last executing test programs: 1m9.023904665s ago: executing program 3 (id=419): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_misc(r2, &(0x7f00000002c0)="f63e734c9e06d876fefe75e8c05589f9854a7033875306e7ed0448fe33e583f579f02c0dab777f0d6c17a481fb353c161681be7307dc8a0404c96c96184fcc361ba34171e221564f9a9b33422f164419cd5ec8ee51e18a9461b61204f8b8ba3344aefb1353ec6c1d1d428a498acab177995d20775d82703fbe1746b6b4af", 0x7e) (async) write$binfmt_misc(r2, &(0x7f00000002c0)="f63e734c9e06d876fefe75e8c05589f9854a7033875306e7ed0448fe33e583f579f02c0dab777f0d6c17a481fb353c161681be7307dc8a0404c96c96184fcc361ba34171e221564f9a9b33422f164419cd5ec8ee51e18a9461b61204f8b8ba3344aefb1353ec6c1d1d428a498acab177995d20775d82703fbe1746b6b4af", 0x7e) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) shmget(0x0, 0x3000, 0x661, &(0x7f000032d000/0x3000)=nil) shmget(0x3, 0x2000, 0x8, &(0x7f00005ed000/0x2000)=nil) (async) shmget(0x3, 0x2000, 0x8, &(0x7f00005ed000/0x2000)=nil) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) (async) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000040)=0x1e6e, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) getsockopt$WPAN_WANTLQI(r2, 0x0, 0x3, &(0x7f0000000100), &(0x7f0000000280)=0x4) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r5, 0x107, 0x7, &(0x7f0000000100)=0x4000200, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0xfff1, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0xfff1, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1m8.792605278s ago: executing program 3 (id=424): r0 = open(&(0x7f0000000280)='.\x00', 0x8081, 0x28) fcntl$notify(r0, 0x402, 0x3b) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x15}, 0x20) 1m8.713834101s ago: executing program 3 (id=426): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x2, 0x40, &(0x7f0000000300)={0x4b5a9da54893e123, 0x1, 0x2, 0x2}, 0x8, 0x203ffffd, 0x300, 0xffffffec, 0x2, 0x20000, 0x0}) 1m8.603805158s ago: executing program 3 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x581180, 0x0) ioctl$DVD_AUTH(r0, 0x5390, &(0x7f0000000500)=@lsasf={0x8, 0x0, 0x1}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0xbb}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040840}, 0x10) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_XSAVE2(r7, 0x9000aecf, &(0x7f0000001000/0x2000)=nil) signalfd4(r4, &(0x7f0000000080)={[0x9]}, 0x8, 0x800) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r8, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000040)=0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x9, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) mount$bind(&(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)='./file1/file0\x00', 0x0, 0x5040, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) 1m8.353483768s ago: executing program 3 (id=431): socket(0x10, 0x3, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x500}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) 1m8.183809788s ago: executing program 3 (id=434): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x40082104, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='AC', 0x2) ioctl$USBDEVFS_RESET(r0, 0xc00c5512) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='dummy_udc.0\n', 0xc) (async) write(r3, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 1m8.15545953s ago: executing program 32 (id=434): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xb, 0x8, 0x7fc00002}]}) userfaultfd(0x80801) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0x40082104, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='AC', 0x2) ioctl$USBDEVFS_RESET(r0, 0xc00c5512) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) (async) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='dummy_udc.0\n', 0xc) (async) write(r3, &(0x7f0000000240)='dummy_udc.0\n', 0xc) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r4) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r5, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) 21.43049828s ago: executing program 1 (id=969): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, '\x00'/100}}}}}}, 0x0) 21.428066419s ago: executing program 1 (id=971): r0 = timerfd_create(0x1, 0x481de37e591ed7f2) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000000), &(0x7f0000000040), 0x2, 0x1) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bsg/1:0:0:0\x00', 0x40000, 0x0) ioctl$SG_BLKSECTGET(r1, 0x1267, &(0x7f00000000c0)) r2 = dup(r0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000100)) unlink(&(0x7f0000000140)='./file0\x00') fsync(r1) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0xa, 0x0, 0x1d, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@cgroup=r2, r2, 0x5f41766235fb516d, 0x10, 0x0, @void, @value=r2, @void, @void, r3}, 0x20) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f0000000300)={0xdddd0000, 0x101000}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000340)={0x0, r2}) ioctl$PPPIOCSCOMPRESS(r2, 0x4010744d) ioctl$UBLK_U_IO_COMMIT_AND_FETCH_REQ(r2, 0xc0107521, &(0x7f0000001380)={0x0, 0xc53, 0x58f, &(0x7f0000000380)=@buf_max_buf="0c648d85efdc2a7965e8b72fba4f4db08f218c1b4c4625fcba28e477e47f87475f705c336af777ec1139bd2c2d5cf1999301c6737d0550547596992124a3d57b394ca841c119be2cc658ab75eeabf5bfff467c776eb8fa06db461573239e9aa62dcf885feb7bd405b3a486b780446fa75f600023b28ff502f14c92660bd255f414f6f9f804561e0abd14b74cd9dfaca718942504ff5b3b12772063b3808f9e1f7034b236f91bbbbe5995064b8b11cb7d1e1061bf5c601bafdaebeb0fe4354450412efa485cb769bfa6cfe38e9b37ce9f0dc7dce93d9838c8204c6fcd34e05c986fed95350263eee295d83d84e008c881bf3940c4b6cdbb74fce5b1044e846a12f5cc6007167c16387391515b0a476a9c19ebdb4a5a7557a85b935b1230b03a4d95fabc14eea440389957f53121448920ce99268388f653b69c015e147df0ebd0287204e0ed2ac01573d9546f92191440f74eb76b83157eaf608d7c65fe30aaab7bd64851099a8f66a84c623dbc9fc04ada12d59f61cd37a7b428c69b636a9d3716b0b1dfef730df9dd99fd489466753630ef6a26652b05156f9ae0c2e0e7914ea663c95f14ac6eb70fe3dd5e5d8801a55f8cbd3193984b5f6d80013415ad4ad9aae83e76520fd57d6e338ab7d882aa52b0bb569d34b7495bb2de599664ecdc4f640b98810eb888d1939e0784d955d1dcbadae9a398b16b549c25d365d9424590f4789a204a7aa02c82d10b9b5c885bbeebd7cf8c0f26c52188927a605089f93b52c2a14dbdca8aaa04083f5dbd1a5f7a63091d252960bdc597098a9d1e16c343ebc469a85096a17efff982520e12ac4f009c310b025a747f7735a5d04a010521a584d3a647ae8ee39718bc37b54be139cc07f195972e964a8f8dc447bd44e61fba36454096d8b948e17155f3f755033139dd242ee43fc8829076bb21eb69e1ae83d8312b402458cb6e1b0fce6ed5a6909422db38170eb34afd255601fdf72f2e74e8eca9ad689dff03f43881788555aa3aaa0cf0054812c6ca019995892d76be48aab35bf453c207706a2a33751193f4e3891097dc49cb00f1f7528713777441116c11e3bf536fc5eaa2715e77a5bf64a15537f780652a7a186de1efd1a0d89dede5202c4478e66cf06b2115971e2807022eacdee6f593abf773d5733d19b2cf68f93e20881742529ed58e6aa6e698837d2b881f750b0a9d64b1fdd0d67925a21b60a347871992e810c991b017b49d1f0d81cf2d1c9f56ea77f32aede7ef997734881be03ad86730a284bfe58b4664b5b9e1bacd36ea8f564a3f85d2e4e2252ca33dbe1159a5543b5ce5e64d3a00aad9fc3a44b441bed3b859ea800eff18802266dd73e4d2a7745b965f6213a0bd4209414a874d76e4105228c98f9bec16bd6c5aec89fb641341f05fc7492dfcff64a6adb2d11986f96932a2502c0b1a065f3958ade824444b00dae3cf56af10141cd4cecf9ea47c0ab2dd45ebd6860cc27f694de0cc8a0655e399ada324b9717bf28958448355e48dd4984a4a018501736d8c139bafba976fc7274afef7aec80ef66ca9519dd7d1f36bde78713a68adec778cfb174cd29a16388c6f704c59593237117aebedb36e4c3a1a7a8a29e13911f0efe2aece8cf8a64a5bf2b650e807476afd8052ad4440f79efe3a2c22ddfb4e8a5079228a0a64d8698e50cc9294e5903225c8d549c16bcd25cc7002b5304f40224f5ed0e18c62d0a26bd01522365ae1514d2958720b1368f204e95aa6205887ddfd40868a1e26302df1c37dbc87f1ef47f64a7f1b6e3a2c95d2671be93597deaee77fdfde113edfc5d74db21f9ae1c197f45c34e60033f795feff3ad053a73f4391bcba784b0d1a09b6d17e6d4f0b616cba1459d1d2d2191bad9a4739aee7e7393a330c9f78a9a6954502757d77969568511523338c04626fb81e9c860b263d5008d9ba355c2a41b85681e9d0b20e6c5019e2330ecc38c49051fa50601efa31cf25f69a17312c54b82b869ba0c0006118f31e8f8cb5818b5141cfc82a8e02b916d2f6bf72355c83493cd3c897c9c493d1077c0142ff166e76cd3f4e9d680d0b324d866c1dd0dbfeb5359602b2cde5ed602fd02dfefd2bb9ba1a5ffb020a25f45986d54538ace47a989488a83f3266bc3c96defa54c108b68677304950a069161ceb33089074148f67f2b74d69233641b7ab21c3941fd011971ec2cec11fb362e3fdd1d019b8a7a8532c5d624d7111e94984db4408ee301d6c317f611a5966c8cec7a69d5435e514097b74e47535ae4b8ee7ed0426267112d837952f80977ef6cfc1fffe4878d8053d5288754c961f43111ed7785fb167dd1efe415870dd758dd59efaafbe15221b5e3ef41f0ad19aedba28697af0fbbf00ec03758821a1346dee2c8ece49232449b29b40c777f39cf926c02494964329c862c2ae0e3144b53c20cd1ec8d4dc154efbe63e8ca8f69b451cac39741f8b1c151930c0bfe4ecded5dc43dd9fb9f6a37515add0b0e30a518ff1d9d8828a79a38279d2c0aa853b80f00cb5b86905b8997245d643c3dd36319c3ce4c07ccafc41395cd8f56d7db8645891157b034ff7f0737d6834e5041b0005af0d5544dc2c2199ac3c870482a5f8eee78a0b66622f1e5d0e2faf3ce80b49adbf1846c10c8f617be670965d1a0c135c320dc7cb16640537e926e9b5ca625815ea2bf5e5fe7b6f6e033d8d58c9f4d562d5ced950c36ccb7093f07cafa87c3fe147e9f7cb82902e3ec8f9852dcef1b9d428ee3509f299a15445ef78f200b8379cbf0450c25a4e869302d138c6d29d31ec01007b59f1c184e11ee3ab7fc13fb0065603012d940ca1a6a0f5379eaba2276b6a134750a64cdfd5419fcc6180e44df7c8fbd26a543b81f5b7e476fb3ee6c36862e8994ab8e6fcedbf4c9b58734ace52f888b7fa681b270f3f8424e02ceb4164eac251de4da5faf76ff2daa73a63a5c588614279007ab1ab8ddc6437ef2a10598b84528ef0c0a6b92e34e5c636e9623485c5845f276be5a5d43f78ffdd52216599f221d636201ec86e9ebeff81504ecb0754d15bebe6769d56abf4aad47dc43c12bcfb0e9da624c39a619fdbcadbde1fe7b012e13ef38937a2125196080e450da8ee874c0068a438ba3dddfb637c3c47bc15f25b2f64ac7a8bdb1ef88a7eae065ebe02993a3354c3e68a46845df1e1420bd978da0a589ea2df603c1c5c36cc86a450b2bf42b728ffe594154170458fe293d48e384b654cccd9b628ee03b5523c2357c91c8e78843490f7abedefdadfea28867d308ee1af5eaf6e5bcc9c2987ef2016508bd77e6a23f57e11cdd7c7305e11233771696abb132830b2be94183882086601fb70a4f0c6585e8d474141ba01336407dd0794421f8ceedf6a02b7da6fea3e2f8a18c1dd2a7c180256350eee5d4a5a6febd3785a7aa0630c3cb8e6a9dfe083572053db59f3068a90f9c6d48373496800d73abf40d00021662281c2c9c5a9f21775115d519867514f39a152bc0425efb093db61e38ba9519bf70777d96f5583e008c0359c95a07591e95be393983153a40114aaa1570073e310793254b611e4293c47d6c931935c0fe4989b1814709c1b354f71f5f0f86bc2e333291ab7d1c9dd80d1edba92bb51a928a63a5211407319246a150c8605c8be7d8b20c7e0eaa3e06ef112c2cd425bed1d0b4d30ddf22143e59878250a192c1cbc6fff339b715973ddbd4940fcb3f49232a2e10f017edad15637f199a7aacf59cb2d05a91ceaccafbfc40381026c284752b5d009d2f8a13897a640d11dafa1f92e417773d8209b38bd90cd6fca6d7b0b469f5eab324123fd579b0486e7d06ac28023d62e0ef89bf6f098e1796e04e5e89d0ce3f74f8b2e513ee1f60226d7e0512c8cc2b855f647c5e6b4fa2a522967511d485642e1c326dfcbef36d2f241941f65671f1fa6542d6242a7396e3bb9a04fadeb57523b6723c66730d10e6c44e4f218f3dda8c103f8e91c9df4a9b02ed666255f6f71d6cdc3250ce57e67466eda4a33a75440b0d0430d5457bfd8f2104c4d1b6f6c62d2b9627eebc68fb5a22e7f774953d8d4d52ea5e1869dc0780a9f2e6e8c02ffe1c66fff91bf420a1519b3dbe295e7f51e335847f75fcebb26299e56bd48a60defd2a367fd3da073623170c8f4e47c3cbf29e9492d10161063c79cc16ed0f671d584fb570da1274ce198fb1f399f5fd7e0b398421f6dfb8bcadf455db203c2ddd86173ff78fd84db01055de350ea55e653e28dbab86a00bf217f3fda36873b7a2002af6632995e0f75cbb535a30903f23523641a4732a7492ad87cd28de63aea93680e54059d01e8096e5d20c3d070b51cfb2d7e99d7c5816975bd931e936aafe1ceb0b38bc57d807f5301cace6e9c38dec759adcce542811307bbffc3a5163aec7104744421fef816d966f45dc64ec32374b7e39fc5c18fc048fe3d640fe56ced45714ada31f793b171756211a1b61cb7b3904c8063acfd9cd06a5d0488cf39075ea7726c6174da422cf25dd448686eedd97584d5ee4f6341a58c5ee50031ac1ab24b2d2ec6893c1b7cf4b87eddcf290d46de6f34caea6748948d8d52dc816fd95e8e6998565f943375ae9e29e0096bfac22e22be3c0106dd6e2ea43606bb5fb94b84c6525faad1ddd120380877feae53409ee823c366ced9e346c17c4367ae2476476172e2362d30fb433e52b1bc69f88b0405459d7e7a560e5446bdcfb46804a7297fbd7bcec8a841550fbfaa562205d816769a40bfa7d3a8bb52e716c4df19a2ed3879bc1b1473559cdb652ac436e1419f66b6ec5b6c34d07ab5a2481ea0ff8a987d4bcf96cffb052df15557ed8e2df03d5b667725a143e047db88711127f38476b55966e114430babb491abdd0fead7a1b4c6c4204dcd52783f7843b5cb41a73cf46f9c7d04066f2404a839d8068149572cb3cc860146bbab624480ddb1f07c466f2e77d40080fc7070223ad19fa231a685c9671285bed2cc6be7cfedf83e9d292b5f5eb064374e362388b2437b88a294b2d668700e9879928e09ffe9d3334f98ab8a4a0f4866d5028060db1a4862bdb966cf6e6e010d7558f542158e94cb6c8b7d02ca798080b3f2a53112b6074a9161e2eabd3aef47e71b8c96fb257625b53f480ff950357388de5e5cea09fa027ebd346b200546edf0272ac1a014589ef096a403b8d464db92f03e8512fe3a9c2c08315410510045b9984b85c007ce5cdda4c920e4f8a4f444aa154a24aaf0ee4c32439a9be7f51cfe0b6e5aa7e6c981ee4ce6d6c4bd37273447d606c707d83ff88adbb9312b3e4d05ac89148da5c64bf393315daa5f3872bc1ebc04fb9d956480c8c7d2db7471d0eb5975f8f174d8fe4aa413e73e4254b1b02fa0b4503ddbd2b422ff1aafc2f109c4ac1b23ba5e5d2dd4cfc3785fa58b8b8c31106cd929f61a11becd7675b258ddf362555de24bf3a6f02752bd2e03a177bb1482d54b808857f98e4aba04d056eeae5828abec717052cf58b441958e18c0681f230395a978b7c39d620c76c72a18b94a5ba1c3992d704ae03017a14e3641312f7adb7e090de4a2f5db4282322a722fd8ae0d3a7a02e2c6acc5ad22d9f9419bc958f6dbe30ca673543e09e08ccb4daf97912c0e04c492dc85acffb6b05b4ab8da70991fdec80b205403d23131f208a2e9e91e24670662d875d5ab4f0127437af602e0011bd2b6884efaa9834ba218ba98a62e15229019db35222db4efb77c7ba0ea21d6015eb09ffe6ad7088c0fa72af0a8e3691b7e820fa8919b97b4c8602ec95454fcc1e0a7840083"}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001440), r2) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000017c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001780)={&(0x7f0000001480)={0x2d0, r4, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x50, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x728b}]}, @TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa0f0}]}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x40}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_NET={0x74, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5ac9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x19}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xa}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x2004c001}, 0x40080) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000001800)={0x1, 0x0, [{0x40000001, 0x101, 0x7, 0x7d78, 0xc7, 0xfffffffe, 0x40}]}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001840)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000001880)=0x8000000) setsockopt$IP_VS_SO_SET_ZERO(r5, 0x0, 0x48f, &(0x7f00000018c0)={0x21, @empty, 0x4e24, 0x3, 'lblcr\x00', 0x34, 0x40, 0x49}, 0x2c) mount$9p_fd(0x0, &(0x7f0000001900)='./file0\x00', &(0x7f0000001940), 0x80001, &(0x7f0000001980)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@loose}], [{@obj_user}, {@permit_directio}]}}) pread64$ublk_ch(r2, &(0x7f0000001a00)=@buf_max_buf, 0x1000, 0x9) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x14) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) clock_gettime(0x0, &(0x7f0000002a00)={0x0, 0x0}) timer_settime(0x0, 0x0, &(0x7f0000002a40)={{r7, r8+10000000}, {0x0, 0x989680}}, &(0x7f0000002a80)) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r5, 0xc0245720, &(0x7f0000002ac0)={0x1}) mount(&(0x7f0000002b00)=@sg0, &(0x7f0000002b40)='./file0\x00', &(0x7f0000002b80)='openpromfs\x00', 0x88080, &(0x7f0000002bc0)='\x00') r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000002dc0)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c084) 21.425491252s ago: executing program 0 (id=972): r0 = socket(0x1e, 0x80005, 0x0) (async) lsetxattr$security_ima(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@md5={0x1, "a7b28c8bd493d794b049a75968cc691e"}, 0x11, 0x0) file_setattr(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x8000, 0x3ff, 0x3ff, 0x8, 0x5}, 0x18, 0x400) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) (async) ioctl$SIOCSIFMTU(r0, 0x8943, &(0x7f0000000000)={'macvtap0\x00', 0x57e7}) 21.361541514s ago: executing program 0 (id=975): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300010026bd7000030000004015143f4529d72384a65b0fbe0b0000d1d8044a1c2fbf3bc8d961bdc2ca5d87ea3a2d0572f6a7882ef366b3e249330000000000"], 0x44}], 0x1}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x3, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f0000000bc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x7, '8'}, @main=@item_4={0x3, 0x0, 0x8, "c83e2503"}, @local=@item_4={0x3, 0x2, 0x1, "dde84050"}, @local=@item_012={0x2, 0x2, 0x3, '\fh'}, @main=@item_4={0x3, 0x0, 0x9, ')$Q)'}]}}, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/95) 21.361227535s ago: executing program 1 (id=976): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYRES32=r0], 0x160}}, 0x804) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="7b87f20fb2"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 21.211755992s ago: executing program 1 (id=977): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x2000, 0x0) (async) r1 = syz_open_dev$video(&(0x7f0000000040), 0x7f, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x3, 0x40000043, 0x32315852, 0x8, 0x0, 0xfffffff0, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) (async) r2 = fanotify_init(0x200, 0x0) fanotify_mark(r2, 0x1, 0x4800003e, r0, 0x0) r3 = dup2(r2, r0) mq_open(0x0, 0xc3, 0x40, 0x0) (async) mq_open(&(0x7f0000000000)='\xd0O\xe4\xde!\xbd!|]\x85\xf3\xde\xebR76\xf1\xeb\xe9\x8e%q\xc4\xf7\x91\xc52\xf9Z\x04\x9d\x11\xcbv*\xe1\x98d\xa0\xb5\xf3;\x87\x1b\xfdG\xfd\xdb\xf5\xe8[@\xd6\xa7\x9c\xb7\xff\f\xb1\xdd\x9b\xa1f\x89[\x04\xab8\x0e\x86\xd5\xce\xda\x06\n\xd3\xd86q^\x91}r\x87\xf6\xdb5b\x90\x83*\xe94\xf0\xbd\x0f\xb4c\x8ec\xf4o0D#Y', 0x3, 0x181, 0x0) (async) ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000040)) (async) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000280)={0x0, 0xde16, 0x19, 0xc84b, 0x4, 0x401}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e24, 0x400000, @mcast2, 0x6}}}, &(0x7f0000000400)=0x84) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000020000000800010001"], 0x40}}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000140)=""/52, 0x6}) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newtaction={0xb0, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x9c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_mirred={0x50, 0x2, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x93, 0x2, 0x7, 0x9, 0x4}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xb0}}, 0x0) (async) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848160000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x80054) 21.163781352s ago: executing program 1 (id=978): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x12) syz_open_procfs(r0, &(0x7f0000000100)='net/packet\x00') 21.163169354s ago: executing program 1 (id=979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@cache_loose}, {@cache_none}, {@access_client}]}}) 19.823011902s ago: executing program 0 (id=990): mount(&(0x7f0000000040)=@sg0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='jfs\x00', 0x804001, &(0x7f0000000640)='!:\x00') (async) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x38011, r1, 0x3ef6a000) syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') (async) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x24, &(0x7f00000000c0)={0x0, 0x10, 0xa3, {0xa3, 0xf, "058d7a3fe519b7ecbc3981e6f1bc30f5ae9f40f88b117f9977cd8b49e7989d960fb9e05d0a9c7666003758dc4a328edf8c145cc094c0f3849dac4318ce2c90af7eb0d81ce8e64abdcef0727bb1a6c89b96c3d96134808a94364d20ee588ee4564902b4834367fdc8e6f9331f6f29d6c9291d14a017875a1e04adf40418816e68e2e365eb29881d77201611887d2d34a7aa8fef2fd08827cd0ac996cd6763d861be"}}, &(0x7f0000000180)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "8edd958dc625faee240d7e9cc31173367a86ee8ab2ce50e88879880c7bf499183b0321b810583c5a3d61d067b22fa8aaf307f9fee41b5119cebec5e4ffc4e0c1b4f7cecaaedcd26bf04580b31b74206aed2786f5de69e27a6b1d9c53a027ec4caef64b13d1ac94992954ba906e3a8a3046869059060059e4565cd71d18f1ee38ad05453f0ac3e4676a673d7053467c3d67aae36b8d08e0a810fc40662adac0ef643698311552f594f5b9b2ff38118a6da866ee84f01c461fc2d70fff02fa7253b1f6f24432ff06c73e294384fba9ecaafefdd3f6af1643b13f18ddf8207112ccab"}}, &(0x7f0000000280)={0x0, 0x22, 0x1c, {[@local=@item_4={0x3, 0x2, 0x2, "c5def39e"}, @local=@item_4={0x3, 0x2, 0xa, "bb543a6b"}, @local=@item_012={0x2, 0x2, 0x3, '[*'}, @global=@item_012={0x1, 0x1, 0x1, 'D'}, @local=@item_012={0x2, 0x2, 0xa, "c974"}, @local=@item_4={0x3, 0x2, 0x5, "ebd27a02"}, @main=@item_4={0x3, 0x0, 0xa, "89327f8b"}]}}, &(0x7f00000002c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x98, 0x70, 0x1, {0x22, 0x307}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)={0x40, 0x15, 0xb3, "9fa99e9c902dd3d3df3f4c701c6411a3af9df1d15efb79fbcd5178463a151f43656872c56926e702ede9b7c84aa015950954f326e74ac8164de6a27665ea4540816ba71e0d0d92746204eb642a4d7e7f3326fa462c3e1d2a425964a0706ae2d9761471764ff88e0bf2ed29c37e8e1998a45d4de324e105456310fe352bd3f948d191cc2d39b8b4310650483a79cf8a65a36bbff529ccaec53d5ce5771b4bda58928b2a556ac4f0d5c4001b1157d91811e07989"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000480)={0x20, 0x1, 0x83, "6b5ca2cd0d49acee8e49e7d240a0d8686f4b492e6071f8c91f322dfd14ce190621acb59fcbc5118d7f13e52000e7ef96427f731810244bb6098a5ec1398a6e81177304a46e80a0c7ec2e37da71f005021832ab1785c7ec0fe361048075a16ce0106d59838ea323eed44b772a55663912232e56c42d07a9b6e5b78277267380854ed5a7"}, &(0x7f0000000540)={0x20, 0x3, 0x1, 0x15}}) (async) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b23, 0x0) 16.732842945s ago: executing program 0 (id=1018): r0 = socket$tipc(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg1\x00'}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4) bind$tipc(r0, &(0x7f00000000c0)=@id={0x1e, 0x3, 0x1, {0xf8, 0x2}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000100)={0x0, r1, 'id0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x824, 0x70bd27, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @private=0xa010101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8015}, 0x8010) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r2) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, r4, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4840) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r2) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="038e15547eb1"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f0000000580)={0x0, 0x1, r2}) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f00000005c0)={0x9, 0x4, 0x8, 0x2}) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680), r2) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x28, r6, 0x624, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x40004) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x38, r6, 0x20, 0x70bd26, 0x25dfdbff, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @loopback}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x2d}}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x2040100}, 0x800) syz_80211_inject_frame(&(0x7f0000000880)=@broadcast, &(0x7f00000008c0)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="62b4d25f6e56", {0xf, 0x6}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x2, 0x0, 0x3, 0x0, 0x0, 0x1}}, 0x11, @void}, 0x1e) r7 = dup(r0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000940), r2) sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000c00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000980)={0x208, r8, 0x8, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffb}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}]}, @TIPC_NLA_BEARER={0xa0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6a1c, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x96c}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}}}}, @TIPC_NLA_BEARER_NAME={0x13, 0x1, @l2={'eth', 0x3a, 