 0x3}, 0x50) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)="ee9712f200244ad15c7abc8683c5eece05a22e9c538fa0669a81cde867b84e53badeec735752fd8abcb9ba92c076f264e757b6b9a567eb43c14ef9bd2753859fb97e38f1877d1aecaba128274bddd75949404769328debf4221024802397bf75280c326ca7b29a2720a9b12125eeae337db1a3468a3f", 0x76) 3.673216047s ago: executing program 0 (id=1514): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c69666163650000"], 0x60}}, 0xc800) 3.594658771s ago: executing program 0 (id=1515): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r5, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 3.354763817s ago: executing program 0 (id=1523): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$vimc0(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r3, 0xc0e85667, &(0x7f0000000080)={0x1c0980928, 0x101, "21234e08a42be8f30c56a68f3a8b3d06f842b27fa0e919d9d579cc1f93c60300", 0x6c90, 0x10010000, 0x0, 0x0, 0x4ff, 0x1e8, 0x10, 0x9887, [0x400, 0x10000, 0x0, 0xfffffffe]}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000280)=[{0x84, 0x77, 0x0, 0x0, @tick, {0xfd}, {0x7}, @raw32={[0x2, 0x0, 0x8000000]}}, {0x2, 0x0, 0x4, 0x83, @tick, {0xfd}, {}, @note={0xfa}}, {0x6, 0x3, 0x9, 0xff, @tick=0x1, {0x10, 0x5}, {0xc, 0x2}, @control={0x3, 0xa, 0x7fff}}, {0x8, 0x3, 0x6, 0x4, @time={0x3, 0x6}, {0xbb, 0x3}, {0xd}, @time=@tick=0x5}], 0x70) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0xff, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x24040084) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)=0x0) sendto(r5, &(0x7f0000000440)="bddf78a55c99f559567694519062158d232bd378fa5ba2fd3cdc8e6e5a359bf7815963a0e85d7c0753338783ba2a20067304a6620e431c65599395b97db9e08c8cff6c1ef5f5e23394086c79cf4a0616d8710d409d0eabe6cd834056c16da141497a8a296325585b5979cccfb242dde78e1020065d705e2ef9004e04de7af7bf35bff5f1af3deb5780d8af4778068b4e", 0x90, 0x98ef0c20f35b8ae4, &(0x7f0000000840)=@nfc={0x27, r9, 0x0, 0x5}, 0x80) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r11, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="04002cbd00000057727e96069c0ecb000000", @ANYRES32=0x0, @ANYBLOB="0c0099000100000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) r13 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r13, 0xc01864c6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r14, 0xc04064a0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r11, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="c8000000", @ANYRES16=0x0, @ANYBLOB="00002bbd7000fddbdf250c0000004800018008000300000000001400020073797a5f74756e0000000000000000000800030002000000080003000000000008000100", @ANYRES32=r8, @ANYBLOB="080003000000000008000300020000006c000180080001", @ANYRES32=r12, @ANYBLOB="08000300000000000800014b014c33a6905542e8e9044da3fe0a00", @ANYRES32=r8, @ANYBLOB="080003000100000008000100", @ANYRES32=r8, @ANYRES32=r8, @ANYBLOB="08000300000000001400020069703667726530000000000000000000080003000300"], 0xc8}, 0x1, 0x0, 0x0, 0x801}, 0x8081) 3.132914828s ago: executing program 0 (id=1526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x7, 0xb}, {0x4}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x240000a1}, 0x4890) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_int(r5, 0x0, 0x33, &(0x7f0000000300)=0x80000005, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xda4, @private2, 0x80000000}], 0x1c) sendmsg$inet6(r4, &(0x7f0000003580)={&(0x7f0000000140)={0xa, 0x4e22, 0xc5ae, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000003500)=[{0x0}], 0x1}, 0x90) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201500200000008da091a0040000102030109022400010109400000a0010301020400000001840122550109058103000008fabe0000"], &(0x7f0000000840)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x201, 0x0, 0x9, 0x8, 0xff, 0x7d}, 0x0, 0x0, 0x1, [{0xb, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b03c7cf4a814405fa78da"]}]}) r6 = syz_open_dev$sndctrl(0x0, 0x7, 0x4c0000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r8, 0x400442c8, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYBLOB="01000000"]) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r11, &(0x7f00000005c0)="bad330fbc93f8b78040000ea0756a85d86dd", 0x12, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r10, 0x1, 0xd8, 0x6, @multicast}, 0x14) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x19) r14 = ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r13, r14, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000240)="b805000000b91cb200000f01c1b8010000000f01d90f07470f01c4c482cd474f2066b823018ed8b92f0900000f32f30fa7d866b891008ed066b839018ec0", 0x3e}], 0xaaaaaaaaaaaaa22, 0x52, 0x0, 0x0) 2.752934426s ago: executing program 2 (id=1535): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) ioctl$XFS_IOC_SET_RESBLKS(r0, 0xc0105872, &(0x7f0000000000)={0xffffffff, 0x2}) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) 2.747003799s ago: executing program 2 (id=1536): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x380000, @empty}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x800, 0x1}, 0x20) 2.745798665s ago: executing program 2 (id=1537): futex$unlock_wake_list32(&(0x7f0000000380)=0xffffffd0, 0x60a, 0x200, 0x0, 0x0, 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x10c, 0x30, 0x1, 0x70bd27, 0x25dfdbfb, "", [@nested={0xfc, 0x117, 0x0, 0x1, [@typed={0x4, 0x16}, @typed={0x14, 0x9c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061d000017c8a6", @typed={0x4, 0xeb}, @nested={0x4, 0xaf}]}]}, 0x10c}], 0x1, 0x0, 0x0, 0x2000}, 0x20000000) 2.708251859s ago: executing program 2 (id=1539): mlock(&(0x7f0000400000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) (async, rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000005c0)=[@textreal={0x8, 0x0}], 0x1, 0x43, 0x0, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 64) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) sendmmsg$inet(r3, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r3, 0x200) (async) r5 = socket$inet6(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="48000000140009"], 0x48}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (async, rerun: 32) accept4$llc(r3, 0x0, 0x0, 0x80000) (rerun: 32) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 2.542869285s ago: executing program 2 (id=1542): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000040)=0x1, 0x4) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000800), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000220000000a0001007770616e3000000005002000000004000500200000000000050020000000000009001f"], 0x44}, 0x1, 0x0, 0x0, 0xc1}, 0x44) syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r1) 2.5426053s ago: executing program 2 (id=1543): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x40000041) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r5, 0x10e, 0x8, &(0x7f0000000040)=0x3c31, 0x4) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 1.433017633s ago: executing program 1 (id=1552): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) bind$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r7, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.157731719s ago: executing program 1 (id=1554): io_uring_setup(0x585f, &(0x7f00000001c0)={0x0, 0x2c28, 0x80, 0x0, 0x10000000}) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x2, 0x2, 0x1, 0x0, [@mcast2]}, 0x18) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000000)={0x0, 0xea60}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x84000, 0x20) mkdirat(r1, &(0x7f0000000180)='sys\x00', 0x1f2) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x20000, @dev={0xfe, 0x80, '\x00', 0x3e}}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f0000000000)={0x1}) syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x8000000a}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xff, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 955.330939ms ago: executing program 1 (id=1556): r0 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r0, 0x1, 0x100) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b70500000000000061103000000000000fa000000000000095000000000000001f495ff727520cccddfad6fab92a770b445d050000006edc1b5613c5e35079725d19e88b662c2596b2f0b40aa9de45cf931a7ddaae7bdd97a9787684a5a6bbe879d6561715a194eb15d509b1837f6d317d12dd2c98f05e43aa14b3655a78009367bac65148a671b0ffd1c946b31202b7c73e0f1c5df29d57ed708602599a04fde318753c358d42ba7c52b4e20bc5c0e91fbc96da558c38891cd5bc38b6db9863a1273811976d15ba39fe2700"/218], &(0x7f00000002c0)='GPL\x00', 0x5, 0x9e, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0xfffffffffffffe21}, 0x2a) 954.275639ms ago: executing program 1 (id=1557): ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f0000000540)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1, 0xa8, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x8, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x71, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x2, 0x7, "cf05003179"}, {0x0, 0x12, "008e408e9a0972bad5d3cff2952945cb"}, {0x6, 0x12, "edb3a43f8ba9ffaaea66554900000000"}, {0x0, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0x9, "c8f46976e79ea7"}]}, @cipso={0x86, 0x6, 0x20}]}}}}}}}, 0x0) 952.076723ms ago: executing program 5 (id=1558): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r4, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 942.499641ms ago: executing program 1 (id=1559): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) fcntl$addseals(r2, 0x409, 0x3) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000380)={r2, 0x1, 0x2000, 0x10000}) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x401, 0xeed, 0x1}) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a310000000005000100070000003c000780060b04404e2100f47309c04ef1a658440c000180080001400a0101010c00028008000140e0000002"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (async) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ustat(0x5, 0x0) (async) ustat(0x5, 0x0) setns(0xc9, 0x0) (async) setns(0xc9, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000060801"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xfffffffffffffea8, 0x0, 0x1, 0x0, 0x0, 0x4004880}, 0x24004045) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async) r7 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@ipmr_getroute={0x1c, 0x1a, 0x10, 0x70bd2d, 0x25dfdbfe, {0x80, 0x20, 0x80, 0x3, 0x0, 0x2, 0xc8, 0xb, 0x2000}}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x20000000) io_uring_enter(r7, 0x2219, 0x34d3, 0x16, 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x80000, 0x6, 0xc, 0x0, 0x1000, 0x0, 0x4002004c4, 0x1000, 0x0, 0x97, 0x3, 0x0, 0x3, 0x4, 0x0, 0x2], 0xeeee8000, 0x400}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_emit_vhci(&(0x7f0000004c00)=ANY=[@ANYBLOB='$>p\"'], 0x20) (async) syz_emit_vhci(&(0x7f0000004c00)=ANY=[@ANYBLOB='$>p\"'], 0x20) 694.146471ms ago: executing program 1 (id=1560): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000200000040110700090001010203010902200001010080fa0904000002070102000705810200020007050202"], 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000100)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000180)={0x10000, 0x5, 0x55d, 0x3, 0x80000000}, 0x14) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0xd2f0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001ec0)={0x2c, &(0x7f0000001c40)=ANY=[@ANYBLOB="008000de323c"], 0x0, 0x0, 0x0, 0x0}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) pread64(r5, 0x0, 0x0, 0xd000) 670.228014ms ago: executing program 5 (id=1561): openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x40, 0x16f) execve(&(0x7f0000000240)='./file0\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') 594.423831ms ago: executing program 5 (id=1562): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0xffffffff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000040)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000080)=[{0x4, 0x7, 0xd5}, {0x8045, 0x4, 0x9, 0x1}]}) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r5, &(0x7f0000000640)='\"lg\"', 0x4) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000680080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) close_range(r4, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendmmsg$inet6(r0, &(0x7f0000001500)=[{{&(0x7f0000000600)={0xa, 0x4e21, 0xffff, @private2, 0xffffffff}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000040)="be", 0x1}], 0x1}}, {{&(0x7f0000000b40)={0xa, 0x4e20, 0x8001, @dev={0xfe, 0x80, '\x00', 0x43}, 0x5}, 0x1c, &(0x7f0000000f80)=[{&(0x7f0000000b80)='S', 0x1}], 0x1}}], 0x2, 0x20044040) (async) socket$netlink(0x10, 0x3, 0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x1c, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x14, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x2, &(0x7f0000000080)=[{0x4, 0x7, 0xd5}, {0x8045, 0x4, 0x9, 0x1}]}) (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) (async) write(r5, &(0x7f0000000640)='\"lg\"', 0x4) (async) ioctl$SNDRV_PCM_IOCTL_RESET(r5, 0x4141, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000041000100fcff07000400000001000000040048800c0001800800108004000680080002"], 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) (async) close_range(r4, 0xffffffffffffffff, 0x0) (async) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600004e20590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) (async) openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) 543.752699ms ago: executing program 5 (id=1563): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) r0 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="13", 0x1}], 0x1}, 0x4051) recvmsg$unix(r1, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x2122) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000012c0)="f9", 0x37}], 0x1}, 0x2080) bind$inet(r0, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r7, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 306.522277ms ago: executing program 5 (id=1564): mkdir(&(0x7f00000002c0)='./file0\x00', 0x1e) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) recvmmsg(r0, &(0x7f0000006700)=[{{0x0, 0x0, 0x0}, 0x11}], 0x1, 0x10162, 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) set_mempolicy_home_node(&(0x7f0000dd1000/0x2000)=nil, 0x2000, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) 2.027108ms ago: executing program 0 (id=1565): r0 = socket(0x5, 0x1, 0x0) getsockopt(r0, 0x200000000114, 0x2711, 0x0, &(0x7f00000000c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x1000001000001, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x980914, 0x8}) ioctl(r1, 0x400c4d01, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) ioctl$VIDIOC_ENUMAUDOUT(r3, 0xc0345642, &(0x7f00000001c0)={0xfff, "371b70a3e205e76a0548f61f1697c94fff6ea2526fffce5a4cc10e80ab3830ee", 0x0, 0x1}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r5, &(0x7f0000000300)='p:test/event1 ./file0:0x0 arg2=%bx', 0x22) mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x208000, 0x0) 0s ago: executing program 5 (id=1566): open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) socket$kcm(0x10, 0x2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x6, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x6, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f00000001c0)={r4, 0x1, 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): 1: Manufacturer: QEMU [ 93.716139][ T933] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 93.738522][ T933] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0006/input/input14 [ 93.820288][ T933] hid-generic 0003:0627:0001.0006: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 94.079935][ T8106] __nla_validate_parse: 4 callbacks suppressed [ 94.079957][ T8106] netlink: 24 bytes leftover after parsing attributes in process `syz.2.619'. [ 94.098932][ T8106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8106 comm=syz.2.619 [ 94.104828][ T8106] netlink: 16 bytes leftover after parsing attributes in process `syz.2.619'. [ 94.104827][ T42] audit: type=1400 audit(1787214540.677:877): avc: denied { create } for pid=8109 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.105765][ T42] audit: type=1400 audit(1787214540.677:878): avc: denied { getopt } for pid=8109 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.415101][ T8141] FAULT_INJECTION: forcing a failure. [ 94.415101][ T8141] name failslab, interval 1, probability 0, space 0, times 0 [ 94.419557][ T8141] CPU: 3 UID: 0 PID: 8141 Comm: syz.2.629 Not tainted syzkaller #0 PREEMPT(full) [ 94.419572][ T8141] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 94.419579][ T8141] Call Trace: [ 94.419595][ T8141] [ 