last executing test programs: 1m19.105224806s ago: executing program 2 (id=3): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = syz_open_procfs(0x0, &(0x7f00000190c0)='syscall\x00') pread64(r0, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r1 = io_uring_setup(0x6d69, &(0x7f0000000040)={0x0, 0x3cb1, 0x800, 0xa, 0x147, 0x0, r0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000140)=0x8, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m18.954371037s ago: executing program 2 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m18.093892307s ago: executing program 2 (id=10): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x18f887, 0x0) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='ocfs2_dlmfs\x00', 0x8000, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a700000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff3000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x523, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100003402090002000500ee0000ef", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0) read$nci(r0, 0x0, 0x36) 1m17.18332584s ago: executing program 2 (id=27): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000c00) r1 = socket$netlink(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0xffffffffffffff30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x3, 0xfffffff7}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f0000000500)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000200)="54b826ad6e6df8b14f3367377f424695021beddef7a6af4d0acb04a5cd49cdbfe8f8ccacffa28722dba47e2d330d2687066c4c0463fed1d41775b3a1fc31bc1cf74cb657b63a1f808babf236163886cae51a623e148e8e3bc6aa66db8fceb5ed8b353871922f1d7c9406992e123ce2e0eb199155439412", 0x77, 0xc095, &(0x7f0000000340)={0x11, 0xf7, r6, 0x1, 0x4, 0x6, @random="a78b8a3cbc89"}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000380)={0x5, 0x867, 0x2, 0x3, 0x7, 0xfe00}) sendto$packet(r7, &(0x7f0000000240)="41d09292b4f9bada89cd637b86dd", 0x36, 0x40000, &(0x7f0000000200)={0x11, 0x17, r8, 0x1, 0x4, 0x6, @multicast}, 0x14) r9 = socket$unix(0x1, 0x1, 0x0) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='udf\x00', 0x204001, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000000)) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24000084) r11 = socket$netlink(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0xa4, 0x28, 0x2, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r13, {0x4, 0x10}, {0xffff, 0xffff}, {0xffff, 0xffe0}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffb3}, @qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xc436, 0x0, 0x2, 0xfffffffb, 0x71}, 0x401, 0x0, 0x7, 0xe2, 0x9c1a, 0xb, 0x7, 0x18, 0x0, 0x3, {0x1, 0x5, 0x1, 0x3d, 0xfff, 0x181c000}}}}, @qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_ALPHA={0x8, 0x4, 0x1a}, @TCA_PIE_TARGET={0x8, 0x1, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x49}]}, 0xa4}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) accept4$bt_l2cap(r14, 0x0, 0x0, 0x0) socket(0x10, 0x803, 0x0) 1m16.653203454s ago: executing program 2 (id=33): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_ifreq(r1, 0x31, &(0x7f0000000100)={'dummy0\x00', @ifru_mtu=0x10001}) 1m16.619227223s ago: executing program 32 (id=33): syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1000001, 0x8013, r0, 0xf6695000) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) (async) ioctl$sock_ifreq(r1, 0x31, &(0x7f0000000100)={'dummy0\x00', @ifru_mtu=0x10001}) 39.452908052s ago: executing program 4 (id=390): r0 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000100)=[{&(0x7f0000000140)=""/197, 0xc5}], 0x1, 0x36, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000380), &(0x7f00000003c0)=0x4) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r6, @ANYBLOB="010028bd7000fedbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="700033008000e100ffffffffffff080211000000505050505050"], 0x8c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000080) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000325bd7000fddbdf253d00000008000300", @ANYRES32=r8, @ANYBLOB="0c0060f0c481881e6e942fc997aec79900000000002900000008005d006f446f1c08005d00000008005d000100000008005d0049a2ae4e08005d000000000000000000000000000000c03cf406c58699cfbe3588bf66ce3eff15c5e0b125dfcae2cd291030f05d4bbe25cc1258d6ec94296fe7d981effe16891b4f48ddcfd36225be6f7f97f3d42e93033c58"], 0x58}}, 0x40080) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010028bd700002dcdf250100060114000700fe800000000000000000000ae1a9f800000000aa050002000a000000", @ANYRES32=r4, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4080) 39.353510181s ago: executing program 4 (id=391): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000100), 0x2, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x4}, {0x6, 0x0, 0x0, 0x6}]}) 39.260061315s ago: executing program 4 (id=393): r0 = socket$inet6(0xa, 0x80000, 0x3) setsockopt$sock_linger(r0, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x2, @private0, 0xc}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) keyctl$get_persistent(0x16, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000080)=0x1) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3f01"}, 0x3}) sendmmsg$inet6(r0, &(0x7f0000000040), 0x0, 0x4040000) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, 0x0, 0x0) 39.06082225s ago: executing program 4 (id=396): ioctl$PIO_UNIMAPCLR(0xffffffffffffffff, 0x4b68, &(0x7f0000000b40)={0x8, 0x7, 0x9ee3}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x60, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000180), 0x10000, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r4, &(0x7f0000000380)="240000001a005f1414f9f407000904000a00000000000008000f0001000000181fa198b0", 0x24) ioctl$TIOCNOTTY(r3, 0x5422) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r2, 0x3b82, &(0x7f00000002c0)={0x18, r5, 0x1, 0x0, &(0x7f0000000200)=[{0x0, 0xa0}]}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(r4, &(0x7f0000000e80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000e40)={&(0x7f0000000c40)={0x1c4, r6, 0x20, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0xf9, 0xac, "11425d3aa9ef73100d1fee269f21ce40fd43fbcc75cac036c08e62f61f052764c42204033e0bb69ddada2a476cb6a17b292f39dd27a8d9767d4914dfb72a4bb9e0e22d866821ccb60abc30218f1349a4c2f263b1571c3bab25b745b7647c9a7f72202ff730d16b395cc0bd325671cab8c88873a35a6c2907974e20e41c17fbcbbadb54dacc278ccd948d0711163e7d0f9262c448aa84af38400290a37cd7b1e93523312a8439ec4fe2f45f91a90dff582f7636138ced8020a2b02bf485227060bfc5ba845e1cb2e5273b6e74b41ad4de2f8fb91065bdc7f0c41808a22ca25bc6e8b07b4e59644d1cfa053c5e5da2939245d7781bc0"}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6d, 0xbe, "68ba68fe63636859d8c139335d1887c5c32673b28fe0166f42f41e2bbd5dedbe787d4ec4d0d338b0e1c00e95b77141ac0ca952460bce94501fb4f588b5b400d9cb4f0939106493ba030a100f1105f26e359cf714ea80cc0805ea13c2bc2d475ac265fda3e70bf693e3"}, @NL80211_ATTR_STA_FLAGS={0x20, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_WME={0x4}]}, @NL80211_ATTR_STA_FLAGS={0x8, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_AUTHORIZED={0x4}]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r8) sendmsg$DEVLINK_CMD_SB_GET(r8, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x14, r9, 0xf81, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'veth1_to_team\x00', 0x10}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000a00)=""/130) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) 38.906370184s ago: executing program 4 (id=400): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2, 0x7}}, {{0xa, 0x0, 0x6df, @empty, 0x5}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x2ae280) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000180)={0x3d2, @time={0xffffff3f, 0x4}, 0x3, {0x1, 0xfc}, 0x8}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x12000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xb18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdir(&(0x7f0000000140)='./control\x00', 0x5) rmdir(&(0x7f0000000100)='./control\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/image_size', 0x0, 0x16) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, r3, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x4}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x28}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x44000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0xc8, 0x1f, 0x301, 0x0, 0x0, "", [@nested={0xb8, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @generic="f400a489160a", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb47d96219c08c029d1608a487f26fbe816b89f7cb81bff81a8b7a82565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875cf0d"]}]}, 0xc8}], 0x1}, 0x0) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0xc0089364, &(0x7f0000000180)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2}, 0x50) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000400)={0x0, 0x0, 0x0, [0xcd, 0x56bb, 0x7, 0x80000000, 0xfffffffffffffffc], [0x7fa, 0x80000000000000, 0x3ff, 0x3, 0x4, 0x3ff, 0x7, 0x100, 0x6, 0x1, 0x3, 0xb, 0x9, 0x6, 0x0, 0x10001, 0x8, 0x1, 0x2, 0x4, 0x8000000000000000, 0x3, 0x100000000, 0x28000000, 0x3, 0x9, 0x4, 0x0, 0x1, 0x2, 0x5, 0x2, 0x9, 0x3, 0xfffffffffffffffa, 0x100000001, 0x3, 0x8, 0x4f70, 0x5, 0x2, 0x7, 0x1, 0x1, 0x3, 0x9, 0x9, 0x5, 0x5, 0xd99, 0x7, 0x6, 0x10, 0xfffffffffffffff7, 0x9, 0xffffffffffffffff, 0x1, 0x4, 0x5, 0x4, 0x1, 0x4, 0x3, 0x0, 0x7, 0x3, 0x7, 0x5, 0x4, 0x5, 0x5fee, 0x1000, 0x6, 0x6, 0x100000000, 0x3832, 0x7, 0x3, 0x6, 0x6, 0x8, 0x4, 0x0, 0xffffffffffff7fff, 0x9, 0xfffffffffffffffd, 0x128d800, 0x43b, 0x6, 0x9, 0xd1, 0x401, 0x0, 0x7ff, 0xf43, 0x0, 0x1, 0x47, 0x8, 0xffff, 0x400, 0x168000000000000, 0x0, 0x8, 0x9, 0x8, 0x7fff, 0x4, 0x3, 0x6cb, 0x800, 0x3, 0x3, 0x4, 0x2, 0x7, 0x9, 0x0, 0xfff, 0x7ff, 0x9]}) 38.903840561s ago: executing program 4 (id=402): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) r1 = inotify_init1(0x800) inotify_add_watch(r1, 0x0, 0xc0000484) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380), &(0x7f0000000240)=0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) chdir(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/136, 0xbf) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000006) symlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x17}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2]) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 23.833250841s ago: executing program 33 (id=402): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000080)='.\x00', 0x2000775) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000020) r1 = inotify_init1(0x800) inotify_add_watch(r1, 0x0, 0xc0000484) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xa8) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000380), &(0x7f0000000240)=0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) quotactl$Q_GETFMT(0xffffffff80000401, 0x0, 0x0, 0x0) chdir(0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000002c0)=""/136, 0xbf) ftruncate(0xffffffffffffffff, 0x2000009) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x20000000000006) symlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4c840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r0, {0xffff, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x17}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x7}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$sock_int(r3, 0x1, 0x2b, &(0x7f0000000380)=0xbf9f, 0x4) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000000)=ANY=[@ANYRESDEC=r2]) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCXONC(r5, 0x540a, 0x0) 1.68646374s ago: executing program 3 (id=841): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}}, 0x4004010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x2, &(0x7f0000000000)=@raw=[@exit, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}], &(0x7f0000000080)='GPL\x00', 0x5, 0xb4, &(0x7f000000cf3d)=""/180, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 1.616040288s ago: executing program 3 (id=842): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) write(r0, &(0x7f0000000340)="02", 0x1) 1.614991349s ago: executing program 3 (id=843): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r3 = socket$alg(0x26, 0x5, 0x0) accept4(r3, 0x0, 0x0, 0x0) (async) close(0x3) (async) close(0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) capset(&(0x7f00000003c0)={0x19980330}, &(0x7f0000000400)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0x0, 0x0}, 0x10) syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 64) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) (rerun: 32) syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000515c001280110001006172696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r5], 0x7c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r2, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200003, 0xe, 0x7, 0x7, 0x9, 0x40, 0xfffffffe, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 1.557104582s ago: executing program 1 (id=844): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000180)="51b686", 0x3}], 0x1}, 0x4000004) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r3, r2}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r6, 0x3b71, &(0x7f0000000080)={0x20, 0x2, 0x0, 0x8, 0x6}) read$FUSE(r5, &(0x7f0000002380)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f00000000c0)={0x10, 0x0, 0x3}, 0x10) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000001240)={0x14, r4, 0xff99, 0x8, 0x25dfdbfb, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4004194}, 0x200000c0) 1.556500973s ago: executing program 3 (id=845): r0 = syz_open_dev$sg(&(0x7f0000000000), 0xa, 0x100) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_access\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000108feffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="080000002f1c060008001b"], 0x28}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r4, 0x11, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xd6) writev(r1, &(0x7f0000000580)=[{&(0x7f0000000180)="2182f7cd394937bf618abd3cdb16cb827ef971fb87be420cde12ea9d4aeb12b39afe92ad6ad75143b515c01e9938c7dc217e093190443755892c0b0e7186ec6536ca7a9555304c335f47dfe7e51ad0ce3bde109e2a12f6cd156b0a4138fe8a3c2c85745e6f574f96f309277a5c49cb4064b33f872a0cfc5fedbd0ae487e6e61415e4fa9d69208d11570a6b87a46a0107feb1c41f14", 0x95}], 0x1) 1.466303376s ago: executing program 1 (id=846): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) (async) sendmmsg$unix(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x3a) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x2000000, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) write$selinux_create(0xffffffffffffffff, &(0x7f0000000040)=@objname={'system_u:object_r:crontab_exec_t:s0', 0x20, '/sbin/dhclient', 0x20, 0x101, 0x20, './file0\x00'}, 0x50) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2b00b8, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r3, 0x3b8c, &(0x7f0000000300)={0x30, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1000, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x9b1}]}}}]}, 0x3c}}, 0x0) 1.463510452s ago: executing program 3 (id=847): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x2, 0x2000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffc, 0xffdffff8, 0x8, 0x8, "000000000000000000000000000000f30200"}) r2 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) recvmsg(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000680)=""/161, 0xa1}, {&(0x7f0000000740)=""/205, 0xcd}, {&(0x7f0000000840)=""/13, 0xd}], 0x3, &(0x7f00000008c0)=""/19, 0x13}, 0x10001) r3 = syz_open_pts(r1, 0x2000) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000340)=0x8) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x3, 0x0, 0xdbf, 0x4, 0x11, "015b90bf7b9d3135"}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect$uac1(0x4, 0xba, &(0x7f0000000240)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x582, 0xc, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa8, 0x3, 0x1, 0xb1, 0x80, 0x4b, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x10}, [@mixer_unit={0x6, 0x24, 0x4, 0x1, 0xc, "87"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0xc, 0x4, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0xfa, 0x0, 0x8, {0x7, 0x25, 0x1, 0xc, 0x80, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x6, 0x3, 0x1, 0x7, "", "a7"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8000, 0xd6, 0x9, 0x4}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x10, 0x2, 0x4, 0x7, "0364ba6d3b"}, @as_header={0x7, 0x24, 0x1, 0x9, 0x8e, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x0, 0xf800, 0x8, 0xa}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x3, 0xfd, 0x6, "", "9120"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0xfd, 0x8, 0x9b, {0x7, 0x25, 0x1, 0x0, 0x2, 0x9}}}}}}}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x6, 0x0, 0x6, 0x40, 0x4}, 0x4d, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x4, [{0xa2, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"]}, {0xcd, &(0x7f0000000e00)=ANY=[@ANYBLOB="cd03abe874a83c97e565fdb277445e5f63212c2a781f00f3ad429b7a5723596e1857c893c974e642a13131aa7f0b6407e39f0f9936dc59883435a219a3c38938496e882ca78c97d3264bf8aad2d6f2adecb8265acff4f8142c268f9c433fc1747daeb400183b53ad9e0f095bb4c3054f835f13b8cdf3937639f3190f8848b02fdcb70976b38c183d024c7c1722a6fc4e4e14abee0044be66d86424d6049b7de2b6d478ef9987d8eaea2881030a41a2ce10bd985be25dd66440fc9bcf50771970b87510b7873b0e5c00eef7aa87e7f037d24ddc550c2d1a"]}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x455}}]}) r5 = dup(r4) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000cc0)={r6, @in6={{0xa, 0x4e22, 0x8, @remote, 0x3}}, 0x2, 0x9, 0x6, 0xfff, 0x2, 0x8001, 0x81}, &(0x7f0000000d80)=0x9c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000dc0)={r7, 0xdc, 0x8001}, 0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000940)={r6, 0x98, "226d98ac8bb9a265704ebd44efbedbd76ae0433639c3892b63ac254f1f1bb3cd6f971be5c0100d5d374a5b2643c4e73199eb50b656b2d4583b522edd300c97617cb1a1a3d792470c7f7fcbf3bf17b627292b59562be1ee38c1b49a4b87efd2668c364834a812646bedd0958508be98c6c2d54c05389f04426b11f1d602594b35a7425f9aa68eadff3dcc4459e983895e0a89f97ddd49b4f9"}, &(0x7f0000000a00)=0xa0) write$UHID_INPUT(r5, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) r8 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r8, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r5, 0xc03064ca, &(0x7f0000000200)={&(0x7f0000000180)=[r9], 0x0, 0x20000ea25, 0x1}) 1.402237413s ago: executing program 1 (id=848): openat$vcsu(0xffffffffffffff9c, &(0x7f00000000c0), 0x20200, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x17, 0x16, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r1 = socket(0x400000000010, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) openat$autofs(0xffffffffffffff9c, &(0x7f00000023c0), 0x20180, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001380)=ANY=[@ANYBLOB="6c0000001000370400"/20, @ANYRES32=r5, @ANYBLOB="83040500000000004c0012800b000100697036746e6c00003c0002801400030080000000000000000000000000000000050009000400000014000200fc"], 0x6c}, 0x1, 0x0, 0x0, 0x9005}, 0x0) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000580)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@delqdisc={0x3c, 0x25, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xffe0, 0xb}, {0x0, 0x5}, {0x4, 0xfff3}}, [@qdisc_kind_options=@q_atm={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040085}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5b, 0x6, 0x5, 0x101, 0x2000000}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 1.284947428s ago: executing program 1 (id=849): syz_usbip_server_init(0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x2, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0xc000, 0x8, 0xf8, 0x41}, {0x1f76, 0xba, 0xeb, 0x8}, {0xdaa, 0x70, 0x9, 0x2}]}) 877.13261ms ago: executing program 3 (id=854): r0 = socket$netlink(0x10, 0x3, 0x5) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "4727aeb1df84400044fd50869e272c44915a18e296d8c050d854e88d99330a3bd7c7daadeba364"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3cf1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x956}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1bc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf51}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) (async) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xc0, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x2b, 0x3, "4727aeb1df84400044fd50869e272c44915a18e296d8c050d854e88d99330a3bd7c7daadeba364"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x6c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3cf1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffff8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x956}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1bc}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xf51}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@newae={0x54, 0x1e, 0x800, 0x70bd2a, 0x25dfdbff, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d3, 0x2, 0x33}, @in=@loopback, 0x4, 0x34ff}, [@offload={0xc, 0x1c, {0x0, 0x1}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x9}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x400048c5) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0xa4, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x33, 0x8, "ac93d0796ed54cc8ad3b3b5c6a7c18057908922c8c49a31b458c84844a7bf83943005911bb821445e0c29fc4f441a3"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x26c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x1a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffd6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x208}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc9ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x906}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5a9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46c3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c0a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7d4e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_USERDATA={0x6b, 0xd, 0x1, 