'veth0_vlan\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfb}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1c8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xfc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1980}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe}]}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r7, 0x4008af23, &(0x7f0000000c40)={0x1, 0x6}) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000c80), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r9, 0x8008af00, &(0x7f0000000cc0)) ioctl$IOMMU_VFIO_IOAS$GET(r2, 0x3b88, &(0x7f0000000d00)={0xc, 0x0}) ioctl$IOMMU_IOAS_MAP(r7, 0x3b85, &(0x7f0000001d40)={0x28, 0x7, r10, 0x0, &(0x7f0000000d40)="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", 0x1000, 0xfffffffffffffe01}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001d80)={0x0, 0x4}, &(0x7f0000001dc0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000001f00)={r11, 0xe4, &(0x7f0000001e00)=[@in6={0xa, 0x4e23, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7f}, @in6={0xa, 0x4e24, 0x45c47627, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x3}, @in6={0xa, 0x4e21, 0x6ab, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa7}, @in6={0xa, 0x4e24, 0x6, @mcast2, 0xffff363a}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}, @in6={0xa, 0x4e24, 0x7f, @private1, 0x4}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e24, 0x1, @remote, 0xba74}]}, &(0x7f0000001f40)=0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) 16.183349579s ago: executing program 0 (id=1019): mkdir(&(0x7f00000002c0)='./file1\x00', 0x1c) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000006c0)=[{0x3, 0x3, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x2}, 0xfe, 0xff}], 0x20) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000080)='./file0\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xfe2a, 0x0, &(0x7f0000001840)="b9ff0307683a268cb8091a998137", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000005c0)='fd', 0x0, r2) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x2) fchdir(r2) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='0123:abcd:a,4567:ef01:o', 0x17) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2000004) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r6, r6) setpgid(0x0, r6) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount$overlay(0x0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000100), 0x107c09, &(0x7f0000000180)={[{@uuid_null}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) r7 = socket$inet6(0xa, 0x3, 0x4) bind$inet6(r7, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0x9360, 0x0) mount$bind(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 16.113114354s ago: executing program 0 (id=1020): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='/:%\x00', 0x2504c0, &(0x7f0000000040)={@align=0x2, {0x5c75, 0x0, 0x2, 0x3}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000140)={0x4, 0x5, 0x401, 0xfe000, 0x6, 0x7}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_TDX_GET_CPUID(r0, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f00000001c0)={0x6, 0x0, [{0x80000000, 0x1, 0x2, 0x6, 0x3, 0x3072, 0xb1}, {0x2, 0x1, 0x0, 0x8, 0x81, 0xc5, 0x6}, {0xc0000001, 0x5, 0x2, 0x0, 0x4, 0x7, 0x9}, {0xc0000001, 0x4, 0x0, 0x8, 0xffffff81, 0x5, 0x6}, {0x80000001, 0x7, 0x4, 0xf18, 0x7, 0x2, 0x6}, {0xc0000000, 0xfffffff7, 0x6, 0x6, 0x5, 0x9196, 0x5}]}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000340)={0xcd8, 0x5}) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000380)={0x7, 0x101, 0x8, 0x6, 0x6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{}, {r3, r4/1000+10000}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0xc0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000540)={0x28, 0x2, {0x2, 0x0, 0x47e0, 0x0, 0x1e19b78d}, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000005c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000700)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000740)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000780)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000007c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000800)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000008c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000900)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000940)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000009c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000a00)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a40)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r1, 0xc0186443, &(0x7f0000001000)={0x0, 0x1, {0x30, 0x6, &(0x7f0000000ec0)=[{0xf0000000, r2, 0x3, 0xb, 0x1, {0x10, 0x3, &(0x7f0000000640)=[{0x80000000, r6}, {0x0, 0x0, 0x101}, {0xff, r7, 0xd0b6}]}}, {0x1, r2, 0x0, 0x8, 0x7f, {0x10, 0x7, &(0x7f0000000840)=[{0x1, r8, 0x3}, {0xff, r9, 0x862}, {0xff, r10, 0x8000}, {0x0, r11, 0xffffffff}, {0x80000000, r12, 0x3ff}, {0x0, r13, 0xfffffffffffffff6}, {0xff, r14, 0x9}]}}, {0x0, r2, 0x9, 0x8001, 0x9, {0x10, 0x3, &(0x7f0000000980)=[{0x1, r15, 0x6}, {0xff, r16, 0x5}, {0x1, r17, 0xe2}]}}, {0x0, r2, 0x4, 0x4, 0x2563271, {0x10, 0x4, &(0x7f0000000ac0)=[{0xff, r18, 0x9}, {0x0, r19, 0x1}, {0x80000000, r20, 0xe9f6}, {0xff, r21, 0xfffffffffffffff7}]}}, {0x0, 0x0, 0x0, 0x3402, 0xff, {0x10, 0x3, &(0x7f0000000b80)=[{0x80000000, 0x0, 0x3}, {0xff}, {0x1, 0x0, 0x3ff}]}}, {0x20000000, 0x0, 0x1f1f, 0x80000000, 0x5, {0x10, 0x9, &(0x7f0000000e00)=[{0xff, 0x0, 0x9}, {0x1, 0x0, 0x7}, {0x80000000, 0x0, 0xc60e}, {0x80000000, 0x0, 0x8}, {0x80000000, 0x0, 0x4}, {0xff, 0x0, 0x88f}, {0x80000000, 0x0, 0xfffffffffffffffa}, {0x80000000, 0x0, 0x5}, {0x80000000, 0x0, 0x6}]}}]}}) 5.893708587s ago: executing program 33 (id=979): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000700)=0x2000008, 0x4) pipe2(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x80, {0xc, 0x3, 0x0, {0xfffffffffffffffd, 0x0, 0xfffffffffffffffc, 0x0, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r5, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@cache_loose}, {@cache_none}, {@access_client}]}}) 2.373301126s ago: executing program 5 (id=1088): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x42000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) (async, rerun: 64) r1 = socket(0x2a, 0x4, 0x0) (rerun: 64) shutdown(r1, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c845}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @multicast}) (async) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @dev}, &(0x7f0000000200)=0xc) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1, {0x2, 0x8}}, '.\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300000000000000000000000000000000080000a7d42b9b7827c6520b221d19d445b44ac60374dc6be1d05614513dcc30e58ec71279439d9a1378b55d1219912b88daf9781e488b1ac2c0bf76ddecf96d220239fd997d6b5082ece26a1e72a56e6b2fe7dcf7215862fc727f9e132e34a1b660de14393798822eb0593d7e690086a274f9c5bde0ddd85f8c29b93d5edeab592154fea31f1ebad1fc56c57df9b36de471547d4223b8a5", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000200"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="020400"/20, @ANYRES32=0x1, @ANYBLOB="f7ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000000000000500"/28], 0x50) (async) setns(0xc9, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000005000008001b"], 0x30}}, 0x0) r5 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r6, 0x40045431, &(0x7f0000000000)) (async) ioctl$TIOCGPTPEER(r6, 0x5441, 0xb3d) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async) r7 = io_uring_setup(0x6e60, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x80000002, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r7, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket(0x8, 0x5, 0x5) 2.203283088s ago: executing program 5 (id=1089): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x5, 0x400000001, 0x4, 0x1000100000000, 0x4, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls}, 0x94) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, &(0x7f0000008400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x7, 0x7, 0xa, 0x4000000000000e52, 0x800000000001, 0x5459, 0x1041, 0x200200000006, 0x5, 0x400000001, 0x4, 0x1000100000000, 0x4, 0x40000000006, 0x8000000000005, 0x800040069], 0x54000}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 1.894931445s ago: executing program 5 (id=1093): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 1.892190931s ago: executing program 5 (id=1094): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x64, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x19}}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xd, 0x1, 0x1, @dev={0xac, 0x14, 0x14, 0x9a}, @remote}, "001863714ab99043"}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x80001, 0x5) write(r4, &(0x7f0000000500)='o()', 0x3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdd251200000008000300", @ANYRES32=r5, @ANYBLOB="06001201100000000a0006000810000000010000"], 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9b090c, 0x80, '\x00', @p_u32=0x0}}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a6970", @ANYBLOB="e563618d9f44e119dfee35b0e4517c57331c74f33a40d01739f568ca292411044788615e1a9961e94fafd559a48795009a52d0ff43cb7881d2901387574c4871c7995b85f54f4498bcb3ae16938d298b87e97000196a03"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x7}) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000001100)) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000180)="cf", 0x1}], 0x1) read$FUSE(r7, &(0x7f0000004f40)={0x2020}, 0x2020) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='exfat\x00', 0x200000, 0x0) ioctl$TUNGETFEATURES(r7, 0x800454cf, &(0x7f00000001c0)) 1.762165008s ago: executing program 5 (id=1095): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0xffffff80) socket$unix(0x1, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$FBIOGETCMAP(r4, 0x4604, &(0x7f0000000340)={0x7, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280), &(0x7f00000002c0), 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @private=0xa010100}], 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0x1, [0x0]}, &(0x7f0000000080)=0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002ac0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2000000000001e008400000002000000de240102040000006f000000552f56ee4c10c34243b584c8e6a58045c47e901d368dee2bd8f2d80351c68bdce8468e4c5bad4409ba38a79efa3961726bc806735ec76b7c478b0b3cdd7dfb9fafa281211116351c9cec133eaa4cb73628583574966b8902e5abcec60637b50a2b24a2b0dcbd98c4d3374a49b03eeb3e3c735937b9a18d0e389ce4fecf1dbee478b58e47f02b8f9713d680203cfd", @ANYRES32=r5], 0x20, 0x20008001}], 0x1, 0x24010000) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000180)={r5}, 0x8) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/block/loop0', 0x200200, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x4, 0x7, 0x80, 0x401, 0x8, @loopback, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x8000, 0x7, 0x8}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_ext={0x1c, 0x3, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000640)='GPL\x00', 0x5, 0x45, &(0x7f0000000680)=""/69, 0x40f00, 0x72, '\x00', 0x0, 0x0, r6, 0x8, &(0x7f0000000700)={0x9, 0x800}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x7, 0x10, 0x823}, 0x10, 0xe167, 0xffffffffffffffff, 0x4, &(0x7f0000000780)=[r6, r1, r6], &(0x7f00000007c0)=[{0x2, 0x4, 0x5, 0x8}, {0x2, 0x3, 0xb, 0x7}, {0x0, 0x2, 0x3, 0xd}, {0x5, 0x1, 0x2, 0x6}], 0x10, 0x8b}, 0x94) r7 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r7, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.04429723s ago: executing program 34 (id=1020): ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='/:%\x00', 0x2504c0, &(0x7f0000000040)={@align=0x2, {0x5c75, 0x0, 0x2, 0x3}}, 0x9, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) ioctl$DRM_IOCTL_INFO_BUFS(r0, 0xc0106418, &(0x7f0000000140)={0x4, 0x5, 0x401, 0xfe000, 0x6, 0x7}) r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_TDX_GET_CPUID(r0, 0xc008aeba, &(0x7f00000002c0)={0x5, 0x0, &(0x7f00000001c0)={0x6, 0x0, [{0x80000000, 0x1, 0x2, 0x6, 0x3, 0x3072, 0xb1}, {0x2, 0x1, 0x0, 0x8, 0x81, 0xc5, 0x6}, {0xc0000001, 0x5, 0x2, 0x0, 0x4, 0x7, 0x9}, {0xc0000001, 0x4, 0x0, 0x8, 0xffffff81, 0x5, 0x6}, {0x80000001, 0x7, 0x4, 0xf18, 0x7, 0x2, 0x6}, {0xc0000000, 0xfffffff7, 0x6, 0x6, 0x5, 0x9196, 0x5}]}}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000300)) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000340)={0xcd8, 0x5}) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000380)={0x7, 0x101, 0x8, 0x6, 0x6}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000400)) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r0, &(0x7f0000000440)='./file0\x00', &(0x7f00000004c0)={{}, {r3, r4/1000+10000}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0xc0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r5, 0xc0605345, &(0x7f0000000540)={0x28, 0x2, {0x2, 0x0, 0x47e0, 0x0, 0x1e19b78d}, 0x6}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000005c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000600)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000680)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01864c2, &(0x7f00000006c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000700)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000740)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000780)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000007c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000800)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000008c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r1, 0xc01864c2, &(0x7f0000000900)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000940)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000009c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000a00)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a40)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000a80)={0x0}) ioctl$DRM_IOCTL_PANTHOR_VM_BIND(r1, 0xc0186443, &(0x7f0000001000)={0x0, 0x1, {0x30, 0x6, &(0x7f0000000ec0)=[{0xf0000000, r2, 0x3, 0xb, 0x1, {0x10, 0x3, &(0x7f0000000640)=[{0x80000000, r6}, {0x0, 0x0, 0x101}, {0xff, r7, 0xd0b6}]}}, {0x1, r2, 0x0, 0x8, 0x7f, {0x10, 0x7, &(0x7f0000000840)=[{0x1, r8, 0x3}, {0xff, r9, 0x862}, {0xff, r10, 0x8000}, {0x0, r11, 0xffffffff}, {0x80000000, r12, 0x3ff}, {0x0, r13, 0xfffffffffffffff6}, {0xff, r14, 0x9}]}}, {0x0, r2, 0x9, 0x8001, 0x9, {0x10, 0x3, &(0x7f0000000980)=[{0x1, r15, 0x6}, {0xff, r16, 0x5}, {0x1, r17, 0xe2}]}}, {0x0, r2, 0x4, 0x4, 0x2563271, {0x10, 0x4, &(0x7f0000000ac0)=[{0xff, r18, 0x9}, {0x0, r19, 0x1}, {0x80000000, r20, 0xe9f6}, {0xff, r21, 0xfffffffffffffff7}]}}, {0x0, 0x0, 0x0, 0x3402, 0xff, {0x10, 0x3, &(0x7f0000000b80)=[{0x80000000, 0x0, 0x3}, {0xff}, {0x1, 0x0, 0x3ff}]}}, {0x20000000, 0x0, 0x1f1f, 0x80000000, 0x5, {0x10, 0x9, &(0x7f0000000e00)=[{0xff, 0x0, 0x9}, {0x1, 0x0, 0x7}, {0x80000000, 0x0, 0xc60e}, {0x80000000, 0x0, 0x8}, {0x80000000, 0x0, 0x4}, {0xff, 0x0, 0x88f}, {0x80000000, 0x0, 0xfffffffffffffffa}, {0x80000000, 0x0, 0x5}, {0x80000000, 0x0, 0x6}]}}]}}) 1.00279684s ago: executing program 2 (id=1098): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="796112000000000000007e"], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000000622180, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x2, 0xc040) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mount$tmpfs(0x0, &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x10, &(0x7f0000000b80)={[{@gid}]}) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100c0150edc28d026d03cb0009c57456cd6e2df250500000100000100e6ffffff880009000200003e7d3f480d5366eda3b1b33e0008000b00"/66], 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000180)={@private0, 0x80, r7}) set_mempolicy(0x2002, &(0x7f0000000000)=0x200009, 0x29) syz_clone3(&(0x7f0000000480)={0x80000000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0x0], 0x1}, 0x58) 922.575918ms ago: executing program 5 (id=1101): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) setns(0xc9, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x10f) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001010203010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) syz_usb_control_io(r5, 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000280)='ccgx-ucsi 0x08\n\x00', 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x6, 0x0, &(0x7f00000015c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DESC={0x1c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x35}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x40) bind$x25(r3, &(0x7f0000000100), 0x12) listen(r3, 0x1) write$tun(r1, &(0x7f0000000200)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, '\v\x00\x00'}}, 0xa) close_range(r0, 0xffffffffffffffff, 0x3f00000000000000) 843.607579ms ago: executing program 2 (id=1102): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 797.957462ms ago: executing program 2 (id=1104): sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x0, 0x300, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000e00000008000280012800a00010076786c616e000000180002"], 0x50}}, 0x0) 662.457834ms ago: executing program 2 (id=1106): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000520001000000000000000000020000000c00", @ANYRES16=r0], 0x20}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0xfffff000) r2 = socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, &(0x7f0000000140)="0f30c402fd3eecae660f38800a66b80c010f00d0662e3646d87213460f09b98c0900000f32b8010000000f01c12e644c0fc72f", 0x33}], 0x1, 0x41, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740"], 0x64}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000100)=0x730) r5 = socket$inet_tcp(0x2, 0x1, 0x0) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) r7 = fcntl$dupfd(r5, 0x0, r6) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000040)={0x20000001}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000080)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)}, 0x6) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa002, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000ffc000/0x1000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f00000005c0)={'\x00', 0x2, 0x19fe, 0x5, 0xd, 0x6, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000340)={0x8043800, &(0x7f0000000080), &(0x7f0000000580), &(0x7f0000000500)=0x0, {0x41}, &(0x7f0000000180)=""/237, 0xed, &(0x7f0000000280)=""/104, &(0x7f0000000300)}, 0x58) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r11, 0x40, &(0x7f00000003c0)=""/212) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r11, 0x40, &(0x7f00000003c0)=""/212) 321.048097ms ago: executing program 4 (id=1110): syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg}}}}}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x90, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x7c, 0x0, @wg=@data={0x4, 0x0, 0x0, "00000000000000000000000000000000000000000000000000000000001f00"/100}}}}}}, 0x0) 319.237992ms ago: executing program 4 (id=1111): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r3, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 295.277899ms ago: executing program 4 (id=1112): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2b) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000005000000a30c038a"]) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000c2a70000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000001400048008000240a04b3d02080001400000000308000540000000001c0008800c00014000000000000000090c000240000000000018ab6e14000000110001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f0000000080)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000006780)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) 182.467689ms ago: executing program 4 (id=1113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000001100)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000640)={0xa7c, r1, 0x300, 0x7, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x101, 0x77}}}}, [@NL80211_ATTR_TX_RATES={0x1dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_LEGACY={0xa, 0x1, [0xb, 0x6c, 0x24, 0x1b, 0x60, 0x60]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x60, 0x9, 0x60, 0x48, 0x9, 0x48, 0x48, 0xc, 0x1b, 0x18, 0x3, 0x60, 0xb, 0x6c, 0x18, 0x5, 0x6c, 0x1b, 0x4, 0x7f, 0x35, 0x16, 0xf, 0x30, 0x5, 0x1b, 0x48]}, @NL80211_TXRATE_LEGACY={0x15, 0x1, [0xc, 0x36, 0x36, 0x24, 0x12, 0x30, 0x4, 0xb, 0x16, 0xb, 0x1, 0x60, 0xc, 0x60, 0x0, 0x3, 0x12]}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0xfff, 0x9, 0x3, 0x8, 0x8, 0xc, 0x9]}}]}, @NL80211_BAND_5GHZ={0x70, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x7, 0x7}, {0x1, 0x5}, {0x5, 0x6}, {0x5, 0x3}, {0x4, 0x1}, {0x7, 0x1}, {0x0, 0x8}, {0x1, 0xa}, {0x0, 0xa}, {0x4, 0x2}, {0x4, 0x5}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x7}, {0x6, 0x4}, {0x4, 0x4}, {0x6, 0xa}, {0x2}, {0x4}, {0x0, 0x8}, {}, {0x2, 0x4}, {0x1, 0x9}, {0x0, 0xa}, {0x4, 0x8}, {0x6, 0x5}, {0x0, 0x5}, {0x0, 0x8}, {0x6, 0x3}, {0x1, 0x9}, {0x3}, {0x3, 0x7}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x3, 0x1}, {0x0, 0x9}, {0x5, 0x7}, {0x1, 0x6}, {0x1, 0x6}, {0x2, 0x5}, {0x7, 0x7}, {0x4, 0x9}, {0x1, 0x2}, {0x2, 0x5}, {0x2, 0x7}, {0x1, 0x1}, {0x5, 0x2}, {0x5, 0x9}, {0x6, 0x1}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x3}, {0x7, 0x8}, {0x5, 0x8}, {0x2, 0x3}, {0x7, 0x1}, {0x3, 0x8}, {0x1}, {0x3}, {0x0, 0x3}, {0x3, 0x6}, {0x2, 0x6}, {0x3, 0x8}, {0x0, 0x1}, {0x0, 0x9}, {0x1, 0x6}, {0x4, 0x6}, {0x3, 0x7}, {0x4, 0x5}, {0x2, 0x9}, {0x7, 0x6}, {0x5, 0x3}, {0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xd, 0x8, 0xfffc, 0xc, 0xff, 0x2, 0x6]}}]}, @NL80211_BAND_5GHZ={0xe0, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11, 0x3, 0x3, 0x101, 0xc89, 0x2, 0x2, 0x6]}}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x5, 0x1}, {0x7, 0x9}, {0x3, 0x2}, {0x4}, {0x7, 0x2}, {0x0, 0x8}, {0x6, 0x9}, {0x4, 0xa}, {0x1, 0x2}, {0x4, 0x9}, {0x3, 0x3}, {0x7}, {0x1, 0x3}, {0x1, 0x11}, {0x2, 0x4}, {0x1, 0x1}, {0x5, 0x1}, {0x6, 0x5}, {0x0, 0x7}, {0x4, 0x4}, {0x4, 0x5}, {0x7, 0x9}, {0x6, 0x18}, {0x1, 0x9}, {0x7, 0xa}, {0x6}, {0x7, 0x7}, {0x0, 0x1}, {0x1, 0x6}, {0x6, 0xa}, {0x1, 0x8}, {0x0, 0x5}, {0x2, 0xa}, {0x5, 0x4}, {0x6, 0x1}, {0x6, 0x9}, {0x7, 0xa}, {0x5}, {0x4}, {0x6, 0x9}, {0x6, 0x2}, {0x2, 0x6}, {0x1, 0x2}, {0x5, 0x7}, {0x2, 0x3}, {0x0, 0x7}, {0x1, 0x5}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xd78, 0x4, 0x1, 0xc, 0xa2, 0x2, 0xd]}}, @NL80211_TXRATE_HT={0x2a, 0x2, [{0x0, 0x4}, {0x6}, {0x0, 0xa}, {0x2, 0x8}, {0x6, 0x7}, {0x4, 0xa}, {0x5, 0x8}, {0x2, 0xa}, {0x6, 0x3}, {0x6, 0x6}, {0x6, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x7, 0x6}, {0x0, 0x5}, {0x7, 0x6}, {0x0, 0x1}, {0x5, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x0, 0x8}, {0x5}, {0x7, 0x7}, {0x0, 0x3}, {0x0, 0x2}, {0x0, 0x6}, {0x6}, {0x1, 0x2}, {0x1, 0x7}, {0x0, 0x6}, {}, {0x1}, {0x7}, {0x2, 0x4}, {0x4, 0x9}, {0x7, 0x4}, {0x5}, {0x6, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8, 0x6, 0x9, 0x1, 0x6, 0x7, 0x8, 0x8000]}}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x16, 0x36, 0x9, 0xb, 0x24, 0x9, 0x30, 0x6c, 0x24, 0x7a, 0x2, 0x30, 0x16, 0x0, 0x30, 0x24, 0x0, 0x1, 0x36, 0x1, 0x60, 0x1, 0x18]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6, 0x6, 0x36, 0x24, 0x30, 0x0, 0x36]}, @NL80211_TXRATE_HE_GI={0x5}]}]}, @NL80211_ATTR_TX_RATES={0x4}, @NL80211_ATTR_TX_RATES={0x194, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x3, 0x2}, {0x3, 0xa}, {0x0, 0x6}, {0x5}, {0x5, 0x2}, {0x2, 0x9}, {0x1}, {0x5, 0x6}, {0x7, 0x9}, {0x0, 0x4}, {0x3, 0x2}, {0x7, 0xa}, {0x5, 0x6}, {0x5}, {0x3, 0x8}, {0x0, 0x4}, {0x3, 0x8}, {0x2, 