94.419600][ T8141] dump_stack_lvl+0x100/0x190 [ 94.419679][ T8141] should_fail_ex.cold+0x5/0xa [ 94.419703][ T8141] should_failslab+0xc2/0x120 [ 94.419730][ T8141] kmem_cache_alloc_noprof+0x91/0x6a0 [ 94.419747][ T8141] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 94.419765][ T8141] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 94.419783][ T8141] mmu_topup_memory_caches+0x25/0x170 [ 94.419802][ T8141] kvm_mmu_load+0xe2/0x2570 [ 94.419818][ T8141] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 94.419830][ T8141] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 94.419844][ T8141] ? __pfx_kvm_mmu_load+0x10/0x10 [ 94.419859][ T8141] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 94.419873][ T8141] ? kvm_check_and_inject_events+0x873/0x12a0 [ 94.419893][ T8141] ? record_steal_time+0x3c0/0xbb0 [ 94.419907][ T8141] vcpu_run+0x3ab0/0x5df0 [ 94.419929][ T8141] ? __pfx_vcpu_run+0x10/0x10 [ 94.419950][ T8141] ? rcu_is_watching+0x13/0xc0 [ 94.419976][ T8141] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 94.419992][ T8141] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 94.420012][ T8141] kvm_vcpu_ioctl+0x730/0x1700 [ 94.420026][ T8141] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.420040][ T8141] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 94.420057][ T8141] ? do_vfs_ioctl+0x226/0x13e0 [ 94.420082][ T8141] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 94.420093][ T8141] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 94.420131][ T8141] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 94.420151][ T8141] ? selinux_file_ioctl+0x13b/0x290 [ 94.420162][ T8141] ? selinux_file_ioctl+0xb6/0x290 [ 94.420173][ T8141] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 94.420187][ T8141] __x64_sys_ioctl+0x18e/0x210 [ 94.420201][ T8141] do_syscall_64+0x123/0x790 [ 94.420237][ T8141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.420249][ T8141] RIP: 0033:0x7f9394b9e0d9 [ 94.420265][ T8141] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.420275][ T8141] RSP: 002b:00007f9395ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 94.420300][ T8141] RAX: ffffffffffffffda RBX: 00007f9394e25fa0 RCX: 00007f9394b9e0d9 [ 94.420307][ T8141] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 94.420336][ T8141] RBP: 00007f9395ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 94.420343][ T8141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 94.420349][ T8141] R13: 00007f9394e26038 R14: 00007f9394e25fa0 R15: 00007fffb7993e28 [ 94.420363][ T8141] [ 94.539483][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.631'. [ 94.667776][ T42] audit: type=1400 audit(1787214541.237:879): avc: denied { write } for pid=8155 comm="syz.1.636" name="ppp" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 94.675233][ T42] audit: type=1400 audit(1787214541.247:880): avc: denied { ioctl } for pid=8155 comm="syz.1.636" path="/dev/ppp" dev="devtmpfs" ino=729 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.272377][ T42] audit: type=1400 audit(1787214541.847:881): avc: denied { getopt } for pid=8164 comm="syz.0.637" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 95.321806][ T8168] syzkaller0: entered promiscuous mode [ 95.323657][ T8168] syzkaller0: entered allmulticast mode [ 95.757679][ T5734] Bluetooth: hci1: command 0x0405 tx timeout [ 96.734581][ T8209] FAULT_INJECTION: forcing a failure. [ 96.734581][ T8209] name failslab, interval 1, probability 0, space 0, times 0 [ 96.739629][ T8209] CPU: 3 UID: 0 PID: 8209 Comm: syz.4.647 Not tainted syzkaller #0 PREEMPT(full) [ 96.739648][ T8209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 96.739655][ T8209] Call Trace: [ 96.739666][ T8209] [ 96.739670][ T8209] dump_stack_lvl+0x100/0x190 [ 96.739740][ T8209] should_fail_ex.cold+0x5/0xa [ 96.739763][ T8209] should_failslab+0xc2/0x120 [ 96.739792][ T8209] kmem_cache_alloc_noprof+0x91/0x6a0 [ 96.739809][ T8209] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 96.739828][ T8209] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 96.739848][ T8209] mmu_topup_memory_caches+0x25/0x170 [ 96.739866][ T8209] kvm_mmu_load+0xe2/0x2570 [ 96.739883][ T8209] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 96.739895][ T8209] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 96.739909][ T8209] ? __pfx_kvm_mmu_load+0x10/0x10 [ 96.739924][ T8209] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 96.739941][ T8209] ? kvm_check_and_inject_events+0x873/0x12a0 [ 96.739957][ T8209] ? record_steal_time+0x3c0/0xbb0 [ 96.739971][ T8209] vcpu_run+0x3ab0/0x5df0 [ 96.739993][ T8209] ? __pfx_vcpu_run+0x10/0x10 [ 96.740014][ T8209] ? rcu_is_watching+0x13/0xc0 [ 96.740045][ T8209] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 96.740062][ T8209] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 96.740082][ T8209] kvm_vcpu_ioctl+0x730/0x1700 [ 96.740096][ T8209] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 96.740113][ T8209] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 96.740130][ T8209] ? do_vfs_ioctl+0x226/0x13e0 [ 96.740151][ T8209] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 96.740162][ T8209] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 96.740237][ T8209] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 96.740258][ T8209] ? selinux_file_ioctl+0x13b/0x290 [ 96.740268][ T8209] ? selinux_file_ioctl+0xb6/0x290 [ 96.740279][ T8209] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 96.740293][ T8209] __x64_sys_ioctl+0x18e/0x210 [ 96.740328][ T8209] do_syscall_64+0x123/0x790 [ 96.740352][ T8209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.740364][ T8209] RIP: 0033:0x7fd49099e0d9 [ 96.740379][ T8209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.740390][ T8209] RSP: 002b:00007fd48ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 96.740411][ T8209] RAX: ffffffffffffffda RBX: 00007fd490c25fa0 RCX: 00007fd49099e0d9 [ 96.740418][ T8209] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 96.740424][ T8209] RBP: 00007fd48ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 96.740430][ T8209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 96.740436][ T8209] R13: 00007fd490c26038 R14: 00007fd490c25fa0 R15: 00007ffccc9a7158 [ 96.740450][ T8209] [ 96.917549][ T60] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 97.076839][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 97.080950][ T60] usb 7-1: unable to get BOS descriptor or descriptor too short [ 97.083415][ T60] usb 7-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 97.086983][ T60] usb 7-1: config 1 has an invalid interface number: 232 but max is 0 [ 97.090299][ T60] usb 7-1: config 1 has no interface number 0 [ 97.092317][ T60] usb 7-1: config 1 interface 232 altsetting 93 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 97.095717][ T60] usb 7-1: config 1 interface 232 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0 [ 97.100221][ T60] usb 7-1: config 1 interface 232 has no altsetting 0 [ 97.103891][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.106451][ T60] usb 7-1: Product: syz [ 97.108374][ T60] usb 7-1: Manufacturer: syz [ 97.109902][ T60] usb 7-1: SerialNumber: syz [ 97.148109][ T8251] input: syz0 as /devices/virtual/input/input15 [ 97.318620][ T24] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 97.332954][ T8264] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 97.491690][ T24] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 97.496244][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 97.503347][ T24] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 97.512626][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.517257][ T60] hub 7-1:1.232: bad descriptor, ignoring hub [ 97.519931][ T24] usb 6-1: Product: syz [ 97.521310][ T24] usb 6-1: Manufacturer: syz [ 97.522849][ T60] hub 7-1:1.232: probe with driver hub failed with error -5 [ 97.525093][ T24] usb 6-1: SerialNumber: syz [ 97.528322][ T60] option 7-1:1.232: GSM modem (1-port) converter detected [ 97.554677][ T8278] FAULT_INJECTION: forcing a failure. [ 97.554677][ T8278] name failslab, interval 1, probability 0, space 0, times 0 [ 97.560671][ T60] usb 7-1: USB disconnect, device number 4 [ 97.564100][ T8278] CPU: 3 UID: 0 PID: 8278 Comm: syz.4.658 Not tainted syzkaller #0 PREEMPT(full) [ 97.564115][ T8278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 97.564122][ T8278] Call Trace: [ 97.564133][ T8278] [ 97.564138][ T8278] dump_stack_lvl+0x100/0x190 [ 97.564197][ T8278] should_fail_ex.cold+0x5/0xa [ 97.564220][ T8278] should_failslab+0xc2/0x120 [ 97.564249][ T8278] kmem_cache_alloc_noprof+0x91/0x6a0 [ 97.564266][ T8278] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 97.564285][ T8278] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 97.564321][ T8278] mmu_topup_memory_caches+0x25/0x170 [ 97.564341][ T8278] kvm_mmu_load+0xe2/0x2570 [ 97.564357][ T8278] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 97.564369][ T8278] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 97.564383][ T8278] ? __pfx_kvm_mmu_load+0x10/0x10 [ 97.564398][ T8278] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 97.564412][ T8278] ? kvm_check_and_inject_events+0x873/0x12a0 [ 97.564429][ T8278] ? record_steal_time+0x3c0/0xbb0 [ 97.564443][ T8278] vcpu_run+0x3ab0/0x5df0 [ 97.564463][ T8278] ? __pfx____ratelimit+0x10/0x10 [ 97.564483][ T8278] ? __pfx_vcpu_run+0x10/0x10 [ 97.564504][ T8278] ? rcu_is_watching+0x13/0xc0 [ 97.564528][ T8278] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 97.564545][ T8278] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 97.564565][ T8278] kvm_vcpu_ioctl+0x730/0x1700 [ 97.564580][ T8278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 97.564593][ T8278] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 97.564610][ T8278] ? do_vfs_ioctl+0x226/0x13e0 [ 97.564630][ T8278] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 97.564646][ T8278] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 97.564684][ T8278] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 97.564704][ T8278] ? selinux_file_ioctl+0x13b/0x290 [ 97.564714][ T8278] ? selinux_file_ioctl+0xb6/0x290 [ 97.564725][ T8278] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 97.564739][ T8278] __x64_sys_ioctl+0x18e/0x210 [ 97.564752][ T8278] do_syscall_64+0x123/0x790 [ 97.564769][ T8278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.564781][ T8278] RIP: 0033:0x7fd49099e0d9 [ 97.564798][ T8278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.564808][ T8278] RSP: 002b:00007fd48ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 97.564826][ T8278] RAX: ffffffffffffffda RBX: 00007fd490c25fa0 RCX: 00007fd49099e0d9 [ 97.564833][ T8278] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 97.564841][ T8278] RBP: 00007fd48ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 97.564848][ T8278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 97.564854][ T8278] R13: 00007fd490c26038 R14: 00007fd490c25fa0 R15: 00007ffccc9a7158 [ 97.564868][ T8278] [ 97.567270][ T60] option 7-1:1.232: device disconnected [ 97.744027][ T24] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 97.782807][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 97.782827][ T42] audit: type=1400 audit(1787214544.357:905): avc: denied { map } for pid=8288 comm="syz.4.659" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 97.802921][ T42] audit: type=1400 audit(1787214544.377:906): avc: denied { call } for pid=8288 comm="syz.4.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 97.946032][ T42] audit: type=1400 audit(1787214544.517:907): avc: denied { read write } for pid=8238 comm="syz.1.650" name="lp0" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 97.953389][ T42] audit: type=1400 audit(1787214544.517:908): avc: denied { open } for pid=8238 comm="syz.1.650" path="/dev/usb/lp0" dev="devtmpfs" ino=2998 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 97.957615][ T8289] syz.4.659 (8289): drop_caches: 2 [ 98.002696][ C3] usblp0: nonzero read bulk status received: -71 [ 98.004821][ T8239] usblp0: error -71 reading from printer [ 98.006845][ T5810] usb 6-1: USB disconnect, device number 8 [ 98.077043][ T8294] Mount JFS Failure: -5 [ 98.080516][ T8294] jfs_mount failed w/return code = -5 [ 98.209408][ T8238] usblp0: removed [ 98.233221][ T6336] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.237587][ T6336] Bluetooth: hci4: Frame reassembly failed (-84) [ 98.263741][ T8298] netlink: 'syz.2.663': attribute type 10 has an invalid length. [ 98.269173][ T8298] team0: Device vxcan0 is of different type [ 98.276410][ T42] audit: type=1400 audit(1787214544.847:909): avc: denied { read } for pid=8295 comm="syz.4.662" path="socket:[32553]" dev="sockfs" ino=32553 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 98.297677][ T8303] ipt_ECN: cannot use operation on non-tcp rule [ 98.298841][ T8304] ipt_ECN: cannot use operation on non-tcp rule [ 98.464667][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz.2.667'. [ 98.487202][ T8313] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 98.507175][ T8313] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 98.616866][ T8318] FAULT_INJECTION: forcing a failure. [ 98.616866][ T8318] name failslab, interval 1, probability 0, space 0, times 0 [ 98.621166][ T8318] CPU: 3 UID: 0 PID: 8318 Comm: syz.0.668 Not tainted syzkaller #0 PREEMPT(full) [ 98.621180][ T8318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 98.621187][ T8318] Call Trace: [ 98.621197][ T8318] [ 98.621202][ T8318] dump_stack_lvl+0x100/0x190 [ 98.621263][ T8318] should_fail_ex.cold+0x5/0xa [ 98.621286][ T8318] should_failslab+0xc2/0x120 [ 98.621314][ T8318] kmem_cache_alloc_noprof+0x91/0x6a0 [ 98.621331][ T8318] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 98.621349][ T8318] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 98.621367][ T8318] mmu_topup_memory_caches+0x25/0x170 [ 98.621385][ T8318] kvm_mmu_load+0xe2/0x2570 [ 98.621401][ T8318] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 98.621413][ T8318] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 98.621427][ T8318] ? __pfx_kvm_mmu_load+0x10/0x10 [ 98.621442][ T8318] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 98.621455][ T8318] ? kvm_check_and_inject_events+0x873/0x12a0 [ 98.621473][ T8318] ? record_steal_time+0x3c0/0xbb0 [ 98.621487][ T8318] vcpu_run+0x3ab0/0x5df0 [ 98.621508][ T8318] ? __pfx_vcpu_run+0x10/0x10 [ 98.621529][ T8318] ? rcu_is_watching+0x13/0xc0 [ 98.621554][ T8318] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 98.621571][ T8318] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 98.621591][ T8318] kvm_vcpu_ioctl+0x730/0x1700 [ 98.621605][ T8318] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.621618][ T8318] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 98.621636][ T8318] ? do_vfs_ioctl+0x226/0x13e0 [ 98.621657][ T8318] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 98.621667][ T8318] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 98.621707][ T8318] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 98.621728][ T8318] ? selinux_file_ioctl+0x13b/0x290 [ 98.621738][ T8318] ? selinux_file_ioctl+0xb6/0x290 [ 98.621750][ T8318] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 98.621763][ T8318] __x64_sys_ioctl+0x18e/0x210 [ 98.621776][ T8318] do_syscall_64+0x123/0x790 [ 98.621798][ T8318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.621810][ T8318] RIP: 0033:0x7fa90819e0d9 [ 98.621827][ T8318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.621838][ T8318] RSP: 002b:00007fa908fbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 98.621855][ T8318] RAX: ffffffffffffffda RBX: 00007fa908425fa0 RCX: 00007fa90819e0d9 [ 98.621862][ T8318] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 98.621869][ T8318] RBP: 00007fa908fbf090 R08: 0000000000000000 R09: 0000000000000000 [ 98.621875][ T8318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 98.621881][ T8318] R13: 00007fa908426038 R14: 00007fa908425fa0 R15: 00007ffec8f13f18 [ 98.621895][ T8318] [ 98.784954][ T42] audit: type=1400 audit(1787214545.357:910): avc: denied { write } for pid=8326 comm="syz.1.670" name="/" dev="9p" ino=77886161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 98.925842][ T42] audit: type=1400 audit(1787214545.497:911): avc: denied { bind } for pid=8333 comm="syz.0.673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 99.438498][ T12] ip6erspan0: left promiscuous mode [ 100.080351][ T8352] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 100.124404][ T42] audit: type=1400 