0x0, "ac883bc450bdb3ca0f68f5224a46a02259c54ef760a4049e57d864cba247776236af302972ca2c438216873ab6d283dfc0f134bd0ca7fb2844079a2590028aef6b16eee7698379588fc6a01a8204082b2588519a5b33b949f5fae61c13ec500b69df1f26710980"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x150, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x110, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}, @NFTA_HASH_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x41) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000840)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELOBJ={0xa4, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_USERDATA={0x33, 0x8, "ac93d0796ed54cc8ad3b3b5c6a7c18057908922c8c49a31b458c84844a7bf83943005911bb821445e0c29fc4f441a3"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x26c, 0x9, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x3}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x4}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x1a0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x40, 0x2, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x28}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x4}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0xf0, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff0001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x101}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffffffd6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x800}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}]}, {0x54, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x208}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xc9ee}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x906}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffff5a9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x46c3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_CONCAT={0x64, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8001}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x80000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9c0a}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}]}, {0x2c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff7d4e}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}]}]}, @NFTA_SET_USERDATA={0x6b, 0xd, 0x1, 0x0, "ac883bc450bdb3ca0f68f5224a46a02259c54ef760a4049e57d864cba247776236af302972ca2c438216873ab6d283dfc0f134bd0ca7fb2844079a2590028aef6b16eee7698379588fc6a01a8204082b2588519a5b33b949f5fae61c13ec500b69df1f26710980"}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x150, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_EXPRESSIONS={0x110, 0x12, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @numgen={{0xb}, @void}}, {0x34, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, {0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0x7ff}, @NFTA_HASH_TYPE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x28, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz1\x00'}]}}}, {0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x488}, 0x1, 0x0, 0x0, 0x40000}, 0x41) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x104, r3, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x7c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x80}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_ID={0x44, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_DEVKEY={0x44, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x400}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x10001}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7ff}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc0}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x44804}, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000bc0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf38}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x300}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xdc0000, 0x200, 0x400, 0x8e5, 0x7]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0) (async) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x68, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x4c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xf38}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x32}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x10}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5b}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x300}, @NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0xdc0000, 0x200, 0x400, 0x8e5, 0x7]}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3e}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x880}, 0x0) recvmmsg(r0, &(0x7f0000003b40)=[{{&(0x7f0000000d40)=@qipcrtr, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000dc0)=""/212, 0xd4}, {&(0x7f0000000ec0)=""/36, 0x24}, {&(0x7f0000000f00)=""/44, 0x2c}], 0x3, &(0x7f0000000f80)=""/221, 0xdd}, 0xfffffffa}, {{&(0x7f0000001080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001100)=""/208, 0xd0}, {&(0x7f0000001200)=""/156, 0x9c}, {&(0x7f00000012c0)=""/1, 0x1}], 0x3}, 0xeb}, {{&(0x7f0000001340)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000017c0)=[{&(0x7f00000013c0)=""/121, 0x79}, {&(0x7f0000001440)=""/248, 0xf8}, {&(0x7f0000001540)=""/248, 0xf8}, {&(0x7f0000001640)=""/84, 0x54}, {&(0x7f00000016c0)=""/2, 0x2}, {&(0x7f0000001700)=""/174, 0xae}], 0x6, &(0x7f0000001840)=""/181, 0xb5}, 0xd166}, {{&(0x7f0000001900)=@ethernet={0x0, @random}, 0x80, &(0x7f0000001a80)=[{&(0x7f0000001980)=""/92, 0x5c}, {&(0x7f0000001a00)=""/128, 0x80}], 0x2, &(0x7f0000001ac0)=""/69, 0x45}, 0xf17}, {{&(0x7f0000001b40)=@sco={0x1f, @fixed}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001bc0)=""/2, 0x2}, {&(0x7f0000001c00)=""/115, 0x73}, {&(0x7f0000001c80)=""/20, 0x14}, {&(0x7f0000001cc0)=""/141, 0x8d}, {&(0x7f0000001d80)}, {&(0x7f0000001dc0)=""/249, 0xf9}, {&(0x7f0000001ec0)=""/7, 0x7}, {&(0x7f0000001f00)=""/181, 0xb5}, {&(0x7f0000001fc0)=""/79, 0x4f}], 0x9, &(0x7f0000002100)=""/4096, 0x1000}, 0xfffffffc}, {{&(0x7f0000003100)=@nfc, 0x80, &(0x7f00000031c0)=[{&(0x7f0000003180)=""/62, 0x3e}], 0x1}, 0x7}, {{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000003200)=""/205, 0xcd}, {&(0x7f0000003300)=""/119, 0x77}, {&(0x7f0000003380)=""/98, 0x62}, {&(0x7f0000003400)=""/214, 0xd6}, {&(0x7f0000003500)=""/166, 0xa6}, {&(0x7f00000035c0)=""/118, 0x76}], 0x6, &(0x7f00000036c0)=""/86, 0x56}, 0x4}, {{&(0x7f0000003740)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000003a00)=[{&(0x7f00000037c0)=""/251, 0xfb}, {&(0x7f00000038c0)=""/6, 0x6}, {&(0x7f0000003900)=""/199, 0xc7}], 0x3, &(0x7f0000003a40)=""/222, 0xde}, 0x3e}], 0x8, 0x20, &(0x7f0000003d40)) r12 = syz_open_dev$MSR(&(0x7f0000003d80), 0x10000, 0x0) r13 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000003dc0), 0x4c200, 0x0) r14 = syz_open_dev$vivid(&(0x7f0000003e00), 0x1, 0x2) ppoll(&(0x7f0000003e40)=[{r12, 0x202}, {r9, 0x1008}, {r13, 0x4}, {r14}, {r0, 0x82}, {r9, 0x200}, {r0, 0x6201}], 0x7, &(0x7f0000003e80)={0x77359400}, &(0x7f0000003ec0)={[0xfac]}, 0x8) r15 = socket$nl_generic(0x10, 0x3, 0x10) r16 = syz_genetlink_get_family_id$team(&(0x7f0000003f40), r13) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000004000)={'syztnl1\x00', &(0x7f0000003f80)={'syztnl2\x00', r10, 0x29, 0x5, 0x3, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x8, 0x7800, 0xe37, 0x1}}) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000004000)={'syztnl1\x00', &(0x7f0000003f80)={'syztnl2\x00', r10, 0x29, 0x5, 0x3, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x7, 0x0}, 0x8, 0x7800, 0xe37, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r9, 0x89f0, &(0x7f00000040c0)={'syztnl2\x00', &(0x7f0000004040)={'ip6gre0\x00', r11, 0x0, 0xf, 0x1, 0x0, 0x40, @loopback, @mcast2, 0x8, 0x10, 0x10001}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r9, 0x89f2, &(0x7f0000004180)={'syztnl2\x00', &(0x7f0000004100)={'ip6gre0\x00', r11, 0x6, 0xc, 0x9, 0xd, 0x4, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7, 0x8000, 0xffffffff, 0x14000000}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000004280)={'syztnl2\x00', &(0x7f00000041c0)={'syztnl1\x00', r10, 0x8780, 0x7800, 0x8, 0x4, {{0x24, 0x4, 0x1, 0x11, 0x90, 0x68, 0x0, 0x2, 0x4, 0x0, @broadcast, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x2c, 0x3, 0x3, [{@multicast2, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x27, 0xbf, [@multicast2, @private=0xa010100, @broadcast, @broadcast, @private=0xa010102, @private=0xa010102, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x18}]}, @timestamp={0x44, 0x18, 0xc0, 0x0, 0x9, [0x200, 0x7, 0x74d1a893, 0x1f2f34c, 0x1]}, @rr={0x7, 0x1b, 0xbf, [@loopback, @empty, @loopback, @dev={0xac, 0x14, 0x14, 0x29}, @local, @rand_addr=0x64010100]}, @rr={0x7, 0xb, 0x53, [@private=0xa010102, @loopback]}]}}}}}) sendmsg$TEAM_CMD_PORT_LIST_GET(r15, &(0x7f0000004780)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000004740)={&(0x7f00000042c0)={0x480, r16, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r10}, {0xb8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4e}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r10}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xccd}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r10}, {0x150, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xdc9b}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x401, 0x4, 0x6, 0x28}, {0x5, 0x1, 0x1b, 0xfffffe01}, {0x40, 0x6, 0x3, 0x81}, {0x7f, 0x8, 0xe3, 0xfffffffe}, {0x1, 0xfe, 0x9, 0x1}]}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0x184, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r19}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r20}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}]}, 0x480}, 0x1, 0x0, 0x0, 0x40}, 0x44010) socket$alg(0x26, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) (async) socket$rds(0x15, 0x5, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x100010, r15, 0x6) (async) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x5, 0x100010, r15, 0x6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000004940)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004900)={&(0x7f0000004840)={0x94, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "f2d8625d8a8167d79c6414638b3c5f6b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7e}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8f132fa2e435584a0a97d143b014603796d7c10cf3d07dfef9e470c11a6a16b7"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "2e3cbf19578176f08b9ef5b995ddcc31"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x94}}, 0x80) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r2, &(0x7f0000004940)={&(0x7f00000047c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004900)={&(0x7f0000004840)={0x94, 0x0, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "f2d8625d8a8167d79c6414638b3c5f6b"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x7e}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "8f132fa2e435584a0a97d143b014603796d7c10cf3d07dfef9e470c11a6a16b7"}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "2e3cbf19578176f08b9ef5b995ddcc31"}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x94}}, 0x80) 701.354709ms ago: executing program 1 (id=856): pselect6(0x40, &(0x7f0000000000)={0x6, 0x4, 0x76, 0x400, 0x53, 0x3b5, 0x7be, 0x392}, &(0x7f0000000040)={0x6, 0x800, 0x5, 0xfffffffffffffffe, 0x9c4c, 0x4, 0x5, 0x6}, &(0x7f0000000080)={0x5, 0x4, 0x9ce6, 0x400, 0x3, 0x9, 0x8, 0xa61}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x675c]}, 0x8}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) 700.905222ms ago: executing program 1 (id=858): socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x1) pipe2$9p(0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000000000000b704000000000000850000003300000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f018, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00@', @ANYRES16=0x0, @ANYBLOB="000227bd7000fcdbdf25190000000500a2000800000005001c0005000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x40008d1) socket$inet6_sctp(0xa, 0x1, 0x84) 598.23921ms ago: executing program 0 (id=859): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000000)=0x5, 0x4) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$vim2m_VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000500)={0x9, @sliced={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20]}}) 596.508295ms ago: executing program 5 (id=860): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000001040), 0x80, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r1 = socket$unix(0x1, 0x1, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) bind$unix(r1, &(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e) bind$unix(r1, &(0x7f0000000180)=@file={0x1}, 0x6e) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000004c0), 0xf02, 0xf0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360", 0x41}], 0x2}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/80, 0x50}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x40}, [@NDA_DST_MAC={0xa, 0x1, @random='\b\x00'}]}, 0x28}}, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r5, &(0x7f00000021c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002180)={&(0x7f0000001080)={0x10f4, 0x14, 0x100, 0x70bd2a, 0x25dfdbfe, {0x22, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xda, 0x1, "0718e0827bf028c67acbb86483cd8734dc186202f3497e5d027ccbc340095bf6b71761743be3e9175d0dfe7685c92652a78643d0bfa0d57d27d57719fdb3fe8f2fc64f9d4526af463d43e58b540ea70695809cba73fea955209c9e3fd7b56399d4e15063fdf5f60b69a41a5c104b0ab6055cc7a920496c54829b13d5e48ca23d5b72de6c5ce78b2fd8d3525764972079826541fc068509cb8d34cc43e1bce00332109fc77550d62d69cdb8719119e8d0030bb75eb203bd677f8252dd4365de62ac0f254c7a19aa6b4c3f1429f299bc824895d581c431"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "fc4ea7250debd376143a6b86790b4650a0ab9a7dc019b55524cfcf5e116527ef00d687e7e2cca3a8e553575f5dea84872078b56acd6cbb6fd17fe7f5024906d255bee8d18887ca2641020fa696efdc44684835fe928b20087af1835c515467935188b3470f6079b0d18170f1d44717123fa5f797fbb5899c5751ac475b2a301276ed17b839fa2bd6522f1db748f8842a3f749643b5f85bd9decd5e21e1f4736a1059ddb867d6d95ea091465d25eca85d4d1179e4e040852b5d8521fc65754a7f4b20982dae8ec589ab08c231b411ca06dc185fba1a40891f42e6e07081ce38bde2ad6dbfa6d7b1a31f39f551f04ebf7dd1a2d18d7ddda3efc98d0656531179a659db671afda3c79e739cdf197160970703f515f83f4b906260cf4c66b8b37209605d12ca6783eb7b1a4ef4db8bb7fd24be90e3761d7deedfea8170de96587bd55e415da3ff8481c0e9d4e38373b996fd7ece20ea027c38724113dc88b71eca95ed0224d1b0ec7195c3e7c319a7bc5ff5b6005568c1e48930646919eef62229412d637bfeb0db38048c80172613148eb3dffd21f4d09cfd1e20d08c1f3314bcc5339a6a4d5b166d97bdc8e5bb2fe06af83337ac853faba798ff760f6d339c06a6104ba1a9aa30ddca510ccb5e404b009f8df3262eae4a483888555ee3ce5351a2bc40b1339b6ba4871438f149149b2b4909ed63721c6d81d1ed8c8e77ec0324a30a74e02cff5c4a00d754bdde2aa669de3d7a55ea803ea0cd237d686c4e3da379c3e4f94809df1306b337fdb53370240422482d16d61fe19d7fd7b5735ddd94408a9cf38f8642ca68f894edbc1dab816d6e1bc4a538d40545f2dad263c55ea2934c25f42dd6d5f34cadac9a5693fe6f6a418780e5eb664295659346d57ecfab5fcb3de83834658c6e83bbc976d87ba949bae3cd496b6b4a098474751a6f1ae6e372c8cfa97c9ac33e212f77230f0f58240e6998fdd97c1ee7884024360f9773bc80e77fbce5b95c791a7068e3b54aaf464b08e39c5f34cc351cfe542788705d778da5ab5f28d9219a67a50da7dc527d90165384662cf7448255725ad33e87053ba3e7a6cb49f6cc226233e9b364956171b48358c06d8587a785f85122537525b4fed6a8037846c84cd6e6ae1c7e18448091239f148892fe55ec93a77e846c2d07b18f08d4ed87c201d77429a6c11d5b66e35b2a706d293293f6feeb40cd9751db49d636c149007379e2d1f344c35c65a588611d33796738541bf91352090607cfc85452e868d6e15ce4596ed28c7bf469f0afb405b5224476eff39a60cf5350088b1886ccceed2c34de67f7e9d4061764b292b2d126b40d0452feb72e42d9a54527333b49e94a11e2cf4b59ccf26f8c2abcd54f40a06eeac0e2345e5e06de8cdda9c7079377973859b53324673b17233d75ae997bfc26f7416bf4c440bb9817b02b80a0df7d998f024a3a2e8ab3a97f39734f6ce577f08fcc9871a11c506b3b72bc562c03f04a4fd9b45057916d5414b2a82505564ec17e50a134c97c6fcfba01c142573b7f2d1a138eddddbc19afb537f4150224416f58b08e65ec16aae6c165dac3872acdb72a09e8b3dc15e636758f569fc0b700e9ce96f64b3e428266d5298a82aa27128c6dec8b18ae46c22e0b2918f66a28074a73613499cdccaf20bb7e06e43f3a47808b3d0bddb0b70b51c1bf234fbebfa1d4331e0eb1cabc47769a6389a6c089a71900bab1ec544b2cb144e6cda71826af2be076761520d89c9ecf5868a50d84a52cdc6d7bacab37d9af2846c0761173ffc2a1bdcd2a4e948121fb960544581516bf641971e318d45013bd251ac37d795c9c8117426f703d2127650021f20b529fd369a93c0054576700b1877a9ff28c37bd7f6bd70978e002cacba15753842e2f6f5ce6f6aedca6cfed60d05445a98432c4af6f85e8b11b441feb581e9ae04b1a0d91bae4781951ab0b5776e93383f4af545faf023ad5308a0ceb7465fea239fdc835a47ca568bc5ac7e7664d299633ba10e2597f339733b2f035bdb820ca58b0ca4c4ad55d3f8fe90b869ed93054ac647a13813bf61d7e4f5c2c0b96591107bf144d15f002f58e18ad1c23c5a7d939f0df6d1cb4c43f5d5233810c3a1f9080fc9187c4d0e4e7ad539008bf081caac3a7e9a3cc61150c7a8b2ab8b35e4743e0602bf78025c413229b9986ad29b8157fc924c4b71728115aadf659e558550d66c46e7f50639c3c63adad5122d67132abc189934cde9b5f5a36f3dd5b4f81336a247016359ffc71b3f826074050f1cf815427b1c7dbbbef973fe69e8b51f525271dc1c6faa9b47264c4c4595ea88b80583caad92a2c859569bce77d14cc1636743fff2e14005acc43859fbe93996b54f0fa7c19d7d94621d88c15c8a8a9a4641560d42370375df0b0e2682829d2ba450bc8087adab0c174ea75aa716162615a22648f84fc35180b04b5c4ec83aa571112f18daa44612e4477f4eed7a6a56fceecc65dcbf934630b028c5e5c9902a54897cb70f2bb5e9db197cd0f0e0ea34757f2433227afa912cd18cb4deadb031d06e4b4934a0531ef805b9936fc1053e941bd99cadf76a46c743d0bf1dc268c717cbd91a4e5f5658474d8027c06b9c7e3f5d8d89ef70ff989d3390a5e3a9ed161f4322cc62de45fee91f3d5f3bc0d84a906e640b94022aaf38f3fabfc0cb84fce6f81c49fd909691af2948c2ac47a50b3de1f2ba653152b81ddfc6a6e6ef8b4bea26d32bf6b061d783ace0d504016e71e99836056630f86b6ecf1c5ece51cee522997d91043a959e87934d0cdc147c4b3065f1959c35e52ca1320f5cc215b94e5560a77c43e87360b499610a03952814d900eda273227e9caea9e3edc5525d03ba288fda8b64b2dcb96bdf3c11b15b9cdfdf86117bbc8199e2c9aa354aee83ff8f4bc6c57b463a5c7901c75f85880351524c6f902a93a08277d9909b659c1b72d23319d07e6933be3cac6708dfe17461cf1784e1969b5da4c31c8690a3c0ed672a79cc27b6b592505045e64c21199e51441555e244652a873112d8c5ba1e5c59a28d00a0570584bbc4e3d3505e1650d5c3533ef43ef3ca5a67e9f42dd4d9aeb835e9fa9bef332b18bdb13f047c9be7ae728c6dd49f40b038f2c32f415919107b69feeab121e3eca764d2bd863773711147a4759a00aec5dcc4d3ef82a2c69d2440b420af284efe4e833cf0773e0ed71ca5a9609a5d83fe1024ece35cf34d2bdd53e8b8bf4fe0c6d0ba276b40785ffc93551025d2119eea91d7c79261bebeed0fed9c500dbf26c8a8e88a14515b5104a9a1a594bf153e97cb1cc46e1617b02d846271554a3460b684c9f7288e15dff31861ae98f69001bf746e55624cd2601bd8eb4bde941d5c7528be4fed77819df562e64ebcfe92a146bf21dcfab4e9e15b6ecf9f6e8a829784229cfaa63896bf5cf0758c19ae97b14c4bff9592f122c6ed68919c7d8d43954c01a7e801b4897147ee15c373da1ceecbb84c5e6712ae69b1f6e19558c0a2d54f994820126b122163a0e9de0a7eb34c9325ab5f928e41cc60680953ee633a974074f60d968bca47c1cb06436e85d08b071c1e49e3d766b94ab13388d5574acf6b81cd15b1f76e61bf057599ee2ee0485c25afc686299237352f3cd2b12a0cb72d722514d46e762afa1d65ef21fc43945369dae7d6d66704af6a0a4911d8a788af4c548dde71ab3fd4f6955013c86cb2fd553ebdd4fde062d3bd30f179146b52de78d04d81740e3e0ceba8615d4a40aef657f268753856058d84aead142834cd0dcfc0f93c803cfd42adbb2f2f891e2329fc0c3d961bc4a2322f239f5c8817db6f88e866ae62d2a728bc80268e0418a13a1f2e2e88b57566d86257d1eb2a8faf3f1bfe229a983c4ccb060c47879d35dd6c80ac10e5cc797e8b063dea7e5184480858097ebfe0a4a2a233bb48582d56f4f1a85efa3b7b55690007b500df5db90ba3b4dd4d4e60634e57bd3da16d64a7faf85e44fc671b007edd2904504b0002ccefb1086d4ccdad13587cc3a26cc1d8d293f25614977725035f3ad1968e5a4b41e2d6a6cb5f04e53e1155036ae37f5ca598c42947dac1bed70d28df4e0f63b92393a77ca9fe5d4ddd0628cd66c39aa345e4a63062af4032eb3dfa78087f1c710947dee206c9c0996abf3f3a436c2966dc882a842f0f44406a71b51f006963f9c4b7e3e324bbabebc7ba93ddbc85fc99c74fddde5aa380d2ee7003f85ebaab609dc9f86f1ba60a437ac9beb104c07ddbd65e50f8f8e7848987ab8a956ac20a34b9f0098b52598c8bc66ef09247991602d093f7fdac6fe2a7920b43c038c5abb2a306a99050aeb4ecad4715cb28eafc3c74b3e003346ffcca2545495296721049f794407e5757794c642fb6f70edf0e5ca5f29b109aeb9e8a0d7b61d0a205975929479a0feca061cef6de557e401c6ee5425df1108aa2c5ce3fff54ddd8c23e4eb82765d9eb3f49237ddc82c2cd6cefac1559337e02d3908482fc32fb8e90d041d0b819cb14d1156b2cf8a3e9aa04b2b0c46312b6b8ed30c538c4b9885c1c03b20628dca85290ba741551070532d8c616f729e6a1c8229c1ebf74fb9556d0e14f6830101b6fceb1beefda287555a90b4a56f5cc50d4440c1fd10f786bc53d053ae9a61f4a25792481cc3556a9c4f3e03d5ea5fc37116e1e2ebdf5829feedfa0e172597c5eac1f4299d04e8b6a4e4cee4cfcb234d82906242bc51faef7a6536a9b6b90a212addc9c39852b4180ea33a7eda67840616423d0e7d77a5da17550634654fdfc09d08b90312c3136aa38cf5c9c5ac196843b6805cacf0e83665d9dd56a89072b4e6eeb160415ed3d063b4d7a3937166c5231063fb800a6e0e31ddd7fbc9bd65190bad070b3ed0fbfd5684069a2d5d30e2e528bf628ba67da3a77f44ff4939b09ee05cdd27ee69dd8246bdb78a95ada521483245f81814e305504a691f9ba9ea680a015607914e8425268e18437241e7082caa0019cfcda5230e4621a148225d7c32aa4dd66cf0039bbc7fea3d1c3142a4e5979c98f037154670328fdb4e5429920f2bd59e5e951c34f15db6968214037d7022ce23119d446da24e9ad7c16e521407e23599ee573c0b3c8243f40f9cc99aafa225623e50fb0bc52e46861ddbff392bae0af9756d80ca53a9b6333da5cfb9879c333224c70016f7fd471ffa2f461f722e054a311e4c9bc4159da5a2e691a6fae6ba53b495f4fc3784b8761cd8784c3b9ba5293e7c7adefb21c2a15af26f6fc8c595a8e2f4ee051db0fa982ea6fd2facec44afcf71fe61a56d6d9925284bb9480db8c026e3b6ba0e6aa1a30d0b0a44d53cc57dd6e0400fdc1f442b752ee0ca95440a9f36547e3c0f3393364ff3de98553d01b2e9590b3fc359722de77a4dc80b05b7a162b889895d7cba0aa0a9fbc8cef03eddee01a86974fd94fe4decbf451438ecc195ae4e71a20071ad1a8416ba795b3ebc20b32499c833033f461d345f5848a432aae6ddf95e0cd6f28e71916cf142eb422694bb985b03321c717d9e71500d91f6d9ce967fb74db7cd58d56ab97b7bc5d1370c7da5fac6e217eb1d7dc8afd570c19b2c0dc701fbbe545fad07bb83c4aa53a569ad039f720393dea0df8f8f78aa22a1e4569133015628f13ab30c7882c9a86bf65f9192137abf45480f40e62c48f19fb8a7643b82c4162a97dd32a7fa6efa1ff9b31a6fe60d351473d02e543838468744ee72edb31a0de8db48ec779d4f48703152d5c115cdc19380d6c4c115a08d5966fdb2bf0859bb6798182e25e82ca50a3f"}]}, 0x10f4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) ioctl$KVM_RUN(r0, 0xae80, 0x0) close_range(r6, 0xffffffffffffffff, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x121080, 0x10) 596.253661ms ago: executing program 0 (id=861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_io_uring_setup(0x1dd9, &(0x7f0000000140)={0x0, 0xed2, 0x1, 0x3, 