0x7}, {0x2, 0x7}, {0x6, 0x5}, {0x2, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x6, 0x2}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xf3d, 0x0, 0xb, 0x76f, 0x7ff, 0x101, 0x3ff, 0x37]}}]}, @NL80211_BAND_2GHZ={0xfc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x18, 0x2, [{0x6}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x9}, {0x7, 0x9}, {0x6}, {0x2}, {0x0, 0x2}, {0x3, 0x5}, {0x5, 0x4}, {0x1, 0x7}, {0x1, 0x9}, {0x4, 0x5}, {0x5, 0x3}, {0x0, 0x8}, {0x3}, {0x5, 0x2}, {0x7, 0x1}, {0x7, 0x5}, {0x0, 0x9}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xa, 0xf, 0x5, 0xffff, 0x7, 0x4, 0x401, 0x2bb7]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x8, 0x3, 0x5, 0x2, 0x1, 0x9]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x0, 0x7}, {0x0, 0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x7}, {0x0, 0x2}, {0x5, 0x9}, {0x4, 0xa}, {0x3, 0xa}, {0x1}, {0x6}, {0x3}, {0x0, 0x8}, {0x7, 0x5}, {0x1, 0x8}, {0x1, 0x6}, {0x1, 0x7}, {0x3, 0x3}, {0x2, 0x7}, {0x3, 0x8}, {0x1, 0x7}, {0x1, 0x1}, {0x5, 0x3}, {0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x4, 0x2}, {0x5, 0x9}, {0x2, 0x9}, {0x2, 0x8}, {0x0, 0x7}, {0x2, 0x3}, {0x1, 0x4}, {0x0, 0x6}, {0x3}, {0x4, 0x3}, {0x7, 0x5}, {0x5, 0x6}, {0x3, 0x6}, {0x0, 0x6}, {0x5, 0x4}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x4}, {0x0, 0x5}]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x50, 0x2, [{0x0, 0x6}, {0x2, 0x6}, {0x1, 0x4}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x6, 0x3}, {0x3, 0x5}, {0x6, 0x3}, {0x4}, {0x4, 0xa}, {0x0, 0x6}, {0x0, 0x7}, {0x5, 0x6}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x4}, {0x0, 0x9}, {0x7, 0x8}, {0x0, 0x5}, {0x0, 0x1}, {0x7, 0x2}, {0x3, 0x2}, {0x0, 0xa}, {0x3}, {0x6, 0xa}, {0x0, 0x7}, {0x3, 0xa}, {0x2, 0x5}, {0x3, 0x2}, {0x1, 0x6}, {0x2, 0x3}, {0x1, 0x6}, {0x5, 0x6}, {0x4}, {0x1, 0x9}, {0x3, 0x7}, {0x1, 0x2}, {0x4, 0x8}, {0x0, 0x9}, {0x1, 0xa}, {0x7, 0x8}, {0x2, 0xa}, {0x6, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x3}, {0x4, 0x3}, {0x1, 0x7}, {0x7, 0x2}, {0x7, 0x8}, {0x5}, {0x0, 0x8}, {0x1, 0x1}, {0x6, 0x6}, {0x1, 0x4}, {0x3, 0x3}, {0x5, 0xa}, {0x4, 0x4}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0x7}, {0x7, 0x3}, {0x0, 0x8}, {0x5, 0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x8}, {0x7, 0x8}, {0x0, 0x3}, {0x0, 0x5}, {0x4}, {0x7, 0x9}, {0x6, 0x9}]}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x2, 0x3, 0x30, 0x5, 0x2, 0x3, 0xb, 0x1, 0xb, 0xc, 0x60, 0x4, 0xc, 0x65]}]}, @NL80211_BAND_60GHZ={0x58, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x9, 0x0, 0x4, 0x1, 0xe4, 0x3, 0xab10, 0x9]}}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x1, 0x16, 0x68, 0xc, 0xb, 0x4f, 0x4, 0x2, 0x6f, 0x3, 0x3, 0x9, 0x36, 0x30, 0x12, 0x36, 0x36, 0x18, 0x3, 0x43, 0x24, 0x12, 0x6, 0x6, 0x6c, 0x9, 0x2, 0x5, 0x4, 0x48, 0x16, 0x18]}, @NL80211_TXRATE_LEGACY={0x1b, 0x1, [0x6, 0x6, 0x36, 0x9, 0x60, 0xb, 0x1, 0x16, 0x1, 0x1b, 0x6c, 0x30, 0x1, 0x36, 0x9, 0xf, 0x9, 0x16, 0x16, 0x48, 0x2, 0x6c, 0x9]}]}]}, @NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x5, 0x1, 0x1, 0x9, 0x48, 0x16, 0x3, 0x36, 0x48, 0x16, 0x16, 0x30, 0x25, 0x2, 0x3, 0x30]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_60GHZ={0x40, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xc, 0x151, 0x0, 0xfff, 0x3, 0x0, 0x6, 0x1]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x562, 0x0, 0xfffc, 0x6, 0x9, 0x7, 0x8]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x1, 0x55da, 0x4, 0x6, 0xb6, 0x1, 0x8]}}]}, @NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x50, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5fd4, 0x40, 0xfffb, 0x0, 0xe000, 0x7, 0x6517, 0xf]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x48, 0x9, 0x2, 0x36, 0x48, 0x9, 0x48, 0x6, 0x18, 0x9, 0x1b, 0x60, 0x36, 0x1b]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6a55, 0x4, 0x3, 0xfffc, 0x2, 0xd, 0xe00, 0xfff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_5GHZ={0x88, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0xa}, {0x3, 0x3}, {0x1, 0x9}, {0x1, 0x2}, {0x2, 0x6}]}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x16, 0x3, 0x36, 0x12, 0x48, 0xb, 0x1b, 0x2, 0x12, 0xb, 0x1b, 0xc, 0x16, 0x36, 0xc]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd, 0xffff, 0x3, 0x5, 0xfffe, 0x6b8, 0x800, 0x10]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x3, 0x1}, {0x6, 0x3}, {0x1, 0xa}, {0x6}, {0x0, 0xa}, {0x5, 0x8}, {0x7, 0x6}, {0x7, 0x3}, {0x4, 0x4}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x4}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x1}, {0x7, 0x4}, {0x6, 0x6}, {0x4, 0x5}, {}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0xa}, {0x7, 0x4}, {0x2, 0x9}, {0x2, 0x1}, {0x4, 0xa}, {0x5, 0x8}, {0x0, 0x2}, {0x1, 0x3}, {0x1, 0x5}, {0x7, 0x2}, {0x0, 0x6}, {0x0, 0x8}, {}, {0x0, 0xa}, {0x1, 0x4}, {0x5, 0xa}, {0x4}, {0x2}, {0x4, 0x5}, {0x3, 0x7}, {0x4, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x2}, {0x2, 0x9}, {0x0, 0xa}, {0x0, 0x4}, {0x7, 0xa}, {0x2, 0x8}, {0x2, 0xa}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}]}, @NL80211_ATTR_TX_RATES={0x1b4, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_6GHZ={0x14, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x74, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x36]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x4, 0x2, 0x800, 0x6, 0x100, 0x1, 0x5]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xd, 0xb, 0x58, 0x4000, 0x9, 0x8, 0x3125, 0x9bd]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x800, 0x3ff, 0x9f9e, 0xa5ba, 0x81, 0x3, 0x1c00]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9b0, 0x6, 0x1ff, 0x13a5, 0x6, 0x7, 0x6, 0xb4]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_60GHZ={0x70, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8d89, 0x3, 0x4, 0x2, 0x9, 0x5, 0x8, 0x9]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0xc, 0x36, 0xc, 0x48, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x0, 0xc, 0x80, 0x1, 0x2, 0x5, 0x1]}}]}, @NL80211_BAND_6GHZ={0x64, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xf9c2, 0x9, 0x8, 0x7, 0x200, 0x3, 0x1, 0x1]}}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x12, 0x16, 0x60, 0x48, 0x48, 0x36, 0x36, 0x12, 0xc]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xffff, 0x30, 0x3, 0x3, 0x9, 0x100, 0x7, 0x4]}}, @NL80211_TXRATE_LEGACY={0x10, 0x1, [0x9, 0x6, 0x12, 0xb, 0x6, 0xc, 0x60, 0x7d, 0x0, 0x48, 0x9, 0x60]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x6c, 0x18, 0xb, 0x9, 0x6, 0x16, 0x3, 0x6c, 0xc, 0xb]}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x11, 0x1, [0x60, 0x1, 0x18, 0x1, 0x1b, 0x4, 0x48, 0x30, 0x6c, 0x6a72ab98c3fef1f5, 0x1, 0x1b, 0x4]}, @NL80211_TXRATE_LEGACY={0x22, 0x1, [0x30, 0x9, 0xb, 0x24, 0x6, 0x5, 0x4, 0x48, 0x5, 0x2, 0xc0, 0x9, 0x60, 0xc, 0x1, 0x48, 0x16, 0x2, 0xc, 0x12, 0x18, 0x6c, 0x2, 0x4, 0xb, 0x9, 0x12, 0x48, 0xc, 0x1]}]}]}, @NL80211_ATTR_TX_RATES={0x3dc, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xe4, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x38db, 0x4, 0xc702, 0xfffe, 0x7f, 0x9, 0x8]}}, @NL80211_TXRATE_HT={0x32, 0x2, [{0x3, 0x3}, {0x1, 0x1}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x7}, {0x1, 0x5}, {0x1}, {0x1, 0x1}, {0x7, 0x6}, {0x0, 0x4}, {0x0, 0x8}, {0x4, 0x6}, {0x1, 0x9}, {0x6, 0xa}, {0x0, 0xa}, {0x0, 0x2}, {0x0, 0x8}, {0x4, 0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x6}, {0x0, 0x8}, {0x2, 0x9}, {0x4, 0xa}, {0x0, 0x5}, {0x7, 0x2}, {0x1, 0x6}, {0x0, 0x8}, {0x6, 0x8}, {0x0, 0x7}, {0x6, 0x1}, {0x7}, {0x4, 0x2}, {0x0, 0x3}, {0x3}, {0x4}, {0x0, 0x7}, {0x7, 0x5}, {0x3, 0x7}, {0x4, 0x8}, {0x7, 0x9}, {0x2}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x858, 0x1, 0x7, 0x7, 0x6, 0x3, 0x6e, 0x7]}}, @NL80211_TXRATE_HT={0x27, 0x2, [{0x5, 0x9}, {0x5, 0x5}, {0x1, 0x2}, {0x5, 0x1}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x2}, {0x6, 0x6}, {0x5, 0x3}, {0x7, 0x7}, {0x2, 0x3}, {0x7, 0x1}, {0x4, 0x4}, {0x6, 0x7}, {0x0, 0x1}, {0x5, 0x7}, {}, {0x3, 0x8}, {0x5, 0x7}, {0x6, 0x7}, {0x3, 0x7}, {}, {0x0, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x2, 0x7}, {0x5, 0x4}, {0x4, 0x7}, {0x4, 0x4}, {0x3, 0xa}, {0x4, 0xa}, {0x2, 0x8}, {0x1, 0x8}, {0x7, 0x3}, {0x1}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x2, 0x1}, {0x3, 0x7}, {0x6, 0x7}, {0x2, 0x2}, {0x5, 0xa}, {0x1, 0x9}, {0x1, 0x5}, {0x5, 0x4}, {0x3, 0x9}, {0x2}, {0x7, 0x1}, {0x2, 0x4}, {0x3, 0x4}, {0x6, 0x4}, {0x2, 0x7}, {0x1, 0x1}, {0x5, 0xa}, {0x5, 0x8}, {0x7, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x4, 0x8}, {0x5, 0x9}, {0x6, 0x9}, {0x6, 0x2}, {0x0, 0x6}, {0x1, 0x2}, {0x3, 0x8}, {}, {0x4, 0x5}, {0x0, 0x8}, {0x6, 0x4}, {0x7, 0x5}, {0x5}, {0x3, 0x1}, {0x1, 0x3}, {0x0, 0x3}, {0x2, 0x5}, {0x6, 0x5}, {0x7, 0x3}, {0x2}, {0x2, 0x9}, {0x3}, {0x1, 0x6}, {0x7, 0x6}, {0x6, 0x1}, {0x7}, {0x7}, {0x4}, {0x4, 0x6}, {0x2, 0x3}, {0x7, 0x9}, {0x5, 0x4}, {0x2, 0x4}, {0x3, 0x3}, {0x3, 0x5}, {0x1}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x6}, {0x0, 0xa}, {0x0, 0x7}, {0x6, 0x8}, {0x7}, {0x5, 0x4}, {0x1}, {0x2, 0x2}, {0x5, 0x1}, {0x1, 0xa}, {0x7, 0x3}]}]}, @NL80211_BAND_2GHZ={0x80, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0xd722, 0xfff, 0x5, 0x1, 0x6, 0x7, 0x6]}}, @NL80211_TXRATE_HT={0x3f, 0x2, [{0x3, 0x2}, {0x2, 0x9}, {0x1, 0xa}, {0x1, 0xa}, {0x2, 0x7}, {0x0, 0x2}, {0x6, 0x8}, {0x2, 0x5}, {0x3, 0x9}, {0x5, 0x5}, {0x1, 0x6}, {0x4, 0x6}, {0x1, 0x1}, {0x0, 0x5}, {0x7, 0x7}, {0x7, 0x2}, {0x0, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x4, 0x5}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x2}, {0x0, 0x7}, {0x1, 0x3}, {0x2, 0x1}, {0x0, 0x5}, {0x1, 0x4}, {0x3, 0x2}, {0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x1}, {0x5, 0x7}, {0x1, 0x5}, {0x2, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x7, 0x8}, {0x7, 0x2}, {0x0, 0x4}, {0x2, 0x1}, {0x4}, {0x4, 0x3}, {0x3, 0x1}, {0x6, 0x3}, {0x1, 0x6}, {0x3, 0xa}, {0x0, 0x6}, {0x1, 0x7}, {0x3, 0x6}, {0x2}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0x5}, {0x2, 0x2}, {0x0, 0x5}, {0x0, 0x5}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0x4, 0xfffc, 0x200, 0x9, 0x1, 0x2, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x5, 0x6, 0x1, 0x101, 0x2e, 0xfff9, 0x9]}}]}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xb, 0x1, [0x24, 0x1b, 0xc, 0x24, 0x9, 0x18, 0x4]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x6, 0x3, 0x1, 0xb6c, 0x2, 0xb7ce, 0xb]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0xfff9, 0x0, 0x6, 0x1, 0x9, 0x7fff, 0x1ff]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1ff, 0x2, 0xfffb, 0x8, 0x4, 0x5eef, 0x413, 0x40c]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0xc, 0x36, 0x6, 0x60, 0x36, 0x5, 0xc, 0x8, 0x5, 0x1b, 0x12, 0x9, 0x24, 0x1b, 0x24, 0x36, 0x1, 0x2, 0x1b, 0x24, 0x4, 0x2, 0x9, 0x12, 0x5, 0x48, 0x12, 0x6c]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xecf0, 0x2, 0x800, 0x6, 0x3, 0x0, 0x8, 0x6]}}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x54, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2e, 0x2, [{0x3, 0x5}, {0x0, 0x2}, {0x1, 0x3}, {0x0, 0x9}, {0x0, 0xa}, {0x3, 0x4}, {0x0, 0x3}, {0x7, 0x8}, {0x1, 0x4}, {0x0, 0x4}, {0x0, 0x4}, {0x3, 0xa}, {0x7, 0x1}, {0x1, 0x3}, {0x6, 0x5}, {0x4, 0x6}, {0x3, 0x5}, {0x7, 0x9}, {0x6, 0x6}, {0x4, 0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x7}, {0x2, 0x8}, {0x1, 0x2}, {0x1, 0x4}, {0x1, 0x1}, {0x7, 0x3}, {0x4, 0xa}, {0x1, 0x3}, {0x4}, {0x0, 0x6}, {0x7, 0x1}, {0x0, 0x5}, {0x2}, {0x2, 0xa}, {0x4, 0x7}, {0x6, 0x8}, {0x0, 0x9}, {0x0, 0xa}, {0x2, 0x7}, {0x1, 0x2}]}, @NL80211_TXRATE_HT={0xb, 0x2, [{0x4, 0x2}, {0x6, 0x9}, {0x1}, {0x1, 0x5}, {0x4}, {0x3}, {0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffe, 0x200, 0x863, 0xfc00, 0x1, 0x8, 0x1, 0xb]}}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x100, 0x8, 0x5, 0x1, 0x7, 0xd, 0x3, 0x5343]}}, @NL80211_TXRATE_LEGACY={0xb, 0x1, [0x6c, 0x60, 0x0, 0x48, 0x36, 0x6c, 0xc]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x8}, {0x7, 0x9}, {0x3, 0x1}, {0x0, 0x1}, {0x7, 0x1}, {0x1, 0x8}, {0x3, 0x6}, {0x0, 0x4}, {0x6, 0x1}, {0x1, 0xa}, {0x4, 0x4}, {0x2, 0x9}, {0x4, 0x9}, {0x3, 0x8}, {0x6, 0xa}, {0x0, 0x3}, {0x6, 0x1}, {0x5, 0x5}, {0x3, 0x7}, {0x6, 0x8}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x2}, {0x7}, {0x3, 0x8}, {}, {0x7, 0x1}, {0x1, 0x7}, {0x6, 0x8}, {0x4, 0x7}, {0x6, 0x3}, {0x5, 0x8}, {0x5, 0x2}, {0x3, 0x9}, {0x0, 0x5}, {0x2, 0x3}, {0x6, 0x2}, {0x7, 0x2}, {0x5, 0x4}, {0x7, 0x2}, {0x5, 0x3}, {0x1, 0x3}, {0x4, 0x8}, {0x2, 0x1}, {0x0, 0x2}, {0x1, 0xa}, {0x0, 0x5}, {0x3, 0x5}, {0x1, 0x7}, {0x3, 0xa}, {0x2, 0x4}, {0x6, 0x9}, {0x0, 0xa}, {0x5, 0x4}, {0x4, 0x8}, {0x1, 0x3}, {0x3}, {0x4}, {0x4, 0x7}, {0x0, 0x4}, {0x1, 0x4}, {0x3, 0x4}, {0x7, 0x2}, {0x7, 0x1}, {0x7, 0x6}, {0x7, 0x4}, {0x3, 0xa}, {0x1}, {0x0, 0x5}, {0x5, 0x2}, {0x5, 0x4}, {0x3, 0x6}, {0x3, 0xa}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_6GHZ={0xc4, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x1, 0x6}, {0x7, 0x4}, {0x4, 0x9}, {0x1, 0x5}, {0x5, 0x3}, {0x7, 0x5}, {0x5, 0x4}, {0x0, 0x5}, {0x6, 0x7}, {0x2, 0x8}, {0x1}, {0x7, 0x8}, {0x5, 0x3}, {0x0, 0x3}, {0x2, 0x3}, {0x5, 0xa}, {0x3, 0xa}, {0x0, 0x4}, {0x3, 0x2}, {0x5, 0x8}, {0x5, 0x4}, {0x1, 0x4}, {0x6, 0x8}, {0x4, 0x4}, {0x1, 0x1}, {0x0, 0x3}, {0x5, 0x7}, {0x6, 0x2}, {0x1, 0x5}, {0x2, 0xa}, {0x6, 0x5}, {0x4, 0x5}, {0x1, 0x4}, {0x5}, {0x6, 0x4}, {0x3, 0x4}, {0x2}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x9}, {0x6, 0x6}, {0x2, 0x3}, {0x7}, {0x5}, {0x5, 0x6}, {0x2, 0x7}, {0x7, 0x6}, {0x4, 0x7}, {0x0, 0x6}, {0x0, 0xa}, {0x7, 0x5}, {0x7, 0xa}, {0x5, 0xa}, {0x2}, {0x5, 0x5}, {0x4, 0x2}, {0x6, 0x5}, {0x5}, {0x5, 0x1}, {0x3, 0x6}, {0x5, 0xa}, {0x2, 0x8}, {0x3, 0xa}, {0x1, 0x8}, {0x6}, {0x4, 0x2}, {0x1, 0x2}, {0x3, 0x7}, {0x0, 0x9}, {0x7, 0x1}, {0x3, 0x1}, {0x6, 0x7}, {0x1, 0x6}, {0x4, 0x3}, {0x0, 0x7}, {0x7, 0x5}, {0x2, 0x5}]}, @NL80211_TXRATE_HT={0x44, 0x2, [{0x0, 0x3}, {0x3, 0x5}, {0x6, 0x7}, {0x7, 0x3}, {0x3, 0x6}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x6}, {0x1, 0x8}, {0x2, 0x8}, {0x0, 0x3}, {0x0, 0x3}, {0x3, 0x2}, {0x2, 0x1}, {0x2, 0x5}, {0x3, 0xa}, {0x1, 0xa}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0x2, 0x3}, {0x1, 0x5}, {0x7}, {0x5, 0x4}, {0x7, 0x5}, {0x7, 0x2}, {0x0, 0x7}, {0x1, 0x1}, {0x1}, {0x1, 0x6}, {0x6, 0x3}, {0x3, 0xa}, {0x5}, {0x3, 0x5}, {0x6, 0x4}, {0x3, 0x5}, {0x0, 0xa}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x3}, {0x2, 0x7}, {0x0, 0x1}, {0x0, 0xa}, {0x0, 0x5}, {0x6, 0x5}, {0x2, 0x4}, {0x4, 0x3}, {}, {0x5, 0x3}, {0x5, 0x3}, {0x6, 0x6}, {0x2, 0x3}, {0x1, 0x1}, {0x3, 0x8}, {0x4, 0x3}, {0x1, 0x8}, {0x2}, {0x1, 0x2}, {0x6, 0x6}, {0x1, 0x5}, {0x1, 0x2}, {0x7, 0x5}, {}]}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x0, 0x60, 0x1, 0x4, 0x24, 0x3, 0x3, 0xc, 0x1b, 0xb, 0x12, 0x4, 0x5, 0x6c, 0x1, 0x2, 0x24, 0x16, 0x16, 0x16]}]}, @NL80211_BAND_2GHZ={0x40, 0x0, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xd86, 0xffff, 0x10, 0x4, 0x9, 0x3, 0x5, 0x2]}}, @NL80211_TXRATE_LEGACY={0x13, 0x1, [0x3, 0x60, 0x16, 0x6, 0xb, 0x18, 0x1b, 0x5, 0x5, 0x1b, 0x3, 0x0, 0x1, 0x18, 0x4]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0x1936, 0x5, 0x80, 0x5, 0x0, 0xba, 0x1]}}]}]}]}, 0xa7c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40081) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="f1f07cb7ff010309bd7000fedbdf25000000001400020077673100000000000000006398daa390549eea5cf88ad1c759a190349d942953c2442b7023081f4fcfebe72cd325bc4042d89bd5cdc66305685998dc92d1eb9a38a514282cb01584f682fc934435e83a841bf107eaadb000972418b2c5defb2a8c073822efe6a2698c4c"], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b19, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 181.696934ms ago: executing program 4 (id=1114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f00000001c0)=""/142) syz_open_dev$cec(&(0x7f00000004c0), 0x0, 0x80480) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd26, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="90000000100003050000000000000000ff000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 70.815956ms ago: executing program 2 (id=1115): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8b37, &(0x7f0000000000)={'wlan1\x00', @random="0200"}) 736.839µs ago: executing program 2 (id=1116): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="e26248", 0x3}], 0x1}, 0x44040) 0s ago: executing program 4 (id=1117): syz_usb_connect$uac2(0x6, 0xe2, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd0, 0x3, 0x1, 0xe, 0x20, 0x1, {0x8, 0xb, 0x1, 0x1, 0x1, 0x3, 0x20, 0x9}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfc3, 0x1, 0x27, 0x10}, [@selector_unit={0xd, 0x24, 0xb, 0x9b, 0x8, "815de20b9604066a"}, @processing_unit={0x11, 0x24, 0x8, 0x2, 0x3, [0x0, 0x0, 0x0, 0xb89ed5633801add2, 0x0, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x4, 0x1, 0x1, 0xed, "17", "111a"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x8}, @as_header={0x10, 0x24, 0x1, 0xf8, 0x4, 0x0, 0x5, 0x5, 0x7, 0xdb}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x0, 0x1a, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x4, 0x4, 0x6, 0x2}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x4, 0xed3c, 0xf7, "637dafe4ba"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x81, 0xe, 0x5, {0x8, 0x25, 0x1, 0x0, 0x3, 0xa, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3}]}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xb0, 0xf7, 0x66, {0x8, 0x25, 0x1, 0x80, 0x14, 0xfb, 0x100}}}}}}}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x3, 0x4, 0x2, 0x8, 0xc}, 0xc, &(0x7f0000000140)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0x8, 0x6}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4}}]}) r0 = syz_open_dev$audion(&(0x7f0000000200), 0xf0, 0x20040) syz_usb_connect$cdc_ncm(0x0, 0x70, &(0x7f0000000240)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0x0, 0x20, 0x8, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "bc6f"}, {0x5, 0x24, 0x0, 0x2b8}, {0xd, 0x24, 0xf, 0x1, 0xff, 0x2, 0xfc0, 0x6}, {0x6, 0x24, 0x1a, 0xfcb, 0x1}}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x6, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xa, 0x5, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x7, 0x2, 0xf}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x201, 0xff, 0x4, 0xb5, 0x20, 0x20}, 0x31, &(0x7f0000000300)={0x5, 0xf, 0x31, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0x3, 0xff00, 0x4}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x4ab5, 0xf00f, 0x1, [0x0, 0x30, 0xc030, 0xff0000, 0xc000]}]}, 0x4, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x439}}, {0x8c, &(0x7f00000003c0)=@string={0x8c, 0x3, "d0125dce880278133eddcedb429d75f6d118b5398a7629a552d5051562b97f1126623e156f1cd6c46ac04c6882696fb22cb0a5933eb8be2208c6f63ce53525a2e983a49fded8a34a75387a279e5bd9105e1815d3bb5658eda5269b2456ec45c0f206f9af7dddf9a5425d36f6030be940eb3a08b6660bd369948bd79d7f7b7a724d105902b63b6aae81d6"}}, {0xaf, &(0x7f0000000480)=@string={0xaf, 0x3, "ce04dc6faa524aa08d6c502dcb8d00ccdaad622fe5a9159a2efe1d34533c252392c3841fb7cafed7478d4ea388876082fab174170a0237d4a5a15ee0b47d0a03c94570a6121a2a2e29e83749d3dfd58349d2dd7a7d33ddac0df3e776b37eb0b9f92b2efd21bd52441a3ce7505bbca45516ef62607ac970ac7bf54ce2a9c8e1fd620476eaf07b40cde16f87b0cac4085c21ac459c7f5eca8f4d52a3a3ed6b7436d1e96ed8213ca1c90dcefbc7c0"}}]}) syz_usb_connect$uac3(0x4, 0x123, &(0x7f00000005c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x111, 0x3, 0x1, 0xf4, 0x20, 0x41, {0x8, 0xb, 0x2, 0x0, 0x1, 0x0, 0x30, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x4c, 0x2}, [@input_terminal={0x14, 0x24, 0x2, 0x6, 0x405, 0x1, 0xd, 0x6f02, 0x2, 0xfff, 0x356, 0x80}, @extension_unit={0x19, 0x24, 0xa, 0x2, 0x2, [0x0, 0x0, 0x3, 0x3, 0x3]}, @mixer_unit={0x5, 0x24, 0x5, 0x1, 0xc0}, @mixer_unit={0x5, 0x24, 0x5, 0x3, 0x7}, @multiply_unit={0xb, 0x24, 0xd, 0x0, 0x0, 0x3, 0x401}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xf5, 0x3, 0x51, 0x7f, "946a94"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xe8, 0x3, 0x10, 0x3, "5b95", "f3"}, @format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x9, 0x1000, 0x1, "5a005c5425bfedd7c3"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x18, 0x7f, 0x81, 0xa0, 0x6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x60}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x8a, 0x4, {0xa, 0x25, 0x25, 0x8, 0x4, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x10}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x9, 0x80, 0x7, 0xd, 0x8}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9f4, 0x8, 0x2, 0x4}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xf}, @format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xfff7, 0x2, 0x80, "74e9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x10, 0x3, 0x3, {0xa, 0x25, 0x25, 0x0, 0x33, 0xfd5c}}}}}}}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x201, 0x7, 0x5, 0x3, 0x20, 0x1}, 0x21, &(0x7f0000000740)={0x5, 0xf, 0x21, 0x5, [@generic={0x4, 0x10, 0xa, '1'}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x2, 0x37, 0xfb, 0x1, 0xd71f, 0x9}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x1, 0x4}, @ptm_cap={0x3}]}, 0x2, [{0x4, &(0x7f0000000780)=@lang_id={0x4, 0x3, 0x44b}}, {0x26, &(0x7f00000007c0)=@string={0x26, 0x3, "16ede288511045a9a8772ccc49ff9f7aaae936d26c9dabbc7b067f6d66c74163246e0ec8"}}]}) close_range(r0, r0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000840), 0x3, 0x101000) syz_usb_connect(0xa, 0x1ad, &(0x7f0000000880)={{0x12, 0x1, 0x0, 0x3c, 0x44, 0x3c, 0x10, 0x2304, 0x22c, 0xdcbe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x19b, 0x1, 0xfd, 0x8, 0x40, 0xa6, "", [{{0x9, 0x4, 0x8d, 0x1, 0x3, 0x9a, 0x66, 0x41, 0x8, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xe}, {0xd, 0x24, 0xf, 0x1, 0xeb, 0x3, 0x6c05, 0x8}, [@mbim={0xc, 0x24, 0x1b, 0x1, 0x7, 0x3, 0xa, 0x6, 0x31}, @acm={0x4, 0x24, 0x2, 0x2}, @ncm={0x6, 0x24, 0x1a, 0x3c0, 0x1}, @dmm={0x7, 0x24, 0x14, 0x8001}, @mdlm={0x15}]}, @cdc_ecm={{0x7, 0x24, 0x6, 0x0, 0x0, "d611"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x4, 0x8, 0x9}}], [{{0x9, 0x5, 0x3, 0x3, 0x200, 0x4, 0xdf, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xac92}]}}, {{0x9, 0x5, 0x8, 0x2, 0x400, 0x84, 0x0, 0xdf, [@generic={0x12, 0x24, "575d8991fe1a874d7eac1a15005db8fe"}, @generic={0x58, 0x9, "3f3a0929ed7caf9e560e1acd267f358401b34b484c3d4fcdddb47c032bb4da951a4b1b0cbfe254842c09b1d8165254d2d54d5578635a6816a27fa988b6efe47bb46c53266974c3e61730513239b316b58b185e230fe1"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x40, 0x7f, 0x84, 0xf, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xaf, 0x8}, @generic={0x8d, 0x10, "bf4bd24349b3e324d95ebe01b1f8fb2ac9abd30bc0184bab5addc3cd8c33394a1520d29a811e99209c1842964fa2ec5e057a7df5e656cc4d20fe12d47f7135e08022078d28578b57505d0f3243e012adc98848b2ebe488a37b52b5b41e5232185f2e1e4914e4d1cd11d55f89bd0cba9b2cea6a1badbcd0998ef7e9baac107ce2be477ab092c1b0c880c00f"}]}}]}}]}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f0000000a40)={0xa, 0x6, 0x310, 0x6, 0xfa, 0x3, 0xff, 0x81}, 0x5, &(0x7f0000000a80)={0x5, 0xf, 0x5}}) readv(r0, &(0x7f0000000d80)=[{&(0x7f0000000b00)=""/109, 0x6d}, {&(0x7f0000000b80)=""/120, 0x78}, {&(0x7f0000000c00)=""/3, 0x3}, {&(0x7f0000000c40)=""/129, 0x81}, {&(0x7f0000000d00)=""/106, 0x6a}], 0x5) write$binfmt_register(r0, &(0x7f0000000e00)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x1, 0x3a, '^\xfd\x00&^\\\x00', 0x3a, ')[$^/', 0x3a, './file0', 0x3a, [0x43, 0x43, 0x5, 0x46, 0x46]}, 0x38) write$UHID_CREATE(r1, &(0x7f0000000e80)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000e40)=""/30, 0x1e, 0x46, 0x1, 0x9, 0x8, 0x3}}, 0x120) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000fc0)={'pimreg\x00', 