audit(1787214546.697:912): avc: denied { mount } for pid=8353 comm="syz.2.679" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.127933][ T5810] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.146919][ T42] audit: type=1400 audit(1787214546.717:913): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 100.176278][ T8356] overlay: ./bus is not a directory [ 100.176279][ T8357] overlay: ./bus is not a directory [ 100.182168][ T5084] Bluetooth: hci3: unexpected event for opcode 0x0c56 [ 100.222439][ T42] audit: type=1400 audit(1787214546.797:914): avc: denied { read write } for pid=8358 comm="syz.2.681" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 100.237530][ T5084] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.238433][ T5731] Bluetooth: hci4: command 0x1003 tx timeout [ 100.239012][ T5734] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 100.240195][ T8296] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 100.278388][ T5810] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.283102][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.286824][ T5810] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.291897][ T5810] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.296155][ T5810] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.308489][ T5810] usb 6-1: config 0 descriptor?? [ 100.683453][ T8373] usb 2-1: USB disconnect, device number 3 [ 100.715913][ T8348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.719342][ T8348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.739140][ T5810] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.795160][ T8373] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 100.802186][ T8373] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 100.806401][ T8373] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 100.837766][ T8373] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 100.840474][ T8373] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 100.846301][ T8373] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 100.849135][ T8373] usb usb1: Product: EHCI Host Controller [ 100.850942][ T8373] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 100.853293][ T8373] usb usb1: SerialNumber: 0000:00:1d.7 [ 100.864410][ T8373] hub 1-0:1.0: USB hub found [ 100.866185][ T8373] hub 1-0:1.0: 6 ports detected [ 100.908971][ T8373] hub 2-0:1.0: USB hub found [ 100.913401][ T8373] hub 2-0:1.0: 2 ports detected [ 100.927254][ T5810] usb 6-1: USB disconnect, device number 9 [ 100.957565][ T5734] Bluetooth: hci5: command 0x1003 tx timeout [ 100.960000][ T64] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 100.962485][ T8373] hub 3-0:1.0: USB hub found [ 100.969563][ T8373] hub 3-0:1.0: 2 ports detected [ 101.037549][ T8373] hub 4-0:1.0: USB hub found [ 101.039918][ T8373] hub 4-0:1.0: 2 ports detected [ 101.147485][ T24] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 101.358295][ T8389] ata1.00: invalid multi_count 1 ignored [ 101.358524][ T24] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 101.379019][ T24] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 101.382976][ T24] usb 1-1: Product: QEMU USB Tablet [ 101.384745][ T24] usb 1-1: Manufacturer: QEMU [ 101.392050][ T24] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 101.419320][ T24] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0008/input/input16 [ 101.458666][ T8398] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 101.486680][ T24] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 101.673687][ T8415] netlink: 'syz.1.698': attribute type 1 has an invalid length. [ 101.676180][ T8415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 101.815863][ T8428] program syz.0.701 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.875442][ T8438] bridge0: port 3(syz_tun) entered blocking state [ 101.877715][ T8438] bridge0: port 3(syz_tun) entered disabled state [ 101.879865][ T8438] syz_tun: entered allmulticast mode [ 101.890103][ T8438] syz_tun: entered promiscuous mode [ 101.892975][ T8438] bridge0: port 3(syz_tun) entered blocking state [ 101.895188][ T8438] bridge0: port 3(syz_tun) entered forwarding state [ 101.922843][ T8441] nbd: must specify at least one socket [ 101.925316][ T8434] FAULT_INJECTION: forcing a failure. [ 101.925316][ T8434] name failslab, interval 1, probability 0, space 0, times 0 [ 101.930283][ T8434] CPU: 0 UID: 0 PID: 8434 Comm: syz.1.704 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.930301][ T8434] Tainted: [L]=SOFTLOCKUP [ 101.930305][ T8434] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.930311][ T8434] Call Trace: [ 101.930323][ T8434] [ 101.930327][ T8434] dump_stack_lvl+0x100/0x190 [ 101.930396][ T8434] should_fail_ex.cold+0x5/0xa [ 101.930420][ T8434] should_failslab+0xc2/0x120 [ 101.930450][ T8434] kmem_cache_alloc_noprof+0x91/0x6a0 [ 101.930466][ T8434] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 101.930485][ T8434] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 101.930503][ T8434] mmu_topup_memory_caches+0x25/0x170 [ 101.930521][ T8434] kvm_mmu_load+0xe2/0x2570 [ 101.930537][ T8434] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 101.930550][ T8434] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 101.930564][ T8434] ? __pfx_kvm_mmu_load+0x10/0x10 [ 101.930578][ T8434] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 101.930592][ T8434] ? kvm_check_and_inject_events+0x873/0x12a0 [ 101.930609][ T8434] ? record_steal_time+0x3c0/0xbb0 [ 101.930625][ T8434] vcpu_run+0x3ab0/0x5df0 [ 101.930646][ T8434] ? __pfx____ratelimit+0x10/0x10 [ 101.930666][ T8434] ? __pfx_vcpu_run+0x10/0x10 [ 101.930686][ T8434] ? rcu_is_watching+0x13/0xc0 [ 101.930714][ T8434] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 101.930730][ T8434] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 101.930750][ T8434] kvm_vcpu_ioctl+0x730/0x1700 [ 101.930764][ T8434] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.930778][ T8434] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 101.930795][ T8434] ? do_vfs_ioctl+0x226/0x13e0 [ 101.930816][ T8434] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 101.930827][ T8434] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 101.930871][ T8434] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 101.930891][ T8434] ? selinux_file_ioctl+0x13b/0x290 [ 101.930901][ T8434] ? selinux_file_ioctl+0xb6/0x290 [ 101.930912][ T8434] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 101.930926][ T8434] __x64_sys_ioctl+0x18e/0x210 [ 101.930939][ T8434] do_syscall_64+0x123/0x790 [ 101.930957][ T8434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.930975][ T8434] RIP: 0033:0x7f2bedb9e0d9 [ 101.930989][ T8434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.931004][ T8434] RSP: 002b:00007f2beea0b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 101.931025][ T8434] RAX: ffffffffffffffda RBX: 00007f2bede25fa0 RCX: 00007f2bedb9e0d9 [ 101.931032][ T8434] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 101.931038][ T8434] RBP: 00007f2beea0b090 R08: 0000000000000000 R09: 0000000000000000 [ 101.931044][ T8434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 101.931050][ T8434] R13: 00007f2bede26038 R14: 00007f2bede25fa0 R15: 00007ffeb59ba6d8 [ 101.931064][ T8434] [ 102.030544][ T8451] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 102.034611][ T8451] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 102.080744][ T8455] netlink: 4 bytes leftover after parsing attributes in process `syz.0.711'. [ 102.286804][ T8462] netlink: 'syz.0.713': attribute type 1 has an invalid length. [ 102.291738][ T8462] netlink: 'syz.0.713': attribute type 12 has an invalid length. [ 102.295623][ T8462] netlink: 224 bytes leftover after parsing attributes in process `syz.0.713'. [ 102.436981][ T8477] netlink: 32 bytes leftover after parsing attributes in process `syz.0.716'. [ 102.598934][ T8490] netlink: 8 bytes leftover after parsing attributes in process `syz.4.720'. [ 102.720315][ T8502] FAULT_INJECTION: forcing a failure. [ 102.720315][ T8502] name failslab, interval 1, probability 0, space 0, times 0 [ 102.724247][ T8502] CPU: 1 UID: 0 PID: 8502 Comm: syz.4.722 Tainted: G L syzkaller #0 PREEMPT(full) [ 102.724265][ T8502] Tainted: [L]=SOFTLOCKUP [ 102.724269][ T8502] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 102.724295][ T8502] Call Trace: [ 102.724308][ T8502] [ 102.724313][ T8502] dump_stack_lvl+0x100/0x190 [ 102.724399][ T8502] should_fail_ex.cold+0x5/0xa [ 102.724437][ T8502] should_failslab+0xc2/0x120 [ 102.724477][ T8502] kmem_cache_alloc_noprof+0x91/0x6a0 [ 102.724494][ T8502] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 102.724512][ T8502] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 102.724530][ T8502] mmu_topup_memory_caches+0x25/0x170 [ 102.724548][ T8502] kvm_mmu_load+0xe2/0x2570 [ 102.724564][ T8502] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 102.724576][ T8502] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 102.724590][ T8502] ? __pfx_kvm_mmu_load+0x10/0x10 [ 102.724605][ T8502] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 102.724619][ T8502] ? kvm_check_and_inject_events+0x873/0x12a0 [ 102.724636][ T8502] ? record_steal_time+0x3c0/0xbb0 [ 102.724649][ T8502] vcpu_run+0x3ab0/0x5df0 [ 102.724675][ T8502] ? __pfx____ratelimit+0x10/0x10 [ 102.724695][ T8502] ? __pfx_vcpu_run+0x10/0x10 [ 102.724715][ T8502] ? rcu_is_watching+0x13/0xc0 [ 102.724740][ T8502] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 102.724756][ T8502] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 102.724777][ T8502] kvm_vcpu_ioctl+0x730/0x1700 [ 102.724791][ T8502] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.724804][ T8502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 102.724822][ T8502] ? do_vfs_ioctl+0x226/0x13e0 [ 102.724843][ T8502] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 102.724856][ T8502] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 102.724892][ T8502] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 102.724913][ T8502] ? selinux_file_ioctl+0x13b/0x290 [ 102.724922][ T8502] ? selinux_file_ioctl+0xb6/0x290 [ 102.724934][ T8502] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 102.724947][ T8502] __x64_sys_ioctl+0x18e/0x210 [ 102.724961][ T8502] do_syscall_64+0x123/0x790 [ 102.724977][ T8502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.724990][ T8502] RIP: 0033:0x7fd49099e0d9 [ 102.725005][ T8502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.725015][ T8502] RSP: 002b:00007fd48ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 102.725034][ T8502] RAX: ffffffffffffffda RBX: 00007fd490c25fa0 RCX: 00007fd49099e0d9 [ 102.725041][ T8502] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 102.725047][ T8502] RBP: 00007fd48ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 102.725053][ T8502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 102.725059][ T8502] R13: 00007fd490c26038 R14: 00007fd490c25fa0 R15: 00007ffccc9a7158 [ 102.725073][ T8502] [ 102.770726][ T8501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34796 sclass=netlink_route_socket pid=8501 comm=syz.1.721 [ 102.829730][ T8501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=34796 sclass=netlink_route_socket pid=8501 comm=syz.1.721 [ 103.101982][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 103.101994][ T42] audit: type=1400 audit(1787214549.677:931): avc: denied { mount } for pid=8514 comm="syz.0.725" name="/" dev="rpc_pipefs" ino=35837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.121912][ T42] audit: type=1400 audit(1787214549.697:932): avc: denied { map } for pid=8511 comm="syz.4.724" path="socket:[35832]" dev="sockfs" ino=35832 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 103.133025][ T42] audit: type=1400 audit(1787214549.707:933): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 103.414980][ T60] logitech-hidpp-device 0005:046D:B012.0009: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 103.440024][ T8531] fido_id[8531]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 103.635872][ T8552] macsec0: entered promiscuous mode [ 103.640223][ T8552] macsec0: entered allmulticast mode [ 103.642583][ T8552] veth1_macvtap: entered allmulticast mode [ 103.780210][ T8558] netlink: 20 bytes leftover after parsing attributes in process `syz.1.739'. [ 103.818388][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.740'. [ 103.839535][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 103.841743][ T42] audit: type=1400 audit(1787214550.417:934): avc: denied { mount } for pid=8557 comm="syz.1.739" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 104.125890][ T8593] netlink: 4 bytes leftover after parsing attributes in process `syz.4.750'. [ 104.131200][ T8593] netlink: 12 bytes leftover after parsing attributes in process `syz.4.750'. [ 104.154307][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.751'. [ 104.218954][ T8598] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 104.249516][ T42] audit: type=1400 audit(1787214550.827:935): avc: denied { bind } for pid=8599 comm="syz.2.753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 104.458012][ T5810] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 104.502295][ T8608] netlink: 'syz.2.756': attribute type 11 has an invalid length. [ 104.587616][ T5810] usb 9-1: device descriptor read/64, error -71 [ 104.828472][ T5810] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 104.870311][ T8630] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 104.929214][ T8630] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 104.933309][ T8630] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 104.936680][ T8630] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 104.940369][ T8630] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 104.944459][ T8630] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 104.963325][ T8630] pci 0000:00:01.0: Adding to iommu group 1 [ 104.967493][ T5810] usb 9-1: device descriptor read/64, error -71 [ 104.970129][ T8630] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 104.972471][ T8630] pci 0000:00:01.0: vgaarb: bridge control possible [ 104.974283][ T8630] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 104.985024][ T8630] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 105.007358][ T8630] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 105.024946][ T8630] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 105.072899][ T42] audit: type=1400 audit(1787214551.647:936): avc: denied { append } for pid=8638 comm="syz.1.766" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 105.078613][ T5810] usb usb9-port1: attempt power cycle [ 105.098054][ T8630] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 105.101137][ T8630] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 105.104449][ T8630] [drm] features: -virgl +edid -resource_blob -host_visible [ 105.104461][ T8630] [drm] features: -context_init -blob_alignment [ 105.138305][ T8630] [drm] number of scanouts: 1 [ 105.140590][ T8630] [drm] number of cap sets: 0 [ 105.175228][ T8630] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 105.304984][ T8630] Console: switching to colour frame buffer device 160x50 [ 105.338892][ T8630] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 105.428498][ T5810] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 105.448330][ T5810] usb 9-1: device descriptor read/8, error -71 [ 105.448354][ T8658] hfsplus: Unknown parameter 'A1M606c`9PɻXԭ'qS"8' [ 105.452586][ T8660] capability: warning: `syz.0.772' uses 32-bit capabilities (legacy support in use) [ 105.496668][ T42] audit: type=1400 audit(1787214552.067:937): avc: denied { read } for pid=8662 comm="syz.1.773" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.506534][ T42] audit: type=1400 audit(1787214552.077:938): avc: denied { open } for pid=8662 comm="syz.1.773" path="/205/dev/mapper/control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.514409][ T42] audit: type=1400 audit(1787214552.077:939): avc: denied { ioctl } for pid=8662 comm="syz.1.773" path="/205/dev/mapper/control" dev="devtmpfs" ino=1289 ioctlcmd=0xfd06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 105.687514][ T5810] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 105.708193][ T5810] usb 9-1: device descriptor read/8, error -71 [ 105.734036][ T64] Bluetooth: hci2: unexpected event for opcode 0x2029 [ 105.817813][ T5810] usb usb9-port1: unable to enumerate USB device [ 105.926139][ T8680] hsr_slave_1: left promiscuous mode [ 106.075064][ T8689] 