0x3d7}, &(0x7f00000001c0), &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYRESDEC=r1, @ANYRES8=r3, @ANYRESHEX=r2, @ANYBLOB="758f2f892d4551a27875878be26fbf8f1380a8c27d9cc65dee99ba6d16c41de38d1f31c5bb00dbe840d392537aa30d3b523057cb5d67efd879c2c60854806eb1efa8f7372ab4fed815ea028b7b5c276d79795dfafe536d58f7d5c1ac51443a707f7558ac4c47ec3eea6f2e4bad881c00fcff834aed3808fbac5569f31916a74752b67bb46c3ac0474cdb085f6eff54d097b6bd841ef1178a28074e78c04674f59eb89265c7341898bf4cc42d8044d57d1a7f3923f6caf89fd22ca572ca9ec6956523c7c8c822cd885651d7e56421e56a6198ab6b2156eb2e7378744aba3e06e004349a73180b7890ef62921fd5", @ANYRES32=r3], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a14000700020a010200000000000000000020eef714aa9961edc3f500000813fffff41100010000000000000000000300000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4048000}, 0x880) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) setrlimit(0x6, &(0x7f0000000040)={0x0, 0x6}) sendmsg$NFC_CMD_ENABLE_SE(0xffffffffffffffff, 0x0, 0x20040000) timerfd_create(0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x20, 0x10, 0x0, 0xe0, {{0x5, 0x4, 0x2, 0x2, 0x14, 0x65, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @private=0xa010102}}}}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030009ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20000000}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd, 0xfeefffff}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xc}, 0x94) 504.27552ms ago: executing program 5 (id=862): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000001c0)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "07bbc136c963254c66c42afcdd7d26931300e264c4feb642c8c42699f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) sendmsg$alg(0xffffffffffffffff, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[@assoc={0x18, 0x117, 0x4, 0x2b7}], 0x18, 0x4090}, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, &(0x7f0000000280)=0xfffffffe, 0x4) shutdown(r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0x50) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) recvmmsg(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r4, 0x200, &(0x7f00000000c0)={&(0x7f0000000040)=""/128, 0x80}) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r5, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000200)={0x0, "5d9b6481699c254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ed9077d85d879711dd8bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1", 0x2f}, 0x48, 0xffffffffffffffff) keyctl$setperm(0x5, r6, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000100)={0x2, 0x1, 0x0, 0x0, 0xfffffff7}) 439.90209ms ago: executing program 5 (id=863): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0xa3, 0x30b003) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f0000000100)=0x1ff) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x10c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000050008"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x400000000000235, 0x0) syz_clone(0x2204000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_ublk_setup_io_uring(0x3cd1, &(0x7f0000000300)={0x0, 0x32c3, 0x4000, 0x1, 0x14d}, &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)) r6 = syz_io_uring_setup(0x160e, &(0x7f0000000180)={0x0, 0x69b3, 0x8000, 0x0, 0x32b, 0x0, r5}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000600)) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40240) ioctl$SG_GET_REQUEST_TABLE(r7, 0x2286, &(0x7f0000000440)) r8 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r9, 0x5452, &(0x7f0000000180)=0xffffffffffffffbf) fcntl$setsig(r9, 0xa, 0x12) ppoll(&(0x7f00000001c0)=[{r10, 0x1010}], 0x1, 0x0, 0x0, 0x0) r11 = dup2(r9, r10) fcntl$setown(r10, 0x8, r8) setsockopt$sock_int(r11, 0x1, 0x2e, &(0x7f0000000000)=0x7, 0x4) tkill(r8, 0x13) syz_io_uring_setup(0x1941, &(0x7f00000004c0)={0x0, 0xba0c, 0x10000, 0x2, 0x35d, 0x0, r6}, &(0x7f0000000140), &(0x7f0000ff4000), 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r12) sendmsg$IEEE802154_LLSEC_SETPARAMS(r12, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000080)={0x20, r13, 0x5, 0x70bd29, 0xfffffffe, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000d0}, 0x40040c0) close_range(r1, r1, 0x0) 439.406744ms ago: executing program 0 (id=864): r0 = syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x347802) fremovexattr(r0, &(0x7f0000000040)=@random={'osx.', 'g]+$}\x00'}) 439.144447ms ago: executing program 0 (id=865): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa00fea0"], 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) execveat$binfmt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000700)={[&(0x7f0000000580)='!\x00']}, 0x100) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x78]}}, {@size={'size', 0x3d, [0x0]}}]}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}]}, 0x28}}, 0x40000) 343.502365ms ago: executing program 0 (id=866): mmap(&(0x7f00002ad000/0xc00000)=nil, 0xc00000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) semctl$GETALL(0x0, 0x0, 0xd, &(0x7f0000000b80)=""/123) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000580000/0x4000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x9, 0x2) syz_clone(0x4d000, 0x0, 0x0, 0x0, 0x0, 0x0) 66.36742ms ago: executing program 5 (id=867): r0 = socket(0x15, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f0000000000)={'gretap0\x00', {0x2, 0x0, @local}}) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0xc, 0x0, &(0x7f0000000180)=[@acquire, @register_looper], 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r4, 0x4, 0x4400) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r2, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4005}, 0x41) (async) r5 = socket(0x2b, 0x1, 0x1) (async) r6 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) (async) r9 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) (async) r10 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r10, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$P9_RMKDIR(r9, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) (async) write$char_usb(r9, &(0x7f0000001600)="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", 0xfec) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r11, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) (async) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)={0x1c, r7, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24008100}, 0x0) (async) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x5}, 0x4) syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmmsg$inet(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000000000000000000007000000110000000000000000000000010000000700000000000000be53c92cd0e94c0c21d2d34b72612428cf32ebca4c57a4fa70a0fea50113d7b5ef1a17fd6db7c0f82954333317610976db8ce30ffe54ed"], 0x28}}], 0x1, 0x20004004) (async) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 65.314919ms ago: executing program 5 (id=868): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, 0x0) 383.09µs ago: executing program 5 (id=869): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) r1 = dup2(r0, r0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x7e0) r2 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xc1) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000140)=0x4) ioctl$mixer_OSS_GETVERSION(r0, 0x80044d76, &(0x7f0000000180)) getsockopt$inet6_buf(r1, 0x29, 0x2d, &(0x7f00000001c0)=""/161, &(0x7f0000000280)=0xa1) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f00000002c0)=0xc) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000300), 0x180002, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000340)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(r3, 0xc010640b, &(0x7f0000000380)={r4}) read$dsp(r1, &(0x7f00000003c0)=""/120, 0x78) r5 = add_key(&(0x7f0000000540)='ceph\x00', &(0x7f0000000580)={'syz', 0x3}, 0x0, 0x0, r2) add_key$fscrypt_provisioning(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)={0x2, 0x0, @a}, 0x48, r5) ioctl$RTC_PLL_GET(r1, 0x80207011, &(0x7f00000005c0)) keyctl$KEYCTL_MOVE(0x1e, r5, r5, r2, 0x1) r6 = add_key(&(0x7f0000000600)='id_legacy\x00', &(0x7f0000000640)={'syz', 0x1}, &(0x7f0000000680)="80bcb9a087cbabb7d9fc8399d44a03a7d0cc202cb01b99b1cf2bed7573de220b433e08a2a48c4914b1112002cbeb6f0a9717d46c5877ea92036194befbdd55da2452fbfb1acca07096e7849fb39543ab4f06ab5f29235df73d75c8c227ff2e1801ed8a312a2bbacc44340a5951472c145742", 0x72, r2) keyctl$describe(0x6, r6, &(0x7f0000000700)=""/148, 0x94) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r1, 0x9e) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f00000007c0)={0xe, @vbi={0xb, 0x0, 0x5, 0x30364d54, [0x0, 0x3], [0x70, 0x8], 0x1}}) ioctl$FITHAW(r3, 0xc0045878) syz_usb_connect(0x6, 0x10a9, &(0x7f00000008c0)={{0x12, 0x1, 0x310, 0xe5, 0x99, 0x75, 0x20, 0x1199, 0x9063, 0x4c0d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1097, 0x3, 0x4, 0x34, 0x10, 0x6, "", [{{0x9, 0x4, 0xa, 0x8, 0xe, 0xdd, 0x37, 0x13, 0x8, [@uac_as={[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x1, 0x9, 0x2, 0x3c, 0x7}, @as_header={0x7, 0x24, 0x1, 0x3d, 0x2, 0x1002}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xa1b1, 0x5, 0x79}]}], [{{0x9, 0x5, 0xb, 0x8, 0x10, 0xff, 0x1, 0x2}}, {{0x9, 0x5, 0xb, 0x3, 0x200, 0xcf, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xa5, 0x1ff}]}}, {{0x9, 0x5, 0x9, 0x2, 0x400, 0xf, 0x9, 0x1, [@generic={0x17, 0x2, "90605242c926f23a8aaff12ab1ad57b143cfc4d8a0"}, @generic={0x97, 0x7, "1f0e3abd17da119bd40230a33157ca90636f01a073f0e6dbd37c5149943077f1bd313cad4b68ad1296da834a55afcd2e38df831a547fa2bc733bcff34afc904b07c0933d45bb87571e6fbb4100e36ee80834b2ab364d5c13d2991a0aa4e31307cffdad4cb41ecbe79df9a93a7401c83c5e5bd81114bea1399b636be9db63e8372d9a6f6fa2d67318b3c23639253a81a1b45045f36a"}]}}, {{0x9, 0x5, 0x6, 0x2, 0x3ff, 0x10, 0x41, 0x16, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x20, 0x4}]}}, {{0x9, 0x5, 0x80, 0x1, 0x400, 0x9, 0x1, 0x3}}, {{0x9, 0x5, 0xc, 0x10, 0x400, 0x9f, 0x1}}, {{0x9, 0x5, 0x0, 0x0, 0x400, 0x3, 0x1, 0x80, [@generic={0x6f, 0x1, "9e8359126e621f0f39b28da1fa4da0dcc91ea6d2aeec54b453fa1f1ef89a393987a6eff25a8278c907cf99b4dbd9605d457d55c0f303a45fa6be1dfb11a2601e441bcb2d26bb890845f25b7022bf76979ff6f965cdb5fe4e4979defe0893e8c62f31259741dcfe8f8f5c830274"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x100, 0x7, 0xc, 0xff, [@generic={0x3b, 0x21, "24e1a0a7d0d9383d09738aed885a0f5a94104997128b2a0dbc8b3303d0144bb629b459b76acefc07561587cd89645063d05f44c95b0d90e500"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x40, 0x40, 0x5c, 0xff}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x19, 0xc2, 0x8}}, {{0x9, 0x5, 0x2, 0x4, 0x40, 0xb, 0xf, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1, 0x80}, @generic={0xc, 0x11, "a04567512d4d7cfa4f47"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0xf, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x3, 0xfffe}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x80, 0x0, 0x40}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x0, 0xe, 0x3, [@generic={0x8a, 0xd, "a9880d9c892c722699c4c1a544e4af074678be4ef9618e93724e93aaa32c3f9a41a84026572e230a1329221c974ead15f47de5cc1a0973906a6baab5e74e3901d40155fb057201b4fe03d5cf85d639ecc25e5fbd506d35fc6e10b4be92e0d979606517184c236abf680bb9f2d6eaeba41b91f35cb0ea67de947053867769a3b04bd6ae0ef05eb585"}, @generic={0xeb, 0x5, "bc3ca62992509c3ebe64d5ff4ef50bd702f0b1a68e69b1668b74de515a2979044a852588786578f7c7c480c586e1347942fffd9e2ac05abb4232293c15d2786d77435fe07de45326f62f8c1b67dcf44aa2ebdf8721a01a62f5079a02c44012e091dea652e1ca18805044ce965a9aa35929732650391a7d00548347e51606b516c2967cafd26b97753d689569545289ab87dc974516d26594002b087a2ac20706bc8f0a3438b65205aabaf9fc54d55820a0e20540db759d84da027d36e0f50ac535d7d16a46bc9cb60db66da3cc8d2d4e738fe7c30eb43d9441376bc14e77e08e86c76646fea35510cb"}]}}]}}, {{0x9, 0x4, 0xd5, 0x23, 0xf, 0xf7, 0x31, 0x6, 0x86, [], [{{0x9, 0x5, 0x5, 0x8, 0x3ff, 0x0, 0x4, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x5e, 0x5}]}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0x7, 0xa, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2a, 0x4}]}}, {{0x9, 0x5, 0x6, 0x10, 0x40, 0x8, 0xc3, 0x7, [@generic={0xfc, 0x30, "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"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x0, 0x3, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x8b, 0x9f28}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x40, 0x3, 0x3}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x6, 0x35, 0x95, [@generic={0xf8, 0xa, "ceb141fb2774c827592332ea17d5d4387a7311f5e7035adf6a852622e7ea229840abf471ed6de32114b3da211c482bbfbf51163b66be1f22f1f874c6148d0c2ee82933f2662d042c6fb84c4598f0c6ec129933fb1d1e560e2611bc79376ee7dbaa01a700832d70aeeae70ed2f383fa7f689a7961498bb1087ae8a8992ea41e2e199674b547d9ec612de11fad7eb930d680d0c1606605ef97d8bc3c04d27aa38a90f105c10592da5051bde6f95d0d537fd75d3c67a1ba7613f260bdf613e97ff70167832aa15acc15df6ff19ed86d15ac5bc2a8ba4670b13941fd3de02909c9cbd03abac7453a8c053887faf5a54f363939469c37f29a"}, @generic={0x54, 0xc, "da41975f206f1be373b36cf05b121b9f8f3a4be3bc4a93e12b1681bb39bef6dd0e704d46f7f0d5c63dec4fa69a36f3101fd7e6831f4f09a750199ce30f8ba998dd9f86f130f8600406cf05c5d983b4a29f2d"}]}}, {{0x9, 0x5, 0x7, 0x10, 0x400, 0x10, 0x1, 0x81}}, {{0x9, 0x5, 0xe, 0x10, 0x400, 0x1, 0xe, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x2}]}}, {{0x9, 0x5, 0xc, 0xa, 0x40, 0xa8, 0x61, 0x4, [@generic={0xfc, 0x21, "e4593740c77912db6ec52e2afe786e2a2972de4d7b0c907f9a0dff68bfa57d9eec5688c8b96e788e1daee57eb18f14c87262debdbbf506a2e0cd2e91746c8a4514c19e41b2afaca578525de62a1220db3428e4429ba179fa13dd5ea74ba91d431c33a8aab5a9e4a6fc707e8863b6e933a4cd0206c7c64d79511722b075661638d671b7ad1cc090bac0f9efe46825abeb354faaf115e555a8366ddfa6ab3f6531af34919847932296e945cb09bc8dc51358195ede34009bb4a3ba67f32396c52b0e4821f5895510fb238f0ec41d594062fa2c6a8546c24cd1fdf0a92eb7642a6990ecb79189a83b9dc90f25cbc224fef34611c104039010d4671f"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x2}]}}, {{0x9, 0x5, 0x0, 0x10, 0x3ff, 0x2, 0x8, 0x8, [@generic={0x14, 0xd, "c825ab6c35c513c4cc8ce91c18aea0ea3fb7"}, @generic={0x9e, 0x22, "b82a6bf91626015807225c38c6992c9c79bae010cb6cecf01497d5e0740f8ea76ea00762911acf7d5d31e58adfb3ae71ccab384fa8f07638dd54fdfb6d1683b28a5dbee86800df8648cc2b1d10af6afc57590f5384091f9ea23f06033085e5e381519cf03e21914731f0cb563d703006368bc3fa92530200a8bff8142811ba8c8a3e86422d3e1644ab2b308132eded9aa9803ebc7d5d473100f24409"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xf, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x2}, @generic={0x102, 0x4, "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"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x400, 0x4, 0x9d, 0xdf, [@generic={0xbf, 0xc, "1062240c846e9fd271baa4099f5aa3a7dd8151fd758d807c11ce283bda17fbb9597c90055a99b0259c1ba4102239816b9c7022def37bab904e6e84feabda81ebb3cc5b0ca8324ac47b679f85584c65cb39c9f2773d20857ffd418a13eb538a27f9db5129f65c32ae7a4d16e85174061dc281c24574f652a178394e4f8e605052e058c64fb60cd206634a8c2e60ddff9af6d5678527ea543a4cbe0e986a5bfed524ffaaf3d5e454ed2f6d221ced38ec5c53277658a07ce8054199e16d6c"}]}}, {{0x9, 0x5, 0x80, 0x13, 0x8, 0xe, 0x4, 0x6}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x5, 0x80, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x8, 0x74, 0x6, 0x2, [@generic={0x26, 0x23, "e698ff1de74eb6552db81d2910e2bb7d2fd5b644eacc7c570e7fff254c4b8c10c2a2192c"}, @generic={0xe2, 0x8, "528617152ce36b7f39a5600805e3ee69e31aa52eab909b3625eaaa0dfe15e483cde992a9fc4e560a942cf3ced6b05dcf9765ac570de77ce91e453093cd4523bf20b4f33a374360a879ddc3f86b5e670304c0e2296af2f847ab85a8877209ce34147034f2ac03cc353609019795ca03d811e6d302400ec83a4243c4bb55cdaad08b1ab18a72634707ca4747c0080a60db89aad1a820b1a5d26d36c7fea9eca525924c0ce352224edc8404376af5878de9708fff559dd052e6be2c545b23ab2a5adb5b03c4b9c5b1324f2cff1ed676490ceebd950b4152a6d6262c3d9599b09c13"}]}}]}}, {{0x9, 0x4, 0x99, 0x17, 0x10, 0xe, 0x1, 0x1, 0xd, [@uac_as={[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1, 0x6, 0xf}, @as_header={0x7, 0x24, 0x1, 0x5, 0x5, 0x2}, @as_header={0x7, 0x24, 0x1, 0x81, 0x1, 0x1001}, @format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x9, 0x3, "8d2423e17d4950b8"}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x1, 0x81, 0x72}]}], [{{0x9, 0x5, 0x6, 0x0, 0x400, 0x8, 0x1, 0x7, [@generic={0xb9, 0xb, "364e6a14d37620e60afbd25e1156d00a06e01f2b455f6905ea7a4992f700b937773b0bf22653582d73e93d980557f619b95828580ec2c8abb36030bd503b73fd4dcfddc9268841ed0f173722a26343733a1faeabf16442ee3f3b99756da47e9207a1c892dd646a04d37b60c1a679168dff670df5a3d14d97db530416f59454d4a486e3a3340716abfb133a89f61b882400e3e72d3a6b0ff6872861ff9c523ba455f766fd49409d053f228098c6a96dbbdae9492307df83"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x40, 0x81, 0x7, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x89}]}}, {{0x9, 0x5, 0xf, 0x10, 0x400, 0x5, 0x2, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x3, 0x824b}]}}, {{0x9, 0x5, 0x80, 0x0, 0x8, 0x3, 0x8, 0xe}}, {{0x9, 0x5, 0xf, 0x2, 0x40, 0xda, 0x1, 0x79}}, {{0x9, 0x5, 0xb, 0x2, 0x200, 0xff, 0x55, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0x8}, @generic={0x5f, 0x5, "78f1b6ae07daaf590606f3b3e3c20b7e5fb7ead1cf94386e2ffa260f25c3d31bac0ad9a58592248213e96a38a9eeeb9fe2ae9c3c150a5573365dd7d1d9d9dabc6cf8b11a8736147e90923b26cd4a760abcee20cf42ae9cd7658cdaba15"}]}}, {{0x9, 0x5, 0x6, 0x10, 0xc08, 0x9, 0x39, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x1, 0xdaa}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x1e, 0x101}]}}, {{0x9, 0x5, 0x9, 0x4, 0x400, 0x6, 0x0, 0x2, [@generic={0xf0, 0x21, "9bce1bc965d29bd513a13b625c647fa612f63e097a7ecc5354ff60e12cdc0fb60d5d03c09c16a124197330d82173fe424eaca6d6e4bdda6c03f98d77ee0c7333d8aca84ea8d2018905c25be7a34f132911b68ab5b2fc150e59f0725d0e5ee38f20e2729e6bcc75aa277197bffdc7101b8be8221776df5bd5602106cf29a9c65e37c0d8497308f480fd896adc3669a90bc146ecf28306dbb672e6630576bf7202c65a2e9405de815829323c4b253d88580099f2d7ea39a80ceb06e33b13732efd864f6c9890ce7b2ca39d1a3f070adaccf8f3c760a2859884557cc65e0c298a6b85adc204a8bf835b91bba05600ea"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0xba, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0xa0e28d5119fbd593, 0x5c, 0x5}, @generic={0x74, 0x1, "62ec4e86088870af06e5b13e77551dcbb0ff5c892a04b48cef6e5403bbc1e109b1beec0a470900a5c32539f7d73747c1f24fa41e7c9ddaecd62d6f49a8d2f1df25165ab1f8e8fb50dfb6676d7526d989563031cd1d3c27a0624d6d04a2bf7492ee16cb5aa16753c0d8f0a0f93effcc66bbff"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x200, 0x7f, 0x5, 0x7}}, {{0x9, 0x5, 0x1, 0x10, 0x640, 0x1, 0x2, 0x26}}, {{0x9, 0x5, 0x3, 0x8, 0x400, 0x7f, 0x40, 0xff, [@generic={0xce, 0x7, "19e37241f7f6f0b217df15972108ec288ac65f6e566ba4b66ba5b2a9d03b78422bfab456d1e4997f1eb37d7c4f5f2ba8fe2a6888d3e5f3b778898a871e63fd1b91b0e54402b71221ead6a6f21f9e415f1c0c577305628b58223ff38f3e164f3391eef0bbc92fe89f9427054de85b320c9277248383dd4af347d2f236af587984c16c47f06c1b68d2d3a5c7a460e037c7fc142c16ab74b564d15b23d18af691379395e50d83188ae252403b4eb8c8b1a35e251beaaae89b23d2db89e0cdab5528b576c70085f9a8a30d588de4"}]}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x7, 0x0, 0x44, [@generic={0xc3, 0x37, "5aeb47e0f990638f8080930bb9343b48f432649357611ecc463c042a0826969a846bb5653a0393e8423ea20f0f37efb52b920258948d722cc9a0ff16e452ad501fead1250b6f6a3d48bf24ff1624204b9ab09b5c01d6252fba86a79232da19519c0d7a129a532c1c36259db076fdee40e34a0acc414e34dda77c71d7a6c39ec7cd877d2d29fa1ed955dc1baec749230671bfd44b74d89dc359824df9fdbe602401813c68d6eca82ee5944b28379f977e1910d34cf5740119ccf0ef18b18130f9c3"}]}}, {{0x9, 0x5, 0x5, 0xc, 0x3ff, 0x2, 0x1, 0x8, [@generic={0x76, 0xa, "0ec0cc962421f50c80757645dd453bf22b4e155c8d26238c109d98ec3d4dff8d94a7b51c7290d27bc1b00e12b6e56baae1253ca21c10a7bf95b5c3e1f74971eebe5f977ed4419883a5eaeddf246b6d116763a468716d03d47c3a4f3bc553926a81189cd5ab609a2469035d131c025f1c5527d5bb"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x200, 0x9, 0x9, 0x56, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc1, 0x6}]}}, {{0x9, 0x5, 0x1, 0x10, 0x0, 0x5, 0x4, 0x9}}]}}]}}]}}, &(0x7f0000001b00)={0xa, &(0x7f0000001980)={0xa, 0x6, 0x300, 0x2, 0x10, 0x2, 0x20, 0x1b}, 0x26, &(0x7f00000019c0)={0x5, 0xf, 0x26, 0x3, [@ptm_cap={0x3}, @generic={0x13, 0x10, 0x2, "f376ab7eea0ced99b7f463534a4af746"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x8, 0x1, 0x0, 0x174, 0x33}]}, 0x3, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x416}}, {0x7d, &(0x7f0000001a40)=@string={0x7d, 0x3, "8030225135621130dd6e67dd34600f18f3f8cca10c0f24ea829b7e7485b12217f410b1e356a37f91df9de8338ef05c67067a3af5676bd039c2189f8b4077f908d6c832fcfcd477672feaddf9b251ee8b54294266462013530b8c5547eb4ba35be1a42aa37830991e55ffe82c9932eeb12533beda181e75071e7c8c"}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x200a}}]}) ioctl$BTRFS_IOC_SCRUB(r3, 0xc400941b, &(0x7f0000001b40)={0x0, 0x6, 0x3}) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000001f40)={0x0, 0x0, 0x1, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000002340)={0x0, 0x0, 0x1, [0x7, 0xffffffff, 0x1, 0x8, 0x8b], [0x28, 0x7, 0x5, 0x1f0a, 0x6, 0xfff, 0x8, 0xfffffffffffffbff, 0x1, 0x2, 0x2b, 0xfff, 0x2, 0x7, 0x4, 0x8, 0xd, 0x6, 0x310f46a0, 0xfffffffffffffffc, 0x4, 0x6, 0x2dcb, 0x2, 0x58a, 0x3ff, 0x6, 0x28d000, 0x2, 0xa, 0x9, 0x9, 0x9, 0x7, 0xd67f, 0x6, 0x4, 0x8, 0x9, 0x9, 0xeea4, 0x3, 0x100000001, 0x1939, 0x8, 0xfff, 0xfff, 0x3, 0x8, 0x8, 0x1, 0x4, 0x4, 0x558557bd, 0x6, 0xea, 0x4052, 0x9, 0xf, 0x5138, 0x1, 0x1000, 0x5, 0x9, 0x7, 0x8, 0x6, 0x8, 0x8000, 0x5, 0x9334, 0x5, 0x24, 0x4, 0x3, 0x401, 0x8, 0x101, 0xe11, 0x4, 0x401, 0x9, 0x9, 0xfffffffffffffe00, 0x8, 0x4, 0x9, 0x2, 0x5e2, 0x100000000, 0x9, 0xff, 0x5, 0x9, 0x92ee, 0x4, 0x0, 0x4000000000, 0x0, 0x7, 0x1, 0x3, 0x0, 0x8, 0x1, 0x3, 0x8, 0x0, 0x4, 0x100, 0x0, 0x8, 0x95, 0xfffffffffffffffe, 0x8001, 0x100000001, 0x9e, 0x3, 0x800, 0x71, 0x2]}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000002780)={0x11, 0x7, {0x7, @usage=0x3, r7, 0x5, 0x101, 0x8, 0x3, 0x40, 0x440, @usage=0xb2, 0x3d23, 0x6, [0x80, 0x4, 0xfffffffffffffc00, 0x100000000, 0x7fff, 0xfffffffffffffffc]}, {0x100000000, @struct={0x5, 0x8}, r8, 0xd3e5, 0x9, 0x0, 0x355e9e6b, 0x0, 0x0, @struct={0x1, 0x2}, 0x7, 0x4, [0x2, 0x7fffffffffffffff, 0xe, 0x3, 0x7, 0x2]}, {0x2, @struct={0x0, 0x1}, r9, 0x7, 0x53, 0xe9, 0x7fffffffffffffff, 0x2, 0x42, @struct={0x4, 0x81}, 0x5, 0xfffffffc, [0x6, 0x3, 0x0, 0x8000000000000000, 0x10, 0x1d3]}, {0x2, 0x1}}) getresuid(&(0x7f0000002bc0), &(0x7f0000002c00)=0x0, &(0x7f0000002c40)) fsetxattr$system_posix_acl(r1, &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f00000030c0)={{}, {0x1, 0x4}, [{0x2, 0x4, r10}, {0x2, 0x3}, {0x2, 0x1}, {0x2, 0x2}], {0x4, 0x2}, [{0x8, 0x6, 0xee00}, {0x8, 0x2}, {}, {0x8, 0x4}], {0x10, 0x3}, {0x20, 0x5}}, 0x64, 0x2) 0s ago: executing program 0 