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000001100)={&(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000001080)=[0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x4, 0x3, 0x8}) ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000001140)={r3}) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000001180), &(0x7f00000011c0)=0x4) ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f0000001200)=0xfffffff9) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f00000012c0)={0x9, &(0x7f0000001240)=[{0x9, 0xf, 0xb, 0xfffffff7}, {0x0, 0x4, 0xa8}, {0x200, 0x49, 0x92, 0xffffffff}, {0x1, 0x4, 0x6, 0x8}, {0xfff8, 0x5, 0x3, 0xd}, {0x1, 0x3, 0x57, 0x400}, {0x3, 0x3, 0xfe, 0x6}, {0x5, 0x3, 0x0, 0x9}, {0x9, 0x1, 0x4}]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, 0x0, 0x10, 0x3, 0x25dfdbff, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc800}, 0x4000801) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000001440)) r5 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_FLUSH(r5, 0x0, 0x485, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f00000014c0)={0x1, 0x0, &(0x7f0000001480)=[0x0]}) lstat(&(0x7f0000001540)='./file0\x00', &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f00000017c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f0000001600)=@ipv6_delroute={0x168, 0x19, 0x200, 0x70bd26, 0x25dfdbfe, {0xa, 0x80, 0x10, 0x3, 0xfe, 0x0, 0xc8, 0x4, 0x1c00}, [@RTA_IIF={0x8, 0x3, r2}, @RTA_GATEWAY={0x14, 0x5, @private1}, @RTA_GATEWAY={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @local}}, @RTA_IIF={0x8, 0x3, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_OIF={0x8, 0x4, r2}, @RTA_UID={0x8, 0x19, r6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_IIF={0x8, 0x3, r2}, @RTA_METRICS={0xec, 0x8, 0x0, 0x1, "e73a69e76c3101fd4cbb0039432ea77999456646f35da2de9faa038c363860fc3cceff57b23ee9c7d21daf2e58b16ffaa8a812ba2668876938e5a3cd3feac46dc880f4ffdd445b61f525495a8a6ecdf7f3ab9a87dcb837a7bea8d9875aadfb6a96d66316c78f7e9fc704c3ba1bf858a7c01ace7d40ba6d3c49383bef4c81cca077089fbac38b3e95494e0d5f6a455e6ff67335c89ba4319123547a92b6ca6fb484135945c3db6bd19faa2665f3fd0696a5795c33315949d9f2009326f9f74b06d4358682aca85bd80c758319b456cf9cf941d39e8418058b79ddf2ee50241d7f60774497b6285351"}]}, 0x168}, 0x1, 0x0, 0x0, 0x4800c010}, 0x8000) ioctl$VT_ACTIVATE(r1, 0x5606, 0x6) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) sendto$inet6(r0, &(0x7f0000001800)="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", 0x1000, 0x40000, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x75, &(0x7f0000002800)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x63, 0x1, 0x1, 0x6, 0x60, 0xb, "", [{{0x9, 0x4, 0x0, 0x80, 0x2, 0x2, 0x6, 0x0, 0x8, {{0xa, 0x24, 0x6, 0x0, 0x0, "191ffae07a"}, {0x5, 0x24, 0x0, 0x13a}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x40, 0x4, 0xf8}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0x8000, 0x7, 0xd5, 0x3, 0x4}, @mbim={0xc, 0x24, 0x1b, 0x7, 0x3062, 0xd, 0x6, 0xf9b3, 0x6}, @call_mgmt={0x5, 0x24, 0x1, 0x1}, @ncm={0x6, 0x24, 0x1a, 0x7, 0xe}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0xf, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0xa8, 0xb, 0x8}}}}}]}}]}}, &(0x7f0000002b40)={0xa, &(0x7f0000002880)={0xa, 0x6, 0x110, 0x4, 0x7, 0x8, 0xc7, 0x8}, 0xf, &(0x7f00000028c0)={0x5, 0xf, 0xf, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x7, 0x2, 0x6}, @ptm_cap={0x3}]}, 0x5, [{0xd4, &(0x7f0000002900)=@string={0xd4, 0x3, "0b7282123d5d58e615b1f073d529707957faceff8cc4e7bc094d6241e33a405e2104730965defbce57941264e761e1b7f7768043edacb2d1c5544a3297b8e999e6cf152048f5982ee9eddc91c65d6146c365063b9051ab24ad865446f6c1069ace97afe9f31cf450ca967cc5cf0123f02c508281b5b1b626a16fe09ab50990cbcd73c9312c14ac19b2e5f16e1e258145dc0d638699006cede86bc44bd9598dd70b3ad25dc36b3e94c1819bd3e2110a26662f36e0cca819aeca716a646625a8a48fc5614e06af1782b6ad26b728f361614b22"}}, {0x4d, &(0x7f0000002a00)=@string={0x4d, 0x3, "0510d6fbc1793e846b50d9890ec82bd2650f1c61af23a8cd5c3cbc8de58076cacddb69ca9b2947af3f398081e2699d40dbd40c886d76e43e1aa036960f7c13e2b35247dc57dadabac3b795"}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000002ac0)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000002b00)=@lang_id={0x4, 0x3, 0x1409}}]}) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000002bc0)={0x9, 0x34a8, 0xf4}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x14, 0x0, 0x201, 0x70bd28, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x80000) kernel console output (not intermixed with test programs): text=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.681562][ T7072] block2mtd: mtd1: [/dev/loop0] erase_size = 128KiB [131072] [ 90.751210][ T42] audit: type=1400 audit(1785267299.130:522): avc: denied { read } for pid=7086 comm="syz.1.374" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 90.792784][ T7089] netlink: 20 bytes leftover after parsing attributes in process `syz.1.375'. [ 90.843992][ T7091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.376'. [ 90.897392][ T60] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 91.057440][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 91.063488][ T60] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.074949][ T60] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.083100][ T60] usb 8-1: config 0 interface 0 has no altsetting 0 [ 91.088257][ T60] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 91.097120][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.105207][ T60] usb 8-1: config 0 descriptor?? [ 91.163773][ T7101] macvlan0: entered allmulticast mode [ 91.166263][ T7101] veth1_vlan: entered allmulticast mode [ 91.170749][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz.1.379'. [ 91.225656][ T7101] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.244623][ T7098] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7098 comm=syz.1.379 [ 91.320781][ T7101] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.381964][ T7104] process 'syz.1.381' launched './file1' with NULL argv: empty string added [ 91.387742][ T42] audit: type=1400 audit(1785267299.760:523): avc: denied { execute_no_trans } for pid=7102 comm="syz.1.381" path="/130/file1" dev="tmpfs" ino=725 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 91.413048][ T7101] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.453735][ T42] audit: type=1400 audit(1785267299.830:524): avc: denied { ioctl } for pid=7107 comm="syz.1.382" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 91.454026][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 91.510402][ T7101] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.538369][ T60] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 91.538412][ T60] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 91.538424][ T60] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 91.538436][ T60] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 91.538449][ T60] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 91.539487][ T60] mcp2221 0003:04D8:00DD.0002: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 91.556107][ T7117] netlink: 20 bytes leftover after parsing attributes in process `syz.2.385'. [ 91.661561][ T13] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.686199][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.689622][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.698749][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.805144][ T7125] mac80211_hwsim hwsim2 : renamed from wlan0 [ 91.811131][ T7125] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 91.814679][ T7125] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 92.023260][ T7131] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 92.106449][ T7138] netlink: 44 bytes leftover after parsing attributes in process `syz.2.392'. [ 92.119693][ T7138] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 92.226089][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.0.394'. [ 92.377193][ T5087] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 92.539045][ T5087] usb 7-1: Using ep0 maxpacket: 16 [ 92.545771][ T5087] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 92.558063][ T5087] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 92.565315][ T5087] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.569413][ T5087] usb 7-1: Product: syz [ 92.571330][ T5087] usb 7-1: Manufacturer: syz [ 92.573389][ T5087] usb 7-1: SerialNumber: syz [ 92.584726][ T5087] usb 7-1: config 0 descriptor?? [ 92.599003][ T5087] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 92.603053][ T5087] em28xx 7-1:0.0: DVB interface 0 found: bulk [ 92.798632][ T7138] overlayfs: missing 'workdir' [ 92.826614][ T1047] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 93.219176][ T5087] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 93.666965][ T5087] em28xx 7-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 93.681016][ T5087] em28xx 7-1:0.0: board has no eeprom [ 93.757997][ T5087] em28xx 7-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 93.765552][ T5087] em28xx 7-1:0.0: dvb set to bulk mode. [ 93.777323][ T6560] em28xx 7-1:0.0: Binding DVB extension qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 93.793219][ T5087] usb 7-1: USB disconnect, device number 7 [ 93.807312][ T5087] em28xx 7-1:0.0: Disconnecting em28xx [ 93.835922][ T7177] 9pnet_virtio: no channels available for device syz [ 93.882817][ T6560] em28xx 7-1:0.0: Registering input extension [ 93.888436][ T5087] em28xx 7-1:0.0: Closing input extension [ 93.930661][ T5087] em28xx 7-1:0.0: Freeing device [ 94.118764][ T7184] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.225490][ T7193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.409'. [ 94.374127][ T7201] netlink: 28 bytes leftover after parsing attributes in process `syz.2.412'. [ 94.377848][ T7201] netlink: 'syz.2.412': attribute type 7 has an invalid length. [ 94.380367][ T7201] netlink: 'syz.2.412': attribute type 8 has an invalid length. [ 94.381427][ T5835] usb 8-1: USB disconnect, device number 8 [ 94.864415][ T7215] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7215 comm=syz.3.414 [ 94.926826][ T7219] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7219 comm=syz.3.417 [ 94.933497][ T7219] netlink: 'syz.3.417': attribute type 1 has an invalid length. [ 94.996899][ T7219] bond1: (slave bridge1): making interface the new active one [ 95.000539][ T7219] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 95.055911][ T7226] netlink: 'syz.1.420': attribute type 7 has an invalid length. [ 95.058726][ T7226] netlink: 'syz.1.420': attribute type 8 has an invalid length. [ 95.064134][ T7226] bond0: entered promiscuous mode [ 95.065738][ T7226] bond_slave_0: entered promiscuous mode [ 95.071349][ T7226] bond_slave_1: entered promiscuous mode [ 95.076611][ T7226] ip6gretap0: entered promiscuous mode [ 95.081288][ T7226] bond0: left promiscuous mode [ 95.083013][ T7226] bond_slave_0: left promiscuous mode [ 95.097159][ T7226] bond_slave_1: left promiscuous mode [ 95.104444][ T7226] ip6gretap0: left promiscuous mode [ 95.141400][ T7234] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 95.328092][ T7242] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 95.400389][ T7245] netlink: 'syz.0.425': attribute type 1 has an invalid length. [ 95.415031][ T7244] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.447545][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 95.581364][ T7254] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 95.588370][ T41] usb 6-1: device descriptor read/64, error -71 [ 95.600898][ T7250] ======================================================= [ 95.600898][ T7250] WARNING: The mand mount option has been deprecated and [ 95.600898][ T7250] and is ignored by this kernel. Remove the mand [ 95.600898][ T7250] option from the mount to silence this warning. [ 95.600898][ T7250] ======================================================= [ 95.600938][ T42] kauditd_printk_skb: 31 callbacks suppressed [ 95.600949][ T42] audit: type=1400 audit(1785267303.980:556): avc: denied { mounton } for pid=7249 comm="syz.3.427" path="/85/file1/file1/file0" dev="autofs" ino=19518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 95.716484][ T42] audit: type=1400 audit(1785267304.090:557): avc: denied { unmount } for pid=5739 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 95.815179][ T7268] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 95.847665][ T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 95.889279][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.946294][ T42] audit: type=1400 audit(1785267304.320:558): avc: denied { execute } for pid=7270 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 95.954903][ T42] audit: type=1400 audit(1785267304.330:559): avc: denied { execute_no_trans } for pid=7270 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 95.985772][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.989508][ T7272] fuse: Unknown parameter 'gd' [ 95.992713][ T41] usb 6-1: device descriptor read/64, error -71 [ 96.049814][ T5748] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.053464][ T5748] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.057444][ T7275] __nla_validate_parse: 6 callbacks suppressed [ 96.057454][ T7275] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.435'. [ 96.060301][ T5748] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.062494][ T5748] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.063469][ T7275] netlink: 24 bytes leftover after parsing attributes in process `syz.2.435'. [ 96.072790][ T5748] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.107410][ T41] usb usb6-port1: attempt power cycle [ 96.118675][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.229139][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.440997][ T13] bridge_slave_1: left allmulticast mode [ 96.443556][ T13] bridge_slave_1: left promiscuous mode [ 96.446744][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.454061][ T13] bridge_slave_0: left allmulticast mode [ 96.455988][ T13] bridge_slave_0: left promiscuous mode [ 96.457165][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 96.460486][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.477657][ T41] usb 6-1: device descriptor read/8, error -71 [ 96.606605][ T42] audit: type=1400 audit(1785267304.980:560): avc: denied { read } for pid=7288 comm="syz.0.436" name="usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.617611][ T13] bond1 (unregistering): (slave bridge1): Releasing active interface [ 96.631461][ T42] audit: type=1400 audit(1785267304.980:561): avc: denied { open } for pid=7288 comm="syz.0.436" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.639967][ T42] audit: type=1400 audit(1785267304.990:562): avc: denied { ioctl } for pid=7288 comm="syz.0.436" path="/dev/usbmon0" dev="devtmpfs" ino=738 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.647815][ T42] audit: type=1400 audit(1785267304.990:563): avc: denied { map } for pid=7288 comm="syz.0.436" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 96.659285][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.667631][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.673201][ T13] bond0 (unregistering): Released all slaves [ 96.683024][ T13] bond1 (unregistering): Released all slaves [ 96.717143][ T41] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 96.737517][ T41] usb 6-1: device descriptor read/8, error -71 [ 96.800014][ T42] audit: type=1400 audit(1785267305.180:564): avc: denied { write } for pid=7295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.808575][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.812819][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.815916][ T7273] bridge_slave_0: entered allmulticast mode [ 96.823962][ T7273] bridge_slave_0: entered promiscuous mode [ 96.827268][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.829830][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.832374][ T7273] bridge_slave_1: entered allmulticast mode [ 96.835322][ T7273] bridge_slave_1: entered promiscuous mode [ 96.847330][ T41] usb usb6-port1: unable to enumerate USB device [ 96.853786][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.858982][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.878647][ T42] audit: type=1400 audit(1785267305.260:565): avc: denied { write } for pid=7301 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.897503][ T848] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 96.908806][ T7273] team0: Port device team_slave_0 added [ 96.912247][ T7273] team0: Port device team_slave_1 added [ 96.961645][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 96.976747][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.979224][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.987497][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.996819][ T13] hsr_slave_0: left promiscuous mode [ 96.999974][ T13] hsr_slave_1: left promiscuous mode [ 97.002775][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.005964][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.010417][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.013590][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.027375][ T848] usb 5-1: device descriptor read/64, error -71 [ 97.030059][ T13] veth1_macvtap: left promiscuous mode [ 97.033332][ T13] veth0_macvtap: left promiscuous mode [ 97.035810][ T13] veth1_vlan: left promiscuous mode [ 97.038431][ T13] veth0_vlan: left promiscuous mode [ 97.240748][ T13] team0 (unregistering): Port device team_slave_1 removed [ 97.249586][ T13] team0 (unregistering): Port device team_slave_0 removed [ 97.288624][ T848] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 97.320667][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.323577][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.334460][ T7273] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.388320][ T7273] hsr_slave_0: entered promiscuous mode [ 97.391137][ T7273] hsr_slave_1: entered promiscuous mode [ 97.393997][ T7273] debugfs: 'hsr0' already exists in 'hsr' [ 97.396322][ T7273] Cannot create hsr debugfs directory [ 97.441031][ T848] usb 5-1: device descriptor read/64, error -71 [ 97.557358][ T848] usb usb5-port1: attempt power cycle [ 97.579224][ T7318] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 97.584454][ T7273] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.592678][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.596441][ T7273] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.608136][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.610925][ T7273] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.622910][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.634259][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 97.639805][ T7273] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.647789][ T7273] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.736734][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.756802][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.770975][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.774037][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.785022][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.788087][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.886130][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 97.907173][ T848] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 97.927810][ T848] usb 5-1: device descriptor read/8, error -71 [ 98.101687][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 98.154220][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.159397][ T5744] Bluetooth: hci2: command tx timeout [ 98.189965][ T848] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 98.219813][ T848] usb 5-1: device descriptor read/8, error -71 [ 98.301356][ T7382] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 98.304708][ T7381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.326861][ T7273] veth0_vlan: entered promiscuous mode [ 98.330928][ T848] usb usb5-port1: unable to enumerate USB device [ 98.338010][ T7273] veth1_vlan: entered promiscuous mode [ 98.341633][ T7389] netlink: 'syz.1.456': attribute type 1 has an invalid length. [ 98.365923][ T7389] 8021q: adding VLAN 0 to HW filter on device bond2 [ 98.394857][ T7273] veth0_macvtap: entered promiscuous mode [ 98.399823][ T7273] veth1_macvtap: entered promiscuous mode [ 98.410983][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.411815][ T7394] netlink: 'syz.1.458': attribute type 39 has an invalid length. [ 98.429061][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.442810][ T7398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.459'. [ 98.449207][ T5546] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.452230][ T5546] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.468232][ T5546] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.471190][ T5546] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.563193][ T1176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.565824][ T1176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.599813][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.604524][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.810198][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 98.813629][ C0] bridge0: topology change detected, propagating [ 98.831747][ T7424] netlink: 28 bytes leftover after parsing attributes in process `syz.1.466'. [ 98.983788][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.467'. [ 98.988823][ T7437] netlink: 36 bytes leftover after parsing attributes in process `syz.1.467'. [ 98.997316][ T7437] netlink: 'syz.1.467': attribute type 4 has an invalid length. [ 99.094254][ T7451] netlink: 20 bytes leftover after parsing attributes in process `syz.2.472'. [ 99.235580][ T7471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.478'. [ 99.331961][ T7475] overlayfs: missing 'workdir' [ 99.399799][ T7478] netlink: 12 bytes leftover after parsing attributes in process `syz.1.479'. [ 99.448698][ T34] libceph: connect (1)[c::]:6789 error -101 [ 99.453206][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 99.599738][ T7494] netlink: 20 bytes leftover after parsing attributes in process `syz.2.485'. [ 99.721408][ T34] libceph: connect (1)[c::]:6789 error -101 [ 99.728963][ T34] libceph: mon0 (1)[c::]:6789 connect error [ 99.754617][ T7500] syzkaller0: entered promiscuous mode [ 99.757058][ T7500] syzkaller0: entered allmulticast mode [ 100.132765][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.135842][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 100.149136][ T10] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 100.203407][ T7481] ceph: No mds server is up or the cluster is laggy [ 100.238002][ T5744] Bluetooth: hci2: command tx timeout [ 100.289488][ T7525] netfs: Duplicate cookie detected [ 100.293001][ T7525] netfs: O-cookie c=00000004 [fl=4000 na=0 nA=0 s=-] [ 100.295924][ T7525] netfs: O-cookie V=00000003 [9p,syz,] [ 100.298372][ T7525] netfs: O-key=[8] 'e937ac0400000000' [ 100.300575][ T7525] netfs: N-cookie c=00000005 [fl=0 na=0 nA=0 s=-] [ 100.303285][ T7525] netfs: N-cookie V=00000003 [9p,syz,] [ 100.305596][ T7525] netfs: N-key=[8] 'e937ac0400000000' [ 100.389006][ T34] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 100.424372][ T7535] syz_tun: entered allmulticast mode [ 100.442253][ T7533] syz_tun: left allmulticast mode [ 100.549021][ T34] usb 7-1: device descriptor read/64, error -71 [ 100.609456][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 100.609473][ T42] audit: type=1400 audit(1785267308.990:592): avc: denied { write } for pid=7552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.643134][ T7558] FAULT_INJECTION: forcing a failure. [ 100.643134][ T7558] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 100.649000][ T7558] CPU: 3 UID: 0 PID: 7558 Comm: syz.0.