9pnet_fd: p9_fd_create_tcp (8689): problem binding to privport [ 106.367092][ T8708] [U] ^A [ 106.435551][ T8714] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 106.447513][ T42] audit: type=1400 audit(1787214553.017:940): avc: denied { mounton } for pid=8713 comm="syz.1.790" path="/212/file0" dev="tmpfs" ino=1192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 106.455596][ T8711] FAULT_INJECTION: forcing a failure. [ 106.455596][ T8711] name failslab, interval 1, probability 0, space 0, times 0 [ 106.460174][ T8711] CPU: 3 UID: 0 PID: 8711 Comm: syz.2.789 Tainted: G L syzkaller #0 PREEMPT(full) [ 106.460192][ T8711] Tainted: [L]=SOFTLOCKUP [ 106.460196][ T8711] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 106.460202][ T8711] Call Trace: [ 106.460214][ T8711] [ 106.460219][ T8711] dump_stack_lvl+0x100/0x190 [ 106.460349][ T8711] should_fail_ex.cold+0x5/0xa [ 106.460371][ T8711] should_failslab+0xc2/0x120 [ 106.460400][ T8711] __kvmalloc_node_noprof+0x116/0x970 [ 106.460418][ T8711] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 106.460436][ T8711] __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 106.460454][ T8711] mmu_topup_memory_caches+0xbc/0x170 [ 106.460472][ T8711] kvm_mmu_load+0xe2/0x2570 [ 106.460488][ T8711] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 106.460501][ T8711] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 106.460515][ T8711] ? __pfx_kvm_mmu_load+0x10/0x10 [ 106.460530][ T8711] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 106.460543][ T8711] ? kvm_check_and_inject_events+0x873/0x12a0 [ 106.460560][ T8711] ? record_steal_time+0x3c0/0xbb0 [ 106.460574][ T8711] vcpu_run+0x3ab0/0x5df0 [ 106.460596][ T8711] ? __pfx_vcpu_run+0x10/0x10 [ 106.460617][ T8711] ? rcu_is_watching+0x13/0xc0 [ 106.460641][ T8711] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 106.460658][ T8711] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 106.460678][ T8711] kvm_vcpu_ioctl+0x730/0x1700 [ 106.460692][ T8711] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.460706][ T8711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 106.460723][ T8711] ? do_vfs_ioctl+0x226/0x13e0 [ 106.460760][ T8711] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 106.460771][ T8711] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 106.460811][ T8711] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 106.460831][ T8711] ? selinux_file_ioctl+0x13b/0x290 [ 106.460841][ T8711] ? selinux_file_ioctl+0xb6/0x290 [ 106.460852][ T8711] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 106.460866][ T8711] __x64_sys_ioctl+0x18e/0x210 [ 106.460879][ T8711] do_syscall_64+0x123/0x790 [ 106.460932][ T8711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 106.460944][ T8711] RIP: 0033:0x7f9394b9e0d9 [ 106.460966][ T8711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 106.460976][ T8711] RSP: 002b:00007f9395ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 106.461001][ T8711] RAX: ffffffffffffffda RBX: 00007f9394e25fa0 RCX: 00007f9394b9e0d9 [ 106.461007][ T8711] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 106.461014][ T8711] RBP: 00007f9395ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 106.461020][ T8711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 106.461026][ T8711] R13: 00007f9394e26038 R14: 00007f9394e25fa0 R15: 00007fffb7993e28 [ 106.461040][ T8711] [ 106.592628][ T8719] MTRR 1 not used [ 106.735180][ T8723] __nla_validate_parse: 5 callbacks suppressed [ 106.735192][ T8723] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'. [ 106.833767][ T8727] nvme nvme0: failed to connect socket: -111 [ 107.741994][ T64] Bluetooth: hci0: Malformed Event: 0x2f [ 107.803665][ T8786] netlink: 'syz.2.813': attribute type 11 has an invalid length. [ 107.824723][ T8790] netlink: 72 bytes leftover after parsing attributes in process `syz.1.814'. [ 107.842701][ T8786] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 107.934142][ T8803] netlink: set zone limit has 4 unknown bytes [ 108.087671][ T8821] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 108.152838][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 108.152853][ T42] audit: type=1326 audit(1787214554.727:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8820 comm="syz.2.823" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9394b9e0d9 code=0x0 [ 108.464202][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 108.470695][ T8839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.829'. [ 108.479591][ T42] audit: type=1400 audit(1787214555.057:948): avc: denied { setopt } for pid=8837 comm="syz.0.829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 108.606492][ T42] audit: type=1400 audit(1787214555.177:949): avc: denied { setopt } for pid=8846 comm="syz.0.832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 108.636411][ T42] audit: type=1400 audit(1787214555.207:950): avc: denied { map } for pid=8846 comm="syz.0.832" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.644174][ T42] audit: type=1400 audit(1787214555.207:951): avc: denied { ioctl } for pid=8846 comm="syz.0.832" path="/dev/hpet" dev="devtmpfs" ino=630 ioctlcmd=0xaf61 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 108.968224][ T8858] ufs: ufs_fill_super(): bad magic number [ 109.016890][ T8865] netlink: 56 bytes leftover after parsing attributes in process `syz.1.837'. [ 109.025524][ T8865] syz.1.837 (8865): /proc/8864/oom_adj is deprecated, please use /proc/8864/oom_score_adj instead. [ 109.102764][ T42] audit: type=1400 audit(1787214555.677:952): avc: denied { read } for pid=8878 comm="syz.0.840" dev="sockfs" ino=42134 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 109.177182][ T8890] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 109.276587][ T8893] netlink: 16 bytes leftover after parsing attributes in process `syz.1.844'. [ 109.609689][ T8906] FAULT_INJECTION: forcing a failure. [ 109.609689][ T8906] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 109.615949][ T8906] CPU: 1 UID: 0 PID: 8906 Comm: syz.4.849 Tainted: G L syzkaller #0 PREEMPT(full) [ 109.615967][ T8906] Tainted: [L]=SOFTLOCKUP [ 109.615971][ T8906] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 109.615977][ T8906] Call Trace: [ 109.615992][ T8906] [ 109.615996][ T8906] dump_stack_lvl+0x100/0x190 [ 109.616066][ T8906] should_fail_ex.cold+0x5/0xa [ 109.616087][ T8906] ? prepare_alloc_pages+0x16d/0x5f0 [ 109.616117][ T8906] should_fail_alloc_page+0xeb/0x140 [ 109.616136][ T8906] prepare_alloc_pages+0x1f0/0x5f0 [ 109.616156][ T8906] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 109.616171][ T8906] ? stack_trace_save+0x8e/0xc0 [ 109.616193][ T8906] ? __pfx_stack_trace_save+0x10/0x10 [ 109.616206][ T8906] ? stack_depot_save_flags+0x27/0x9f0 [ 109.616266][ T8906] ? stack_depot_save_flags+0x27/0x9f0 [ 109.616283][ T8906] ? kasan_save_stack+0x3f/0x50 [ 109.616298][ T8906] ? kasan_save_stack+0x30/0x50 [ 109.616311][ T8906] ? kasan_save_track+0x14/0x30 [ 109.616326][ T8906] ? __kasan_kmalloc+0xaa/0xb0 [ 109.616340][ T8906] ? __kvmalloc_node_noprof+0x351/0x970 [ 109.616354][ T8906] ? __kvm_mmu_topup_memory_cache+0x455/0x5f0 [ 109.616369][ T8906] ? mmu_topup_memory_caches+0xbc/0x170 [ 109.616387][ T8906] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 109.616401][ T8906] ? kvm_vcpu_ioctl+0x730/0x1700 [ 109.616413][ T8906] ? do_syscall_64+0x123/0x790 [ 109.616458][ T8906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.616475][ T8906] ? policy_nodemask+0xed/0x4f0 [ 109.616494][ T8906] alloc_pages_mpol+0x1fb/0x540 [ 109.616511][ T8906] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 109.616529][ T8906] ? __kvmalloc_node_noprof+0x36f/0x970 [ 109.616547][ T8906] alloc_pages_noprof+0x1a/0x160 [ 109.616559][ T8906] get_free_pages_noprof+0x10/0xb0 [ 109.616575][ T8906] __kvm_mmu_topup_memory_cache+0x278/0x5f0 [ 109.616593][ T8906] mmu_topup_memory_caches+0xbc/0x170 [ 109.616609][ T8906] kvm_mmu_load+0xe2/0x2570 [ 109.616625][ T8906] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 109.616637][ T8906] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 109.616656][ T8906] ? __pfx_kvm_mmu_load+0x10/0x10 [ 109.616671][ T8906] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 109.616685][ T8906] ? kvm_check_and_inject_events+0x873/0x12a0 [ 109.616701][ T8906] ? record_steal_time+0x3c0/0xbb0 [ 109.616715][ T8906] vcpu_run+0x3ab0/0x5df0 [ 109.616738][ T8906] ? __pfx_vcpu_run+0x10/0x10 [ 109.616759][ T8906] ? rcu_is_watching+0x13/0xc0 [ 109.616779][ T8906] ? kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 109.616795][ T8906] kvm_arch_vcpu_ioctl_run+0x103d/0x1960 [ 109.616816][ T8906] kvm_vcpu_ioctl+0x730/0x1700 [ 109.616830][ T8906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 109.616843][ T8906] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 109.616859][ T8906] ? do_vfs_ioctl+0x226/0x13e0 [ 109.616879][ T8906] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 109.616890][ T8906] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 109.616914][ T8906] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 109.616934][ T8906] ? selinux_file_ioctl+0x13b/0x290 [ 109.616944][ T8906] ? selinux_file_ioctl+0xb6/0x290 [ 109.616955][ T8906] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 109.616969][ T8906] __x64_sys_ioctl+0x18e/0x210 [ 109.616982][ T8906] do_syscall_64+0x123/0x790 [ 109.616998][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.617011][ T8906] RIP: 0033:0x7fd49099e0d9 [ 109.617021][ T8906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.617032][ T8906] RSP: 002b:00007fd48ebf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 109.617057][ T8906] RAX: ffffffffffffffda RBX: 00007fd490c25fa0 RCX: 00007fd49099e0d9 [ 109.617063][ T8906] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000f [ 109.617070][ T8906] RBP: 00007fd48ebf6090 R08: 0000000000000000 R09: 0000000000000000 [ 109.617076][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 109.617082][ T8906] R13: 00007fd490c26038 R14: 00007fd490c25fa0 R15: 00007ffccc9a7158 [ 109.617096][ T8906] [ 110.016441][ T8919] netlink: 'syz.1.854': attribute type 1 has an invalid length. [ 110.019150][ T8919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.854'. [ 110.070371][ T8923] usb usb9: usbfs: process 8923 (syz.0.855) did not claim interface 0 before use [ 110.073837][ T8923] syzkaller1: entered promiscuous mode [ 110.075630][ T8923] syzkaller1: entered allmulticast mode [ 110.135488][ T8930] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 110.137536][ T8930] syzkaller1: linktype set to 776 [ 110.404661][ T8949] netlink: 68 bytes leftover after parsing attributes in process `syz.0.870'. [ 110.407800][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 110.418962][ T8949] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 110.422309][ T8949] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 110.426495][ T8952] tipc: Started in network mode [ 110.429647][ T8952] tipc: Node identity 2000004, cluster identity 4711 [ 110.432661][ T8952] tipc: Node number set to 33554436 [ 110.461062][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 110.468982][ T1127] ata1.00: configured for UDMA/100 [ 110.553992][ T42] audit: type=1400 audit(1787214557.127:953): avc: denied { bind } for pid=8954 comm="syz.0.865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 110.562359][ T8955] netlink: 'syz.0.865': attribute type 4 has an invalid length. [ 110.619489][ T42] audit: type=1400 audit(1787214557.197:954): avc: denied { ioctl } for pid=8958 comm="syz.1.867" path="socket:[41532]" dev="sockfs" ino=41532 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 110.759564][ T42] audit: type=1400 audit(1787214557.337:955): avc: denied { write } for pid=8966 comm="syz.1.868" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 110.769489][ T42] audit: type=1400 audit(1787214557.337:956): avc: denied { open } for pid=8966 comm="syz.1.868" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 111.243233][ T8984] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 111.280854][ T8993] binder_alloc: binder_alloc_mmap_handler: 8992 200000ffd000-200001000000 already mapped failed -16 [ 111.287086][ T8994] binder: BINDER_SET_CONTEXT_MGR already set [ 111.290625][ T8994] binder: 8992:8994 ioctl 4018620d 200000000300 returned -16 [ 111.295529][ T8993] binder_alloc: 8992: binder_alloc_buf, no vma [ 111.352755][ T9005] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead [ 111.358438][ T9005] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 111.361429][ T9005] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 111.365453][ T9005] overlay: filesystem on ./bus not supported as upperdir [ 111.548703][ T34] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 111.664185][ T9025] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 111.682986][ T9028] geneve2: entered promiscuous mode [ 111.685218][ T9028] geneve2: entered allmulticast mode [ 111.707659][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.710508][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.713546][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.716602][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 111.727523][ T34] usb 9-1: Using ep0 maxpacket: 16 [ 111.732458][ T34] usb 9-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 111.740697][ T34] usb 9-1: config 0 has an invalid interface number: 132 but max is 0 [ 111.744902][ T34] usb 9-1: config 0 has no interface number 0 [ 111.756319][ T34] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.760252][ T34] usb 9-1: Product: syz [ 111.761593][ T34] usb 9-1: Manufacturer: syz [ 111.763043][ T34] usb 9-1: SerialNumber: syz [ 111.766166][ T34] usb 9-1: config 0 descriptor?? [ 111.774009][ T34] hub 9-1:0.132: bad descriptor, ignoring hub [ 111.776212][ T34] hub 9-1:0.132: probe with driver hub failed with error -5 [ 111.780612][ T34] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.132/input/input18 [ 111.799473][ T34] input: failed to attach handler mousedev to device input18, error: -2 [ 111.810578][ T9038] __nla_validate_parse: 6 callbacks suppressed [ 111.810590][ T9038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.890'. [ 111.816538][ T9038] program syz.0.890 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.057661][ T9051] Bluetooth: hci0: unsupported parameter 34 [ 112.059641][ T9051] Bluetooth: hci0: unsupported parameter 34 [ 112.180059][ T9056] ehci-pci 0000:00:1d.7: remove, state 1 [ 112.184503][ T9056] usb usb1: USB disconnect, device number 1 [ 112.186374][ T9056] usb 1-1: USB disconnect, device number 2 [ 112.251953][ T9056] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 112.407566][ T5734] Bluetooth: hci1: command tx timeout [ 112.507535][ T5810] usb 2-1: new full-speed USB device number 4 using uhci_hcd [ 112.538312][ T5734] Bluetooth: hci2: unexpected event for opcode 0x0c20 [ 112.539287][ T9070] netlink: 'syz.1.901': attribute type 21 has an invalid length. [ 112.556651][ T9074] IPv6: syztnl0: Disabled Multicast RS [ 112.562856][ T9077] Attempt to restore checkpoint with obsolete wellknown handles [ 112.665986][ T5810] usb 2-1: not running at top speed; connect to a high speed hub [ 112.669176][ T5810] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 112.691448][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 112.696956][ T5810] usb 2-1: Product: QEMU USB Tablet [ 112.698999][ T5810] usb 2-1: Manufacturer: QEMU [ 112.700826][ T5810] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 112.721495][ T5810] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.000A/input/input20 [ 112.730618][ T5810] hid-generic 0003:0627:0001.000A: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 112.741092][ T9059] usb 2-1: USB disconnect, device number 4 [ 112.785685][ T9087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 112.831023][ T9088] fido_id[9088]: Failed to open report descriptor at '/sys/devices/pci0000:00/0000:00:1d.0/usb2/report_descriptor': No such file or directory [ 112.888590][ T9059] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 112.900197][ T9059] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 112.905860][ T9059] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 112.927565][ T9059] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 112.930339][ T9059] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 112.934079][ T9059] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 112.936655][ T9059] usb usb1: Product: EHCI Host Controller [ 112.938943][ T9059] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 