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000200)="ea0d00b0000f229464670fc79c8100800000ba6100ecbaf80c66b8ecb1048566efbafc0c66b8106d7dd166eff0867dc5decb66b9800000c00f326635000100000f30ea0000e50066b8010000000f01d9", 0x50}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x40240, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x9) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x30, r9, 0x505, 0x800, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4094}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r12, &(0x7f0000000140)={0x2, 0x4e22, @private=0xa010102}, 0x10) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3abb87518784cda676", 0x9}], 0x1}}], 0x1, 0x10) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r7, 0x3, {0x0, 0xff}, 0x101}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x52, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x100, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r7, {0xfffd, 0xffeb}, {0x1, 0xc}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 0s ago: executing program 3 (id=871): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x3, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x0, 0x0, 0x5, 0x1}]}, {0x0, [0xda]}}, 0x0, 0x43, 0x0, 0x1}, 0x28) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000004680)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004600)={0x18, 0x1404, 0x1, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x48081}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) semget$private(0x0, 0x6, 0x524) (async) semget$private(0x0, 0x6, 0x524) semtimedop(0x0, &(0x7f0000000140)=[{0x2, 0x3, 0x1000}, {0x0, 0x8, 0x1000}], 0x2, 0x0) semop(0x0, &(0x7f0000000080)=[{0x2, 0x0, 0x2000}], 0x1) semctl$IPC_RMID(0x0, 0x0, 0x0) epoll_create1(0x80000) (async) epoll_create1(0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000001c0)) (async) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/wakeup_count', 0x202, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) (async) open(&(0x7f0000000140)='./file0\x00', 0x2a5c0, 0x113) open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) (async) r3 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) (async) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r4, 0x0, 0x80, 0x8) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) kernel console output (not intermixed with test programs): nterface with an up link [ 59.129973][ T5981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.164562][ T5981] team0: Port device team_slave_0 added [ 59.170097][ T5981] team0: Port device team_slave_1 added [ 59.197393][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.201102][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.213957][ T5981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.220882][ T5981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.224508][ T5981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 59.236735][ T5981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.281338][ T5981] hsr_slave_0: entered promiscuous mode [ 59.285261][ T5981] hsr_slave_1: entered promiscuous mode [ 59.288984][ T5981] debugfs: 'hsr0' already exists in 'hsr' [ 59.291581][ T5981] Cannot create hsr debugfs directory [ 59.854108][ T5744] Bluetooth: hci2: command tx timeout [ 60.333228][ T5744] Bluetooth: hci3: command tx timeout [ 60.333267][ T5749] Bluetooth: hci0: command tx timeout [ 60.413249][ T5749] Bluetooth: hci1: command tx timeout [ 60.563702][ T1476] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 61.186773][ T6011] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 61.194800][ T5981] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.211179][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 61.221738][ T5981] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.234702][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 61.242673][ T5981] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.259296][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 61.261998][ T6051] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 61.265118][ T6051] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 61.269036][ T5981] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.270978][ T6051] vhci_hcd vhci_hcd.0: Device attached [ 61.287271][ T5981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 61.326314][ T6067] netlink: 16 bytes leftover after parsing attributes in process `syz.1.45'. [ 61.370626][ T5981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.383352][ T5981] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.388846][ T1255] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.391463][ T1255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.402062][ T1255] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.404418][ T1255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.438737][ T6077] netlink: 72 bytes leftover after parsing attributes in process `syz.1.49'. [ 61.439599][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 61.444559][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 61.455404][ T6077] capability: warning: `syz.1.49' uses deprecated v2 capabilities in a way that may be insecure [ 61.487611][ T6089] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 61.502158][ T6089] : entered promiscuous mode [ 61.502341][ T50] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 61.542333][ T34] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 61.647129][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 61.695126][ T34] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 61.702457][ T34] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.709632][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 61.714326][ T34] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 61.718558][ T34] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 61.721425][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.727728][ T34] usb 8-1: config 0 descriptor?? [ 61.736464][ T34] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 61.736503][ T5981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.818372][ T5447] 8021q: adding VLAN 0 to HW filter on device eth5 [ 61.876276][ T6126] netlink: 'syz.1.53': attribute type 1 has an invalid length. [ 61.879093][ T6126] netlink: 56 bytes leftover after parsing attributes in process `syz.1.53'. [ 61.890584][ T5981] veth0_vlan: entered promiscuous mode [ 61.908528][ T5981] veth1_vlan: entered promiscuous mode [ 61.931488][ T5981] veth0_macvtap: entered promiscuous mode [ 61.934461][ T5749] Bluetooth: hci2: command tx timeout [ 61.943193][ T5981] veth1_macvtap: entered promiscuous mode [ 61.945553][ T6134] overlay: Unknown parameter 'obj_type' [ 61.957021][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.969740][ T5981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.980455][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.984308][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.989140][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.993153][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.080338][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.083116][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.104983][ T103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.107616][ T103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.159450][ T40] kauditd_printk_skb: 74 callbacks suppressed [ 62.159464][ T40] audit: type=1400 audit(1779434949.113:315): avc: denied { connect } for pid=6137 comm="syz.4.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.269546][ T6146] 9p: Unknown access argument 18446744073709551615: -34 [ 62.271787][ T40] audit: type=1400 audit(1779434949.223:316): avc: denied { mounton } for pid=6145 comm="syz.0.59" path="/19/file0" dev="tmpfs" ino=116 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 62.279823][ T40] audit: type=1400 audit(1779434949.233:317): avc: denied { create } for pid=6150 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.280504][ T6152] netlink: 'syz.4.60': attribute type 2 has an invalid length. [ 62.286280][ T40] audit: type=1400 audit(1779434949.233:318): avc: denied { accept } for pid=6150 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.300530][ T40] audit: type=1400 audit(1779434949.253:319): avc: denied { create } for pid=6150 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.307041][ T40] audit: type=1400 audit(1779434949.253:320): avc: denied { getopt } for pid=6150 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 62.313570][ T40] audit: type=1400 audit(1779434949.253:321): avc: denied { connect } for pid=6150 comm="syz.4.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 62.386315][ T40] audit: type=1400 audit(1779434949.343:322): avc: denied { write } for pid=6145 comm="syz.0.59" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.434727][ T40] audit: type=1400 audit(1779434949.393:323): avc: denied { create } for pid=6162 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.444344][ T40] audit: type=1400 audit(1779434949.393:324): avc: denied { setopt } for pid=6162 comm="syz.4.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 62.634528][ T6177] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 62.649386][ T6182] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 62.657297][ T6052] vhci_hcd: connection reset by peer [ 62.661950][ T103] vhci_hcd vhci_hcd.3: stop threads [ 62.667105][ T103] vhci_hcd vhci_hcd.3: release socket [ 62.669783][ T103] vhci_hcd vhci_hcd.3: disconnect device [ 62.696446][ T6189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.67'. [ 62.710284][ T6187] netlink: 20 bytes leftover after parsing attributes in process `syz.1.68'. [ 62.788026][ T6194] nvme_fabrics: missing parameter 'transport=%s' [ 62.788078][ T6194] nvme_fabrics: missing parameter 'nqn=%s' [ 62.803230][ T6189] Zero length message leads to an empty skb [ 64.012537][ T5749] Bluetooth: hci2: command tx timeout [ 64.072488][ T39] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 64.243562][ T9] usb 8-1: USB disconnect, device number 2 [ 64.245766][ T39] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 64.249363][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.254202][ T39] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.259738][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.265936][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.271437][ T39] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 64.275066][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.279432][ T39] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.285047][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.289590][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.295393][ T39] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 64.299139][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 64.304236][ T39] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 64.309855][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 64.314977][ T39] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 64.323950][ T39] usb 6-1: string descriptor 0 read error: -22 [ 64.327158][ T39] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 64.327214][ T6225] hpfs: hpfs_map_sector(): read error [ 64.330714][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.353936][ T39] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 65.251058][ T6146] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 65.338075][ T6238] Cannot find add_set index 0 as target [ 65.446756][ T6246] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 65.449601][ T6246] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 65.453474][ T6246] vhci_hcd vhci_hcd.0: Device attached [ 65.722539][ T6083] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 65.725703][ T34] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 65.893921][ T34] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 65.897480][ T34] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.902075][ T34] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 65.905509][ T34] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.910139][ T34] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.914099][ T34] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.920036][ T34] usb 9-1: config 0 descriptor?? [ 65.927141][ T34] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 66.092446][ T5749] Bluetooth: hci2: command tx timeout [ 66.481402][ T6277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.92'. [ 66.486448][ T6277] [U] v3f"S/4:XTzWtlW= [ 66.488545][ T6277] [U] J"e:" [ 66.652369][ T50] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 66.657578][ T39] usb 6-1: USB disconnect, device number 3 [ 66.834599][ T6248] vhci_hcd: connection reset by peer [ 66.838454][ T1255] vhci_hcd vhci_hcd.4: stop threads [ 66.840046][ T1255] vhci_hcd vhci_hcd.4: release socket [ 66.844317][ T1255] vhci_hcd vhci_hcd.4: disconnect device [ 66.857235][ T6317] vlan1: entered promiscuous mode [ 66.859013][ T6317] vlan1: entered allmulticast mode [ 66.862792][ T6317] veth0_vlan: entered allmulticast mode [ 66.948898][ T6323] Cannot find map_set index 3 as target [ 67.272351][ T5893] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.422333][ T5893] usb 8-1: Using ep0 maxpacket: 32 [ 67.429977][ T5893] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 67.433474][ T5893] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.436390][ T5893] usb 8-1: Product: syz [ 67.437880][ T5893] usb 8-1: Manufacturer: syz [ 67.439600][ T5893] usb 8-1: SerialNumber: syz [ 67.442789][ T5893] usb 8-1: config 0 descriptor?? [ 67.653520][ T855] usb 8-1: USB disconnect, device number 3 [ 67.704627][ T40] kauditd_printk_skb: 39 callbacks suppressed [ 67.704645][ T40] audit: type=1400 audit(1779434954.663:364): avc: denied { mount } for pid=6334 comm="syz.0.106" name="/" dev="pipefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.246619][ T40] audit: type=1400 audit(1779434955.203:365): avc: denied { setopt } for pid=6343 comm="syz.3.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 68.450393][ T50] usb 9-1: USB disconnect, device number 2 [ 68.483730][ T40] audit: type=1400 audit(1779434955.443:366): avc: denied { mounton } for pid=6346 comm="syz.4.109" path="/17/bus" dev="tmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.508495][ T40] audit: type=1400 audit(1779434955.463:367): avc: denied { link } for pid=6346 comm="syz.4.109" name="#4" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.515651][ T40] audit: type=1400 audit(1779434955.463:368): avc: denied { rename } for pid=6346 comm="syz.4.109" name="#5" dev="tmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 68.523275][ T40] audit: type=1400 audit(1779434955.463:369): avc: denied { ioctl } for pid=6346 comm="syz.4.109" path="socket:[14014]" dev="sockfs" ino=14014 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 68.558498][ T40] audit: type=1400 audit(1779434955.513:370): avc: denied { create } for pid=6348 comm="syz.4.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 68.570062][ T40] audit: type=1400 audit(1779434955.523:371): avc: denied { sys_admin } for pid=6348 comm="syz.4.110" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 68.576879][ T6349] VFS: Mount too revealing [ 68.578699][ T40] audit: type=1400 audit(1779434955.533:372): avc: denied { mount } for pid=6348 comm="syz.4.110" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 68.585984][ T40] audit: type=1400 audit(1779434955.533:373): avc: denied { getopt } for pid=6348 comm="syz.4.110" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 69.747970][ T6305] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 69.826194][ T6364] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 69.842648][ T6365] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 69.882767][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.887679][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.890157][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.893832][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.897034][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.900086][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.902687][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.905124][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.909733][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.912120][ T845] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 69.913258][ T6378] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'. [ 69.922559][ T845] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [sy] on syz0 [ 69.926776][ T6379] netlink: 48 bytes leftover after parsing attributes in process `syz.3.119'. [ 69.939634][ T6383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.113'. [ 69.959523][ T6381] fido_id[6381]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 70.373389][ T6402] infiniband syz2: set down [ 70.375607][ T6402] infiniband syz2: added ipvlan1 [ 70.393027][ T6402] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 70.398208][ T6402] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 70.404956][ T6402] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 70.427656][ T6402] RDS/IB: syz2: added [ 70.437556][ T6402] smc: adding ib device syz2 with port count 1 [ 70.443145][ T6402] smc: ib device syz2 port 1 has no pnetid [ 70.802312][ T6083] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 70.832310][ T6418] netlink: 20 bytes leftover after parsing attributes in process `syz.4.132'. [ 71.388802][ T6444] netlink: 'syz.3.139': attribute type 1 has an invalid length. [ 71.451406][ T6447] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6447 comm=syz.3.139 [ 71.903180][ T6458] Cannot find set identified by id 2 to match [ 71.917275][ T6456] netlink: 36 bytes leftover after parsing attributes in process `syz.4.143'. [ 72.000301][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.003823][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.007146][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.009929][ T6464] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 72.014722][ T6464] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 72.020932][ T6464] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 72.030008][ T6464] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 72.049991][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.053249][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.058195][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.058884][ T5749] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 72.061024][ T6464] xfrm0 speed is unknown, defaulting to 1000 [ 72.063012][ T5749] Bluetooth: Wrong link type (-22) [ 72.068568][ T5749] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 72.071172][ T5749] Bluetooth: Wrong link type (-22) [ 72.073961][ T5749] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 72.076531][ T5749] Bluetooth: Wrong link type (-22) [ 72.078492][ T5749] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 72.080835][ T5749] Bluetooth: Wrong link type (-22) [ 72.101137][ T6470] warning: `syz.3.