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 100.649029][ T7558] Tainted: [L]=SOFTLOCKUP [ 100.649034][ T7558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 100.649046][ T7558] Call Trace: [ 100.649066][ T7558] [ 100.649074][ T7558] dump_stack_lvl+0x100/0x190 [ 100.649118][ T7558] should_fail_ex.cold+0x5/0xa [ 100.649153][ T7558] _copy_from_user+0x2e/0xd0 [ 100.649185][ T7558] copy_msghdr_from_user+0x9f/0x4c0 [ 100.649221][ T7558] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 100.649263][ T7558] ___sys_sendmsg+0x106/0x1e0 [ 100.649294][ T7558] ? __pfx____sys_sendmsg+0x10/0x10 [ 100.649321][ T7558] ? __lock_acquire+0x49f/0x1a40 [ 100.649353][ T7558] ? get_pid_task+0x106/0x250 [ 100.649417][ T7558] __sys_sendmsg+0x160/0x210 [ 100.649442][ T7558] ? __pfx___sys_sendmsg+0x10/0x10 [ 100.649479][ T7558] do_syscall_64+0x115/0x870 [ 100.649500][ T7558] ? clear_bhb_loop+0x40/0x90 [ 100.649524][ T7558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.649544][ T7558] RIP: 0033:0x7f533159de99 [ 100.649560][ T7558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.649578][ T7558] RSP: 002b:00007f53324e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 100.649597][ T7558] RAX: ffffffffffffffda RBX: 00007f5331825fa0 RCX: 00007f533159de99 [ 100.649609][ T7558] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 100.649621][ T7558] RBP: 00007f53324e5090 R08: 0000000000000000 R09: 0000000000000000 [ 100.649632][ T7558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.649642][ T7558] R13: 00007f5331826038 R14: 00007f5331825fa0 R15: 00007ffc091ce2c8 [ 100.649673][ T7558] [ 100.670081][ T42] audit: type=1400 audit(1785267309.050:593): avc: denied { write } for pid=7559 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.789263][ T42] audit: type=1400 audit(1785267309.160:594): avc: denied { write } for pid=7563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.797141][ T34] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 100.855409][ T42] audit: type=1400 audit(1785267309.230:595): avc: denied { write } for pid=7569 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.935803][ T42] audit: type=1400 audit(1785267309.310:596): avc: denied { write } for pid=7572 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 100.937450][ T34] usb 7-1: device descriptor read/64, error -71 [ 100.993283][ T42] audit: type=1400 audit(1785267309.370:597): avc: denied { write } for pid=7578 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.016593][ T42] audit: type=1400 audit(1785267309.390:598): avc: denied { connect } for pid=7582 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.077474][ T34] usb usb7-port1: attempt power cycle [ 101.081117][ T42] audit: type=1400 audit(1785267309.460:599): avc: denied { write } for pid=7588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.136700][ T42] audit: type=1400 audit(1785267309.510:600): avc: denied { write } for pid=7591 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.216964][ T7594] syz_tun: entered allmulticast mode [ 101.242857][ T42] audit: type=1400 audit(1785267309.620:601): avc: denied { write } for pid=7597 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.251166][ T7592] syz_tun: left allmulticast mode [ 101.297251][ T7605] FAULT_INJECTION: forcing a failure. [ 101.297251][ T7605] name failslab, interval 1, probability 0, space 0, times 1 [ 101.308000][ T7605] CPU: 3 UID: 0 PID: 7605 Comm: syz.0.517 Tainted: G L syzkaller #0 PREEMPT(full) [ 101.308021][ T7605] Tainted: [L]=SOFTLOCKUP [ 101.308024][ T7605] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 101.308031][ T7605] Call Trace: [ 101.308035][ T7605] [ 101.308040][ T7605] dump_stack_lvl+0x100/0x190 [ 101.308058][ T7605] should_fail_ex.cold+0x5/0xa [ 101.308073][ T7605] should_failslab+0xc2/0x120 [ 101.308099][ T7605] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 101.308119][ T7605] ? __alloc_skb+0x5b7/0x710 [ 101.308131][ T7605] ? __alloc_skb+0x140/0x710 [ 101.308146][ T7605] __alloc_skb+0x140/0x710 [ 101.308157][ T7605] ? __alloc_skb+0x5b7/0x710 [ 101.308170][ T7605] ? __pfx___alloc_skb+0x10/0x10 [ 101.308186][ T7605] netlink_alloc_large_skb+0x69/0x150 [ 101.308198][ T7605] netlink_sendmsg+0x680/0xda0 [ 101.308211][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.308224][ T7605] ? selinux_socket_sendmsg+0x198/0x2f0 [ 101.308250][ T7605] ____sys_sendmsg+0xa4d/0xbe0 [ 101.308273][ T7605] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.308289][ T7605] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.308312][ T7605] ___sys_sendmsg+0x190/0x1e0 [ 101.308331][ T7605] ? __pfx____sys_sendmsg+0x10/0x10 [ 101.308348][ T7605] ? __lock_acquire+0x49f/0x1a40 [ 101.308362][ T7605] ? get_pid_task+0x106/0x250 [ 101.308394][ T7605] __sys_sendmsg+0x160/0x210 [ 101.308409][ T7605] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.308430][ T7605] do_syscall_64+0x115/0x870 [ 101.308442][ T7605] ? clear_bhb_loop+0x40/0x90 [ 101.308456][ T7605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.308468][ T7605] RIP: 0033:0x7f533159de99 [ 101.308477][ T7605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.308487][ T7605] RSP: 002b:00007f53324e5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.308498][ T7605] RAX: ffffffffffffffda RBX: 00007f5331825fa0 RCX: 00007f533159de99 [ 101.308505][ T7605] RDX: 0000000002000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 101.308516][ T7605] RBP: 00007f53324e5090 R08: 0000000000000000 R09: 0000000000000000 [ 101.308522][ T7605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.308528][ T7605] R13: 00007f5331826038 R14: 00007f5331825fa0 R15: 00007ffc091ce2c8 [ 101.308542][ T7605] [ 101.447390][ T34] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 101.467755][ T34] usb 7-1: device descriptor read/8, error -71 [ 101.496841][ T7617] __nla_validate_parse: 1 callbacks suppressed [ 101.496856][ T7617] netlink: 24 bytes leftover after parsing attributes in process `syz.4.520'. [ 101.571546][ T7628] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 101.576073][ T7627] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 101.718757][ T34] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 101.747790][ T34] usb 7-1: device descriptor read/8, error -71 [ 101.752566][ T7647] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7647 comm=syz.0.525 [ 101.867516][ T34] usb usb7-port1: unable to enumerate USB device [ 102.137986][ T7678] trusted_key: encrypted_key: insufficient parameters specified [ 102.212286][ T7682] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7682 comm=syz.4.534 [ 102.245965][ T7684] capability: warning: `syz.1.535' uses deprecated v2 capabilities in a way that may be insecure [ 102.288193][ T7688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.537'. [ 102.317861][ T5748] Bluetooth: hci2: command tx timeout [ 102.398262][ T5744] Bluetooth: hci2: Opcode 0x206a failed: -110 [ 102.406441][ T7688] kvm: pic: non byte write [ 102.707096][ T10] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 102.754441][ T7712] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7712 comm=syz.0.545 [ 102.806721][ T7716] kAFS: No cell specified [ 102.839485][ T7716] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 102.858787][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 102.862522][ T10] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 102.866334][ T10] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 102.871851][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 102.875639][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 102.879160][ T10] usb 6-1: Product: syz [ 102.880805][ T10] usb 6-1: Manufacturer: syz [ 102.886804][ T7701] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 102.892396][ T10] usb_debug 6-1:1.0: debug converter detected [ 102.907328][ T10] usb 6-1: debug converter now attached to ttyUSB0 [ 102.973523][ T7726] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'. [ 102.978179][ T7726] netlink: 'syz.0.550': attribute type 7 has an invalid length. [ 102.981433][ T7726] netlink: 'syz.0.550': attribute type 8 has an invalid length. [ 102.984674][ T7726] netlink: 4 bytes leftover after parsing attributes in process `syz.0.550'. [ 102.992085][ T7726] bond0: entered promiscuous mode [ 102.993803][ T7726] bond_slave_0: entered promiscuous mode [ 102.995849][ T7726] bond_slave_1: entered promiscuous mode [ 103.000415][ T7726] ip6gretap0: entered promiscuous mode [ 103.003060][ T7726] bond0: left promiscuous mode [ 103.004674][ T7726] bond_slave_0: left promiscuous mode [ 103.006557][ T7726] bond_slave_1: left promiscuous mode [ 103.009531][ T7726] ip6gretap0: left promiscuous mode [ 103.107555][ T5835] usb 6-1: USB disconnect, device number 8 [ 103.144905][ T5835] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 103.148304][ T5835] usb_debug 6-1:1.0: device disconnected [ 103.242257][ T7735] netlink: 20 bytes leftover after parsing attributes in process `syz.4.555'. [ 103.268888][ T7737] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7737 comm=syz.2.554 [ 103.438237][ T6560] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 103.439716][ T7739] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.476838][ T7747] overlay: filesystem on ./bus not supported as upperdir [ 103.494519][ T7749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.560'. [ 103.499582][ T7749] netlink: 'syz.4.560': attribute type 7 has an invalid length. [ 103.503701][ T7749] netlink: 'syz.4.560': attribute type 8 has an invalid length. [ 103.506460][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.560'. [ 103.514391][ T7749] bond0: entered promiscuous mode [ 103.516092][ T7749] bond_slave_0: entered promiscuous mode [ 103.519328][ T7749] bond_slave_1: entered promiscuous mode [ 103.523508][ T7749] ip6gretap0: entered promiscuous mode [ 103.528162][ T7749] bond0: left promiscuous mode [ 103.529771][ T7749] bond_slave_0: left promiscuous mode [ 103.531704][ T7749] bond_slave_1: left promiscuous mode [ 103.534289][ T7749] ip6gretap0: left promiscuous mode [ 103.572680][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.575719][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.593590][ T6560] usb 5-1: Using ep0 maxpacket: 32 [ 103.600783][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.600909][ T6560] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 103.603810][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 103.606416][ T6560] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 103.612163][ T6560] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 103.615007][ T6560] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 103.624094][ T6560] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 103.628326][ T6560] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 103.632511][ T6560] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 103.635368][ T6560] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.643136][ T6560] usb 5-1: config 0 descriptor?? [ 103.664538][ T7755] Bluetooth: MGMT ver 1.23 [ 103.851128][ T6560] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 103.947110][ T34] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 104.046055][ T7763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.565'. [ 104.090514][ T41] usb 5-1: USB disconnect, device number 7 [ 104.100171][ T41] usblp0: removed [ 104.118249][ T7765] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7765 comm=syz.4.566 [ 104.127166][ T34] usb 7-1: Using ep0 maxpacket: 8 [ 104.130024][ T34] usb 7-1: config 0 has an invalid interface number: 186 but max is 0 [ 104.132976][ T34] usb 7-1: config 0 has no interface number 0 [ 104.135027][ T34] usb 7-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 104.139119][ T34] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 104.143501][ T34] usb 7-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 104.148824][ T34] usb 7-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 104.153242][ T34] usb 7-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.162740][ T34] usb 7-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 104.165597][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.169029][ T34] usb 7-1: Product: syz [ 104.170922][ T34] usb 7-1: Manufacturer: syz [ 104.172941][ T34] usb 7-1: SerialNumber: syz [ 104.177732][ T34] usb 7-1: config 0 descriptor?? [ 104.383227][ T34] iowarrior 7-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 104.397564][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 104.498335][ T7774] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 104.591853][ T7732] syz.0.552 (7732) used greatest stack depth: 19120 bytes left [ 104.630226][ T7780] netlink: 28 bytes leftover after parsing attributes in process `syz.0.572'. [ 104.634284][ T7780] netlink: 'syz.0.572': attribute type 7 has an invalid length. [ 104.639135][ T7780] netlink: 'syz.0.572': attribute type 8 has an invalid length. [ 104.642586][ T7780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.572'. [ 104.655351][ T7777] kvm: MWAIT instruction emulated as NOP! [ 104.664307][ T7780] bond0: entered promiscuous mode [ 104.666655][ T7780] bond_slave_0: entered promiscuous mode [ 104.670187][ T7780] bond_slave_1: entered promiscuous mode [ 104.674697][ T7780] ip6gretap0: entered promiscuous mode [ 104.678816][ T7780] bond0: left promiscuous mode [ 104.681340][ T7780] bond_slave_0: left promiscuous mode [ 104.684086][ T7780] bond_slave_1: left promiscuous mode [ 104.690747][ T7780] ip6gretap0: left promiscuous mode [ 105.145631][ T7797] i2c i2c-0: delete_device: Extra parameters [ 105.215041][ T7803] random: crng reseeded on system resumption [ 105.225998][ T7803] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.229262][ T7805] netlink: 'syz.4.580': attribute type 20 has an invalid length. [ 105.239327][ T5834] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.241623][ T7805] netlink: 'syz.4.580': attribute type 20 has an invalid length. [ 105.242189][ T5834] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.249542][ T5834] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.254491][ T5834] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.270571][ T7807] netlink: 'syz.0.581': attribute type 7 has an invalid length. [ 105.272982][ T7807] netlink: 'syz.0.581': attribute type 8 has an invalid length. [ 105.280413][ T7807] bond0: entered promiscuous mode [ 105.282109][ T7807] bond_slave_0: entered promiscuous mode [ 105.284000][ T7807] bond_slave_1: entered promiscuous mode [ 105.288902][ T7807] ip6gretap0: entered promiscuous mode [ 105.294996][ T7807] bond0: left promiscuous mode [ 105.296790][ T7807] bond_slave_0: left promiscuous mode [ 105.299147][ T7807] bond_slave_1: left promiscuous mode [ 105.302063][ T7807] ip6gretap0: left promiscuous mode [ 105.385421][ T7812] erspan1: entered allmulticast mode [ 105.534205][ T7827] fuse: Unknown parameter '0x0000000000000006' [ 105.537468][ T7827] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 105.603571][ T7835] bond0: entered promiscuous mode [ 105.605293][ T7835] bond_slave_0: entered promiscuous mode [ 105.607791][ T7835] bond_slave_1: entered promiscuous mode [ 105.610867][ T7835] ip6gretap0: entered promiscuous mode [ 105.614121][ T7835] bond0: left promiscuous mode [ 105.615693][ T7835] bond_slave_0: left promiscuous mode [ 105.617562][ T7835] bond_slave_1: left promiscuous mode [ 105.622728][ T7835] ip6gretap0: left promiscuous mode [ 105.640286][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 105.640299][ T42] audit: type=1400 audit(105.569:642): avc: denied { connect } for pid=7836 comm="syz.1.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 105.804470][ T7847] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 105.817623][ T7855] fuse: Bad value for 'fd' [ 105.854729][ T7858] xt_hashlimit: size too large, truncated to 1048576 [ 105.855332][ T7857] binder: 7856:7857 ioctl 891c 2000000001c0 returned -22 [ 105.860470][ T7857] binder: 7856:7857 ioctl 89e0 200000000180 returned -22 [ 105.938129][ T7858] 9pnet_virtio: no channels available for device syz [ 106.057210][ T6560] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 106.219324][ T6560] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 106.222859][ T6560] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 106.227090][ T6560] usb 9-1: config 0 interface 0 has no altsetting 0 [ 106.231969][ T6560] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 106.235776][ T6560] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 106.239580][ T6560] usb 9-1: Product: syz [ 106.241378][ T6560] usb 9-1: Manufacturer: syz [ 106.243365][ T6560] usb 9-1: SerialNumber: syz [ 106.251103][ T6560] usb 9-1: config 0 descriptor?? [ 106.256856][ T6560] hub 9-1:0.0: bad descriptor, ignoring hub [ 106.259603][ T6560] hub 9-1:0.0: probe with driver hub failed with error -5 [ 106.270481][ T6560] usb 9-1: selecting invalid altsetting 0 [ 106.437179][ T42] audit: type=1400 audit(106.369:643): avc: denied { ioctl } for pid=7864 comm="syz.0.604" path="socket:[22996]" dev="sockfs" ino=22996 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 106.477535][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 106.508194][ T7869] __nla_validate_parse: 12 callbacks suppressed [ 106.508207][ T7869] netlink: 20 bytes leftover after parsing attributes in process `syz.0.606'. [ 106.704361][ T41] usb 7-1: USB disconnect, device number 12 [ 106.736125][ T7882] netlink: 28 bytes leftover after parsing attributes in process `syz.2.610'. [ 106.740556][ T7882] netlink: 4 bytes leftover after parsing attributes in process `syz.2.610'. [ 106.762744][ T7882] bond0: entered promiscuous mode [ 106.764448][ T7882] bond_slave_0: entered promiscuous mode [ 106.766387][ T7882] bond_slave_1: entered promiscuous mode [ 106.769552][ T7882] ip6gretap0: entered promiscuous mode [ 106.774878][ T7882] bond0: left promiscuous mode [ 106.776430][ T7882] bond_slave_0: left promiscuous mode [ 106.778515][ T7882] bond_slave_1: left promiscuous mode [ 106.784424][ T7882] ip6gretap0: left promiscuous mode [ 106.875621][ T7897] netlink: 20 bytes leftover after parsing attributes in process `syz.2.616'. [ 106.902303][ T7855] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 106.970670][ T7911] ceph: Path missing in source [ 107.014619][ T7918] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7918 comm=syz.0.621 [ 107.024474][ T7919] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 107.048623][ T7923] netlink: 42 bytes leftover after parsing attributes in process `syz.1.613'. [ 107.068357][ T7916] ntfs3(sr0): Primary boot signature is not NTFS. [ 107.071447][ T7916] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 107.072574][ T7855] usb 9-1: device firmware changed [ 107.078364][ T7916] openvswitch: netlink: Actions may not be safe on all matching packets [ 107.080825][ T6560] usb 9-1: USB disconnect, device number 2 [ 107.082492][ T7916] netlink: 27 bytes leftover after parsing attributes in process `syz.2.622'. [ 107.180690][ T7931] netlink: 28 bytes leftover after parsing attributes in process `syz.2.625'. [ 107.184543][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.2.625'. [ 107.191601][ T7931] bond0: entered promiscuous mode [ 107.193226][ T7931] bond_slave_0: entered promiscuous mode [ 107.195109][ T7931] bond_slave_1: entered promiscuous mode [ 107.197681][ T7931] ip6gretap0: entered promiscuous mode [ 107.200176][ T7931] bond0: left promiscuous mode [ 107.201701][ T7931] bond_slave_0: left promiscuous mode [ 107.203474][ T7931] bond_slave_1: left promiscuous mode [ 107.206205][ T7931] ip6gretap0: left promiscuous mode [ 107.267216][ T6560] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 107.304338][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.0.627'. [ 107.352314][ T7942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.628'. [ 107.414581][ T7942] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 107.429369][ T6560] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 107.432825][ T6560] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 107.436761][ T6560] usb 9-1: config 0 interface 0 has no altsetting 0 [ 107.444398][ T6560] usb 9-1: string descriptor 0 read error: -22 [ 107.451283][ T6560] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 107.455506][ T6560] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 107.475889][ T6560] usb 9-1: config 0 descriptor?? [ 107.480075][ T6560] hub 9-1:0.0: bad descriptor, ignoring hub [ 107.487079][ T6560] hub 9-1:0.0: probe with driver hub failed with error -5 [ 107.493764][ T6560] usb 9-1: selecting invalid altsetting 0 [ 107.556762][ T7959] bond0: entered promiscuous mode [ 107.565704][ T7959] bond_slave_0: entered promiscuous mode [ 107.568119][ T7959] bond_slave_1: entered promiscuous mode [ 107.571062][ T7959] ip6gretap0: entered promiscuous mode [ 107.573536][ T7959] bond0: left promiscuous mode [ 107.575130][ T7959] bond_slave_0: left promiscuous mode [ 107.577060][ T7959] bond_slave_1: left promiscuous mode [ 107.579608][ T7959] ip6gretap0: left promiscuous mode [ 107.694104][ T42] audit: type=1804 audit(107.609:644): pid=7855 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.601" name="/newroot/43/file0" dev="tmpfs" ino=240 res=1 errno=0 [ 107.828001][ T6560] usb 9-1: USB disconnect, device number 3 [ 107.918819][ T7972] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=7972 comm=syz.2.641 [ 108.045250][ T5546] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 108.141739][ T7993] validate_nla: 10 callbacks suppressed [ 108.141750][ T7993] netlink: 'syz.0.647': attribute type 2 has an invalid length. [ 108.146684][ T7993] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 108.185866][ T42] audit: type=1400 audit(108.109:645): avc: denied { bind } for pid=7992 comm="syz.0.647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 108.193040][ T7993] netlink: 'syz.0.647': attribute type 2 has an invalid length. [ 108.196230][ T7993] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 108.251059][ T8001] syz_tun: entered allmulticast mode [ 108.261495][ T42] audit: type=1400 audit(108.189:646): avc: denied { bind } for pid=8000 comm="syz.4.648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 108.314379][ T8001] tipc: Failed to remove unknown binding: 66,0,0/0:5516599/5516600 [ 108.320378][ T8001] tipc: Failed to remove unknown binding: 66,0,0/0:5516599/5516600 [ 108.326370][ T8000] syz_tun: left allmulticast mode [ 108.359726][ T8008] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.334987][ T42] audit: type=1400 audit(109.259:647): avc: denied { write } for pid=8012 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.385055][ T42] audit: type=1400 audit(109.309:648): avc: denied { write } for pid=8015 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.462852][ T42] audit: type=1400 audit(109.389:649): avc: denied { write } for pid=8018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.506729][ T42] audit: type=1400 audit(109.429:650): avc: denied { write } for pid=8021 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.574920][ T42] audit: type=1400 audit(109.499:651): avc: denied { write } for pid=8024 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.197883][ T8042] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8042 comm=syz.0.651 [ 110.947725][ T7976] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 110.956511][ T8008] netlink: 'syz.4.649': attribute type 2 has an invalid length. [ 111.043733][ T8047] overlayfs: failed to resolve './file3': -2 [ 111.046726][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 111.046740][ T42] audit: type=1400 audit(110.969:655): avc: denied { ioctl } for pid=8051 comm="syz.1.656" path="/187/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 111.059593][ T8053] base or size exceeds the MTRR width [ 111.131211][ T42] audit: type=1400 audit(111.059:656): avc: denied { search } for pid=8056 comm="syz.0.657" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.138414][ T42] audit: type=1400 audit(111.059:657): avc: denied { search } for pid=8056 comm="syz.0.657" name="per_cpu" dev="tracefs" ino=1092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.148885][ T42] audit: type=1400 audit(111.059:658): avc: denied { search } for pid=8056 comm="syz.0.657" name="cpu0" dev="tracefs" ino=1093 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 111.186353][ T42] audit: type=1400 audit(111.109:659): avc: denied { checkpoint_restore } for pid=8067 comm="syz.2.662" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.229038][ T8076] program syz.0.664 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.258556][ T5546] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 111.276161][ T42] audit: type=1400 audit(111.199:660): avc: denied { sqpoll } for pid=8081 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 111.283891][ T42] audit: type=1400 audit(111.199:661): avc: denied { create } for pid=8081 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 111.291709][ T42] audit: type=1400 audit(111.209:662): avc: denied { connect } for pid=8081 comm="syz.0.665" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 111.299754][ T42] audit: type=1400 audit(111.209:663): avc: denied { name_connect } for pid=8081 comm="syz.0.665" dest=20004 scontext=system_u:object_r:hugetlbfs_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 111.349981][ T8090] openvswitch: netlink: Flow key attr not present in new flow. [ 112.127981][ T8111] __nla_validate_parse: 5 callbacks suppressed [ 112.127998][ T8111] netlink: 20 bytes leftover after parsing attributes in process `syz.2.673'. [ 112.625147][ T8125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.678'. [ 112.629097][ T8125] netlink: 'syz.2.678': attribute type 7 has an invalid length. [ 112.631697][ T8125] netlink: 'syz.2.678': attribute type 8 has an invalid length. [ 112.634843][ T8125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.678'. [ 112.641689][ T8125] bond0: entered promiscuous mode [ 112.643537][ T8125] bond_slave_0: entered promiscuous mode [ 112.646028][ T8125] bond_slave_1: entered promiscuous mode [ 112.651961][ T8125] ip6gretap0: entered promiscuous mode [ 112.655048][ T8125] bond0: left promiscuous mode [ 112.656601][ T8125] bond_slave_0: left promiscuous mode [ 112.658424][ T8125] bond_slave_1: left promiscuous mode [ 112.661219][ T8125] ip6gretap0: left promiscuous mode [ 112.765506][ T8128] IPVS: sync thread started: state = BACKUP, mcast_ifn = geneve1, syncid = 2, id = 0 [ 114.182951][ T8070] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 114.323509][ T42] audit: type=1400 audit(114.249:664): avc: denied { read append } for pid=8142 comm="syz.4.684" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 114.374738][ T8150] netlink: 20 bytes leftover after parsing attributes in process `syz.1.686'. [ 114.450065][ T8153] FAULT_INJECTION: forcing a failure. [ 114.450065][ T8153] name failslab, interval 1, probability 0, space 0, times 0 [ 114.456180][ T8153] CPU: 0 UID: 0 PID: 8153 Comm: syz.1.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 114.456199][ T8153] Tainted: [L]=SOFTLOCKUP [ 114.456203][ T8153] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 114.456210][ T8153] Call Trace: [ 114.456236][ T8153] [ 114.456241][ T8153] dump_stack_lvl+0x100/0x190 [ 114.456274][ T8153] should_fail_ex.cold+0x5/0xa [ 114.456295][ T8153] should_failslab+0xc2/0x120 [ 114.456317][ T8153] __kmalloc_flags_noprof+0x122/0x8b0 [ 114.456347][ T8153] ? __lock_acquire+0x49f/0x1a40 [ 114.456373][ T8153] ? alloc_slab_obj_exts+0x5a/0x160 [ 114.456408][ T8153] alloc_slab_obj_exts+0x5a/0x160 [ 114.456429][ T8153] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 114.456472][ T8153] ? kasan_unpoison+0x27/0x60 [ 114.456491][ T8153] __kvmalloc_node_noprof+0x73d/0x970 [ 114.456515][ T8153] ? seq_read_iter+0x819/0x1270 [ 114.456548][ T8153] seq_read_iter+0x819/0x1270 [ 114.456575][ T8153] seq_read+0x344/0x4d0 [ 114.456593][ T8153] ? __pfx_seq_read+0x10/0x10 [ 114.456609][ T8153] ? lock_acquire+0x1b9/0x370 [ 114.456628][ T8153] ? avc_policy_seqno+0x9/0x20 [ 114.456641][ T8153] ? selinux_file_permission+0x8f/0x6d0 [ 114.456663][ T8153] ? rw_verify_area+0xce/0x6d0 [ 114.456678][ T8153] ? __pfx_seq_read+0x10/0x10 [ 114.456689][ T8153] vfs_read+0x1e4/0xb40 [ 114.456709][ T8153] ? __pfx_vfs_read+0x10/0x10 [ 114.456725][ T8153] ? __fget_files+0x215/0x3d0 [ 114.456740][ T8153] ? __fget_files+0x21f/0x3d0 [ 114.456756][ T8153] ksys_read+0x12a/0x250 [ 114.456773][ T8153] ? __pfx_ksys_read+0x10/0x10 [ 114.456794][ T8153] do_syscall_64+0x115/0x870 [ 114.456811][ T8153] ? clear_bhb_loop+0x40/0x90 [ 114.456826][ T8153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.456838][ T8153] RIP: 0033:0x7fb0bd15e6ce [ 114.456848][ T8153] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 114.456859][ T8153] RSP: 002b:00007fb0be0c5f68 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 114.456871][ T8153] RAX: ffffffffffffffda RBX: 00007fb0be0c66c0 RCX: 00007fb0bd15e6ce [ 114.456878][ T8153] RDX: 0000000000002000 RSI: 0000200000007b40 RDI: 0000000000000007 [ 114.456885][ T8153] RBP: 00007fb0be0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 114.456891][ T8153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000007 [ 114.456898][ T8153] R13: 000020000000c5c0 R14: 00007fb0bd425fa0 R15: 00007ffdf036fd78 [ 114.456913][ T8153] [ 114.757457][ T8165] netlink: 28 bytes leftover after parsing attributes in process `syz.1.688'. [ 114.761750][ T8165] netlink: 'syz.1.688': attribute type 7 has an invalid length. [ 114.768302][ T8165] netlink: 'syz.1.688': attribute type 8 has an invalid length. [ 114.774841][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'. [ 114.811946][ T8165] bond0: entered promiscuous mode [ 114.817222][ T8165] bond_slave_0: entered promiscuous mode [ 114.828042][ T8165] bond_slave_1: entered promiscuous mode [ 114.853367][ T8165] ip6gretap0: entered promiscuous mode [ 114.866262][ T8165] bond0: left promiscuous mode [ 114.874819][ T8165] bond_slave_0: left promiscuous mode [ 114.889483][ T8165] bond_slave_1: left promiscuous mode [ 114.893642][ T8165] ip6gretap0: left promiscuous mode [ 114.905717][ T8175] netlink: 'syz.2.690': attribute type 83 has an invalid length. [ 114.938780][ T8168] veth3: entered allmulticast mode [ 114.967976][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.690'. [ 115.003459][ T8179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.461188][ T8183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.693'. [ 115.470474][ T8183] netlink: 76 bytes leftover after parsing attributes in process `syz.4.693'. [ 115.485919][ T8183] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8183 comm=syz.4.693 [ 115.493174][ T8183] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8183 comm=syz.4.693 [ 115.509065][ T8183] tun0: tun_chr_ioctl cmd 1074025675 [ 115.511189][ T8183] tun0: persist enabled [ 115.513446][ T8183] tun0: tun_chr_ioctl cmd 1074025675 [ 115.515120][ T8183] tun0: persist enabled [ 115.516941][ T8183] devpts: Bad value for 'max' [ 115.591532][ T8189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.696'. [ 115.639933][ T8188] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 115.650574][ T8188] bond1: (slave lo): Enslaving as an active interface with an up link [ 115.659791][ T8194] bond1 (unregistering): (slave lo): Releasing backup interface [ 115.663643][ T8194] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 115.664944][ T8193] FAULT_INJECTION: forcing a failure. [ 115.664944][ T8193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.668997][ T8194] bond1 (unregistering): Released all slaves [ 115.687053][ T8193] CPU: 1 UID: 0 PID: 8193 Comm: syz.1.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.687073][ T8193] Tainted: [L]=SOFTLOCKUP [ 115.687077][ T8193] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.687084][ T8193] Call Trace: [ 115.687089][ T8193] [ 115.687094][ T8193] dump_stack_lvl+0x100/0x190 [ 115.687114][ T8193] should_fail_ex.cold+0x5/0xa [ 115.687129][ T8193] _copy_to_user+0x32/0xd0 [ 115.687146][ T8193] simple_read_from_buffer+0xcb/0x170 [ 115.687160][ T8193] proc_fail_nth_read+0x1af/0x230 [ 115.687178][ T8193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.687196][ T8193] ? rw_verify_area+0xce/0x6d0 [ 115.687212][ T8193] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 115.687230][ T8193] vfs_read+0x1e4/0xb40 [ 115.687248][ T8193] ? __pfx_vfs_read+0x10/0x10 [ 115.687266][ T8193] ? __fget_files+0x215/0x3d0 [ 115.687293][ T8193] ? __fget_files+0x21f/0x3d0 [ 115.687311][ T8193] ksys_read+0x12a/0x250 [ 115.687328][ T8193] ? __pfx_ksys_read+0x10/0x10 [ 115.687349][ T8193] do_syscall_64+0x115/0x870 [ 115.687362][ T8193] ? clear_bhb_loop+0x40/0x90 [ 115.687376][ T8193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.687388][ T8193] RIP: 0033:0x7fb0bd15e6ce [ 115.687410][ T8193] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 115.687421][ T8193] RSP: 002b:00007fb0be0c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 115.687432][ T8193] RAX: ffffffffffffffda RBX: 00007fb0be0c66c0 RCX: 00007fb0bd15e6ce [ 115.687440][ T8193] RDX: 000000000000000f RSI: 00007fb0be0c60a0 RDI: 0000000000000007 [ 115.687446][ T8193] RBP: 00007fb0be0c6090 R08: 0000000000000000 R09: 0000000000000000 [ 115.687453][ T8193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.687459][ T8193] R13: 00007fb0bd426038 R14: 00007fb0bd425fa0 R15: 00007ffdf036fd78 [ 115.687473][ T8193] [ 115.814092][ T8197] netlink: 'syz.4.699': attribute type 7 has an invalid length. [ 115.818740][ T8197] netlink: 'syz.4.699': attribute type 8 has an invalid length. [ 115.830289][ T8197] bond0: entered promiscuous mode [ 115.832044][ T8197] bond_slave_0: entered promiscuous mode [ 115.833934][ T8197] bond_slave_1: entered promiscuous mode [ 115.836874][ T8197] ip6gretap0: entered promiscuous mode [ 115.841286][ T8197] bond0: left promiscuous mode [ 115.842788][ T8197] bond_slave_0: left promiscuous mode [ 115.849787][ T8197] bond_slave_1: left promiscuous mode [ 115.860713][ T8197] ip6gretap0: left promiscuous mode [ 116.079729][ T8205] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 116.133582][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 116.133598][ T42] audit: type=1400 audit(116.059:674): avc: denied { listen } for pid=8224 comm="syz.4.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.498776][ T8251] macvlan0: entered allmulticast mode [ 116.500594][ T8251] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 116.506902][ T8258] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8258 comm=syz.2.717 [ 116.534466][ T8251] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 116.733617][ T42] audit: type=1400 audit(116.659:675): avc: denied { write } for pid=8272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.792926][ T42] audit: type=1400 audit(116.719:676): avc: denied { write } for pid=8275 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.539024][ T8286] netlink: 'syz.1.722': attribute type 3 has an invalid length. [ 117.542465][ T8286] netlink: 'syz.1.722': attribute type 6 has an invalid length. [ 117.545795][ T8286] __nla_validate_parse: 5 callbacks suppressed [ 117.545809][ T8286] netlink: 52 bytes leftover after parsing attributes in process `syz.1.722'. [ 117.585600][ T8282] netlink: 8 bytes leftover after parsing attributes in process `syz.0.721'. [ 117.719876][ T8301] binder: 8300:8301 ioctl 4018620d 0 returned -22 [ 117.748200][ T8305] netlink: 20 bytes leftover after parsing attributes in process `syz.4.731'. [ 117.800644][ T42] audit: type=1400 audit(117.729:677): avc: denied { setopt } for pid=8313 comm="syz.4.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 117.847073][ T42] audit: type=1400 audit(117.769:678): avc: denied { read } for pid=8315 comm="syz.2.734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.045986][ T8332] SQUASHFS error: Failed to read block 0x0: -5 [ 118.052728][ T8332] unable to read squashfs_super_block [ 118.347944][ T8338] netlink: 20 bytes leftover after parsing attributes in process `syz.1.741'. [ 118.424483][ T42] audit: type=1400 audit(118.349:679): avc: denied { ioctl } for pid=8343 comm="syz.1.743" path="/dev/ptyq6" dev="devtmpfs" ino=133 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 118.435084][ T42] audit: type=1400 audit(118.349:680): avc: denied { write } for pid=8343 comm="syz.1.743" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 118.440629][ T8344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.743'. [ 118.445298][ T6560] IPVS: starting estimator thread 0... [ 118.450592][ T8344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.743'. [ 118.534410][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.1.744'. [ 118.537111][ T8345] IPVS: using max 26 ests per chain, 62400 per kthread [ 118.636762][ T8352] netlink: 48 bytes leftover after parsing attributes in process `syz.0.745'. [ 118.644474][ T8352] netlink: 'syz.0.745': attribute type 1 has an invalid length. [ 118.711894][ T8362] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8362 comm=syz.0.748 [ 118.742622][ T8365] netlink: 36 bytes leftover after parsing attributes in process `syz.1.749'. [ 118.748891][ T8365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.749'. [ 118.803780][ T8369] tmpfs: Unknown parameter '' [ 118.985727][ T8382] syzkaller1: entered promiscuous mode [ 118.989459][ T8382] syzkaller1: entered allmulticast mode [ 119.257113][ T8366] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 119.351026][ T8388] TCP: tcp_parse_options: Illegal window scaling value 218 > 14 received [ 119.379608][ T8327] Set syz1 is full, maxelem 65536 reached [ 119.390110][ T42] audit: type=1400 audit(119.319:681): avc: denied { name_bind 0x1000000 } for pid=8389 comm="syz.0.759" path="socket:[25289]" dev="sockfs" ino=25289 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.400637][ T8366] usb 6-1: device descriptor read/64, error -71 [ 119.403603][ T42] audit: type=1400 audit(119.329:682): avc: denied { accept } for pid=8389 comm="syz.0.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.549416][ T5834] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 119.625044][ T42] audit: type=1400 audit(119.549:683): avc: denied { create } for pid=8406 comm="syz.0.764" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ipx_socket permissive=1 [ 119.647232][ T8366] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 119.787115][ T8366] usb 6-1: device descriptor read/64, error -71 [ 119.900954][ T8366] usb usb6-port1: attempt power cycle [ 120.247133][ T8366] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 120.267848][ T8366] usb 6-1: device descriptor read/8, error -71 [ 120.507083][ T8366] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 120.527548][ T8366] usb 6-1: device descriptor read/8, error -71 [ 120.637699][ T8366] usb usb6-port1: unable to enumerate USB device [ 121.987363][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 121.987378][ T42] audit: type=1400 audit(121.919:688): avc: denied { append } for pid=8433 comm="syz.1.771" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 121.988464][ T8434] nfs: Unknown parameter '9p' [ 122.006534][ T42] audit: type=1400 audit(121.929:689): avc: denied { write } for pid=8433 comm="syz.1.771" name="/" dev="9p" ino=78395365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 122.018695][ T42] audit: type=1400 audit(121.949:690): avc: denied { read } for pid=8433 comm="syz.1.771" path="socket:[27071]" dev="sockfs" ino=27071 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 122.126160][ T42] audit: type=1400 audit(122.049:691): avc: denied { setattr } for pid=8433 comm="syz.1.771" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=78395431 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 122.475776][ T8398] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.611747][ T8452] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 122.628946][ T8452] xt_hashlimit: Unknown mode mask 84, kernel too old? [ 122.669199][ T42] audit: type=1400 audit(122.599:692): avc: denied { map } for pid=8455 comm="syz.1.778" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 122.819725][ T42] audit: type=1400 audit(122.749:693): avc: denied { write } for pid=8465 comm="syz.4.782" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 122.862357][ T42] audit: type=1400 audit(122.789:694): avc: denied { read } for pid=8463 comm="syz.2.781" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 122.941219][ T8474] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 122.943425][ T8474] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.953548][ T8474] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 122.962986][ T8474] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.965171][ T8474] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.973228][ T8474] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 122.980189][ T8474] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 122.982882][ T8474] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.991675][ T8474] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 122.997903][ T8478] ucma_write: process 532 (syz.2.781) changed security contexts after opening file descriptor, this is not allowed. [ 123.066835][ T42] audit: type=1400 audit(122.989:695): avc: denied { mmap_zero } for pid=8484 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 123.078848][ T42] audit: type=1400 audit(123.009:696): avc: denied { create } for pid=8484 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.096789][ T8483] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 123.100974][ T42] audit: type=1400 audit(123.009:697): avc: denied { write } for pid=8484 comm="syz.4.786" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 123.113370][ T8483] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 123.257877][ T8366] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 123.261692][ T5834] nci: nci_rx_work: unknown MT 0x1 [ 123.418414][ T8366] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 123.422385][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.425649][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.431607][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.435039][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.438630][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.442437][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.445841][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.449133][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.453451][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.458926][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.462657][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.467817][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.471304][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.474119][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.478475][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.481885][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.484856][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.491984][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.497129][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.501069][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.505778][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.510226][ T8366] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 123.514430][ T8366] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 123.520454][ T8366] usb 6-1: config 0 interface 0 has no altsetting 0 [ 123.525745][ T8366] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 123.530012][ T8366] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 123.533815][ T8366] usb 6-1: Product: syz [ 123.535641][ T8366] usb 6-1: Manufacturer: syz [ 123.537865][ T8366] usb 6-1: SerialNumber: syz [ 123.542991][ T8366] usb 6-1: config 0 descriptor?? [ 123.554959][ T8366] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 123.758889][ T8473] 9pnet_virtio: no channels available for device syz [ 123.762205][ T5836] usb 6-1: USB disconnect, device number 13 [ 123.770116][ T5836] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 124.026455][ T8507] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.145089][ T5834] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 124.801306][ T8551] overlayfs: failed to resolve './file0': -2 [ 124.894327][ T8558] __nla_validate_parse: 2 callbacks suppressed [ 124.894345][ T8558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.802'. [ 124.957226][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.037542][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 125.041702][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 125.050809][ T8567] Config c/1 of g1 needs at least one function. [ 125.054634][ T8567] udc dummy_udc.0: failed to start g1: -22 [ 125.056597][ T8567] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 125.063724][ T8567] UDC core: g1: couldn't find an available UDC or it's busy [ 125.179961][ T8569] fuse: Unknown parameter '[d?Mx4za[kJ݇O t507x'GO1I 2{e) [ 125.179961][ T8569] 51ȓ}<ٱ6ـ`@ z3pd>i\6}Co}MŪp0x0000000000000009' [ 127.037559][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.075991][ T8529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 127.117120][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.119599][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 127.276018][ T8588] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 127.281850][ T8588] netlink: 'syz.1.814': attribute type 2 has an invalid length. [ 127.286234][ T8588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8588 comm=syz.1.814 [ 127.286502][ T8591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8591 comm=syz.1.814 [ 127.308839][ T8588] netlink: 'syz.1.814': attribute type 1 has an invalid length. [ 127.319320][ T8588] vlan2: entered allmulticast mode [ 127.321175][ T8588] veth0_to_bond: entered allmulticast mode [ 127.335143][ T8591] vlan2: entered allmulticast mode [ 127.335920][ T8593] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8593 comm=syz.0.816 [ 127.367161][ T8595] syz.1.814 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 127.444932][ T8603] netlink: 28 bytes leftover after parsing attributes in process `syz.2.818'. [ 127.449400][ T8603] netlink: 'syz.2.818': attribute type 7 has an invalid length. [ 127.452599][ T8603] netlink: 'syz.2.818': attribute type 8 has an invalid length. [ 127.455854][ T8603] netlink: 4 bytes leftover after parsing attributes in process `syz.2.818'. [ 127.464936][ T5834] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 127.481665][ T8603] bond0: entered promiscuous mode [ 127.485626][ T8603] bond_slave_0: entered promiscuous mode [ 127.488094][ T8603] bond_slave_1: entered promiscuous mode [ 127.491999][ T8603] ip6gretap0: entered promiscuous mode [ 127.495264][ T8603] bond0: left promiscuous mode [ 127.496945][ T8603] bond_slave_0: left promiscuous mode [ 127.499158][ T8603] bond_slave_1: left promiscuous mode [ 127.502110][ T8603] ip6gretap0: left promiscuous mode [ 127.680540][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 127.680556][ T42] audit: type=1400 audit(127.609:703): avc: denied { write } for pid=8612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.735322][ T42] audit: type=1400 audit(127.659:704): avc: denied { ioctl } for pid=8620 comm="syz.2.824" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 127.757915][ T42] audit: type=1400 audit(127.689:705): avc: denied { write } for pid=8623 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 127.890287][ T8629] qnx6: unable to read the first superblock [ 127.893699][ T8629] qnx6: unable to read the first superblock [ 127.896136][ T8629] qnx6: unable to read the first superblock [ 128.339518][ T42] audit: type=1400 audit(128.269:706): avc: denied { write } for pid=8630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.384542][ T42] audit: type=1400 audit(128.309:707): avc: denied { write } for pid=8633 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 128.778808][ T8643] netlink: 20 bytes leftover after parsing attributes in process `syz.4.827'. [ 128.828851][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'. [ 128.832162][ T8647] netlink: 'syz.4.829': attribute type 7 has an invalid length. [ 128.834969][ T8647] netlink: 'syz.4.829': attribute type 8 has an invalid length. [ 128.837965][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.829'. [ 128.846843][ T8647] bond0: entered promiscuous mode [ 128.849222][ T8647] bond_slave_0: entered promiscuous mode [ 128.851853][ T8647] bond_slave_1: entered promiscuous mode [ 128.855607][ T8647] ip6gretap0: entered promiscuous mode [ 128.859434][ T8647] bond0: left promiscuous mode [ 128.861428][ T8647] bond_slave_0: left promiscuous mode [ 128.863923][ T8647] bond_slave_1: left promiscuous mode [ 128.872212][ T8647] ip6gretap0: left promiscuous mode [ 128.874372][ T42] audit: type=1400 audit(128.799:708): avc: denied { write } for pid=8644 comm="syz.2.828" name="/" dev="9p" ino=78395365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.888723][ T42] audit: type=1400 audit(128.819:709): avc: denied { write } for pid=8644 comm="syz.2.828" name="/" dev="9p" ino=78395365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 128.913651][ T42] audit: type=1400 audit(128.839:710): avc: denied { mounton } for pid=8644 comm="syz.2.828" path="/205/file0/file0/file1" dev="9p" ino=78395371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 129.117123][ T5744] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.197124][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.207106][ T5744] Bluetooth: hci2: command 0x0419 tx timeout [ 129.446696][ T42] audit: type=1400 audit(129.369:711): avc: denied { append } for pid=8651 comm="syz.4.831" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 129.762509][ T8669] netlink: 36 bytes leftover after parsing attributes in process `syz.2.835'. [ 129.832917][ T8671] syzkaller0: entered promiscuous mode [ 129.834708][ T8671] syzkaller0: entered allmulticast mode [ 130.395554][ T8598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 130.502028][ T42] audit: type=1400 audit(130.429:712): avc: denied { create } for pid=8682 comm="syz.4.