112.941039][ T9059] usb usb1: SerialNumber: 0000:00:1d.7 [ 112.952076][ T9059] hub 1-0:1.0: USB hub found [ 112.953867][ T9059] hub 1-0:1.0: 6 ports detected [ 112.989496][ T9059] hub 2-0:1.0: USB hub found [ 112.992165][ T9059] hub 2-0:1.0: 2 ports detected [ 113.043719][ T9059] hub 3-0:1.0: USB hub found [ 113.046239][ T9059] hub 3-0:1.0: 2 ports detected [ 113.105035][ T9059] hub 4-0:1.0: USB hub found [ 113.113131][ T9059] hub 4-0:1.0: 2 ports detected [ 113.227685][ T5873] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 113.274760][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 113.278614][ T9115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.916'. [ 113.398566][ T5873] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 113.414404][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.918'. [ 113.417338][ T9122] netlink: 20 bytes leftover after parsing attributes in process `syz.0.918'. [ 113.422650][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 113.425079][ T5873] usb 1-1: Product: QEMU USB Tablet [ 113.426578][ T5873] usb 1-1: Manufacturer: QEMU [ 113.428420][ T5873] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 113.430394][ T9122] geneve2: entered promiscuous mode [ 113.432186][ T9122] geneve2: entered allmulticast mode [ 113.470460][ T5873] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.000B/input/input21 [ 113.491617][ T5873] hid-generic 0003:0627:0001.000B: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 113.605134][ T9135] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9135 comm=syz.4.922 [ 113.610915][ T9135] netlink: 'syz.4.922': attribute type 1 has an invalid length. [ 113.634657][ T9135] bond0: entered promiscuous mode [ 113.637645][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 113.637656][ T42] audit: type=1400 audit(1787214560.207:965): avc: denied { setattr } for pid=9137 comm="syz.0.923" path="socket:[45110]" dev="sockfs" ino=45110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 113.641082][ T9135] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.655645][ T42] audit: type=1400 audit(1787214560.227:966): avc: denied { create } for pid=9134 comm="syz.4.922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 113.720417][ T9135] veth3: entered allmulticast mode [ 113.727851][ T9135] bond0: (slave veth3): making interface the new active one [ 113.730179][ T9135] veth3: entered promiscuous mode [ 113.732397][ T9135] bond0: (slave veth3): Enslaving as an active interface with an up link [ 113.751924][ T9147] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 113.762916][ T9147] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 114.232843][ T42] audit: type=1400 audit(1787214560.807:967): avc: denied { name_connect } for pid=9177 comm="syz.0.933" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 114.299055][ T42] audit: type=1400 audit(1787214560.867:968): avc: denied { read } for pid=9189 comm="syz.2.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 114.310298][ T9190] nfs: Unknown parameter './file0' [ 114.369056][ T9196] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 114.573734][ T42] audit: type=1400 audit(1787214561.147:969): avc: denied { map } for pid=9204 comm="syz.2.942" path="/dev/vcsu" dev="devtmpfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 114.640845][ T9213] i2c i2c-0: delete_device: Extra parameters [ 114.663321][ T42] audit: type=1400 audit(1787214561.237:970): avc: denied { connect } for pid=9212 comm="syz.0.944" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.729215][ T42] audit: type=1400 audit(1787214561.307:971): avc: denied { accept } for pid=9214 comm="syz.0.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.170354][ T9247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.956'. [ 115.203282][ T9255] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 115.343815][ T34] usb 9-1: USB disconnect, device number 9 [ 115.399979][ T9268] netlink: 'syz.1.962': attribute type 6 has an invalid length. [ 115.423759][ T9268] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 115.426761][ T60] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 115.483144][ T9275] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 115.488997][ T9275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.963'. [ 115.497319][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 115.503521][ T9276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 115.707145][ T42] audit: type=1400 audit(1787214562.277:972): avc: denied { setattr } for pid=9286 comm="syz.4.967" name="file0" dev="9p" ino=77886223 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.726969][ T9291] nvme nvme0: rdma connection establishment failed (-104) [ 115.945218][ T9299] ehci-pci 0000:00:1d.7: remove, state 1 [ 115.947176][ T9299] usb usb1: USB disconnect, device number 1 [ 115.951679][ T9299] usb 1-1: USB disconnect, device number 2 [ 116.051928][ T9307] CIFS: Attempting to mount //127.0.0.1/share [ 116.082350][ T9307] CIFS: VFS: Error connecting to socket. Aborting operation. [ 116.084886][ T9307] CIFS: VFS: cifs_mount failed w/return code = -101 [ 116.092425][ T9299] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 116.194219][ T42] audit: type=1400 audit(1787214562.767:973): avc: denied { shutdown } for pid=9309 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 116.349742][ T9322] zero sized request [ 116.359790][ T933] usb 2-1: new full-speed USB device number 5 using uhci_hcd [ 116.420169][ T42] audit: type=1400 audit(1787214562.997:974): avc: denied { setopt } for pid=9323 comm="syz.1.980" lport=51958 faddr=::ffff:172.30.0.2 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.514417][ T933] usb 2-1: not running at top speed; connect to a high speed hub [ 116.520596][ T933] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 116.543215][ T933] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 116.546128][ T933] usb 2-1: Product: QEMU USB Tablet [ 116.548163][ T933] usb 2-1: Manufacturer: QEMU [ 116.549786][ T933] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 116.573533][ T933] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.000C/input/input22 [ 116.641871][ T9336] overlayfs: missing 'lowerdir' [ 116.644239][ T9336] overlayfs: missing 'lowerdir' [ 116.646350][ T9336] overlayfs: missing 'lowerdir' [ 116.651805][ T9336] overlayfs: missing 'lowerdir' [ 116.655006][ T9336] overlayfs: missing 'lowerdir' [ 116.655643][ T933] hid-generic 0003:0627:0001.000C: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 116.663192][ T9336] overlayfs: missing 'lowerdir' [ 116.665696][ T9336] overlayfs: missing 'lowerdir' [ 116.672484][ T9336] overlayfs: missing 'lowerdir' [ 116.675512][ T9336] overlayfs: missing 'lowerdir' [ 116.681262][ T9336] overlayfs: missing 'lowerdir' [ 116.684061][ T9336] overlayfs: missing 'lowerdir' [ 116.686109][ T9336] overlayfs: missing 'lowerdir' [ 117.007853][ T9350] tmpfs: Bad value for 'mpol' [ 117.357621][ T60] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 117.497536][ T60] usb 5-1: device descriptor read/64, error -71 [ 117.565990][ T9379] netlink: 700 bytes leftover after parsing attributes in process `syz.4.997'. [ 117.649231][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 117.651991][ T9387] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 117.737566][ T60] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 117.773636][ T9392] fuse: Bad value for 'user_id' [ 117.775357][ T9392] fuse: Bad value for 'user_id' [ 117.801194][ T9394] FAULT_INJECTION: forcing a failure. [ 117.801194][ T9394] name failslab, interval 1, probability 0, space 0, times 0 [ 117.805424][ T9394] CPU: 2 UID: 0 PID: 9394 Comm: syz.2.1002 Tainted: G L syzkaller #0 PREEMPT(full) [ 117.805443][ T9394] Tainted: [L]=SOFTLOCKUP [ 117.805447][ T9394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 117.805453][ T9394] Call Trace: [ 117.805470][ T9394] [ 117.805474][ T9394] dump_stack_lvl+0x100/0x190 [ 117.805543][ T9394] should_fail_ex.cold+0x5/0xa [ 117.805567][ T9394] should_failslab+0xc2/0x120 [ 117.805596][ T9394] __kmalloc_noprof+0xfc/0x820 [ 117.805611][ T9394] ? rcu_is_watching+0x13/0xc0 [ 117.805633][ T9394] ? tomoyo_realpath_from_path+0xb6/0x690 [ 117.805673][ T9394] tomoyo_realpath_from_path+0xb6/0x690 [ 117.805689][ T9394] tomoyo_path_number_perm+0x23c/0x580 [ 117.805705][ T9394] ? tomoyo_path_number_perm+0x22e/0x580 [ 117.805723][ T9394] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 117.805753][ T9394] ? find_held_lock+0x2b/0x80 [ 117.805765][ T9394] ? hook_file_ioctl_common+0x140/0x440 [ 117.805788][ T9394] ? __fget_files+0x21f/0x3d0 [ 117.805814][ T9394] security_file_ioctl+0xd3/0x230 [ 117.805832][ T9394] __x64_sys_ioctl+0xb7/0x210 [ 117.805851][ T9394] do_syscall_64+0x123/0x790 [ 117.805888][ T9394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.805900][ T9394] RIP: 0033:0x7f9394b9e0d9 [ 117.805916][ T9394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.805926][ T9394] RSP: 002b:00007f9395ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.805950][ T9394] RAX: ffffffffffffffda RBX: 00007f9394e25fa0 RCX: 00007f9394b9e0d9 [ 117.805957][ T9394] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 117.805963][ T9394] RBP: 00007f9395ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 117.805970][ T9394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.805976][ T9394] R13: 00007f9394e26038 R14: 00007f9394e25fa0 R15: 00007fffb7993e28 [ 117.805989][ T9394] [ 117.805994][ T9394] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.927664][ T60] usb 5-1: device descriptor read/64, error -71 [ 118.003209][ T9400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1003'. [ 118.006298][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1003'. [ 118.039400][ T60] usb usb5-port1: attempt power cycle [ 118.387897][ T60] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 118.408004][ T60] usb 5-1: device descriptor read/8, error -71 [ 118.647475][ T60] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 118.678068][ T60] usb 5-1: device descriptor read/8, error -71 [ 118.782905][ T9397] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 118.788659][ T60] usb usb5-port1: unable to enumerate USB device [ 118.791468][ T9397] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 118.794607][ T9397] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.797295][ T9397] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 119.137573][ T60] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 119.287698][ T60] usb 7-1: Using ep0 maxpacket: 8 [ 119.291495][ T60] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 119.296573][ T60] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.299276][ T60] usb 7-1: config 0 has no interface number 0 [ 119.301323][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.304728][ T60] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 119.308490][ T60] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 119.311855][ T60] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 119.314996][ T60] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 119.319560][ T60] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.324172][ T60] usb 7-1: config 0 descriptor?? [ 119.333763][ T60] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 119.538762][ T9419] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 119.546950][ T1479] usb 7-1: USB disconnect, device number 5 [ 119.552757][ T1479] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 120.077590][ T5734] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.130083][ T9446] oom_control is deprecated and will be removed. Please report your usecase to linux-mm-@kvack.org if you depend on this functionality. [ 120.181097][ T9446] socket: no more sockets [ 120.196830][ T9446] socket: no more sockets [ 120.224364][ T9446] socket: no more sockets [ 120.253314][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 120.253327][ T42] audit: type=1400 audit(1787214566.827:977): avc: denied { write } for pid=9453 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.296752][ T9448] ceph: No mds server is up or the cluster is laggy [ 120.306145][ T42] audit: type=1400 audit(1787214566.877:978): avc: denied { write } for pid=9457 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.387468][ T42] audit: type=1400 audit(1787214566.957:979): avc: denied { write } for pid=9460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.436379][ T42] audit: type=1400 audit(1787214567.007:980): avc: denied { write } for pid=9467 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.446521][ T42] audit: type=1400 audit(1787214567.017:981): avc: denied { append } for pid=9468 comm="syz.0.1020" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 120.454290][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.465476][ T9441] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 120.468965][ T9466] bridge_slave_0 (unregistering): left allmulticast mode [ 120.471094][ T9466] bridge_slave_0 (unregistering): left promiscuous mode [ 120.474313][ T9466] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.499952][ T9478] openvswitch: netlink: Flow key attribute not present in set flow. [ 120.500262][ T42] audit: type=1400 audit(1787214567.077:982): avc: denied { write } for pid=9475 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.530368][ T42] audit: type=1400 audit(1787214567.107:983): avc: denied { ioctl } for pid=9479 comm="syz.0.1022" path="socket:[49254]" dev="sockfs" ino=49254 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.541034][ T42] audit: type=1400 audit(1787214567.117:984): avc: denied { bind } for pid=9479 comm="syz.0.1022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 120.561109][ T42] audit: type=1400 audit(1787214567.137:985): avc: denied { write } for pid=9482 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.577138][ T42] audit: type=1400 audit(1787214567.147:986): avc: denied { write } for pid=9484 comm="syz.1.1024" name="usb_gadget" dev="configfs" ino=5390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 120.741112][ T9499] syzkaller1: entered promiscuous mode [ 120.743494][ T9499] syzkaller1: entered allmulticast mode [ 120.798092][ T5734] Bluetooth: hci1: command 0x0405 tx timeout [ 120.798136][ T5734] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.798154][ T5734] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.852518][ T9513] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 120.857215][ T9513] overlayfs: missing 'lowerdir' [ 121.832099][ T64] Bluetooth: hci0: unexpected event for opcode 0x0405 [ 121.865427][ T9534] xt_CT: No such helper "pptp" [ 121.912897][ T9528] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1034'. [ 122.053052][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 122.055880][ T9576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.065987][ T9581] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1047'. [ 122.081741][ T9578] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'. [ 122.114341][ T9586] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 122.213883][ T9599] program syz.0.1054 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 122.220774][ T9602] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 122.364323][ T9609] netlink: 'syz.2.1057': attribute type 39 has an invalid length. [ 122.436838][ T9624] ip_tables: iptables: counters copy to user failed while replacing table [ 122.453047][ T9624] syzkaller0: entered promiscuous mode [ 122.455411][ T9624] syzkaller0: entered allmulticast mode [ 122.466583][ T9624] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.746780][ T9658] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 122.832473][ T9662] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1068'. [ 122.980373][ T9677] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1076'. [ 123.011598][ T9679] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.106394][ T9691] SELinux: syz.1.1080 (9691) wrote to checkreqprot. This is no longer supported. [ 123.162203][ T9700] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 123.322654][ T9718] ieee802154 phy0 wpan0: encryption failed: -22 [ 123.354678][ T9727] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 123.391787][ T64] Bluetooth: hci2: Malformed Event: 0x02 [ 123.398982][ T9735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1092'. [ 123.403421][ T9735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1092'. [ 123.446001][ T9742] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.618686][ T9752] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1099'. [ 123.621833][ T9752] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 123.624789][ T9752] /dev/sg0: Can't lookup blockdev [ 123.777947][ T9764] Mass Storage Function, version: 2009/09/11 [ 123.780215][ T9764] LUN: removable file: (no medium) [ 123.823523][ T9766] FAULT_INJECTION: forcing a failure. [ 123.823523][ T9766] name failslab, interval 1, probability 0, space 0, times 0 [ 123.828923][ T9766] CPU: 1 UID: 0 PID: 9766 Comm: syz.2.