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.381064][ T6480] netlink: 'syz.0.150': attribute type 10 has an invalid length. [ 72.385674][ T6480] geneve1: entered promiscuous mode [ 72.446015][ T6483] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 72.518656][ T6485] ======================================================= [ 72.518656][ T6485] WARNING: The mand mount option has been deprecated and [ 72.518656][ T6485] and is ignored by this kernel. Remove the mand [ 72.518656][ T6485] option from the mount to silence this warning. [ 72.518656][ T6485] ======================================================= [ 72.556858][ T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.997094][ T6493] Cannot find set identified by id 2 to match [ 73.142018][ T40] kauditd_printk_skb: 57 callbacks suppressed [ 73.142037][ T40] audit: type=1400 audit(1779434960.093:431): avc: denied { write } for pid=6495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.201431][ T40] audit: type=1400 audit(1779434960.153:432): avc: denied { write } for pid=6498 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.279989][ T40] audit: type=1400 audit(1779434960.233:433): avc: denied { write } for pid=6501 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.339695][ T40] audit: type=1400 audit(1779434960.293:434): avc: denied { write } for pid=6504 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.441167][ T40] audit: type=1400 audit(1779434960.393:435): avc: denied { write } for pid=6507 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.494633][ T40] audit: type=1400 audit(1779434960.453:436): avc: denied { write } for pid=6510 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.337728][ T6439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.414874][ T6516] Bluetooth: MGMT ver 1.23 [ 74.445047][ T6518] XFS (nbd0): SB validate failed with error -5. [ 74.520871][ T40] audit: type=1400 audit(1779434961.473:437): avc: denied { map } for pid=6537 comm="syz.0.161" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 74.535786][ T6533] syzkaller0: entered promiscuous mode [ 74.538295][ T6533] syzkaller0: entered allmulticast mode [ 74.552465][ T6543] tmpfs: Bad value for 'mpol' [ 74.689009][ T6557] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 74.691832][ T6557] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 74.699671][ T40] audit: type=1400 audit(1779434961.653:438): avc: denied { watch watch_reads } for pid=6558 comm="syz.4.165" path="/34" dev="tmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.699780][ T6557] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 74.708832][ T40] audit: type=1400 audit(1779434961.653:439): avc: denied { firmware_load } for pid=6556 comm="syz.1.166" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 74.715478][ T6561] dlm: no locking on control device [ 74.734763][ T40] audit: type=1400 audit(1779434961.683:440): avc: denied { write } for pid=6558 comm="syz.4.165" name="/" dev="9p" ino=74733003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.804852][ T39] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 74.835258][ T6561] could not allocate digest TFM handle cryptd(blake2b-160) [ 74.964982][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 74.966963][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.971559][ T6575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.168'. [ 74.974856][ T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.975062][ T6576] netlink: 8 bytes leftover after parsing attributes in process `syz.3.170'. [ 74.979770][ T6575] l2tp_ppp: sess 2/0: no socket in recv [ 74.981418][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 74.993178][ T39] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 74.996708][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.003187][ T39] usb 5-1: config 0 descriptor?? [ 75.472890][ T39] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 75.635841][ T71] usb 5-1: USB disconnect, device number 2 [ 75.775944][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 75.778896][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.3.178'. [ 75.781752][ T6603] netlink: 12 bytes leftover after parsing attributes in process `syz.3.178'. [ 75.787942][ T6603] netlink: 60 bytes leftover after parsing attributes in process `syz.3.178'. [ 75.790879][ T6603] netlink: 104 bytes leftover after parsing attributes in process `syz.3.178'. [ 76.179289][ T6617] netlink: 27 bytes leftover after parsing attributes in process `syz.0.181'. [ 76.738745][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.741181][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.457873][ T6626] netlink: 880 bytes leftover after parsing attributes in process `syz.0.184'. [ 77.646278][ T6636] openvswitch: netlink: Flow actions attr not present in new flow. [ 77.739652][ T6641] syz.0.188 uses obsolete (PF_INET,SOCK_PACKET) [ 78.431537][ T6584] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 78.435484][ T6601] netlink: 'syz.1.177': attribute type 1 has an invalid length. [ 78.471098][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 78.471119][ T40] audit: type=1400 audit(1779434965.423:461): avc: denied { ioctl } for pid=6646 comm="syz.0.190" path="socket:[14795]" dev="sockfs" ino=14795 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 78.517242][ T6652] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 78.517360][ T6647] bond1: Unable to set up delay as MII monitoring is disabled [ 78.527863][ T40] audit: type=1400 audit(1779434965.483:462): avc: denied { ioctl } for pid=6651 comm="syz.1.192" path="socket:[14802]" dev="sockfs" ino=14802 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 78.533104][ T6655] netlink: 'syz.4.193': attribute type 39 has an invalid length. [ 78.534910][ T6647] bond1 (unregistering): Released all slaves [ 78.688826][ T6667] /dev/sg0: Can't lookup blockdev [ 78.775185][ T40] audit: type=1400 audit(1779434965.733:463): avc: denied { mount } for pid=6670 comm="syz.0.198" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.782777][ T40] audit: type=1400 audit(1779434965.733:464): avc: denied { remount } for pid=6670 comm="syz.0.198" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.791352][ T40] audit: type=1400 audit(1779434965.733:465): avc: denied { ioctl } for pid=6671 comm="syz.3.199" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 78.800466][ T40] audit: type=1400 audit(1779434965.743:466): avc: denied { unmount } for pid=5743 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 78.892586][ T39] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 78.975641][ T6690] ucma_write: process 190 (syz.0.204) changed security contexts after opening file descriptor, this is not allowed. [ 79.068594][ T39] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 79.072395][ T39] usb 6-1: config 0 has no interface number 0 [ 79.080766][ T39] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.086183][ T39] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 79.089617][ T39] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 79.093912][ T39] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 79.097756][ T39] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 79.101965][ T39] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.107445][ T39] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 79.112034][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.117176][ T39] usb 6-1: config 0 descriptor?? [ 79.119921][ T6665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.124681][ T6665] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 79.127513][ T40] audit: type=1400 audit(1779434966.083:467): avc: denied { append } for pid=6699 comm="syz.3.208" name="pmem0" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 79.139382][ T39] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 79.231066][ T6708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6708 comm=syz.4.206 [ 79.237118][ T6706] nbd: device at index 64 is going down [ 79.310555][ T6711] overlayfs: failed lookup in lower (newroot/59, name='file0', err=-40): overlapping layers [ 79.360232][ T6665] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped [ 79.375826][ T39] usb 6-1: USB disconnect, device number 4 [ 79.391987][ T39] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 79.442762][ T40] audit: type=1400 audit(1779434966.403:468): avc: denied { accept } for pid=6712 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.449189][ T40] audit: type=1400 audit(1779434966.403:469): avc: denied { read } for pid=6712 comm="syz.3.211" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.481281][ T40] audit: type=1400 audit(1779434966.433:470): avc: denied { getopt } for pid=6717 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 79.490382][ T6718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=6718 comm=syz.0.212 [ 79.836418][ T6745] batadv0: entered promiscuous mode [ 79.842769][ T6745] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 79.851585][ T6745] batadv0: left promiscuous mode [ 80.095012][ T6763] binder: 6761:6763 ioctl 4018620d 0 returned -22 [ 80.103505][ T6763] binder: 6761:6763 ioctl 4018620d 0 returned -22 [ 80.106351][ T6766] binder: 6761:6766 ioctl 5441 ab returned -22 [ 80.267872][ T6788] openvswitch: netlink: VLAN attribute unexpected. [ 80.471410][ T6810] sctp: [Deprecated]: syz.4.234 (pid 6810) Use of struct sctp_assoc_value in delayed_ack socket option. [ 80.471410][ T6810] Use struct sctp_sack_info instead [ 80.484085][ T6772] cgroup: fork rejected by pids controller in /syz0 [ 80.503746][ T103] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.507428][ T103] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.510512][ T103] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.518800][ T103] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.527801][ T6822] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23466 sclass=netlink_route_socket pid=6822 comm=syz.1.236 [ 80.641960][ T6826] kvm: pic: non byte read [ 80.644215][ T6826] kvm: pic: non byte read [ 80.646147][ T6826] kvm: pic: non byte read [ 80.648120][ T6826] kvm: pic: non byte read [ 80.650067][ T6826] kvm: pic: non byte read [ 80.652001][ T6826] kvm: pic: non byte read [ 80.656707][ T6826] kvm: pic: non byte read [ 80.659688][ T6826] kvm: pic: non byte read [ 80.661518][ T6826] kvm: pic: non byte read [ 80.663537][ T6826] kvm: pic: non byte read [ 80.703759][ T6826] __nla_validate_parse: 6 callbacks suppressed [ 80.703775][ T6826] netlink: 48 bytes leftover after parsing attributes in process `syz.4.237'. [ 80.924066][ T29] cfg80211: failed to load regulatory.db [ 80.955378][ T6863] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.242'. [ 80.991794][ T6866] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6866 comm=syz.4.243 [ 81.003395][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 81.006532][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.3.244'. [ 81.050168][ T6870] bad cache= option: none [ 81.050168][ T6870] [ 81.063317][ T6870] CIFS: VFS: bad cache= option: none [ 81.330171][ T6887] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 81.334407][ T6887] overlayfs: failed to set xattr on upper [ 81.337327][ T6887] overlayfs: ...falling back to redirect_dir=nofollow. [ 81.339667][ T6887] overlayfs: ...falling back to metacopy=off. [ 81.341179][ T6891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2564 sclass=netlink_route_socket pid=6891 comm=syz.4.252 [ 81.341689][ T6887] overlayfs: ...falling back to index=off. [ 81.351345][ T6887] overlayfs: ...falling back to uuid=null. [ 81.426571][ T6896] fuse: Unknown parameter '' [ 81.485366][ T6900] vivid-000: kernel_thread() failed [ 81.652328][ T29] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 81.823631][ T29] usb 8-1: config 0 has no interfaces? [ 81.828308][ T29] usb 8-1: New USB device found, idVendor=0df6, idProduct=061c, bcdDevice=5e.ed [ 81.831388][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.834120][ T29] usb 8-1: Product: syz [ 81.835463][ T29] usb 8-1: Manufacturer: syz [ 81.836972][ T29] usb 8-1: SerialNumber: syz [ 81.840033][ T29] usb 8-1: config 0 descriptor?? [ 82.046171][ T6895] netlink: 'syz.3.253': attribute type 1 has an invalid length. [ 82.072121][ T6895] bond1: entered promiscuous mode [ 82.076346][ T6895] 8021q: adding VLAN 0 to HW filter on device bond1 [ 82.086374][ T6895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 82.090236][ T6895] ip6tnl0: entered promiscuous mode [ 82.093512][ T6895] ip6tnl0: entered allmulticast mode [ 82.106487][ T9] usb 8-1: USB disconnect, device number 4 [ 82.165633][ T6889] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 82.215039][ T6925] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 82.347882][ T6935] kAFS: unable to lookup cell 'syz0' [ 82.358010][ T6928] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 82.361375][ T6928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.396415][ T6928] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 82.408662][ T6928] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 82.411494][ T6928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.426336][ T6928] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 82.433313][ T6928] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 82.437058][ T6928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.444098][ T6928] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 82.451977][ T6928] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 82.456681][ T6928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.465562][ T6928] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 82.637229][ T6952] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 82.670460][ T5749] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 82.916572][ T6966] capability: warning: `syz.1.273' uses 32-bit capabilities (legacy support in use) [ 82.945914][ T6967] netlink: 576 bytes leftover after parsing attributes in process `syz.3.272'. [ 82.948996][ T6964] netlink: 576 bytes leftover after parsing attributes in process `syz.3.272'. [ 83.579196][ T6970] syz.1.273 (6970): drop_caches: 2 [ 83.918986][ T6942] Set syz1 is full, maxelem 65536 reached [ 84.087835][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 84.087848][ T40] audit: type=1400 audit(1779434971.043:505): avc: denied { watch_mount } for pid=6987 comm="syz.1.278" path="/55" dev="tmpfs" ino=300 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 84.175704][ T40] audit: type=1400 audit(1779434971.133:506): avc: denied { mounton } for pid=6989 comm="syz.1.279" path="/proc/173/task/174/net/stat" dev="proc" ino=4026533018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 84.185176][ T40] audit: type=1400 audit(1779434971.133:507): avc: denied { setopt } for pid=6989 comm="syz.1.279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 84.413836][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.413978][ T5744] Bluetooth: hci0: command 0x0401 tx timeout [ 84.478049][ T6995] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'. [ 84.502743][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.503015][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.538934][ T40] audit: type=1400 audit(1779434971.493:508): avc: denied { read } for pid=6998 comm="syz.1.281" path="socket:[16868]" dev="sockfs" ino=16868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 84.547799][ T40] audit: type=1400 audit(1779434971.493:509): avc: denied { read } for pid=6998 comm="syz.1.281" path="socket:[16869]" dev="sockfs" ino=16869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.594620][ T40] audit: type=1400 audit(1779434971.553:510): avc: denied { read } for pid=6998 comm="syz.1.281" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 84.871708][ T7002] netlink: 'syz.4.282': attribute type 2 has an invalid length. [ 85.062154][ T40] audit: type=1400 audit(1779434972.013:511): avc: denied { load_policy } for pid=7005 comm="syz.4.284" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 85.063001][ T7007] SELinux: policydb magic number 0xed7cff0a does not match expected magic number 0xf97cff8c [ 85.076902][ T7007] SELinux: failed to load policy [ 85.182037][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.4.286'. [ 85.185881][ T7011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.286'. [ 85.200609][ T68] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.206288][ T68] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.209339][ T68] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.212541][ T68] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.275570][ T7016] l2tp_ppp: sess 2/0: no socket in recv [ 85.416237][ T855] hid_parser_main: 22 callbacks suppressed [ 85.416261][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.422097][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.428973][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.433927][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.438066][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.441498][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.445620][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.448939][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.452441][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.455609][ T855] hid-generic 00A0:0006:0003.0004: unknown main item tag 0x0 [ 85.462577][ T855] hid-generic 00A0:0006:0003.0004: hidraw1: HID v0.05 Device [syz0] on syz0 [ 85.687437][ T7046] Mount JFS Failure: -5 [ 86.017471][ T40] audit: type=1400 audit(1779434972.973:512): avc: denied { create } for pid=7062 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.029272][ T40] audit: type=1400 audit(1779434972.973:513): avc: denied { bind } for pid=7062 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.043058][ T40] audit: type=1400 audit(1779434972.983:514): avc: denied { listen } for pid=7062 comm="syz.3.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.495012][ T5749] Bluetooth: hci0: command 0x0401 tx timeout [ 86.502342][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.572311][ T5744] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.572452][ T5749] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.713649][ T7072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.394556][ T7027] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 88.463797][ T7086] mmap: syz.3.307 (7086) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 88.573319][ T5744] Bluetooth: hci1: command 0x0c1a tx timeout [ 88.581421][ T7108] __nla_validate_parse: 4 callbacks suppressed [ 88.581436][ T7108] netlink: 60 bytes leftover after parsing attributes in process `syz.3.310'. [ 88.587248][ T5744] Bluetooth: hci0: command 0x0401 tx timeout [ 88.622917][ T7104] netlink: 56 bytes leftover after parsing attributes in process `syz.4.309'. [ 88.655287][ T5744] Bluetooth: hci2: command 0x0c1a tx timeout [ 88.655313][ T5749] Bluetooth: hci3: command 0x0c1a tx timeout [ 88.830950][ T7132] /dev/sr0: Can't open blockdev [ 89.115088][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 89.115107][ T40] audit: type=1400 audit(1779434976.073:526): avc: denied { write } for pid=7148 comm="syz.4.318" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.136142][ T40] audit: type=1400 audit(1779434976.073:527): avc: denied { ioctl } for pid=7148 comm="syz.4.318" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 89.136389][ T10] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 89.294198][ T10] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 89.297131][ T10] usb 6-1: config 0 has no interface number 0 [ 89.299304][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 89.302807][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 89.306151][ T10] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 89.309863][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 89.313482][ T10] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 89.317062][ T10] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.322416][ T10] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 89.325503][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.334880][ T10] usb 6-1: config 0 descriptor?? [ 89.337251][ T7142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 89.346112][ T10] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 89.492937][ T7157] ipvlan1: entered promiscuous mode [ 89.495240][ T7157] ipvlan1: entered allmulticast mode [ 89.514377][ T50] syz2: Port: 1 Link ACTIVE [ 89.555923][ T7140] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 89.561423][ T7141] input: syz1 as /devices/virtual/input/input7 [ 89.567160][ T7141] input: failed to attach handler leds to device input7, error: -6 [ 89.581848][ T40] audit: type=1400 audit(1779434976.533:528): avc: denied { read } for pid=5129 comm="acpid" name="event4" dev="devtmpfs" ino=2919 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.593627][ T40] audit: type=1400 audit(1779434976.533:529): avc: denied { open } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2919 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.600144][ T9] usb 6-1: USB disconnect, device number 5 [ 89.604291][ T40] audit: type=1400 audit(1779434976.533:530): avc: denied { ioctl } for pid=5129 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2919 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 89.620857][ T9] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 89.646361][ T40] audit: type=1400 audit(1779434976.603:531): avc: denied { execute } for pid=7166 comm="syz.1.322" name="file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.646566][ T7167] process 'syz.1.322' launched './file0' with NULL argv: empty string added [ 89.657366][ T40] audit: type=1400 audit(1779434976.613:532): avc: denied { execute_no_trans } for pid=7166 comm="syz.1.322" path="/63/file0" dev="tmpfs" ino=345 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 89.658392][ T7167] Invalid argument reading file caps for ./file0 [ 89.674147][ T7168] netlink: 8 bytes leftover after parsing attributes in process `syz.3.321'. [ 89.682172][ T40] audit: type=1400 audit(1779434976.633:533): avc: denied { block_suspend } for pid=7164 comm="syz.3.321" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.743945][ T40] audit: type=1400 audit(1779434976.703:534): avc: denied { connect } for pid=7171 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.803101][ T40] audit: type=1400 audit(1779434976.753:535): avc: denied { read } for pid=7171 comm="syz.1.324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.997164][ T7179] netlink: 12 bytes leftover after parsing attributes in process `syz.4.326'. [ 90.030857][ T5749] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 90.062790][ T7186] xt_hashlimit: size too large, truncated to 1048576 [ 90.118041][ T7188] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 90.121447][ T7188] netlink: 'syz.4.328': attribute type 2 has an invalid length. [ 90.124849][ T7188] netlink: 'syz.4.328': attribute type 1 has an invalid length. [ 90.143956][ T7188] overlayfs: failed to decode file handle (len=6, type=9, flags=0, err=-22) [ 90.183699][ T7190] binder: 7189:7190 unknown command 0 [ 90.185620][ T7190] binder: 7189:7190 ioctl c0306201 200000000480 returned -22 [ 91.817214][ T7132] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 91.860395][ T7204] netlink: 16 bytes leftover after parsing attributes in process `syz.4.333'. [ 91.863579][ T7203] netlink: 16 bytes leftover after parsing attributes in process `syz.4.333'. [ 91.888247][ T7206] QAT: Stopping all acceleration devices. [ 91.937189][ T7207] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.039009][ T7207] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.174313][ T7207] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.200608][ T7237] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 92.211219][ T7235] lo speed is unknown, defaulting to 1000 [ 92.266173][ T7207] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.331643][ T7251] sch_tbf: burst 19920 is lower than device lo mtu (65550) ! [ 92.345703][ T7251] netlink: 'syz.0.347': attribute type 10 has an invalid length. [ 92.348434][ T7251] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'. [ 92.351699][ T7251] team0: entered promiscuous mode [ 92.353629][ T7251] team_slave_0: entered promiscuous mode [ 92.356279][ T7251] team_slave_1: entered promiscuous mode [ 92.359000][ T7251] team0: entered allmulticast mode [ 92.361331][ T7251] team_slave_0: entered allmulticast mode [ 92.364787][ T7251] team_slave_1: entered allmulticast mode [ 92.367530][ T7251] bridge0: port 3(team0) entered blocking state [ 92.369772][ T7251] bridge0: port 3(team0) entered disabled state [ 92.375123][ T7251] bridge0: port 3(team0) entered blocking state [ 92.378002][ T7251] bridge0: port 3(team0) entered forwarding state [ 92.383587][ T7235] xfrm0 speed is unknown, defaulting to 1000 [ 92.397157][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.429840][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.457588][ T7253] bond1: entered promiscuous mode [ 92.506994][ T12] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.527038][ T7100] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.624980][ T7266] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 92.627707][ T7268] netlink: 7 bytes leftover after parsing attributes in process `syz.0.353'. [ 92.687007][ T5749] Bluetooth: hci1: ACL packet too small [ 92.950407][ T29] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 93.103698][ T29] usb 5-1: unable