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 130.540810][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.841'. [ 130.545342][ T8687] netlink: 'syz.4.841': attribute type 7 has an invalid length. [ 130.549633][ T8687] netlink: 'syz.4.841': attribute type 8 has an invalid length. [ 130.553017][ T8687] netlink: 4 bytes leftover after parsing attributes in process `syz.4.841'. [ 130.577985][ T8687] bond0: entered promiscuous mode [ 130.587792][ T8687] bond_slave_0: entered promiscuous mode [ 130.590572][ T8687] bond_slave_1: entered promiscuous mode [ 130.616050][ T8687] ip6gretap0: entered promiscuous mode [ 130.629344][ T8687] bond0: left promiscuous mode [ 130.631359][ T8687] bond_slave_0: left promiscuous mode [ 130.638260][ T8687] bond_slave_1: left promiscuous mode [ 130.643796][ T8687] ip6gretap0: left promiscuous mode [ 130.690816][ T8696] netlink: 20 bytes leftover after parsing attributes in process `syz.0.845'. [ 130.701300][ T8697] syzkaller0: entered promiscuous mode [ 130.703229][ T8697] syzkaller0: entered allmulticast mode [ 130.714243][ T8697] tipc: Started in network mode [ 130.717435][ T8697] tipc: Node identity 1e6abbae0f8a, cluster identity 4711 [ 130.723561][ T8697] tipc: Enabled bearer , priority 0 [ 130.805903][ T5834] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 130.832575][ T8697] ntfs3: Unknown parameter 'discarer0' [ 130.841231][ T8695] tipc: Resetting bearer [ 130.862423][ T8695] tipc: Disabling bearer [ 132.314517][ T8734] io-wq is not configured for unbound workers [ 132.346750][ T8738] netlink: 20 bytes leftover after parsing attributes in process `syz.1.856'. [ 132.410705][ T8742] netlink: 28 bytes leftover after parsing attributes in process `syz.1.858'. [ 132.414476][ T8742] netlink: 'syz.1.858': attribute type 7 has an invalid length. [ 132.418745][ T8742] netlink: 'syz.1.858': attribute type 8 has an invalid length. [ 132.421958][ T8742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.858'. [ 132.432354][ T8742] bond0: entered promiscuous mode [ 132.434382][ T8742] bond_slave_0: entered promiscuous mode [ 132.436882][ T8742] bond_slave_1: entered promiscuous mode [ 132.441160][ T8742] ip6gretap0: entered promiscuous mode [ 132.444401][ T8742] bond0: left promiscuous mode [ 132.446205][ T8742] bond_slave_0: left promiscuous mode [ 132.448828][ T8742] bond_slave_1: left promiscuous mode [ 132.451706][ T8742] ip6gretap0: left promiscuous mode [ 132.733279][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.736166][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.549991][ T8747] kvm: kvm [8746]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 133.553335][ T8747] kvm: kvm [8746]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 133.740236][ T8699] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.838770][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 133.838789][ T42] audit: type=1400 audit(133.769:717): avc: denied { getopt } for pid=8754 comm="syz.4.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 133.882089][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'. [ 133.931674][ T42] audit: type=1400 audit(133.859:718): avc: denied { create } for pid=8763 comm="syz.4.869" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 133.944505][ T42] audit: type=1400 audit(133.859:719): avc: denied { ioctl } for pid=8763 comm="syz.4.869" path="socket:[27415]" dev="sockfs" ino=27415 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 134.037580][ T42] audit: type=1400 audit(133.969:720): avc: denied { bpf } for pid=8750 comm="syz.2.861" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.052775][ T8776] netlink: 156 bytes leftover after parsing attributes in process `syz.0.870'. [ 134.056694][ T8776] netlink: 4 bytes leftover after parsing attributes in process `syz.0.870'. [ 134.160438][ T42] audit: type=1400 audit(134.089:721): avc: denied { perfmon } for pid=8780 comm="syz.4.872" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 134.253188][ T5546] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 134.264392][ T42] audit: type=1400 audit(134.189:722): avc: denied { set_context_mgr } for pid=8787 comm="syz.0.874" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 134.272492][ T42] audit: type=1400 audit(134.199:723): avc: denied { module_request } for pid=8787 comm="syz.0.874" kmod="fs-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 134.379956][ T8798] overlayfs: failed to resolve './file1/file0': -2 [ 134.383443][ T8798] netlink: 'syz.0.877': attribute type 10 has an invalid length. [ 134.416096][ T8798] team0 (unregistering): Port device team_slave_0 removed [ 134.427894][ T8798] team0 (unregistering): Port device team_slave_1 removed [ 134.628754][ T8812] netlink: 28 bytes leftover after parsing attributes in process `syz.0.883'. [ 134.632653][ T8812] netlink: 'syz.0.883': attribute type 7 has an invalid length. [ 134.635941][ T8812] netlink: 'syz.0.883': attribute type 8 has an invalid length. [ 134.645400][ T8812] bond0: entered promiscuous mode [ 134.650053][ T8812] bond_slave_0: entered promiscuous mode [ 134.653246][ T8812] bond_slave_1: entered promiscuous mode [ 134.658039][ T8812] ip6gretap0: entered promiscuous mode [ 134.661828][ T8812] bond0: left promiscuous mode [ 134.663986][ T8812] bond_slave_0: left promiscuous mode [ 134.666559][ T8812] bond_slave_1: left promiscuous mode [ 134.671306][ T8812] ip6gretap0: left promiscuous mode [ 134.811296][ T42] audit: type=1400 audit(134.739:724): avc: denied { ioctl } for pid=8816 comm="syz.0.884" path="socket:[27547]" dev="sockfs" ino=27547 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 135.441280][ T8821] bond0: entered promiscuous mode [ 135.443104][ T8821] bond_slave_0: entered promiscuous mode [ 135.445153][ T8821] bond_slave_1: entered promiscuous mode [ 135.473295][ T8821] XFS (nullb0): Invalid superblock magic number [ 135.553937][ T42] audit: type=1400 audit(135.479:725): avc: denied { nlmsg_read } for pid=8828 comm="syz.2.886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.873844][ T8862] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 137.156645][ T8781] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.209017][ T8865] __nla_validate_parse: 1 callbacks suppressed [ 137.209035][ T8865] netlink: 20 bytes leftover after parsing attributes in process `syz.0.896'. [ 137.215001][ T42] audit: type=1800 audit(137.139:726): pid=8867 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.897" name="qw_sign" dev="configfs" ino=29941 res=0 errno=0 [ 137.511734][ T5546] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 137.785044][ T8903] input: syz0 as /devices/virtual/input/input9 [ 138.003955][ T8917] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 138.007019][ T8917] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 138.015803][ T8917] vhci_hcd vhci_hcd.0: Device attached [ 138.020352][ T8918] usbip_core: unknown command [ 138.022480][ T8918] vhci_hcd: unknown pdu 0 [ 138.024311][ T8918] usbip_core: unknown command [ 138.027548][ T13] vhci_hcd vhci_hcd.1: stop threads [ 138.031299][ T13] vhci_hcd vhci_hcd.1: release socket [ 138.033216][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 138.131671][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz.0.916'. [ 138.287882][ T8935] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8935 comm=syz.0.917 [ 138.298035][ T8935] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.917208][ T5748] Bluetooth: hci0: command 0x0c1a tx timeout [ 139.923535][ T5835] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 139.926298][ T5835] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 140.424633][ T8887] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 140.480556][ T8954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.924'. [ 140.484771][ T8954] netlink: 'syz.0.924': attribute type 7 has an invalid length. [ 140.490346][ T8954] netlink: 'syz.0.924': attribute type 8 has an invalid length. [ 140.494575][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.0.924'. [ 140.509065][ T8954] ip6gretap0: entered promiscuous mode [ 140.519748][ T8954] ip6gretap0: left promiscuous mode [ 140.558907][ T5748] Bluetooth: hci2: command 0x0419 tx timeout [ 140.593739][ T8958] netlink: 'syz.4.926': attribute type 39 has an invalid length. [ 140.603146][ T8958] hsr_slave_0 (unregistering): left promiscuous mode [ 140.874045][ T8968] 8021q: VLANs not supported on ip6tnl0 [ 140.911666][ T8970] netlink: 'syz.0.931': attribute type 1 has an invalid length. [ 140.936112][ T8970] 8021q: adding VLAN 0 to HW filter on device bond3 [ 140.948223][ T8971] bond3: (slave geneve2): making interface the new active one [ 140.953232][ T8971] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 141.040860][ T8982] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8982 comm=syz.0.933 [ 141.050470][ T8982] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.071765][ T8985] netlink: 'syz.4.934': attribute type 4 has an invalid length. [ 141.131684][ T8989] ehci-pci 0000:00:1d.7: remove, state 1 [ 141.138569][ T8989] usb usb1: USB disconnect, device number 1 [ 141.142033][ T8989] usb 1-1: USB disconnect, device number 2 [ 141.235912][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 141.235925][ T42] audit: type=1400 audit(141.159:732): avc: denied { accept } for pid=8988 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 141.301723][ T8989] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 141.426135][ T8994] uhci_hcd 0000:00:1d.0: remove, state 1 [ 141.434408][ T8994] usb usb2: USB disconnect, device number 1 [ 141.504149][ T8994] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 141.645627][ T9006] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9006 comm=syz.1.943 [ 141.652092][ T9006] netlink: 'syz.1.943': attribute type 1 has an invalid length. [ 141.655867][ T9006] netlink: 'syz.1.943': attribute type 2 has an invalid length. [ 141.756585][ T42] audit: type=1400 audit(141.679:733): avc: denied { mount } for pid=9017 comm="syz.4.948" name="/" dev="hugetlbfs" ino=29168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 141.765036][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 141.769669][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 141.773516][ T9018] netlink: 'syz.4.948': attribute type 12 has an invalid length. [ 141.777624][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 141.781320][ T9018] netlink: 12 bytes leftover after parsing attributes in process `syz.4.948'. [ 141.784992][ T9018] netlink: 'syz.4.948': attribute type 12 has an invalid length. [ 141.900354][ T9036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.952'. [ 141.904026][ T9036] netlink: 'syz.4.952': attribute type 7 has an invalid length. [ 141.907322][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.4.952'. [ 141.915854][ T42] audit: type=1400 audit(141.839:734): avc: denied { bind } for pid=9037 comm="syz.1.953" lport=49965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 141.921730][ T9036] bond0: entered promiscuous mode [ 141.924624][ T9036] bond_slave_0: entered promiscuous mode [ 141.924691][ T42] audit: type=1400 audit(141.839:735): avc: denied { name_bind } for pid=9037 comm="syz.1.953" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 141.927285][ T9036] bond_slave_1: entered promiscuous mode [ 141.936013][ T42] audit: type=1400 audit(141.839:736): avc: denied { node_bind } for pid=9037 comm="syz.1.953" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 141.939469][ T9036] ip6gretap0: entered promiscuous mode [ 141.942519][ T42] audit: type=1400 audit(141.849:737): avc: denied { write } for pid=9039 comm="syz.0.954" name="/" dev="9p" ino=78395365 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 141.951433][ T9036] bond0: left promiscuous mode [ 141.953430][ T9036] bond_slave_0: left promiscuous mode [ 141.957272][ T9036] bond_slave_1: left promiscuous mode [ 141.960234][ T9036] ip6gretap0: left promiscuous mode [ 141.997135][ T5835] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 141.997614][ T5748] Bluetooth: hci3: command 0x0c1a tx timeout [ 141.999856][ T5835] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 142.121212][ T9049] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 142.208616][ T9057] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=9057 comm=syz.1.960 [ 142.371452][ T42] audit: type=1400 audit(142.299:738): avc: denied { write } for pid=9068 comm="syz.4.963" path="socket:[31183]" dev="sockfs" ino=31183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.379174][ T42] audit: type=1400 audit(142.309:739): avc: denied { setopt } for pid=9068 comm="syz.4.963" lport=45958 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 142.457344][ T9073] syzkaller0: entered promiscuous mode [ 142.459545][ T9073] syzkaller0: entered allmulticast mode [ 142.531400][ T9076] netlink: 28 bytes leftover after parsing attributes in process `syz.4.966'. [ 142.534561][ T9076] netlink: 4 bytes leftover after parsing attributes in process `syz.4.966'. [ 142.558615][ T9076] bond0: entered promiscuous mode [ 142.560838][ T9076] bond_slave_0: entered promiscuous mode [ 142.563340][ T9076] bond_slave_1: entered promiscuous mode [ 142.567403][ T9076] ip6gretap0: entered promiscuous mode [ 142.572058][ T9076] bond0: left promiscuous mode [ 142.574120][ T9076] bond_slave_0: left promiscuous mode [ 142.576519][ T9076] bond_slave_1: left promiscuous mode [ 142.580731][ T9076] ip6gretap0: left promiscuous mode [ 142.682763][ T42] audit: type=1400 audit(142.609:740): avc: denied { read } for pid=9086 comm="syz.1.971" dev="nsfs" ino=4026533307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.692272][ T42] audit: type=1400 audit(142.609:741): avc: denied { open } for pid=9086 comm="syz.1.971" path="net:[4026533307]" dev="nsfs" ino=4026533307 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 142.877708][ T9104] team0: Port device veth0 added [ 142.977070][ T41] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 143.127094][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 143.130193][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.133723][ T41] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.136933][ T41] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 143.141488][ T41] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 143.144410][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.148831][ T41] usb 5-1: config 0 descriptor?? [ 143.565627][ T41] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 143.576626][ T41] microsoft 0003:045E:07DA.0004: ignoring exceeding usage max [ 143.589630][ T41] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:045E:07DA.0004/input/input10 [ 143.711245][ T41] microsoft 0003:045E:07DA.0004: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 143.765492][ T41] usb 5-1: USB disconnect, device number 8 [ 143.784389][ T9121] fido_id[9121]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb5/5-1/report_descriptor': No such file or directory [ 143.951288][ T9123] netlink: 28 bytes leftover after parsing attributes in process `syz.4.983'. [ 143.954386][ T9123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.983'. [ 143.961127][ T9123] bond0: entered promiscuous mode [ 143.962835][ T9123] bond_slave_0: entered promiscuous mode [ 143.964770][ T9123] bond_slave_1: entered promiscuous mode [ 143.967544][ T9123] ip6gretap0: entered promiscuous mode [ 143.970505][ T9123] bond0: left promiscuous mode [ 143.972047][ T9123] bond_slave_0: left promiscuous mode [ 143.974000][ T9123] bond_slave_1: left promiscuous mode [ 143.976794][ T9123] ip6gretap0: left promiscuous mode [ 144.077195][ T5748] Bluetooth: hci2: command 0x0419 tx timeout [ 144.078972][ T5835] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 144.082637][ T5835] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 144.214567][ T9127] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9127 comm=syz.4.985 [ 144.254920][ T9136] tmpfs: Unknown parameter 'dont_appraise' [ 144.364877][ T10] IPVS: starting estimator thread 0... [ 144.370918][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.992'. [ 144.374760][ T9147] netlink: 17 bytes leftover after parsing attributes in process `syz.2.992'. [ 144.380115][ T9147] tipc: Invalid UDP bearer configuration [ 144.380156][ T9147] tipc: Enabling of bearer rejected, failed to enable media [ 144.387146][ T9147] IPVS: sed: FWM 3 0x00000003 - no destination available [ 144.394451][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 144.467154][ T9149] IPVS: using max 43 ests per chain, 103200 per kthread [ 144.557184][ T5835] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 144.681623][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.2.996'. [ 144.697170][ T5835] usb 5-1: device descriptor read/64, error -71 [ 144.957144][ T5835] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 145.087263][ T5835] usb 5-1: device descriptor read/64, error -71 [ 145.197717][ T5835] usb usb5-port1: attempt power cycle [ 145.547100][ T5835] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 145.567640][ T5835] usb 5-1: device descriptor read/8, error -71 [ 145.578850][ T9176] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 145.587174][ T9176] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 145.825687][ T9184] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1002'. [ 145.827170][ T5835] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 145.859281][ T5835] usb 5-1: device descriptor read/8, error -71 [ 145.967379][ T5835] usb usb5-port1: unable to enumerate USB device [ 146.322484][ T9245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1011'. [ 146.423140][ T9254] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1014'. [ 146.454282][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 146.454293][ T42] audit: type=1400 audit(146.379:751): avc: denied { read } for pid=9255 comm="syz.2.1015" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 146.549214][ T42] audit: type=1400 audit(146.479:752): avc: denied { name_bind } for pid=9257 comm="syz.2.1016" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 146.867197][ T6560] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 146.997245][ T6560] usb 7-1: device descriptor read/64, error -71 [ 147.247133][ T6560] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 147.345733][ T9269] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 147.397239][ T6560] usb 7-1: device descriptor read/64, error -71 [ 147.507431][ T6560] usb usb7-port1: attempt power cycle [ 147.857070][ T6560] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 147.887579][ T6560] usb 7-1: device descriptor read/8, error -71 [ 147.928810][ T42] audit: type=1400 audit(147.859:753): avc: denied { bind } for pid=9270 comm="syz.0.1019" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.936111][ T42] audit: type=1400 audit(147.859:754): avc: denied { name_bind } for pid=9270 comm="syz.0.1019" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 147.943217][ T42] audit: type=1400 audit(147.859:755): avc: denied { node_bind } for pid=9270 comm="syz.0.1019" saddr=ff00::1 src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 148.127183][ T6560] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 148.147523][ T6560] usb 7-1: device descriptor read/8, error -71 [ 148.257467][ T6560] usb usb7-port1: unable to enumerate USB device [ 149.736565][ T9278] openvswitch: netlink: Unexpected mask (mask=10000010, allowed=10058) [ 149.741857][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1023'. [ 149.744732][ T9278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.752165][ T9278] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1023'. [ 149.785768][ T9280] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1024'. [ 149.822729][ T9282] syz_tun: left allmulticast mode [ 149.824554][ T9282] syz_tun: left promiscuous mode [ 149.826633][ T9282] bridge0: port 3(syz_tun) entered disabled state [ 149.841535][ T9282] bridge_slave_0: left allmulticast mode [ 149.843844][ T9282] bridge_slave_0: left promiscuous mode [ 149.846259][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.854790][ T9282] bridge_slave_1: left allmulticast mode [ 149.859614][ T9282] bridge_slave_1: left promiscuous mode [ 149.862108][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.875088][ T9282] bond0: (slave bond_slave_0): Releasing backup interface [ 149.882773][ T9282] bond0: (slave bond_slave_1): Releasing backup interface [ 149.896624][ T9282] team0: Port device team_slave_0 removed [ 149.903761][ T9282] team0: Port device team_slave_1 removed [ 149.906196][ T9282] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.909286][ T9282] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.914782][ T9282] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.918218][ T9282] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.924185][ T9282] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 149.940801][ T9283] team0: Mode changed to "loadbalance" [ 149.942791][ T9284] team0: Unable to change to the same mode the team is in [ 151.233431][ T9289] openvswitch: netlink: Geneve option length err (len 856, max 255). [ 151.270959][ T42] audit: type=1400 audit(151.199:756): avc: denied { accept } for pid=9290 comm="syz.2.1028" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 152.901641][ T9293] ptrace attach of "/syz-executor exec"[5734] was attempted by "/syz-executor exec"[9293] [ 153.036076][ T42] audit: type=1400 audit(152.959:757): avc: denied { read } for pid=9292 comm="syz.2.1029" name="trace" dev="tracefs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 153.064182][ T42] audit: type=1400 audit(152.959:758): avc: denied { open } for pid=9292 comm="syz.2.1029" path="/264/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 153.130875][ T9296] validate_nla: 9 callbacks suppressed [ 153.130887][ T9296] netlink: 'syz.2.1030': attribute type 1 has an invalid length. [ 153.140012][ T9296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.143189][ T9295] openvswitch: netlink: IPv4 tunnel dst address is zero [ 153.145777][ T9295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 153.447118][ T60] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 153.598509][ T60] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.607063][ T60] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 153.612675][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 153.618917][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 153.623067][ T60] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 153.637098][ T60] usb 7-1: Product: syz [ 153.638846][ T60] usb 7-1: Manufacturer: syz [ 153.640794][ T60] usb 7-1: SerialNumber: syz [ 153.646257][ T60] usb 7-1: config 0 descriptor?? [ 153.670437][ T60] usb 7-1: selecting invalid altsetting 0 [ 153.873408][ T50] usb 7-1: USB disconnect, device number 17 [ 154.118600][ T9315] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9315 comm=syz.4.1037 [ 154.546876][ T42] audit: type=1400 audit(154.469:759): avc: denied { ioctl } for pid=9331 comm="syz.2.1045" path="/268/file0/file0" dev="fuse" ino=64 ioctlcmd=0x542f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 154.689152][ T9338] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.694125][ T9338] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 154.701836][ T9338] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.705186][ T9338] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 154.730651][ T9340] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.743393][ T9340] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 1th superblock [ 154.751978][ T9340] F2FS-fs (nbd2): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.762066][ T9340] F2FS-fs (nbd2): Can't find valid F2FS filesystem in 2th superblock [ 154.798736][ T9348] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1050'. [ 157.894483][ T9375] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 157.902040][ T1166] Bluetooth: hci4: Frame reassembly failed (-84) [ 158.318105][ T5749] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.328828][ T5749] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.332620][ T5749] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.335963][ T5749] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.339683][ T5749] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.358704][ T5748] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 158.368860][ T5748] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 158.369032][ T5748] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 158.369410][ T5748] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 158.369673][ T5748] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.707120][ T8366] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 158.867588][ T8366] usb 9-1: Using ep0 maxpacket: 32 [ 158.872639][ T8366] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 158.875262][ T8366] usb 9-1: config 0 has no interface number 0 [ 158.880977][ T8366] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 158.883884][ T8366] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.886433][ T8366] usb 9-1: Product: syz [ 158.893148][ T8366] usb 9-1: Manufacturer: syz [ 158.894699][ T8366] usb 9-1: SerialNumber: syz [ 158.904535][ T8366] usb 9-1: config 0 descriptor?? [ 158.912239][ T8366] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 158.917636][ T8366] usb 9-1: selecting invalid altsetting 1 [ 158.919468][ T8366] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 158.937819][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.938061][ T8366] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 158.940435][ T9381] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.943610][ T8366] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 158.945859][ T9381] bridge_slave_0: entered allmulticast mode [ 158.950573][ T8366] usb 9-1: media controller created [ 158.952065][ T9381] bridge_slave_0: entered promiscuous mode [ 158.959673][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.962854][ T9381] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.965548][ T8366] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.965984][ T9381] bridge_slave_1: entered allmulticast mode [ 158.973278][ T9381] bridge_slave_1: entered promiscuous mode [ 158.998581][ T9381] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.005385][ T9381] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.046672][ T9381] team0: Port device team_slave_0 added [ 159.052634][ T9381] team0: Port device team_slave_1 added [ 159.080179][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 159.083220][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.093929][ T9381] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 159.100134][ T9381] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 159.103128][ T9381] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 159.113886][ T9381] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 159.162828][ T9381] hsr_slave_0: entered promiscuous mode [ 159.166215][ T9381] hsr_slave_1: entered promiscuous mode [ 159.169389][ T9381] debugfs: 'hsr0' already exists in 'hsr' [ 159.172022][ T9381] Cannot create hsr debugfs directory [ 159.351680][ T9381] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 159.355679][ T9381] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 159.359046][ T9381] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 159.367891][ T9381] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 159.370949][ T9381] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 159.376625][ T9381] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 159.381655][ T9381] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 159.385829][ T9381] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 159.406689][ T9381] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.410084][ T9381] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.414300][ T9381] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.417554][ T9381] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.476801][ T9381] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.491437][ T1168] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.494577][ T1168] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.502381][ T9381] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.508971][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.511323][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.517292][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.519810][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.917283][ T5749] Bluetooth: hci4: command 0x1003 tx timeout [ 159.917395][ T5744] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 159.964572][ T9381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.078900][ T8366] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 160.085701][ T8366] zl10353_read_register: readreg error (reg=127, ret==-110) [ 160.096301][ T8366] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 160.134943][ T8366] usb 9-1: USB disconnect, device number 4 [ 160.227336][ T9381] veth0_vlan: entered promiscuous mode [ 160.234923][ T9381] veth1_vlan: entered promiscuous mode [ 160.260532][ T9381] veth0_macvtap: entered promiscuous mode [ 160.264831][ T9381] veth1_macvtap: entered promiscuous mode [ 160.271468][ T9427] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9427 comm=syz.2.1064 [ 160.273323][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.289886][ T9381] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.296810][ T5546] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.302587][ T5546] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.306508][ T5546] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.312494][ T5546] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.397894][ T5744] Bluetooth: hci5: command tx timeout [ 160.420664][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.431317][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.448286][ T9431] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1542 sclass=netlink_xfrm_socket pid=9431 comm=syz.2.1066 [ 160.449517][ T42] audit: type=1400 audit(160.379:760): avc: denied { wake_alarm } for pid=9430 comm="syz.2.1066" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.461943][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 160.464763][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.473709][ T42] audit: type=1400 audit(160.399:761): avc: denied { mounton } for pid=9381 comm="syz-executor" path="/syzkaller.4U8BcN/syz-tmp" dev="sda1" ino=2039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 160.494184][ T42] audit: type=1400 audit(160.419:762): avc: denied { mounton } for pid=9381 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 160.581238][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1060'. [ 160.584896][ T9437] netlink: 'syz.5.1060': attribute type 7 has an invalid length. [ 160.588129][ T9437] netlink: 'syz.5.1060': attribute type 8 has an invalid length. [ 160.591199][ T9437] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1060'. [ 160.599347][ T9437] bond0: entered promiscuous mode [ 160.601196][ T9437] bond_slave_0: entered promiscuous mode [ 160.603549][ T9437] bond_slave_1: entered promiscuous mode [ 160.607749][ T9437] ip6gretap0: entered promiscuous mode [ 160.610970][ T9437] bond0: left promiscuous mode [ 160.612485][ T9437] bond_slave_0: left promiscuous mode [ 160.614297][ T9437] bond_slave_1: left promiscuous mode [ 160.620470][ T9437] ip6gretap0: left promiscuous mode [ 160.826677][ T9447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=9447 comm=syz.5.1072 [ 160.878753][ T42] audit: type=1400 audit(160.809:763): avc: denied { write } for pid=9448 comm="syz.5.1073" name="functions" dev="configfs" ino=7956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.886462][ T42] audit: type=1400 audit(160.809:764): avc: denied { write } for pid=9448 comm="syz.5.1073" name="functions" dev="configfs" ino=7956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 160.971290][ T42] audit: type=1400 audit(160.889:765): avc: denied { mac_admin } for pid=9455 comm="syz.2.1076" capability=33 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 160.973769][ T9456] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 161.462657][ T42] audit: type=1400 audit(161.389:766): avc: denied { getopt } for pid=9480 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 161.514558][ T42] audit: type=1400 audit(161.439:767): avc: denied { create } for pid=9480 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.523689][ T42] audit: type=1400 audit(161.449:768): avc: denied { bind } for pid=9480 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 161.531956][ T42] audit: type=1400 audit(161.449:769): avc: denied { accept } for pid=9480 comm="syz.5.1085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 162.272979][ T9518] exFAT-fs (nullb0): invalid boot record signature [ 162.275798][ T9518] exFAT-fs (nullb0): failed to read boot sector [ 162.278537][ T9518] exFAT-fs (nullb0): failed to recognize exfat type [ 162.477074][ T5744] Bluetooth: hci5: command tx timeout [ 163.087806][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 163.151966][ T5749] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.161229][ T5749] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.165317][ T5749] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.174269][ T5749] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.178821][ T5749] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.346625][ T9548] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1104'. [ 163.379337][ T9551] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1105'. [ 163.382377][ T9551] netlink: 'syz.4.1105': attribute type 7 has an invalid length. [ 163.384870][ T9551] netlink: 'syz.4.1105': attribute type 8 has an invalid length. [ 163.388027][ T9551] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1105'. [ 163.393709][ T9551] bond0: entered promiscuous mode [ 163.395444][ T9551] bond_slave_0: entered promiscuous mode [ 163.399081][ T9551] bond_slave_1: entered promiscuous mode [ 163.402119][ T9551] ip6gretap0: entered promiscuous mode [ 163.410261][ T9551] bond0: left promiscuous mode [ 163.411960][ T9551] bond_slave_0: left promiscuous mode [ 163.415670][ T9551] bond_slave_1: left promiscuous mode [ 163.420125][ T9551] ip6gretap0: left promiscuous mode [ 163.469221][ T60] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 163.495496][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 163.495542][ T9563] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1106'. [ 163.622199][ T60] usb 10-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 163.622219][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.622231][ T60] usb 10-1: Product: syz [ 163.622238][ T60] usb 10-1: Manufacturer: syz [ 163.622246][ T60] usb 10-1: SerialNumber: syz [ 163.625278][ T60] i2c-tiny-usb 10-1:1.0: version 1.00 found at bus 010 address 002 [ 163.628174][ T13] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.840346][ T9583] program syz.4.1112 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 163.856579][ T13] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.887933][ T9531] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.890593][ T9531] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.893140][ T9531] bridge_slave_0: entered allmulticast mode [ 163.896294][ T9531] bridge_slave_0: entered promiscuous mode [ 163.913289][ T60] (null): failure reading functionality [ 163.919180][ T60] i2c i2c-2: failure reading functionality [ 163.935259][ T60] i2c i2c-2: connected i2c-tiny-usb device [ 163.937223][ T9531] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.940386][ T9531] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.942984][ T9531] bridge_slave_1: entered allmulticast mode [ 163.946086][ T9531] bridge_slave_1: entered promiscuous mode [ 163.953594][ T9595] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1114'. [ 163.960422][ T9595] netlink: 'syz.4.1114': attribute type 7 has an invalid length. [ 163.963385][ T9595] netlink: 'syz.4.1114': attribute type 8 has an invalid length. [ 163.967367][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1114'. [ 163.978471][ T9595] bond0: entered promiscuous mode [ 163.980405][ T9595] bond_slave_0: entered promiscuous mode [ 163.982566][ T9595] bond_slave_1: entered promiscuous mode [ 163.985346][ T9595] ip6gretap0: entered promiscuous mode [ 163.990689][ T9595] bond0: left promiscuous mode [ 163.992255][ T9595] bond_slave_0: left promiscuous mode [ 163.995255][ T9595] bond_slave_1: left promiscuous mode [ 163.998317][ T9595] ip6gretap0: left promiscuous mode [ 164.009708][ T13] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.044731][ T9531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.051323][ T9531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.073234][ T9531] team0: Port device team_slave_0 added [ 164.074122][ T29] usb 10-1: USB disconnect, device number 2 [ 164.084814][ T9592] i2c i2c-2: failure reading status [ 164.090802][ T9592] ucsi_ccg 2-0008: i2c_transfer failed -5 [ 164.096379][ T9592] ucsi_ccg 2-0008: ucsi_ccg_init failed - -5 [ 164.099287][ T9592] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 164.103403][ T9592] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 164.106813][ T9592] CPU: 1 UID: 0 PID: 9592 Comm: syz.5.1101 Tainted: G L syzkaller #0 PREEMPT(full) [ 164.110333][ T9592] Tainted: [L]=SOFTLOCKUP [ 164.111678][ T9592] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 164.114840][ T9592] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 164.116823][ T9592] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 164.122789][ T9592] RSP: 0018:ffffc90003e37530 EFLAGS: 00010286 [ 164.124657][ T9592] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 164.127192][ T9592] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 164.130076][ T9592] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 164.132796][ T9592] R10: ffff88802971725b R11: 0000000000000000 R12: ffffffff81e53a84 [ 164.135342][ T9592] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 164.137865][ T9592] FS: 00007f2619e396c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 164.140752][ T9592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.143352][ T9592] CR2: 00007f42d915da08 CR3: 0000000040062000 CR4: 0000000000352ef0 [ 164.145856][ T9592] Call Trace: [ 164.147018][ T9592] [ 164.148220][ T9592] __kasan_check_byte+0x13/0x50 [ 164.150060][ T9592] lock_acquire+0x132/0x370 [ 164.151546][ T9592] ? __pfx___might_resched+0x10/0x10 [ 164.153232][ T9592] down_write_nested+0x94/0x200 [ 164.154802][ T9592] ? __simple_recursive_removal+0x7f/0x5c0 [ 164.156641][ T9592] ? __pfx_down_write_nested+0x10/0x10 [ 164.158393][ T9592] ? __simple_recursive_removal+0x3d/0x5c0 [ 164.160176][ T9592] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.161727][ T9592] __simple_recursive_removal+0x7f/0x5c0 [ 164.163461][ T9592] ? __pfx_remove_one+0x10/0x10 [ 164.164976][ T9592] ? mntput+0x70/0xa0 [ 164.166468][ T9592] debugfs_remove+0x5d/0x80 [ 164.167941][ T9592] i2c_device_probe+0x6e2/0xd10 [ 164.169443][ T9592] ? kernfs_put+0x3f/0x60 [ 164.170773][ T9592] ? __pfx_i2c_device_probe+0x10/0x10 [ 164.172361][ T9592] ? sysfs_create_link+0x68/0xc0 [ 164.173821][ T9592] ? __pfx_i2c_device_probe+0x10/0x10 [ 164.175496][ T9592] really_probe+0x241/0xa60 [ 164.176984][ T9592] __driver_probe_device+0x20e/0x450 [ 164.179123][ T9592] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.181526][ T9592] driver_probe_device+0x4a/0x140 [ 164.183595][ T9592] __device_attach_driver+0x1df/0x320 [ 164.185788][ T9592] ? __pfx___device_attach_driver+0x10/0x10 [ 164.188006][ T9592] bus_for_each_drv+0x159/0x1e0 [ 164.189645][ T9592] ? __pfx_bus_for_each_drv+0x10/0x10 [ 164.191706][ T9592] ? _raw_spin_unlock_irqrestore+0x31/0x80 [ 164.193527][ T9592] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 164.195281][ T9592] __device_attach+0x1e4/0x4d0 [ 164.196835][ T9592] ? __pfx___device_attach+0x10/0x10 [ 164.198512][ T9592] ? do_raw_spin_unlock+0x145/0x1e0 [ 164.200162][ T9592] device_initial_probe+0xaf/0xd0 [ 164.201785][ T9592] bus_probe_device+0x64/0x160 [ 164.203260][ T9592] device_add+0x121d/0x1970 [ 164.204641][ T9592] ? __pfx_device_add+0x10/0x10 [ 164.206271][ T9592] ? lockdep_init_map_type+0x5c/0x250 [ 164.208343][ T9592] ? __init_waitqueue_head+0xca/0x150 [ 164.210602][ T9592] i2c_new_client_device+0x660/0xd30 [ 164.212791][ T9592] new_device_store+0x20f/0x420 [ 164.214854][ T9592] ? __lock_acquire+0x49f/0x1a40 [ 164.216887][ T9592] ? __pfx_new_device_store+0x10/0x10 [ 164.219081][ T9592] ? find_held_lock+0x2b/0x80 [ 164.221085][ T9592] ? sysfs_file_kobj+0xe4/0x290 [ 164.222926][ T9592] ? sysfs_file_kobj+0xe4/0x290 [ 164.224400][ T9592] ? __pfx_new_device_store+0x10/0x10 [ 164.226009][ T9592] dev_attr_store+0x58/0x80 [ 164.227461][ T9592] ? __pfx_dev_attr_store+0x10/0x10 [ 164.229032][ T9592] sysfs_kf_write+0xf2/0x150 [ 164.230459][ T9592] kernfs_fop_write_iter+0x3e0/0x5f0 [ 164.232118][ T9592] ? __pfx_sysfs_kf_write+0x10/0x10 [ 164.233716][ T9592] vfs_write+0x6ac/0x1050 [ 164.235055][ T9592] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 164.236840][ T9592] ? __pfx_vfs_write+0x10/0x10 [ 164.238337][ T9592] ksys_write+0x12a/0x250 [ 164.239689][ T9592] ? __pfx_ksys_write+0x10/0x10 [ 164.241261][ T9592] do_syscall_64+0x115/0x870 [ 164.242773][ T9592] ? clear_bhb_loop+0x40/0x90 [ 164.244512][ T9592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.246712][ T9592] RIP: 0033:0x7f2618f9de99 [ 164.248134][ T9592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.254162][ T9592] RSP: 002b:00007f2619e39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 164.256661][ T9592] RAX: ffffffffffffffda RBX: 00007f2619226270 RCX: 00007f2618f9de99 [ 164.259076][ T9592] RDX: 000000000000000f RSI: 0000200000000280 RDI: 0000000000000008 [ 164.261309][ T9592] RBP: 00007f2619033eaf R08: 0000000000000000 R09: 0000000000000000 [ 164.263794][ T9592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.266313][ T9592] R13: 00007f2619226308 R14: 00007f2619226270 R15: 00007fff4e718da8 [ 164.268865][ T9592] [ 164.269857][ T9592] Modules linked in: [ 164.271707][ T9592] ---[ end trace 0000000000000000 ]--- [ 164.279592][ T9592] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 164.281558][ T9592] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 164.290299][ T9592] RSP: 0018:ffffc90003e37530 EFLAGS: 00010286 [ 164.292421][ T9592] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 164.295016][ T9592] RDX: 0000000000000000 RSI: ffffffff81e53a84 RDI: dffffc0000000028 [ 164.298333][ T9531] team0: Port device team_slave_1 added [ 164.300003][ T9592] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 164.307146][ T9592] R10: ffff88802971725b R11: 0000000000000000 R12: ffffffff81e53a84 [ 164.311742][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.313913][ T9607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.313935][ T9592] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 164.317040][ T9531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.317057][ T9531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.317632][ T9531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.326799][ T9592] FS: 00007f2619e396c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 164.340915][ T9592] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 164.342965][ T9592] CR2: 00007f42d8595730 CR3: 0000000040062000 CR4: 0000000000352ef0 [ 164.345346][ T9592] Kernel panic - not syncing: Fatal exception [ 164.347821][ T9592] Kernel Offset: disabled [ 164.349075][ T9592] Rebooting in 86400 seconds..