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 123.828943][ T9766] Tainted: [L]=SOFTLOCKUP [ 123.828947][ T9766] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 123.828954][ T9766] Call Trace: [ 123.828966][ T9766] [ 123.828971][ T9766] dump_stack_lvl+0x100/0x190 [ 123.829045][ T9766] should_fail_ex.cold+0x5/0xa [ 123.829070][ T9766] should_failslab+0xc2/0x120 [ 123.829101][ T9766] __kmalloc_noprof+0xfc/0x820 [ 123.829118][ T9766] ? rcu_is_watching+0x13/0xc0 [ 123.829140][ T9766] ? tomoyo_realpath_from_path+0xb6/0x690 [ 123.829184][ T9766] tomoyo_realpath_from_path+0xb6/0x690 [ 123.829203][ T9766] tomoyo_path_number_perm+0x23c/0x580 [ 123.829222][ T9766] ? tomoyo_path_number_perm+0x22e/0x580 [ 123.829243][ T9766] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 123.829277][ T9766] ? find_held_lock+0x2b/0x80 [ 123.829291][ T9766] ? hook_file_ioctl_common+0x140/0x440 [ 123.829313][ T9766] ? __fget_files+0x21f/0x3d0 [ 123.829338][ T9766] security_file_ioctl+0xd3/0x230 [ 123.829357][ T9766] __x64_sys_ioctl+0xb7/0x210 [ 123.829377][ T9766] do_syscall_64+0x123/0x790 [ 123.829418][ T9766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.829431][ T9766] RIP: 0033:0x7f9394b9e0d9 [ 123.829444][ T9766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.829456][ T9766] RSP: 002b:00007f9395ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.829481][ T9766] RAX: ffffffffffffffda RBX: 00007f9394e25fa0 RCX: 00007f9394b9e0d9 [ 123.829491][ T9766] RDX: 0000000000000000 RSI: 00000000401c5820 RDI: 0000000000000004 [ 123.829498][ T9766] RBP: 00007f9394c35024 R08: 0000000000000000 R09: 0000000000000000 [ 123.829507][ T9766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.829516][ T9766] R13: 00007f9394e26038 R14: 00007f9394e25fa0 R15: 00007fffb7993e28 [ 123.829532][ T9766] [ 123.829963][ T9766] ERROR: Out of memory at tomoyo_realpath_from_path. [ 123.925605][ T9770] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1105'. [ 123.932620][ T9770] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 123.937831][ T9770] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1105'. [ 124.207517][ T933] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 124.228391][ T9777] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 124.265102][ T9778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.373786][ T933] usb 7-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 124.378996][ T933] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 124.382252][ T933] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 124.386124][ T933] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.395526][ T933] spcp8x5 7-1:1.0: SPCP8x5 converter detected [ 124.402585][ T933] usb 7-1: SPCP8x5 converter now attached to ttyUSB0 [ 124.475647][ T9790] CIFS: Witness protocol support is experimental [ 124.479316][ T9790] CIFS mount error: No usable UNC path provided in device string! [ 124.479316][ T9790] [ 124.483470][ T9790] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 124.490415][ T9787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1109'. [ 124.704008][ T9799] overlayfs: missing 'lowerdir' [ 124.731047][ T9771] netlink: 'syz.2.1104': attribute type 2 has an invalid length. [ 125.151199][ T9822] netlink: 'syz.0.1120': attribute type 4 has an invalid length. [ 125.153619][ T9822] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1120'. [ 125.351188][ T9831] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1122'. [ 125.355142][ T9831] netlink: 'syz.1.1122': attribute type 6 has an invalid length. [ 125.358562][ T9831] netlink: 'syz.1.1122': attribute type 5 has an invalid length. [ 125.366236][ T42] kauditd_printk_skb: 36 callbacks suppressed [ 125.366247][ T42] audit: type=1400 audit(1787214571.937:1023): avc: denied { write } for pid=9830 comm="syz.1.1122" path="socket:[51274]" dev="sockfs" ino=51274 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 125.396026][ T9827] hsr_slave_1 (unregistering): left promiscuous mode [ 126.145227][ T42] audit: type=1800 audit(1787214572.717:1024): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1128" name="file1" dev="overlay" ino=1850 res=0 errno=0 [ 126.269642][ T5873] e1000 0000:00:06.0 eth0: Reset adapter [ 126.277509][ T34] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.288944][ T42] audit: type=1400 audit(1787214572.867:1025): avc: denied { write } for pid=9857 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.341549][ T42] audit: type=1400 audit(1787214572.917:1026): avc: denied { write } for pid=9862 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.346907][ T9864] overlayfs: missing 'lowerdir' [ 126.379544][ T9853] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 126.427484][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 126.429744][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.438996][ T34] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 126.443378][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 126.456701][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.459934][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 126.464735][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 126.468880][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.473213][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.517075][ T42] audit: type=1400 audit(1787214573.097:1027): avc: denied { read } for pid=9878 comm="syz.0.1136" path="socket:[51497]" dev="sockfs" ino=51497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 126.558403][ T5873] e1000 0000:00:06.0 eth0: Reset adapter [ 126.570588][ T9881] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0x2901 instead [ 126.574105][ T9881] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 126.577103][ T9881] jffs2: empty_blocks 31, bad_blocks 0, c->nr_blocks 32 [ 126.586542][ T42] audit: type=1400 audit(1787214573.157:1028): avc: denied { write } for pid=9880 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.634925][ T42] audit: type=1400 audit(1787214573.207:1029): avc: denied { write } for pid=9885 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.684156][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 126.685978][ T34] usbtmc 6-1:16.0: can't read capabilities [ 126.820674][ T42] audit: type=1400 audit(1787214573.397:1030): avc: denied { write } for pid=9890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.841778][ T9888] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.846444][ T9888] netlink: 'syz.0.1137': attribute type 1 has an invalid length. [ 126.853101][ T933] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 126.875664][ T42] audit: type=1400 audit(1787214573.447:1031): avc: denied { write } for pid=9893 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.889976][ T60] usb 6-1: USB disconnect, device number 10 [ 126.950736][ T42] audit: type=1400 audit(1787214573.527:1032): avc: denied { write } for pid=9896 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 126.980977][ T34] usb 7-1: USB disconnect, device number 6 [ 126.992344][ T34] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 127.001276][ T34] spcp8x5 7-1:1.0: device disconnected [ 128.878682][ T5873] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 132.719701][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.722429][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.988630][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 132.988644][ T42] audit: type=1400 audit(1787214579.567:1043): avc: denied { mount } for pid=9929 comm="syz.0.1138" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 132.989613][ T9932] raw_sendmsg: syz.0.1138 forgot to set AF_INET. Fix it! [ 133.042513][ T9938] gretap0: entered promiscuous mode [ 133.072120][ T42] audit: type=1400 audit(1787214579.647:1044): avc: denied { unmount } for pid=5724 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 133.092888][ T42] audit: type=1400 audit(1787214579.667:1045): avc: denied { relabelto } for pid=9943 comm="syz.4.1143" name="cgroup.procs" dev="cgroup" ino=352 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:semanage_exec_t:s0" [ 133.112827][ T42] audit: type=1400 audit(1787214579.667:1046): avc: denied { associate } for pid=9943 comm="syz.4.1143" name="cgroup.procs" dev="cgroup" ino=352 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:semanage_exec_t:s0" [ 133.143607][ T9955] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 133.321979][ C3] sr 2:0:0:0: [sr0] tag#7 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 133.325365][ C3] sr 2:0:0:0: [sr0] tag#7 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 133.341392][ T9981] Bluetooth: MGMT ver 1.23 [ 133.588197][T10012] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 0 out of range (1000000..45000000) [ 133.901300][T10044] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 133.947741][ T42] audit: type=1400 audit(1787214580.527:1047): avc: denied { mounton } for pid=10051 comm="syz.2.1175" path="/264/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 133.951465][T10052] bond0: option slaves: invalid value (-veth0) [ 134.081817][T10061] __nla_validate_parse: 3 callbacks suppressed [ 134.081830][T10061] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 134.107935][ T42] audit: type=1400 audit(1787214580.687:1048): avc: denied { mounton } for pid=10051 comm="syz.2.1175" path="/proc/784/task" dev="proc" ino=50814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 134.507736][T10077] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input24 [ 134.652856][ T42] audit: type=1400 audit(1787214581.237:1049): avc: denied { listen } for pid=10080 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 134.661707][ T42] audit: type=1400 audit(1787214581.237:1050): avc: denied { write } for pid=10080 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 134.668364][ T42] audit: type=1400 audit(1787214581.237:1051): avc: denied { accept } for pid=10080 comm="syz.1.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 136.395456][ T42] audit: type=1400 audit(1787214582.967:1052): avc: denied { lock } for pid=10146 comm="syz.4.1202" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=53419 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 136.443584][T10128] ceph: No mds server is up or the cluster is laggy [ 136.569607][T10163] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 136.587348][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1207'. [ 136.663754][T10172] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1211'. [ 136.677577][T10172] bond2: (slave veth0_to_bond): Releasing backup interface [ 136.689629][T10172] bond0: (slave bond_slave_0): Releasing backup interface [ 136.723242][T10181] net_ratelimit: 1 callbacks suppressed [ 136.723261][T10181] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 136.873340][T10192] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1218'. [ 136.886690][T10192] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.043303][T10197] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.1219'. [ 137.050240][T10197] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1219'. [ 137.377515][ T1344] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 137.436254][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'. [ 137.439276][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'. [ 137.459444][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1224'. [ 137.526730][T10212] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.551422][ T1344] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 137.563523][ T1344] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 137.567319][ T1344] usb 7-1: Product: syz [ 137.568721][ T1344] usb 7-1: Manufacturer: syz [ 137.570407][ T1344] usb 7-1: SerialNumber: syz [ 137.576211][ T1344] usb 7-1: config 0 descriptor?? [ 137.782410][ T1344] usb 7-1: USB disconnect, device number 7 [ 137.806759][T10229] bond0: (slave ip_vti0): Error: Device can not be enslaved while up [ 138.056722][T10246] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 138.059225][T10246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 138.062355][T10246] vhci_hcd vhci_hcd.0: Device attached [ 138.113236][T10250] SELinux: security_context_str_to_sid (4msevS:"-XF64faLt@%a) failed with errno=-22 [ 138.189657][T10247] vhci_hcd: connection closed [ 138.190063][ T5535] vhci_hcd vhci_hcd.1: stop threads [ 138.194429][ T5535] vhci_hcd vhci_hcd.1: release socket [ 138.196724][ T5535] vhci_hcd vhci_hcd.1: disconnect device [ 138.329388][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 138.329417][ T42] audit: type=1400 audit(1787214584.907:1056): avc: denied { write } for pid=10261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.413251][ T42] audit: type=1400 audit(1787214584.987:1057): avc: denied { write } for pid=10268 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 138.448769][ T42] audit: type=1400 audit(1787214585.027:1058): avc: denied { bind } for pid=10270 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.456338][ T42] audit: type=1400 audit(1787214585.027:1059): avc: denied { name_bind } for pid=10270 comm="syz.2.1241" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 138.467434][ T42] audit: type=1400 audit(1787214585.027:1060): avc: denied { node_bind } for pid=10270 comm="syz.2.1241" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 138.476798][ T42] audit: type=1400 audit(1787214585.047:1061): avc: denied { setopt } for pid=10270 comm="syz.2.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.720155][ T5723] svc: failed to register nfsdv3 RPC service (errno 111). [ 138.724781][ T5723] svc: failed to register nfsaclv3 RPC service (errno 111). [ 138.728319][ T5723] failed to unregister tcp with rpcbind [ 138.730720][ T5723] svc: failed to register nfsdv3 RPC service (errno 97). [ 138.733082][ T5723] svc: failed to register nfsaclv3 RPC service (errno 97). [ 138.735439][ T5723] failed to unregister tcp with rpcbind [ 138.808251][ T1344] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 138.843935][T10288] binder: 10287:10288 ioctl c0285443 200000000100 returned -22 [ 138.850102][T10288] binder: 10287:10288 ioctl 800c581e 200000000180 returned -22 [ 138.913722][ T42] audit: type=1400 audit(1787214585.487:1062): avc: denied { watch_mount } for pid=10291 comm="syz.2.1249" path="/286" dev="tmpfs" ino=1602 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 138.937983][ T1344] usb 5-1: device descriptor read/64, error -71 [ 139.197784][ T1344] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 139.337683][ T1344] usb 5-1: device descriptor read/64, error -71 [ 139.458149][ T1344] usb usb5-port1: attempt power cycle [ 139.486957][T10327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=14864 sclass=netlink_route_socket pid=10327 comm=syz.2.1260 [ 139.750213][T10347] ceph: No mds server is up or the cluster is laggy [ 139.809361][ T1344] usb 5-1: new low-speed USB device number 13 using dummy_hcd [ 139.827301][T10363] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.828273][ T1344] usb 5-1: device descriptor read/8, error -71 [ 140.097718][ T1344] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 140.114772][T10395] __nla_validate_parse: 7 callbacks suppressed [ 140.114791][T10395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1278'. [ 140.121386][T10395] openvswitch: netlink: Flow actions attr not present in new flow. [ 140.128345][ T1344] usb 5-1: device descriptor read/8, error -71 [ 140.165631][T10398] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 140.168223][T10398] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 1th superblock [ 140.170934][T10398] F2FS-fs (nbd1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 140.173340][T10398] F2FS-fs (nbd1): Can't find valid F2FS filesystem in 2th superblock [ 140.249391][ T1344] usb usb5-port1: unable to enumerate USB device [ 140.301584][ T42] audit: type=1400 audit(1787214586.877:1063): avc: denied { map } for pid=10416 comm="syz.1.1283" path="socket:[54118]" dev="sockfs" ino=54118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.305815][T10418] syz_tun: left allmulticast mode [ 140.311678][ T42] audit: type=1400 audit(1787214586.877:1064): avc: denied { accept } for pid=10416 comm="syz.1.1283" path="socket:[54118]" dev="sockfs" ino=54118 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 140.313690][T10418] syz_tun: left promiscuous mode [ 140.324589][T10418] bridge0: port 3(syz_tun) entered disabled state [ 140.338250][T10418] bridge_slave_0: left allmulticast mode [ 140.340270][T10418] bridge_slave_0: left promiscuous mode [ 140.342921][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.356531][T10418] bridge_slave_1: left allmulticast mode [ 140.360226][T10418] bridge_slave_1: left promiscuous mode [ 140.362216][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.368914][T10418] bond0: (slave bond_slave_1): Releasing backup interface [ 140.382241][T10418] team0: Port device team_slave_0 removed [ 140.392422][T10418] team0: Port device team_slave_1 removed [ 140.395855][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.399948][T10418] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.405112][T10418] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.409914][T10418] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.776897][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1291'. [ 140.780050][T10445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1291'. [ 140.816316][ T64] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 140.824764][ T64] Bluetooth: hci1: connection err: -111 [ 140.824781][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 140.826760][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1293'. [ 140.827478][ T42] audit: type=1326 audit(1787214587.397:1065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10448 comm="syz.1.1292" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2bedb9e0d9 code=0x0 [ 140.934256][T10457] program syz.1.1292 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 141.110064][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 141.113796][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 141.117925][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 141.125308][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 141.132908][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 141.572317][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.574783][T10466] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.577064][T10466] bridge_slave_0: entered allmulticast mode [ 141.579987][T10466] bridge_slave_0: entered promiscuous mode [ 141.583370][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.585906][T10466] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.588664][T10466] bridge_slave_1: entered allmulticast mode [ 141.591427][T10466] bridge_slave_1: entered promiscuous mode [ 141.608001][T10466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.612842][T10466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.613679][T10481] af_packet: tpacket_rcv: packet too big, clamped from 7100 to 3952. macoff=96 [ 141.622288][T10481] netlink: 'syz.0.1302': attribute type 21 has an invalid length. [ 141.625079][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 141.628939][T10466] team0: Port device team_slave_0 added [ 141.639166][T10481] netlink: 'syz.0.1302': attribute type 21 has an invalid length. [ 141.642913][T10466] team0: Port device team_slave_1 added [ 141.647004][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1302'. [ 141.664885][T10466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.669204][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.680335][T10466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.690593][T10466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.693631][T10466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 141.704429][T10466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.723370][T10487] ucsi_ccg 0-0008: i2c_transfer failed -95 [ 141.726072][T10487] ucsi_ccg 0-0008: ucsi_ccg_init failed - -95 [ 141.728886][T10487] ucsi_ccg 0-0008: probe with driver ucsi_ccg failed with error -95 [ 141.733356][T10487] i2c i2c-0: new_device: Instantiated device ccgx-ucsi at 0x08 [ 141.749337][T10466] hsr_slave_0: entered promiscuous mode [ 141.752722][T10466] hsr_slave_1: entered promiscuous mode [ 141.837691][ T5832] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.841934][ T5832] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.922038][ T5832] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.931747][ T5832] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 141.985304][T10466] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.991894][T10466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 141.995529][T10466] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 142.003082][T10466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 142.006082][T10466] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 142.013407][T10466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 142.016490][T10466] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 142.029784][T10466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 142.046291][T10466] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.048648][T10466] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.051249][T10466] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.054106][T10466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.057274][T10487] ucsi_ccg 1-0008: ucsi_ccg_init failed - -110 [ 142.059926][T10487] ucsi_ccg 1-0008: probe with driver ucsi_ccg failed with error -110 [ 142.063315][T10487] i2c i2c-1: new_device: Instantiated device ccgx-ucsi at 0x08 [ 142.111773][T10466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.120833][ T6354] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.123478][ T6354] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.131203][T10466] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.136934][ T6354] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.139803][ T6354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.149970][ T6354] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.152882][ T6354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.227557][ T5873] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 142.241083][T10507] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1306'. [ 142.387732][ T5873] usb 7-1: Using ep0 maxpacket: 8 [ 142.392594][ T5873] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.397210][ T5873] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.405807][ T5873] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 142.410248][ T5873] usb 7-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 142.414867][ T5873] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 142.414944][T10522] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1311'. [ 142.419744][ T5873] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 142.426324][ T5873] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 142.431643][ T5873] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.471858][T10516] /dev/sr0: Can't open blockdev [ 142.515433][T10466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.644833][ T5873] usb 7-1: GET_CAPABILITIES returned 0 [ 142.647143][ T5873] usbtmc 7-1:16.0: can't read capabilities [ 142.793570][T10466] veth0_vlan: entered promiscuous mode [ 142.800685][T10466] veth1_vlan: entered promiscuous mode [ 142.824634][T10466] veth0_macvtap: entered promiscuous mode [ 142.844398][T10466] veth1_macvtap: entered promiscuous mode [ 142.853469][T10466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.856643][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 142.862408][T10466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.863505][T10495] MTD: Couldn't look up './file0': -15 [ 142.873224][T10495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.879612][T10495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.888297][ T1344] usb 7-1: USB disconnect, device number 8 [ 142.920796][ T5800] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.932552][ T5800] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.937119][ T5800] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.942253][ T5800] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.065068][ T6354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.068437][ T6354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.101304][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.104143][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.204080][T10561] netlink: 168 bytes leftover after parsing attributes in process `syz.0.1317'. [ 143.208892][ T64] Bluetooth: hci1: command tx timeout [ 143.483992][T10578] 9pnet_virtio: no channels available for device syz [ 143.484441][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 143.484451][ T42] audit: type=1400 audit(1787214590.057:1073): avc: denied { mounton } for pid=10576 comm="syz.0.1321" path="/374/file0" dev="9p" ino=77886161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.576286][T10588] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 144.482794][T10636] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 144.993047][T10688] xfs: Unknown parameter 'norVcovery*da&J /ߜ/gN(l&:ʋ9d܍V1Ax;B@%P㥈/E' [ 145.022149][ T42] audit: type=1400 audit(1787214591.597:1074): avc: denied { mounton } for pid=10690 comm="syz.2.1354" path="/314/my_configfs" dev="configfs" ino=3128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 145.035156][T10691] db_root: cannot open: IMIX 'CD' 00000000000000000000 [ 145.042821][T10692] db_root: cannot open: IMIX 'CD' 00000000000000000000 [ 145.044969][T10699] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10699 comm=syz.5.1356 [ 145.288491][ T64] Bluetooth: hci1: command tx timeout [ 145.448160][ T847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 145.609962][ T847] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.615099][ T847] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.619381][ T847] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.625933][ T847] usb 5-1: config 0 descriptor?? [ 145.789812][T10753] tipc: Trying to set illegal importance in message [ 145.826364][T10756] comedi comedi2: dt2815: I/O base address or length out of range [ 145.833148][T10756] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.841770][ T847] usbhid 5-1:0.0: can't add hid device: -71 [ 145.843630][ T847] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 145.854962][ T847] usb 5-1: USB disconnect, device number 15 [ 145.864276][T10761] netlink: 'syz.2.1374': attribute type 2 has an invalid length. [ 145.889840][T10761] : entered promiscuous mode [ 146.028371][T10772] netlink: 'syz.2.1378': attribute type 2 has an invalid length. [ 146.036535][T10772] netlink: 'syz.2.1378': attribute type 2 has an invalid length. [ 146.150622][ T42] audit: type=1400 audit(1787214592.727:1075): avc: denied { setopt } for pid=10787 comm="syz.5.1382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 146.193433][T10793] __nla_validate_parse: 1 callbacks suppressed [ 146.193452][T10793] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1384'. [ 146.200826][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1380'. [ 146.212792][T10793] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10793 comm=syz.5.1384 [ 146.244875][T10798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1385'. [ 146.245010][ T64] Bluetooth: hci1: connection err: -111 [ 146.262263][T10798] bridge0: port 3(macvlan2) entered blocking state [ 146.264667][T10798] bridge0: port 3(macvlan2) entered disabled state [ 146.267750][T10798] macvlan2: entered allmulticast mode [ 146.274318][T10798] macvlan2: left allmulticast mode [ 146.402988][T10810] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1388'. [ 146.439128][ T42] audit: type=1400 audit(1787214593.017:1076): avc: denied { write } for pid=10794 comm="syz.2.1383" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 146.446255][T10811] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1388'. [ 146.451142][T10811] nbd: device at index 64 is going down [ 146.535477][ T9967] udevd[9967]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 146.756826][ T42] audit: type=1400 audit(1787214593.327:1077): avc: denied { getopt } for pid=10824 comm="syz.0.1391" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 146.971628][T10835] genirq: Flags mismatch irq 4. 00200000 (comedi_parport) vs. 00200080 (ttyS0) [ 147.358416][ T64] Bluetooth: hci1: command tx timeout [ 147.390820][ T42] audit: type=1400 audit(1787214593.967:1078): avc: granted { setsecparam } for pid=10862 comm="syz.1.1403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 147.422074][T10865] ip_tables: iptables: counters copy to user failed while replacing table [ 147.513230][T10868] futex_wake_op: syz.0.1405 tries to shift op by 32; fix this program [ 147.522958][T10868] ufs: You didn't specify the type of your ufs filesystem [ 147.522958][T10868] [ 147.522958][T10868] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 147.522958][T10868] [ 147.522958][T10868] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 147.629450][T10877] pim6reg1: entered promiscuous mode [ 147.631249][T10877] pim6reg1: entered allmulticast mode [ 147.778228][T10884] loop0: detected capacity change from 0 to 3904 [ 147.789371][ T64] Bluetooth: hci3: unexpected event for opcode 0x201c [ 147.840736][T10889] tipc: Enabled bearer , priority 10 [ 147.891116][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1410'. [ 147.898939][T10883] tipc: Resetting bearer [ 147.921411][T10883] tipc: Disabling bearer [ 147.941551][ T42] audit: type=1400 audit(1787214594.517:1079): avc: denied { write } for pid=10891 comm="syz.5.1412" name="/" dev="9p" ino=77886161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 147.975284][ T42] audit: type=1400 audit(1787214594.557:1080): avc: denied { write } for pid=10891 comm="syz.5.1412" name="cpuset.effective_cpus" dev="9p" ino=77886257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 147.985779][ T42] audit: type=1400 audit(1787214594.557:1081): avc: denied { lock } for pid=10891 comm="syz.5.1412" path="/24/file0/cpuset.effective_cpus" dev="9p" ino=77886257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 148.001762][ T42] audit: type=1400 audit(1787214594.557:1082): avc: denied { write } for pid=10891 comm="syz.5.1412" name="/" dev="9p" ino=77886161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.336814][T10923] syzkaller0: entered promiscuous mode [ 148.338754][T10923] syzkaller0: entered allmulticast mode [ 148.587340][T10937] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3780442281 (7560884562 ns) > initial count (4669583980 ns). Using initial count to start timer. [ 148.737748][ T34] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 148.830774][T10950] netlink: 830 bytes leftover after parsing attributes in process `syz.5.1429'. [ 148.847329][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 148.847343][ T42] audit: type=1400 audit(1787214595.417:1084): avc: denied { map } for pid=10951 comm="syz.0.1430" path="/dev/net/tun" dev="devtmpfs" ino=719 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=1 [ 148.897496][ T34] usb 6-1: Using ep0 maxpacket: 8 [ 148.899715][ T34] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.907008][ T34] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 148.910658][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 148.914307][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 148.917848][ T34] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 148.921634][ T34] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 148.924970][ T34] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.931264][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.969773][T10956] fuse: Unknown parameter 'user_d' [ 149.014681][ T64] Bluetooth: hci3: unexpected event for opcode 0x2011 [ 149.090384][T10968] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 149.140645][ T34] usb 6-1: GET_CAPABILITIES returned 0 [ 149.143132][ T34] usbtmc 6-1:16.0: can't read capabilities [ 149.153752][T10981] netlink: Setting conntrack mark requires 'commit' flag. [ 149.156413][T10981] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.220224][ T42] audit: type=1400 audit(1787214595.787:1085): avc: denied { write } for pid=10987 comm="syz.2.1440" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 149.232957][ T42] audit: type=1400 audit(1787214595.797:1086): avc: denied { unlink } for pid=10987 