to get BOS descriptor set [ 93.107222][ T29] usb 5-1: not running at top speed; connect to a high speed hub [ 93.111839][ T29] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 93.120588][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 93.128839][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.136201][ T29] usb 5-1: Product: 予芩硺戌賿䃗쓒稆炃顪妋␾릑뿒驃赐槁賧莞漦뚶및镩惿๷꟒犵‪囐湪࿼婨嫋性陨⃯͂⎸씾㓒㛟펗ਤ㜋傣勆Յ⒍蝺黗굡꿉Ⰹ䈌㮎敊䀍鯱˓骊룠䣬챯몘躴嗺攜᝿⪢蒜ϥ颰쯱퍊湕됉ﳊ銗仇ﰓݶ襊인ჀﰝऀҎ [ 93.150896][ T29] usb 5-1: Manufacturer: 詯顉罗퓵ႆ央狚㼸࠘Ს渫뤎⹩啯憄翬ꕋ渜語봊蔡獞잡뤝讎杚谵쓭縝Ⓚ璭꨻ꍥퟥ卐骐榯梓ᭃ槴銛扁඼䏵捒ꏋ坬턡땲홡㪄漺뜮㑙ⲁﴥ畎풵휯뇬졺降ꔮ඗ [ 93.161311][ T29] usb 5-1: SerialNumber: 䳀ﳾᙫꓬ鹷Ὑเ硩惰웩⌮箬눱梪㔛浭천哿맋댐ᤋ༁窔㽗ž [ 93.286679][ T7304] fuse: Unknown parameter 'grou' [ 93.293731][ T7305] loop9: detected capacity change from 0 to 7 [ 93.299307][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.302521][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.306720][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.310108][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.313833][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.317132][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.320427][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.323295][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.327993][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.331354][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.334945][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.338138][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.342097][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.348331][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.352599][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.355864][ T7305] ldm_validate_partition_table(): Disk read failed. [ 93.360217][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.364150][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.367898][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 93.371980][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.375678][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 93.379338][ T7305] Dev loop9: unable to read RDB block 0 [ 93.383524][ T7305] loop9: unable to read partition table [ 93.385827][ T7305] loop9: partition table beyond EOD, truncated [ 93.389183][ T7305] loop_reread_partitions: partition scan of loop9 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 93.393583][ T7308] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 93.403049][ T7308] cramfs: block size(16384) > page size(4096) not supported by filesystem [ 93.411128][ T7308] cramfs: wrong magic [ 93.459870][ T7310] netlink: 'syz.1.368': attribute type 9 has an invalid length. [ 93.580183][ T7273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 93.583952][ T7273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 93.608874][ T29] cdc_ncm 5-1:1.0: bind() failure [ 93.623016][ T29] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 93.626208][ T29] cdc_ncm 5-1:1.1: bind() failure [ 93.650934][ T29] usb 5-1: USB disconnect, device number 3 [ 93.800886][ T7320] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1337 [ 94.251721][ T7345] IPv6: syztnl0: Disabled Multicast RS [ 94.264213][ T7347] netlink: 'syz.1.380': attribute type 5 has an invalid length. [ 94.278491][ T7347] ip6erspan0: entered promiscuous mode [ 94.294764][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 94.297970][ T7354] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 94.301130][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 94.304650][ T7355] netlink: 28 bytes leftover after parsing attributes in process `syz.3.382'. [ 94.334246][ T7357] tmpfs: Bad value for 'mpol' [ 94.378243][ T7365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.385'. [ 94.403512][ T7360] lo speed is unknown, defaulting to 1000 [ 94.539717][ T7360] xfrm0 speed is unknown, defaulting to 1000 [ 94.858185][ T7384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.390'. [ 94.918400][ T7389] autofs: Bad value for 'fd' [ 94.923102][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 94.923118][ T40] audit: type=1326 audit(1779434981.873:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7388 comm="syz.4.391" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f844b99ce59 code=0x0 [ 94.995056][ T7391] netlink: 20 bytes leftover after parsing attributes in process `syz.1.392'. [ 94.999083][ T7391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.392'. [ 95.093174][ T40] audit: type=1400 audit(1779434982.053:550): avc: denied { mounton } for pid=7402 comm="syz.1.395" path="/93/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 95.100859][ T7403] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 95.110599][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.395'. [ 95.218183][ T7406] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 95.246707][ T7412] netlink: 80 bytes leftover after parsing attributes in process `syz.3.398'. [ 95.260115][ T40] audit: type=1400 audit(1779434982.213:551): avc: denied { bind } for pid=7416 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.304161][ T40] audit: type=1400 audit(1779434982.263:552): avc: denied { read append } for pid=7410 comm="syz.3.398" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.311666][ T40] audit: type=1400 audit(1779434982.263:553): avc: denied { open } for pid=7410 comm="syz.3.398" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.321203][ T40] audit: type=1400 audit(1779434982.263:554): avc: denied { create } for pid=7416 comm="syz.1.399" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 95.351613][ T40] audit: type=1400 audit(1779434982.303:555): avc: denied { mounton } for pid=7422 comm="syz.4.400" path="/98/file1/file1" dev="autofs" ino=19054 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 95.367833][ T40] audit: type=1400 audit(1779434982.323:556): avc: denied { write } for pid=7424 comm="syz.0.401" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 95.381428][ T40] audit: type=1400 audit(1779434982.333:557): avc: denied { unmount } for pid=5981 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 95.414486][ T7412] bond2 (unregistering): Released all slaves [ 95.478068][ T7429] 9p: Could not find request transport: virtio/O8[ [ 95.647887][ T7438] rdma_rxe: Failed to create IPv4 UDP tunnel [ 95.650955][ T7437] lo speed is unknown, defaulting to 1000 [ 95.657660][ T7437] lo speed is unknown, defaulting to 1000 [ 95.660336][ T7437] lo speed is unknown, defaulting to 1000 [ 95.685142][ T40] audit: type=1400 audit(1779434982.643:558): avc: denied { read } for pid=7435 comm="syz.3.405" path="socket:[19886]" dev="sockfs" ino=19886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 95.767407][ T7437] infiniband sz1: set active [ 95.769525][ T29] lo speed is unknown, defaulting to 1000 [ 95.774917][ T7437] infiniband sz1: added lo [ 95.791354][ T7437] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 95.799227][ T7437] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 95.804608][ T7443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.805811][ T7437] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 95.833274][ T7437] RDS/IB: sz1: added [ 95.837267][ T7437] smc: adding ib device sz1 with port count 1 [ 95.839738][ T7437] smc: ib device sz1 port 1 has no pnetid [ 95.843592][ T29] lo speed is unknown, defaulting to 1000 [ 95.846655][ T7437] lo speed is unknown, defaulting to 1000 [ 95.955151][ T7437] lo speed is unknown, defaulting to 1000 [ 96.036311][ T7437] lo speed is unknown, defaulting to 1000 [ 96.120906][ T7437] lo speed is unknown, defaulting to 1000 [ 96.272143][ T7446] No such timeout policy "syz1" [ 96.490175][ T7457] gfs2: not a GFS2 filesystem [ 96.902492][ T50] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.072361][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 97.077480][ T50] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 97.085693][ T50] usb 6-1: string descriptor 0 read error: -22 [ 97.088383][ T50] usb 6-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 97.091957][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.368471][ T7481] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 97.484255][ T7490] program syz.3.419 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.488340][ T7490] ata1.00: invalid service action 29 [ 97.528378][ T7492] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 97.676870][ T7493] netlink: 'syz.3.420': attribute type 1 has an invalid length. [ 98.061964][ T7512] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 98.064579][ T7512] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.070669][ T7512] vhci_hcd vhci_hcd.0: Device attached [ 98.302377][ T24] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 98.334059][ T5839] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 98.484162][ T5839] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 98.487841][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 98.492117][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 98.496045][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 98.501655][ T5839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 98.505603][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.512410][ T5839] usb 5-1: config 0 descriptor?? [ 98.519576][ T5839] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 98.696630][ T7517] netlink: 'syz.3.426': attribute type 9 has an invalid length. [ 98.710244][ T7517] syzkaller0: entered promiscuous mode [ 98.715287][ T7517] syzkaller0: entered allmulticast mode [ 99.135868][ T7533] evm: overlay not supported [ 99.426323][ T7513] vhci_hcd: connection reset by peer [ 99.428924][ T12] vhci_hcd vhci_hcd.0: stop threads [ 99.430856][ T12] vhci_hcd vhci_hcd.0: release socket [ 99.434752][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 99.657532][ T10] usb 6-1: USB disconnect, device number 6 [ 99.739745][ T7549] binder: 7548:7549 unknown command 3531813087 [ 99.743334][ T7549] binder: 7548:7549 ioctl c0306201 200000000900 returned -22 [ 99.845970][ T7558] __nla_validate_parse: 9 callbacks suppressed [ 99.845986][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 100.109968][ T7576] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 100.308343][ T40] kauditd_printk_skb: 17 callbacks suppressed [ 100.308355][ T40] audit: type=1400 audit(1779434987.263:576): avc: denied { read write } for pid=7593 comm="syz.1.450" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.319511][ T40] audit: type=1400 audit(1779434987.263:577): avc: denied { open } for pid=7593 comm="syz.1.450" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.328685][ T40] audit: type=1400 audit(1779434987.273:578): avc: denied { ioctl } for pid=7593 comm="syz.1.450" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 ioctlcmd=0x5619 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 100.343474][ T40] audit: type=1400 audit(1779434987.273:579): avc: denied { read append } for pid=7595 comm="syz.3.451" name="usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.354958][ T40] audit: type=1400 audit(1779434987.273:580): avc: denied { open } for pid=7595 comm="syz.3.451" path="/dev/usbmon3" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.360909][ T7598] program syz.1.452 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.369288][ T40] audit: type=1400 audit(1779434987.323:581): avc: denied { ioctl } for pid=7595 comm="syz.3.451" path="/dev/usbmon3" dev="devtmpfs" ino=746 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 100.411156][ T40] audit: type=1400 audit(1779434987.363:582): avc: denied { ioctl } for pid=7600 comm="syz.3.453" path="socket:[20016]" dev="sockfs" ino=20016 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 100.460754][ T7602] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.466820][ T7602] netlink: 'syz.3.453': attribute type 8 has an invalid length. [ 100.469969][ T7602] netlink: 4 bytes leftover after parsing attributes in process `syz.3.453'. [ 100.481239][ T7602] bond0: entered promiscuous mode [ 100.483148][ T7602] bond_slave_0: entered promiscuous mode [ 100.485640][ T7602] bond_slave_1: entered promiscuous mode [ 100.494131][ T7602] batadv0: entered promiscuous mode [ 100.497097][ T7602] team0: entered promiscuous mode [ 100.499200][ T7602] team_slave_0: entered promiscuous mode [ 100.501309][ T7602] team_slave_1: entered promiscuous mode [ 100.508160][ T7602] hsr1: entered promiscuous mode [ 100.510662][ T7602] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.515465][ T7608] sit0: entered promiscuous mode [ 100.523588][ T7608] netlink: 'syz.1.454': attribute type 1 has an invalid length. [ 100.526536][ T7608] netlink: 1 bytes leftover after parsing attributes in process `syz.1.454'. [ 100.548202][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 100.687052][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 100.690644][ T7619] netlink: 32 bytes leftover after parsing attributes in process `syz.3.458'. [ 100.754242][ T7622] netlink: 24 bytes leftover after parsing attributes in process `syz.3.459'. [ 100.812709][ T10] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 100.887729][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.459'. [ 100.925211][ T7626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.460'. [ 100.963959][ T10] usb 6-1: No LPM exit latency info found, disabling LPM. [ 100.968411][ T10] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 512, setting to 0 [ 100.973918][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 30, changing to 4 [ 100.977959][ T10] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 0 [ 101.055837][ T5813] usb 5-1: USB disconnect, device number 4 [ 101.149896][ T7638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.463'. [ 101.357282][ T40] audit: type=1400 audit(1779434988.313:583): avc: denied { firmware_load } for pid=7651 comm="syz.0.467" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 101.403981][ T7652] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7652 comm=syz.0.467 [ 101.426692][ T7652] syz.0.467 (7652) used greatest stack depth: 18952 bytes left [ 102.069316][ T7664] SELinux: failed to load policy [ 102.102629][ T7670] overlayfs: conflicting lowerdir path [ 102.106532][ T40] audit: type=1400 audit(1779434989.063:584): avc: denied { map } for pid=7669 comm="syz.3.471" path="/128/file0" dev="tmpfs" ino=718 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 102.110227][ T7671] loop2: detected capacity change from 0 to 7 [ 102.119451][ T7671] Dev loop2: unable to read RDB block 7 [ 102.121263][ T7671] loop2: unable to read partition table [ 102.123372][ T7671] loop2: partition table beyond EOD, truncated [ 102.125589][ T7671] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 102.170737][ T40] audit: type=1400 audit(1779434989.123:585): avc: denied { setopt } for pid=7673 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 102.787985][ T7696] deleting an unspecified loop device is not supported. [ 103.072347][ T34] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 103.202403][ T34] usb 5-1: device descriptor read/64, error -71 [ 103.442338][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 103.452393][ T34] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 103.579904][ T10] usb 6-1: New USB device found, idVendor=0582, idProduct=0113, bcdDevice= 0.40 [ 103.592315][ T34] usb 5-1: device descriptor read/64, error -71 [ 103.592324][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.594956][ T10] usb 6-1: can't set config #1, error -71 [ 103.612484][ T10] usb 6-1: USB disconnect, device number 7 [ 103.713871][ T34] usb usb5-port1: attempt power cycle [ 103.761709][ T7704] mac80211_hwsim hwsim8 ;: renamed from wlan0 (while UP) [ 103.769843][ T7704] netlink: 'syz.3.482': attribute type 6 has an invalid length. [ 103.773536][ T7704] netlink: 'syz.3.482': attribute type 5 has an invalid length. [ 103.808089][ T7704] syzkaller0: entered promiscuous mode [ 103.809944][ T7704] syzkaller0: entered allmulticast mode [ 104.072298][ T34] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 104.092778][ T34] usb 5-1: device descriptor read/8, error -71 [ 104.352312][ T34] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 104.382763][ T34] usb 5-1: device descriptor read/8, error -71 [ 104.510392][ T34] usb usb5-port1: unable to enumerate USB device [ 104.765732][ T7714] SELinux: failed to load policy [ 105.892461][ T7737] netlink: 'syz.1.491': attribute type 1 has an invalid length. [ 105.895550][ T7737] __nla_validate_parse: 6 callbacks suppressed [ 105.895587][ T7737] netlink: 244 bytes leftover after parsing attributes in process `syz.1.491'. [ 105.940622][ T7740] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 106.017108][ T7747] netlink: 4 bytes leftover after parsing attributes in process `syz.0.489'. [ 106.025149][ T7747] netlink: 12 bytes leftover after parsing attributes in process `syz.0.489'. [ 106.045479][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 106.045498][ T40] audit: type=1400 audit(1779434993.003:591): avc: denied { read } for pid=7732 comm="syz.0.489" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.058557][ T40] audit: type=1400 audit(1779434993.003:592): avc: denied { open } for pid=7732 comm="syz.0.489" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.068032][ T40] audit: type=1400 audit(1779434993.003:593): avc: denied { ioctl } for pid=7732 comm="syz.0.489" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 106.087077][ T7749] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 106.089855][ T7749] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 106.096748][ T7749] vhci_hcd vhci_hcd.0: Device attached [ 106.342384][ T50] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 106.345440][ T34] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 106.497301][ T7753] syzkaller0: entered promiscuous mode [ 106.499255][ T7753] syzkaller0: entered allmulticast mode [ 106.505061][ T50] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 106.509397][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 106.513519][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 106.516667][ T50] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.521507][ T50] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.525757][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.531756][ T50] usb 6-1: config 0 descriptor?? [ 106.538114][ T50] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 106.684127][ T40] audit: type=1326 audit(1779434993.643:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.693484][ T40] audit: type=1326 audit(1779434993.643:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.703142][ T40] audit: type=1326 audit(1779434993.643:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.710934][ T40] audit: type=1326 audit(1779434993.643:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.718726][ T40] audit: type=1326 audit(1779434993.643:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.728137][ T40] audit: type=1326 audit(1779434993.643:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.737271][ T40] audit: type=1326 audit(1779434993.643:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7732 comm="syz.0.489" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f041499ce59 code=0x7fc00000 [ 106.770799][ T7759] xt_hashlimit: size too large, truncated to 1048576 [ 106.886694][ T29] libceph: connect (1)[c::]:6789 error -101 [ 106.889659][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 106.898619][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 106.904465][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 106.909387][ T7769] netlink: 220 bytes leftover after parsing attributes in process `syz.0.498'. [ 106.912489][ T7769] netlink: 'syz.0.498': attribute type 2 has an invalid length. [ 106.917236][ T7767] nfs: Unknown parameter 'novӰjI8-%DsKKac' [ 107.087711][ T7776] veth0_to_team: entered promiscuous mode [ 107.090320][ T7776] gretap0: entered promiscuous mode [ 107.101574][ T7776] xt_hashlimit: invalid interval [ 107.186277][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 107.194991][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 107.442374][ T5839] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 107.449531][ T7750] vhci_hcd: connection reset by peer [ 107.451879][ T7099] vhci_hcd vhci_hcd.1: stop threads [ 107.456458][ T7099] vhci_hcd vhci_hcd.1: release socket [ 107.458837][ T7099] vhci_hcd vhci_hcd.1: disconnect device [ 107.602349][ T5839] usb 8-1: Using ep0 maxpacket: 16 [ 107.605695][ T5839] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 107.609550][ T5839] usb 8-1: config 0 interface 0 has no altsetting 0 [ 107.614036][ T5839] usb 8-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 107.616909][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.619455][ T5839] usb 8-1: Product: syz [ 107.620834][ T5839] usb 8-1: Manufacturer: syz [ 107.622915][ T5839] usb 8-1: SerialNumber: syz [ 107.628224][ T5839] usb 8-1: config 0 descriptor?? [ 107.683073][ T7763] ceph: No mds server is up or the cluster is laggy [ 107.710173][ T29] libceph: connect (1)[c::]:6789 error -101 [ 107.712637][ T29] libceph: mon0 (1)[c::]:6789 connect error [ 107.835878][ C1] imon 8-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 107.843353][ T5839] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 107.861971][ T5839] imon:send_packet: packet tx failed (-71) [ 107.882389][ T5839] imon 8-1:0.0: panel buttons/knobs setup failed [ 107.934463][ T5839] rc_core: IR keymap rc-imon-pad not found [ 107.937052][ T5839] Registered IR keymap rc-empty [ 107.940887][ T5839] imon 8-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 107.945306][ T5839] imon 8-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 107.950751][ T5839] imon:send_packet: packet tx failed (-71) [ 107.973054][ T5839] imon 8-1:0.0: remote input dev register failed [ 107.975942][ T5839] imon 8-1:0.0: imon_init_intf0: rc device setup failed [ 107.994947][ T5839] imon 8-1:0.0: unable to initialize intf0, err 0 [ 107.997386][ T5839] imon:imon_probe: failed to initialize context! [ 107.999471][ T5839] imon 8-1:0.0: unable to register, err -19 [ 108.002909][ T5839] usb 8-1: USB disconnect, device number 5 [ 108.053064][ T7784] comedi comedi3: unsupported base address 0x2000 [ 108.694808][ T7802] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 108.863592][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.512'. [ 108.869106][ T7814] l2tp_ppp: sess 2/0: no socket in recv [ 108.954976][ T7819] block nbd3: NBD_DISCONNECT [ 109.075106][ T7826] ref_ctr increment failed for inode: 0x33c offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888022c21880 [ 109.096865][ T5813] usb 6-1: USB disconnect, device number 8 [ 109.256948][ T7843] bond2 (unregistering): Released all slaves [ 109.385250][ T7859] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 109.401548][ T7860] netlink: 52 bytes leftover after parsing attributes in process `syz.0.523'. [ 109.449184][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz.3.526'. [ 109.503568][ T7876] netlink: 32 bytes leftover after parsing attributes in process `syz.0.528'. [ 109.616990][ T7886] binder: BINDER_SET_CONTEXT_MGR already set [ 109.630310][ T7886] binder: 7884:7886 ioctl 4018620d 200000000040 returned -16 [ 109.696039][ T7894] No source specified [ 109.790121][ T7905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=7905 comm=syz.3.536 [ 109.901228][ T7911] cgroup: No subsys list or none specified [ 110.206216][ T7933] netlink: 'syz.1.543': attribute type 2 has an invalid length. [ 110.221672][ T7933] MINIX-fs: blocksize too small for device [ 110.225483][ T7933] program syz.1.543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.299036][ T7938] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.546017][ T5744] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 110.552432][ T5744] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 110.557789][ T5744] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 110.564070][ T5744] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 110.567166][ T5744] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 110.688310][ T7957] netlink: 12 bytes leftover after parsing attributes in process `syz.1.549'. [ 110.708294][ T7957] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 110.808387][ T7949] lo speed is unknown, defaulting to 1000 [ 110.813481][ T5744] Bluetooth: hci1: unexpected event for opcode 0x100c [ 110.924540][ T7974] ubi31: attaching mtd0 [ 110.947215][ T7974] ubi31: scanning is finished [ 110.948846][ T7974] ubi31: empty MTD device detected [ 111.051828][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 111.074015][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 111.081127][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 111.085527][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.554'. [ 111.088687][ T7980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.554'. [ 111.302849][ T7974] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 111.306343][ T7974] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 111.309330][ T7974] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 111.312101][ T7974] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 111.317403][ T7974] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 111.322087][ T7974] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 111.325536][ T7974] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2823136623 [ 111.329056][ T7974] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 111.336713][ T7991] ubi31: background thread "ubi_bgt31d" started, PID 7991 [ 111.375989][ T7996] openvswitch: netlink: IP tunnel dst address not specified [ 111.376503][ T7997] openvswitch: netlink: IP tunnel dst address not specified [ 111.409501][ T7999] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.418231][ T8000] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 111.447041][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 111.468074][ T7949] xfrm0 speed is unknown, defaulting to 1000 [ 111.471877][ T7949] lo speed is unknown, defaulting to 1000 [ 111.494070][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 111.494085][ T40] audit: type=1400 audit(1779434998.446:646): avc: denied { write } for pid=8008 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 111.534806][ T8019] netlink: 32 bytes leftover after parsing attributes in process `syz.1.564'. [ 111.603608][ T40] audit: type=1400 audit(1779434998.539:647): avc: denied { getopt } for pid=8025 comm="syz.3.565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 111.725734][ T40] audit: type=1400 audit(1779434998.661:648): avc: denied { name_bind } for pid=8038 comm="syz.0.569" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 111.775606][ T8046] netlink: 45 bytes leftover after parsing attributes in process `syz.0.571'. [ 111.798512][ T40] audit: type=1400 audit(1779434998.717:649): avc: denied { setopt } for pid=8045 comm="syz.0.571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 111.816384][ T8037] kvm: user requested TSC rate below hardware speed [ 111.841469][ T40] audit: type=1400 audit(1779434998.764:650): avc: denied { bpf } for pid=8036 comm="syz.1.568" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.849894][ T40] audit: type=1400 audit(1779434998.773:651): avc: denied { perfmon } for pid=8036 comm="syz.1.568" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 111.857169][ T40] audit: type=1400 audit(1779434998.783:652): avc: denied { connect } for pid=8051 comm="syz.0.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 111.891980][ T40] audit: type=1400 audit(1779434998.811:653): avc: denied { module_request } for pid=7949 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 111.918583][ T40] audit: type=1400 audit(1779434998.839:654): avc: denied { ioctl } for pid=8051 comm="syz.0.573" path="socket:[22815]" dev="sockfs" ino=22815 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 112.020076][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.022567][ T7949] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.025426][ T7949] bridge_slave_0: entered allmulticast mode [ 112.029519][ T7949] bridge_slave_0: entered promiscuous mode [ 112.033538][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.036104][ T7949] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.038454][ T7949] bridge_slave_1: entered allmulticast mode [ 112.041882][ T7949] bridge_slave_1: entered promiscuous mode [ 112.062166][ T7949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.073772][ T7949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.103325][ T7949] team0: Port device team_slave_0 added [ 112.107222][ T7949] team0: Port device team_slave_1 added [ 112.130649][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.133057][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.141209][ T7949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.146484][ T7949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.148746][ T7949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.157471][ T7949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.204157][ T7949] hsr_slave_0: entered promiscuous mode [ 112.207333][ T7949] hsr_slave_1: entered promiscuous mode [ 112.209708][ T7949] debugfs: 'hsr0' already exists in 'hsr' [ 112.211558][ T7949] Cannot create hsr debugfs directory [ 112.238094][ T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 112.408785][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 112.411988][ T24] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 112.415516][ T24] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 112.416109][ T7949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 112.420211][ T24] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 112.428112][ T24] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 112.428991][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 112.434661][ T24] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 112.435408][ T7949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 112.438549][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.443260][ T24] usb 5-1: Product: syz [ 112.444609][ T24] usb 5-1: Manufacturer: syz [ 112.444806][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 112.446079][ T24] usb 5-1: SerialNumber: syz [ 112.450402][ T7949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 112.452359][ C2] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 112.459228][ T24] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input10 [ 112.461907][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 112.469106][ T7949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 112.475358][ T7949] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 112.496149][ T7949] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.498554][ T7949] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.501231][ T7949] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.503789][ T7949] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.562889][ T7949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.576459][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.582301][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.593488][ T7949] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.606309][ T7099] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.608687][ T7099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.617998][ T7095] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.620491][ T7095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.631553][ T8090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.581'. [ 112.677418][ T40] audit: type=1400 audit(1779434999.541:655): avc: denied { write } for pid=8091 comm="syz.3.582" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 112.686547][ T24] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 112.697229][ T24] (id 0x00) [ 112.739946][ T5744] Bluetooth: hci4: command tx timeout [ 112.773610][ T24] rc_core: IR keymap rc-imon-pad not found [ 112.775744][ T24] Registered IR keymap rc-empty [ 112.777500][ T24] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 112.781013][ T24] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 112.786065][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.585'. [ 112.786396][ T24] imon:send_packet: packet tx failed (-71) [ 112.791581][ T8112] netlink: 'syz.1.585': attribute type 21 has an invalid length. [ 112.804163][ T24] imon 5-1:155.0: remote input dev register failed [ 112.806868][ T24] imon 5-1:155.0: imon_init_intf0: rc device setup failed [ 112.842172][ T24] imon 5-1:155.0: unable to initialize intf0, err 0 [ 112.844855][ T24] imon:imon_probe: failed to initialize context! [ 112.847507][ T24] imon 5-1:155.0: unable to register, err -19 [ 112.865643][ T24] usb 5-1: USB disconnect, device number 9 [ 112.897916][ T8118] netlink: 24 bytes leftover after parsing attributes in process `syz.1.588'. [ 112.961168][ T8120] syz.0.587: attempt to access beyond end of device [ 112.961168][ T8120] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 112.972246][ T8120] gfs2: error -5 reading superblock [ 112.998620][ T8126] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.118716][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.143258][ T8142] overlayfs: upper fs does not support file handles, falling back to index=off. [ 113.182051][ T5744] Bluetooth: hci1: unexpected event for opcode 0x041b [ 113.188794][ T8142] tmpfs: Unknown parameter 'Usr(X 3quota' [ 113.189657][ T8144] tmpfs: Unknown parameter 'Usr(X 3quota' [ 113.254622][ T8163] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0 [ 113.321160][ T7949] veth0_vlan: entered promiscuous mode [ 113.327378][ T7949] veth1_vlan: entered promiscuous mode [ 113.394932][ T7949] veth0_macvtap: entered promiscuous mode [ 113.402699][ T7949] veth1_macvtap: entered promiscuous mode [ 113.416387][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 113.428938][ T7949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.439642][ T7093] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.443696][ T7093] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.455298][ T7093] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.460550][ T7093] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.556266][ T7093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.561293][ T7093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.575037][ T8193] tmpfs: User quota inode hardlimit too large. [ 113.588440][ T7093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.590990][ T7093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.658602][ T8198] fuse: Bad value for 'group_id' [ 113.660447][ T8198] fuse: Bad value for 'group_id' [ 113.676765][ T8200] syzkaller0: entered promiscuous mode [ 113.676789][ T8200] syzkaller0: entered allmulticast mode [ 114.097842][ T71] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 114.190050][ T8223] comedi comedi2: pcl812: I/O port conflict (0x100,16) [ 114.200911][ T8223] pimreg: entered allmulticast mode [ 114.278746][ T71] usb 8-1: Using ep0 maxpacket: 16 [ 114.282524][ T71] usb 8-1: config 0 interface 0 altsetting 44 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.287167][ T71] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 114.292286][ T71] usb 8-1: config 0 interface 0 altsetting 44 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 114.296502][ T71] usb 8-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 114.300930][ T71] usb 8-1: config 0 interface 0 has no altsetting 0 [ 114.305093][ T71] usb 8-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 114.307968][ T71] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.310433][ T71] usb 8-1: Product: syz [ 114.311865][ T71] usb 8-1: Manufacturer: syz [ 114.313303][ T71] usb 8-1: SerialNumber: syz [ 114.316373][ T71] usb 8-1: config 0 descriptor?? [ 114.318494][ T8208] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 114.324880][ T71] input: syz syz as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 114.558844][ T8208] gtp0: entered allmulticast mode [ 114.600610][ T855] usb 8-1: USB disconnect, device number 6 [ 114.962642][ T5744] Bluetooth: hci4: command tx timeout [ 115.176811][ T8271] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 115.180851][ T8271] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 115.341630][ T8285] batadv0: entered promiscuous mode [ 115.351592][ T8285] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 115.371460][ T8285] batadv0: left promiscuous mode [ 115.407346][ T8286] batadv0: entered promiscuous mode [ 115.413221][ T8286] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 115.417156][ T8286] batadv0: left promiscuous mode [ 115.454244][ T8295] pimreg: entered allmulticast mode [ 115.457259][ T8295] program syz.3.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 115.508692][ T1133] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 115.514050][ T1133] ata1.00: irq_stat 0x40000000 [ 115.516657][ T1133] ata1.00: failed command: ZAC MANAGEMENT OUT [ 115.519990][ T1133] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 9 [ 115.519990][ T1133] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 115.526373][ T1133] ata1.00: status: { DRDY ERR } [ 115.528657][ T1133] ata1.00: error: { ABRT } [ 115.531566][ T1133] ata1.00: device reported invalid CHS sector 0 [ 115.536679][ C2] ata1: illegal qc_active transition (00000000->00002000) [ 115.893658][ T1133] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 115.897399][ T1133] ata1.00: configured for UDMA/100 [ 116.281268][ T8327] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8327 comm=syz.3.643 [ 116.665539][ T8337] __nla_validate_parse: 5 callbacks suppressed [ 116.665553][ T8337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.646'. [ 116.677901][ T8337] bridge1: entered promiscuous mode [ 116.679711][ T8337] bridge1: entered allmulticast mode [ 116.710738][ T8342] netlink: 'syz.5.647': attribute type 322 has an invalid length. [ 116.924022][ T8348] lo speed is unknown, defaulting to 1000 [ 117.016185][ T8353] Process accounting resumed [ 117.089103][ T8348] xfrm0 speed is unknown, defaulting to 1000 [ 117.091833][ T8348] lo speed is unknown, defaulting to 1000 [ 117.185351][ T5744] Bluetooth: hci4: command tx timeout [ 117.210604][ T8362] ptrace attach of "/syz-executor exec"[7949] was attempted by "/syz-executor exec"[8362] [ 117.280945][ T8362] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 117.318339][ T8371] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 117.320521][ T8371] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 117.336990][ T8371] vhci_hcd vhci_hcd.0: Device attached [ 117.368324][ T8369] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 117.612888][ T5839] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 117.615339][ T71] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 117.784993][ T5839] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 117.787762][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.794716][ T5839] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 117.800453][ T5839] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 117.808631][ T5839] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 117.811526][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.820613][ T5839] usb 5-1: config 0 descriptor?? [ 117.824481][ T5839] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 118.018855][ T5880] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 118.189768][ T5880] usb 8-1: Using ep0 maxpacket: 8 [ 118.193498][ T5880] usb 8-1: config 0 has no interfaces? [ 118.195221][ T5880] usb 8-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 118.200428][ T5880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.210726][ T5880] usb 8-1: config 0 descriptor?? [ 118.346950][ T8389] CUSE: unknown device info "" [ 118.348532][ T8389] CUSE: zero length info key specified [ 118.516332][ T40] kauditd_printk_skb: 20 callbacks suppressed [ 118.516346][ T40] audit: type=1400 audit(1779435005.015:676): avc: denied { watch } for pid=8393 comm="syz.1.662" path="/174/bus" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 118.540136][ T40] audit: type=1400 audit(1779435005.015:677): avc: denied { watch_sb watch_reads } for pid=8393 comm="syz.1.662" path="/174/bus" dev="tmpfs" ino=933 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 118.806902][ T8372] vhci_hcd: connection reset by peer [ 118.811324][ T46] vhci_hcd vhci_hcd.0: stop threads [ 118.813069][ T46] vhci_hcd vhci_hcd.0: release socket [ 118.821765][ T46] vhci_hcd vhci_hcd.0: disconnect device [ 119.407958][ T5744] Bluetooth: hci4: command tx timeout [ 119.612879][ T8404] netlink: 208240 bytes leftover after parsing attributes in process `syz.1.664'. [ 119.696968][ T8377] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8377 comm=syz.5.657 [ 119.853985][ T8412] 0: reclassify loop, rule prio 0, protocol 700 [ 119.860283][ T8412] Cannot find set identified by id 0 to match [ 119.943840][ T8414] netlink: 168 bytes leftover after parsing attributes in process `syz.5.667'. [ 119.976226][ T8417] macvtap0: entered allmulticast mode [ 119.978124][ T8417] veth0_macvtap: entered allmulticast mode [ 120.013326][ T40] audit: type=1400 audit(1779435006.409:678): avc: denied { view } for pid=8421 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 120.020132][ T40] audit: type=1400 audit(1779435006.419:679): avc: denied { read } for pid=8421 comm="syz.5.