comm="syz.2.1440" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 149.262603][T10991] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.265670][T10991] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 149.273641][T10991] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 149.276612][T10991] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 149.326868][T10993] ubi0: attaching mtd0 [ 149.332039][T10993] ubi0: scanning is finished [ 149.333598][T10993] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 149.437473][ T64] Bluetooth: hci1: command tx timeout [ 149.457091][T11005] team0: Device vlan4 is already an upper device of the team interface [ 149.494346][T11009] netlink: 'syz.0.1444': attribute type 39 has an invalid length. [ 149.606462][T10993] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 149.659732][ T1344] usb 6-1: USB disconnect, device number 11 [ 149.707732][T11028] tmpfs: Invalid uid '0x00000000ffffffff' [ 149.890520][T11034] [U]  [ 150.080131][ T42] audit: type=1400 audit(1787214596.657:1087): avc: denied { append } for pid=11043 comm="syz.1.1455" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 150.177503][ T1479] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 150.255661][ T42] audit: type=1400 audit(1787214596.827:1088): avc: denied { write } for pid=11047 comm="syz.5.1457" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 150.273763][T11048] futex_wake_op: syz.5.1457 tries to shift op by -1; fix this program [ 150.279304][T11048] overlayfs: missing 'lowerdir' [ 150.327516][ T1479] usb 5-1: Using ep0 maxpacket: 8 [ 150.330661][ T1479] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.335049][ T1479] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 150.338832][ T1479] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.344178][ T1479] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.347185][ T1479] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.352923][ T1479] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.356969][ T1479] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.428777][ T42] audit: type=1400 audit(1787214597.007:1089): avc: denied { watch } for pid=11063 comm="syz.2.1460" path="/341/file0" dev="tmpfs" ino=1899 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 150.451016][ T42] audit: type=1400 audit(1787214597.007:1090): avc: denied { watch_sb watch_reads } for pid=11063 comm="syz.2.1460" path="/341/file0" dev="tmpfs" ino=1899 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 150.565438][ T1479] usb 5-1: usb_control_msg returned -32 [ 150.567303][ T1479] usbtmc 5-1:16.0: can't read capabilities [ 150.844908][ T42] audit: type=1326 audit(1787214597.417:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f679e0d9 code=0x7ffc0000 [ 150.864500][ T42] audit: type=1326 audit(1787214597.417:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f679e0d9 code=0x7ffc0000 [ 150.875382][ T42] audit: type=1326 audit(1787214597.437:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11081 comm="syz.5.1466" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50f679e0d9 code=0x7ffc0000 [ 150.926229][T11096] usbtmc 5-1:16.0: stb usb_control_msg returned -32 [ 150.946575][ T5810] usb 5-1: USB disconnect, device number 16 [ 151.400973][T11120] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 151.603930][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1477'. [ 151.690302][T11134] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 151.698168][ T847] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 151.868196][ T847] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 151.873470][ T847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.876102][ T847] usb 6-1: Product: syz [ 151.877672][ T847] usb 6-1: Manufacturer: syz [ 151.879325][ T847] usb 6-1: SerialNumber: syz [ 151.886129][T11151] netlink: 'syz.0.1484': attribute type 2 has an invalid length. [ 151.920939][ T6290] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 152.172762][ T847] usb 6-1: USB disconnect, device number 12 [ 152.460761][T11181] binder: 11178:11181 ioctl c0306201 200000002040 returned -14 [ 152.461024][T11180] SELinux: failed to load policy [ 152.464527][T11181] binder: 11178:11181 ioctl c0306201 2000000001c0 returned -14 [ 152.468455][T11181] binder: 11178:11181 ioctl c0306201 200000000180 returned -14 [ 152.760809][T11207] netlink: 'syz.5.1503': attribute type 1 has an invalid length. [ 152.773452][T11207] bond1: entered promiscuous mode [ 152.775705][T11207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.792471][T11207] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.795102][T11207] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 152.798622][T11207] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 152.804780][T11207] bond1: (slave ip6gre1): making interface the new active one [ 152.807114][T11207] ip6gre1: entered promiscuous mode [ 152.812802][T11207] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 152.904352][T11218] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 152.952236][T11227] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1508'. [ 152.958287][ T6290] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 152.962560][ T6290] ath9k_htc: Failed to initialize the device [ 152.971664][ T847] usb 6-1: ath9k_htc: USB layer deinitialized [ 153.065321][T11230] /dev/sr0: Can't open blockdev [ 153.282004][T11251] netlink: 'syz.1.1516': attribute type 13 has an invalid length. [ 153.285280][T11251] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1018 sclass=netlink_route_socket pid=11251 comm=syz.1.1516 [ 153.520224][T11273] netlink: 'syz.0.1523': attribute type 13 has an invalid length. [ 153.703018][T11287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.975217][T11317] netlink: 'syz.1.1534': attribute type 10 has an invalid length. [ 153.997487][ T1479] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 154.161804][ T1479] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.165148][ T1479] usb 5-1: not running at top speed; connect to a high speed hub [ 154.168477][ T1479] usb 5-1: New USB device found, idVendor=09da, idProduct=001a, bcdDevice= 0.40 [ 154.172431][ T1479] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 154.175886][ T1479] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 154.183001][ T1479] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.185789][ T1479] usb 5-1: Product: syz [ 154.187275][ T1479] usb 5-1: Manufacturer: syz [ 154.189430][ T1479] usb 5-1: SerialNumber: syz [ 154.391042][ T42] kauditd_printk_skb: 201 callbacks suppressed [ 154.391069][ T42] audit: type=1400 audit(1787214600.967:1295): avc: denied { read } for pid=11342 comm="syz.2.1543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 154.443528][T11294] syzkaller0: entered promiscuous mode [ 154.446045][T11294] syzkaller0: entered allmulticast mode [ 154.572613][T11354] fuse: Unknown parameter '0x0000000000000003' [ 155.074079][ T6290] IPVS: starting estimator thread 0... [ 155.087350][T11364] Illegal XDP return value 11 on prog (id 258) dev N/A, expect packet loss! [ 155.189314][T11366] IPVS: using max 30 ests per chain, 72000 per kthread [ 155.929476][ T42] audit: type=1400 audit(1787214602.517:1296): avc: denied { getattr } for pid=11408 comm="syz.1.1559" name="/" dev="failfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 155.932354][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 155.943898][T11409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1559'. [ 155.947006][T11409] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info response ret = -22) [ 155.950263][T11409] iwpm_mapping_info_cb: Unable to parse nlmsg [ 156.230262][T11421] openvswitch: netlink: IP tunnel dst address not specified [ 156.233424][T11421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=11421 comm=syz.5.1562 [ 156.357766][ T5802] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 156.508605][ T5802] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 156.513504][ T5802] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 156.516865][ T5802] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 156.522597][ T5802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.525211][ T5802] usb 6-1: Product: syz [ 156.526589][ T5802] usb 6-1: Manufacturer: syz [ 156.528898][ T5802] usb 6-1: SerialNumber: syz [ 156.700017][ T1479] usb 5-1: USB disconnect, device number 17 [ 156.746113][ T42] audit: type=1400 audit(1787214603.317:1297): avc: denied { write } for pid=11430 comm="syz.5.1564" name="/" dev="9p" ino=77886161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 156.764823][ T5802] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0711 pid 0x0900 [ 156.843360][T11352] ------------[ cut here ]------------ [ 156.847553][T11352] refcount_t: underflow; use-after-free. [ 156.849366][T11352] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#3: kbnepd /11352 [ 156.853627][T11352] Modules linked in: [ 156.856014][T11352] CPU: 3 UID: 0 PID: 11352 Comm: kbnepd Tainted: G L syzkaller #0 PREEMPT(full) [ 156.859052][T11436] exFAT-fs (nbd0): unable to read boot sector [ 156.860931][T11352] Tainted: [L]=SOFTLOCKUP [ 156.863765][T11436] exFAT-fs (nbd0): failed to read boot sector [ 156.864514][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.866558][T11436] exFAT-fs (nbd0): failed to recognize exfat type [ 156.869849][T11352] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 156.869887][T11352] Code: cc e8 50 2d eb fc 48 8d 3d b9 e1 2d 0c 67 48 0f b9 3a e8 3f 2d eb fc 5b 5d e9 48 d2 a3 06 e8 33 2d eb fc 48 8d 3d ac e1 2d 0c <67> 48 0f b9 3a e8 22 2d eb fc 5b 5d c3 cc cc cc cc e8 16 2d eb fc [ 156.869899][T11352] RSP: 0018:ffffc900052df958 EFLAGS: 00010293 [ 156.869925][T11352] RAX: 0000000000000000 RBX: ffff88803abe3878 RCX: 0000000000000001 [ 156.869933][T11352] RDX: ffff888034a60000 RSI: ffffffff851fa15d RDI: ffffffff914d8310 [ 156.869940][T11352] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 156.869960][T11352] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88803e7dcc00 [ 156.869967][T11352] R13: ffff88803abe3878 R14: ffffffff865d3c80 R15: ffff88802adee000 [ 156.869975][T11352] FS: 0000000000000000(0000) GS:ffff8880d5ec6000(0000) knlGS:0000000000000000 [ 156.869999][T11352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 156.870009][T11352] CR2: 000055556d96d4a0 CR3: 000000004b344000 CR4: 0000000000352ef0 [ 156.870016][T11352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 156.870023][T11352] DR3: 0000000000009eba DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 156.870031][T11352] Call Trace: [ 156.870035][T11352] [ 156.870041][T11352] klist_put+0x18a/0x1d0 [ 156.910795][T11352] device_del+0x1b8/0x9b0 [ 156.912237][T11352] ? __pfx_device_del+0x10/0x10 [ 156.913790][T11352] ? netdev_unregister_kobject+0x2da/0x540 [ 156.915878][T11352] unregister_netdevice_many_notify+0x1503/0x2150 [ 156.918093][T11352] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 156.920411][T11352] ? __pfx___mutex_lock+0x10/0x10 [ 156.922064][T11352] unregister_netdevice_queue+0x30b/0x3c0 [ 156.923881][T11352] ? rtnl_net_dev_lock+0x137/0x360 [ 156.925519][T11352] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 156.927804][T11352] ? rtnl_net_dev_lock+0x28/0x360 [ 156.929572][T11352] ? rtnl_net_dev_lock+0x146/0x360 [ 156.931165][T11352] ? rtnl_lock+0x9/0x20 [ 156.932604][T11352] ? rtnl_net_dev_lock+0x1fe/0x360 [ 156.934280][T11352] unregister_netdev+0x1f/0x60 [ 156.935799][T11352] bnep_session+0x22e6/0x2f40 [ 156.937260][T11352] ? find_held_lock+0x2b/0x80 [ 156.938841][T11352] ? __pfx_bnep_session+0x10/0x10 [ 156.940491][T11352] ? do_raw_spin_lock+0x128/0x260 [ 156.942062][T11352] ? __pfx_woken_wake_function+0x10/0x10 [ 156.943842][T11352] ? rcu_is_watching+0x13/0xc0 [ 156.945385][T11352] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 156.947226][T11352] ? lockdep_hardirqs_on+0x7d/0x110 [ 156.948959][T11352] ? __kthread_parkme+0x18f/0x230 [ 156.950569][T11352] ? kthread+0x13a/0x450 [ 156.951903][T11352] ? __pfx_bnep_session+0x10/0x10 [ 156.953509][T11352] kthread+0x373/0x450 [ 156.954800][T11352] ? __pfx_kthread+0x10/0x10 [ 156.956291][T11352] ret_from_fork+0x730/0xd60 [ 156.957886][T11352] ? __pfx_ret_from_fork+0x10/0x10 [ 156.959492][T11352] ? __switch_to+0x800/0x10f0 [ 156.961002][T11352] ? __pfx_kthread+0x10/0x10 [ 156.962463][T11352] ret_from_fork_asm+0x1a/0x30 [ 156.964074][T11352] [ 156.965066][T11352] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 156.967358][T11352] CPU: 3 UID: 0 PID: 11352 Comm: kbnepd Tainted: G L syzkaller #0 PREEMPT(full) [ 156.970668][T11352] Tainted: [L]=SOFTLOCKUP [ 156.972048][T11352] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 156.975157][T11352] Call Trace: [ 156.976219][T11352] [ 156.977136][T11352] dump_stack_lvl+0x100/0x190 [ 156.978529][T11352] vpanic+0x553/0x970 [ 156.979809][T11352] ? __pfx_vpanic+0x10/0x10 [ 156.981255][T11352] panic+0xd1/0xe0 [ 156.982437][T11352] ? __pfx_panic+0x10/0x10 [ 156.983839][T11352] check_panic_on_warn.cold+0x19/0x34 [ 156.985520][T11352] ? refcount_warn_saturate+0xf4/0x130 [ 156.987226][T11352] __warn.cold+0x191/0x318 [ 156.988650][T11352] __report_bug+0x30f/0x440 [ 156.990104][T11352] ? refcount_warn_saturate+0xf4/0x130 [ 156.991800][T11352] ? __pfx___report_bug+0x10/0x10 [ 156.993391][T11352] ? refcount_warn_saturate+0xed/0x130 [ 156.995092][T11352] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 156.997067][T11352] report_bug_entry+0xe2/0x290 [ 156.998574][T11352] ? refcount_warn_saturate+0xf4/0x130 [ 157.000346][T11352] handle_bug+0x1cd/0x2a0 [ 157.001706][T11352] exc_invalid_op+0x17/0x50 [ 157.003138][T11352] asm_exc_invalid_op+0x1a/0x20 [ 157.004679][T11352] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 157.006575][T11352] Code: cc e8 50 2d eb fc 48 8d 3d b9 e1 2d 0c 67 48 0f b9 3a e8 3f 2d eb fc 5b 5d e9 48 d2 a3 06 e8 33 2d eb fc 48 8d 3d ac e1 2d 0c <67> 48 0f b9 3a e8 22 2d eb fc 5b 5d c3 cc cc cc cc e8 16 2d eb fc [ 157.012547][T11352] RSP: 0018:ffffc900052df958 EFLAGS: 00010293 [ 157.014438][T11352] RAX: 0000000000000000 RBX: ffff88803abe3878 RCX: 0000000000000001 [ 157.016889][T11352] RDX: ffff888034a60000 RSI: ffffffff851fa15d RDI: ffffffff914d8310 [ 157.019671][T11352] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 157.022302][T11352] R10: 0000000000000003 R11: 0000000000000000 R12: ffff88803e7dcc00 [ 157.024867][T11352] R13: ffff88803abe3878 R14: ffffffff865d3c80 R15: ffff88802adee000 [ 157.027371][T11352] ? __pfx_klist_children_put+0x10/0x10 [ 157.029113][T11352] ? refcount_warn_saturate+0xed/0x130 [ 157.030853][T11352] ? refcount_warn_saturate+0xed/0x130 [ 157.032577][T11352] klist_put+0x18a/0x1d0 [ 157.033922][T11352] device_del+0x1b8/0x9b0 [ 157.035321][T11352] ? __pfx_device_del+0x10/0x10 [ 157.036874][T11352] ? netdev_unregister_kobject+0x2da/0x540 [ 157.038722][T11352] unregister_netdevice_many_notify+0x1503/0x2150 [ 157.040780][T11352] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 157.042876][T11352] ? __pfx___mutex_lock+0x10/0x10 [ 157.044474][T11352] unregister_netdevice_queue+0x30b/0x3c0 [ 157.046254][T11352] ? rtnl_net_dev_lock+0x137/0x360 [ 157.047859][T11352] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 157.049854][T11352] ? rtnl_net_dev_lock+0x28/0x360 [ 157.051466][T11352] ? rtnl_net_dev_lock+0x146/0x360 [ 157.053119][T11352] ? rtnl_lock+0x9/0x20 [ 157.054442][T11352] ? rtnl_net_dev_lock+0x1fe/0x360 [ 157.056047][T11352] unregister_netdev+0x1f/0x60 [ 157.057597][T11352] bnep_session+0x22e6/0x2f40 [ 157.059080][T11352] ? find_held_lock+0x2b/0x80 [ 157.060594][T11352] ? __pfx_bnep_session+0x10/0x10 [ 157.062252][T11352] ? do_raw_spin_lock+0x128/0x260 [ 157.063914][T11352] ? __pfx_woken_wake_function+0x10/0x10 [ 157.065727][T11352] ? rcu_is_watching+0x13/0xc0 [ 157.067302][T11352] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 157.069149][T11352] ? lockdep_hardirqs_on+0x7d/0x110 [ 157.070836][T11352] ? __kthread_parkme+0x18f/0x230 [ 157.072474][T11352] ? kthread+0x13a/0x450 [ 157.073846][T11352] ? __pfx_bnep_session+0x10/0x10 [ 157.075441][T11352] kthread+0x373/0x450 [ 157.076766][T11352] ? __pfx_kthread+0x10/0x10 [ 157.078248][T11352] ret_from_fork+0x730/0xd60 [ 157.079709][T11352] ? __pfx_ret_from_fork+0x10/0x10 [ 157.081336][T11352] ? __switch_to+0x800/0x10f0 [ 157.082840][T11352] ? __pfx_kthread+0x10/0x10 [ 157.084362][T11352] ret_from_fork_asm+0x1a/0x30 [ 157.085881][T11352] [ 158.156076][T11352] Shutting down cpus with NMI [ 158.158277][T11352] Kernel Offset: disabled [ 158.159642][T11352] Rebooting in 86400 seconds..