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 120.049854][ T8424] EXT4-fs (loop1): unable to read superblock [ 120.223932][ T8437] netlink: 40 bytes leftover after parsing attributes in process `syz.1.675'. [ 120.232501][ T8437] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.675'. [ 120.402361][ T8441] vivid-002: disconnect [ 120.406853][ T8441] vivid-002: reconnect [ 120.511929][ T5839] usb 5-1: USB disconnect, device number 10 [ 120.710894][ T8460] usb 8-1: USB disconnect, device number 7 [ 120.732473][ T8465] openvswitch: netlink: Flow key attribute not present in set flow. [ 120.767666][ T8468] netlink: 'syz.0.685': attribute type 21 has an invalid length. [ 120.770111][ T8468] IPv6: NLM_F_CREATE should be specified when creating new route [ 120.819651][ T8473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 120.819670][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.0.686'. [ 120.911675][ T8481] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 120.914180][ T8481] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 120.916797][ T40] audit: type=1400 audit(1779435007.261:680): avc: denied { create } for pid=8475 comm="syz.0.687" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 120.921599][ T8481] vhci_hcd vhci_hcd.0: Device attached [ 121.118178][ T8497] f2fs: Unknown parameter 'usrquotaq' [ 121.172582][ T8499] kvm: user requested TSC rate below hardware speed [ 121.172638][ T8500] kvm: user requested TSC rate below hardware speed [ 121.182249][ T34] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 121.184918][ T50] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 121.357439][ T34] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 121.363771][ T34] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.368181][ T34] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.371990][ T34] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.376983][ T34] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.380377][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.385960][ T34] usb 6-1: config 0 descriptor?? [ 121.399218][ T34] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 121.844484][ T8503] netlink: 104 bytes leftover after parsing attributes in process `syz.3.693'. [ 121.963737][ T8507] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.966361][ T8507] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.993875][ T8510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.694'. [ 121.997946][ T8510] openvswitch: netlink: Missing key (keys=40, expected=80) [ 122.056360][ T8507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.065344][ T8507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.190684][ T34] lo speed is unknown, defaulting to 1000 [ 122.195264][ T965] syz2: Port: 1 Link DOWN [ 122.196922][ T34] syz0: Port: 1 Link DOWN [ 122.197026][ T12] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.201213][ T12] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.204043][ T12] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.207419][ T12] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.365673][ T8482] vhci_hcd: connection reset by peer [ 122.369376][ T7093] vhci_hcd vhci_hcd.1: stop threads [ 122.371098][ T7093] vhci_hcd vhci_hcd.1: release socket [ 122.373078][ T7093] vhci_hcd vhci_hcd.1: disconnect device [ 122.927046][ T8526] ipvlan1: left promiscuous mode [ 122.929337][ T8526] ipvlan1: left allmulticast mode [ 122.973966][ T8528] overlayfs: missing 'workdir' [ 122.976548][ T8529] overlayfs: missing 'workdir' [ 123.006852][ T8531] netlink: 'syz.3.699': attribute type 2 has an invalid length. [ 123.010465][ T40] audit: type=1400 audit(1779435009.217:681): avc: denied { map } for pid=8530 comm="syz.3.699" path="/proc/636/net/netlink" dev="proc" ino=4026533263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 123.073447][ T71] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 123.176960][ T5744] Bluetooth: hci1: unexpected event for opcode 0x204e [ 123.278372][ T40] audit: type=1400 audit(1779435009.470:682): avc: denied { getopt } for pid=8542 comm="syz.3.704" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 123.338969][ T8544] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=8544 comm=syz.3.704 [ 124.061030][ T8476] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 124.117020][ T965] usb 6-1: USB disconnect, device number 9 [ 124.156800][ T8554] netlink: 20 bytes leftover after parsing attributes in process `syz.5.708'. [ 124.167887][ T8555] netlink: 20 bytes leftover after parsing attributes in process `syz.5.708'. [ 124.178134][ T8554] 9pnet_virtio: no channels available for device syz [ 124.183320][ T40] audit: type=1400 audit(1779435010.312:683): avc: denied { write } for pid=8556 comm="syz.1.709" name="/" dev="9p" ino=74733003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.197353][ T40] audit: type=1400 audit(1779435010.321:684): avc: denied { remove_name } for pid=8556 comm="syz.1.709" name="file2" dev="9p" ino=74733011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.209396][ T40] audit: type=1400 audit(1779435010.321:685): avc: denied { rmdir } for pid=8556 comm="syz.1.709" name="file2" dev="9p" ino=74733011 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 124.223147][ T8557] vlan1: entered allmulticast mode [ 124.226743][ T8557] veth0_vlan: entered allmulticast mode [ 124.242675][ T8566] netlink: 'syz.3.710': attribute type 1 has an invalid length. [ 124.245443][ T8564] vivid-000: disconnect [ 124.261989][ T8566] 8021q: adding VLAN 0 to HW filter on device bond2 [ 124.284313][ T8559] macsec2: entered promiscuous mode [ 124.286081][ T8559] macsec2: entered allmulticast mode [ 124.310798][ T40] audit: type=1400 audit(1779435010.433:686): avc: denied { mount } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 124.317928][ T40] audit: type=1400 audit(1779435010.443:687): avc: denied { search } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.325366][ T40] audit: type=1400 audit(1779435010.443:688): avc: denied { search } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.325404][ T40] audit: type=1400 audit(1779435010.443:689): avc: denied { search } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.325429][ T40] audit: type=1400 audit(1779435010.443:690): avc: denied { search } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.325451][ T40] audit: type=1400 audit(1779435010.443:691): avc: denied { search } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.325476][ T40] audit: type=1400 audit(1779435010.443:692): avc: denied { search } for pid=8573 comm="syz.5.714" name="/" dev="configfs" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.338676][ T8557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 124.431186][ T8586] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 124.433246][ T8586] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 124.436660][ T8586] vhci_hcd vhci_hcd.0: Device attached [ 124.454702][ T8590] CUSE: info not properly terminated [ 124.686945][ T5839] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 125.217158][ T8597] SELinux: unknown common [ 125.218686][ T8597] SELinux: failed to load policy [ 125.224318][ T8599] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 125.227732][ T8599] SELinux: failed to load policy [ 125.264797][ T8602] netlink: 56 bytes leftover after parsing attributes in process `syz.5.722'. [ 125.498267][ T8612] SELinux: policydb string does not match my string SE Linux [ 125.501525][ T8612] SELinux: failed to load policy [ 125.642034][ T8622] trusted_key: syz.1.728 sent an empty control message without MSG_MORE. [ 125.674933][ T8628] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.729'. [ 125.678150][ T8628] netlink: Unknown conntrack attr (0) [ 125.721243][ T8633] netlink: 'syz.1.731': attribute type 8 has an invalid length. [ 125.725379][ T8633] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 125.916164][ T8649] netlink: 12 bytes leftover after parsing attributes in process `syz.5.736'. [ 125.948477][ T5632] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 125.981714][ T8655] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 125.984325][ T8656] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 125.989790][ T8654] overlay: Bad value for 'workdir' [ 125.995123][ T8654] netlink: 28 bytes leftover after parsing attributes in process `syz.5.738'. [ 126.031020][ T8660] syz_tun: entered allmulticast mode [ 126.049799][ T8660] syz_tun: left allmulticast mode [ 126.064464][ T8664] netlink: 8 bytes leftover after parsing attributes in process `syz.1.742'. [ 126.108258][ T5632] usb 5-1: Using ep0 maxpacket: 8 [ 126.111150][ T5632] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 126.113916][ T5632] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.117196][ T5632] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.120624][ T5632] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.121922][ T8673] loop8: detected capacity change from 0 to 7 [ 126.123787][ T5632] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.131184][ T5632] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.135210][ T5632] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.138532][ C0] blk_print_req_error: 11 callbacks suppressed [ 126.138546][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 126.144765][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.147975][ C0] buffer_io_error: 10 callbacks suppressed [ 126.147985][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.154420][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.157589][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.161148][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.164126][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.167790][ C1] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.170718][ C1] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.173927][ C0] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 126.176913][ C0] Buffer I/O error on dev loop8, logical block 0, async page read [ 126.354781][ T5632] usb 5-1: usb_control_msg returned -32 [ 126.356648][ T5632] usbtmc 5-1:16.0: can't read capabilities [ 126.674625][ T50] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 126.706553][ T5632] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.743804][ T10] usb 5-1: USB disconnect, device number 11 [ 126.888322][ T5632] usb 6-1: Using ep0 maxpacket: 8 [ 126.891510][ T5632] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.895229][ T5632] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.898539][ T5632] usb 6-1: config 0 interface 0 has no altsetting 0 [ 126.901035][ T5632] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 126.903995][ T5632] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.908184][ T5632] usb 6-1: config 0 descriptor?? [ 126.998074][ T8707] trusted_key: encrypted_key: master key parameter '' is invalid [ 127.347530][ T5632] hid_parser_main: 5 callbacks suppressed [ 127.347567][ T5632] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 127.353304][ T5632] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 127.355663][ T5632] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 127.358130][ T5632] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 127.360777][ T5632] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 127.363649][ T5632] mcp2221 0003:04D8:00DD.0005: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 127.556996][ T8691] i2c i2c-2: unsupported multi-msg i2c transaction [ 127.565411][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.571787][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.582808][ T10] usb 6-1: USB disconnect, device number 10 [ 127.651772][ T8587] vhci_hcd: connection reset by peer [ 127.655025][ T46] vhci_hcd vhci_hcd.3: stop threads [ 127.657162][ T46] vhci_hcd vhci_hcd.3: release socket [ 127.660071][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 127.675062][ T8733] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.761'. [ 127.798312][ T8739] netlink: 168 bytes leftover after parsing attributes in process `syz.1.763'. [ 127.888457][ T8751] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 128.048234][ T8767] netlink: 'syz.0.772': attribute type 1 has an invalid length. [ 128.061673][ T8767] 8021q: adding VLAN 0 to HW filter on device bond2 [ 128.504059][ T8789] netlink: 'syz.0.777': attribute type 21 has an invalid length. [ 128.506855][ T8789] netlink: 'syz.0.777': attribute type 1 has an invalid length. [ 128.558917][ T71] lo speed is unknown, defaulting to 1000 [ 129.450191][ T39] libceph: connect (1)[c::]:6789 error -101 [ 129.454681][ T39] libceph: mon0 (1)[c::]:6789 connect error [ 129.536421][ T8840] ceph: No mds server is up or the cluster is laggy [ 129.750735][ T8874] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=21 sclass=netlink_audit_socket pid=8874 comm=syz.1.799 [ 130.183122][ T5839] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 130.478712][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 130.478725][ T40] audit: type=1400 audit(1779435016.198:706): avc: denied { create } for pid=8879 comm="syz.3.802" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 130.588186][ T40] audit: type=1400 audit(1779435016.310:707): avc: denied { write } for pid=8891 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 130.735660][ T40] audit: type=1400 audit(1779435016.441:708): avc: denied { setopt } for pid=8909 comm="syz.1.806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.844408][ T8901] syz.3.804 (8901): drop_caches: 2 [ 130.896905][ T8924] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 131.366060][ T40] audit: type=1400 audit(1779435017.040:709): avc: denied { getopt } for pid=8929 comm="syz.5.813" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 131.436453][ T40] audit: type=1326 audit(1779435017.106:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8889 comm="syz.3.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9aea19ce59 code=0x7fc00000 [ 131.493525][ T40] audit: type=1400 audit(1779435017.152:711): avc: denied { read } for pid=8940 comm="syz.5.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 131.546562][ T8944] bridge0: port 3(team0) entered disabled state [ 131.548891][ T40] audit: type=1400 audit(1779435017.209:712): avc: denied { map } for pid=8940 comm="syz.5.818" path="socket:[27343]" dev="sockfs" ino=27343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.553664][ T8944] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.556336][ T40] audit: type=1400 audit(1779435017.209:713): avc: denied { read accept } for pid=8940 comm="syz.5.818" path="socket:[27343]" dev="sockfs" ino=27343 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 131.559960][ T8944] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.585864][ T8944] geneve1: left promiscuous mode [ 131.589540][ T8944] bond1: left promiscuous mode [ 131.626877][ T8952] __nla_validate_parse: 4 callbacks suppressed [ 131.626896][ T8952] netlink: 36 bytes leftover after parsing attributes in process `syz.0.820'. [ 131.660656][ T8945] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 131.663566][ T8954] mac80211_hwsim hwsim13 8: renamed from wlan0 (while UP) [ 131.749327][ T8962] fuse: Bad value for 'fd' [ 131.850385][ T8972] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.827'. [ 131.861876][ T8972] netlink: 40 bytes leftover after parsing attributes in process `syz.1.827'. [ 131.861914][ T8973] netlink: 40 bytes leftover after parsing attributes in process `syz.1.827'. [ 131.886161][ T40] audit: type=1400 audit(1779435017.517:714): avc: denied { unmount } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 131.902925][ T8978] netlink: 52 bytes leftover after parsing attributes in process `syz.1.829'. [ 131.908103][ T8979] netlink: 76 bytes leftover after parsing attributes in process `syz.1.829'. [ 131.908112][ T40] audit: type=1400 audit(1779435017.545:715): avc: denied { bind } for pid=8975 comm="syz.5.828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 132.252983][ T50] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 132.423629][ T50] usb 10-1: Using ep0 maxpacket: 16 [ 132.429668][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 132.434844][ T50] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.438839][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 132.443818][ T50] usb 10-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 132.448192][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.454612][ T50] usb 10-1: config 0 descriptor?? [ 132.803563][ T9034] 8021q: adding VLAN 0 to HW filter on device bond1 [ 132.817669][ T9033] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.868905][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz.1.848'. [ 132.877812][ T9040] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 132.900383][ T50] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 132.902696][ T50] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 132.906447][ T50] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 132.908746][ T50] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 132.910979][ T50] shield 0003:0955:7214.0006: unknown main item tag 0x0 [ 132.914867][ T50] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 132.962486][ T50] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 132.965137][ T50] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 132.972640][ T9042] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 132.975555][ T9042] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.978791][ T9042] vhci_hcd vhci_hcd.0: Device attached [ 132.983605][ T9044] vhci_hcd: connection closed [ 132.983909][ T7093] vhci_hcd vhci_hcd.1: stop threads [ 132.987939][ T7093] vhci_hcd vhci_hcd.1: release socket [ 132.991423][ T7093] vhci_hcd vhci_hcd.1: disconnect device [ 133.115878][ T10] usb 10-1: USB disconnect, device number 2 [ 133.117263][ T965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 133.126957][ T965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 133.130966][ T965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 133.135119][ T965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 133.337891][ T9052] netlink: 100 bytes leftover after parsing attributes in process `syz.0.852'. [ 133.477504][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.853'. [ 133.480981][ T9055] netlink: 12 bytes leftover after parsing attributes in process `syz.0.853'. [ 133.586881][ T9075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 133.589165][ T9075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 133.592362][ T9075] vhci_hcd vhci_hcd.0: Device attached [ 133.855814][ T10] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 133.858620][ T5880] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 133.872041][ T9099] hugetlbfs: Bad value 'x' for mount option 'size' [ 133.872041][ T9099] [ 134.051115][ T5880] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 134.053886][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.057605][ T5880] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 134.061478][ T5880] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 134.065677][ T5880] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 134.068560][ T5880] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.073048][ T5880] usb 6-1: config 0 descriptor?? [ 134.077464][ T5880] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 134.321359][ T9121] ------------[ cut here ]------------ [ 134.324498][ T9121] refcount_t: underflow; use-after-free. [ 134.328488][ T9121] WARNING: lib/refcount.c:28 at refcount_warn_saturate+0xf4/0x130, CPU#0: syz.3.871/9121 [ 134.334398][ T9121] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 134.336742][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.3.871 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.341102][ T9121] Tainted: [L]=SOFTLOCKUP [ 134.342861][ T9121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.346806][ T9121] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 134.349236][ T9121] Code: cc e8 f0 fc 0e fd 48 8d 3d c9 b2 e8 0b 67 48 0f b9 3a e8 df fc 0e fd 5b 5d e9 58 87 94 06 e8 d3 fc 0e fd 48 8d 3d bc b2 e8 0b <67> 48 0f b9 3a e8 c2 fc 0e fd 5b 5d c3 cc cc cc cc e8 b6 fc 0e fd [ 134.357103][ T9121] RSP: 0018:ffffc90003eb7120 EFLAGS: 00010293 [ 134.359642][ T9121] RAX: 0000000000000000 RBX: ffff8880232c9180 RCX: ffffffff84f9b33b [ 134.362661][ T9121] RDX: ffff88802c0b4a00 RSI: ffffffff84f9b3cd RDI: ffffffff90e26690 [ 134.365785][ T9121] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 134.368894][ T9121] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880232c9180 [ 134.372027][ T9121] R13: ffffffff8a05cdb0 R14: 0000000000000000 R15: 0000000000000018 [ 134.375027][ T9121] FS: 00007f9aeafae6c0(0000) GS:ffff8880d636d000(0000) knlGS:0000000000000000 [ 134.378473][ T9121] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 134.381157][ T9121] CR2: 00007f9aeafadff8 CR3: 0000000063276000 CR4: 0000000000352ef0 [ 134.384387][ T9121] Call Trace: [ 134.385727][ T9121] [ 134.386909][ T9121] sk_common_release+0x260/0x370 [ 134.389175][ T9121] inet_release+0xed/0x200 [ 134.391079][ T9121] sock_release+0x91/0x1c0 [ 134.392829][ T9121] ? __pfx_rxe_ns_pernet_set_sk4+0x10/0x10 [ 134.395254][ T9121] rxe_sock_put+0xae/0x130 [ 134.397047][ T9121] ? __pfx_rxe_dellink+0x10/0x10 [ 134.399050][ T9121] rxe_net_del+0x83/0x120 [ 134.400970][ T9121] rxe_dellink+0x15/0x20 [ 134.402720][ T9121] nldev_dellink+0x289/0x3c0 [ 134.404603][ T9121] ? __pfx_nldev_dellink+0x10/0x10 [ 134.406730][ T9121] ? rcu_is_watching+0x12/0xc0 [ 134.408849][ T9121] ? cap_capable+0x10b/0x440 [ 134.410806][ T9121] ? bpf_lsm_capable+0x9/0x10 [ 134.413031][ T9121] ? security_capable+0x80/0x260 [ 134.414948][ T9121] ? ns_capable+0xd2/0xf0 [ 134.416772][ T9121] ? __pfx_nldev_dellink+0x10/0x10 [ 134.418903][ T9121] rdma_nl_rcv_msg+0x392/0x6f0 [ 134.420912][ T9121] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 134.423127][ T9121] ? __lock_acquire+0x4a5/0x2630 [ 134.425217][ T9121] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 134.428014][ T9121] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 134.429426][ T39] usb 6-1: USB disconnect, device number 11 [ 134.430888][ T9121] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.434566][ T9121] netlink_unicast+0x585/0x850 [ 134.436079][ T9121] ? __pfx_netlink_unicast+0x10/0x10 [ 134.437717][ T9121] netlink_sendmsg+0x8b0/0xda0 [ 134.439150][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.440822][ T9121] ? __might_fault+0x70/0x140 [ 134.442429][ T9121] ____sys_sendmsg+0x9e1/0xb70 [ 134.442917][ T9076] vhci_hcd: connection reset by peer [ 134.444000][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.444025][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.444039][ T9121] ? folio_add_new_anon_rmap+0x44e/0x1690 [ 134.444058][ T9121] ? rcu_read_unlock+0x2d/0xb0 [ 134.444074][ T9121] ? rcu_read_unlock+0x2d/0xb0 [ 134.444094][ T9121] ___sys_sendmsg+0x190/0x1e0 [ 134.444110][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.444140][ T9121] __sys_sendmsg+0x170/0x220 [ 134.444153][ T9121] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.444164][ T9121] ? _raw_spin_unlock_irq+0x2e/0x50 [ 134.450579][ T7093] vhci_hcd vhci_hcd.1: stop threads [ 134.451456][ T9121] ? rcu_is_watching+0x12/0xc0 [ 134.464595][ T7093] vhci_hcd vhci_hcd.1: release socket [ 134.465893][ T9121] do_syscall_64+0x10b/0xf80 [ 134.469461][ T9121] ? clear_bhb_loop+0x40/0x90 [ 134.470982][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.472766][ T9121] RIP: 0033:0x7f9aea19ce59 [ 134.474124][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.475450][ T7093] vhci_hcd vhci_hcd.1: disconnect device [ 134.480058][ T9121] RSP: 002b:00007f9aeafae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.484470][ T9121] RAX: ffffffffffffffda RBX: 00007f9aea416090 RCX: 00007f9aea19ce59 [ 134.487010][ T9121] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000003 [ 134.489468][ T9121] RBP: 00007f9aea232d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.491910][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.494309][ T9121] R13: 00007f9aea416128 R14: 00007f9aea416090 R15: 00007ffc48ea1b58 [ 134.496843][ T9121] [ 134.497850][ T9121] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 134.500063][ T9121] CPU: 0 UID: 0 PID: 9121 Comm: syz.3.871 Tainted: G L syzkaller #0 PREEMPT(full) [ 134.503293][ T9121] Tainted: [L]=SOFTLOCKUP [ 134.504566][ T9121] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 134.507627][ T9121] Call Trace: [ 134.508686][ T9121] [ 134.509627][ T9121] dump_stack_lvl+0x100/0x190 [ 134.511203][ T9121] vpanic+0x552/0x970 [ 134.512468][ T9121] ? __pfx_vpanic+0x10/0x10 [ 134.513907][ T9121] panic+0xd1/0xe0 [ 134.515083][ T9121] ? __pfx_panic+0x10/0x10 [ 134.516455][ T9121] ? check_panic_on_warn+0x1f/0x90 [ 134.518060][ T9121] check_panic_on_warn.cold+0x19/0x34 [ 134.519746][ T9121] ? refcount_warn_saturate+0xf4/0x130 [ 134.521391][ T9121] __warn.cold+0x191/0x328 [ 134.522766][ T9121] __report_bug+0x296/0x3d0 [ 134.524185][ T9121] ? refcount_warn_saturate+0xf4/0x130 [ 134.525882][ T9121] ? __pfx___report_bug+0x10/0x10 [ 134.527586][ T9121] ? __pfx___pv_queued_spin_lock_slowpath+0x10/0x10 [ 134.530166][ T9121] ? refcount_warn_saturate+0xed/0x130 [ 134.532315][ T9121] ? refcount_warn_saturate+0x5b/0x130 [ 134.534458][ T9121] report_bug_entry+0xe1/0x290 [ 134.536350][ T9121] ? refcount_warn_saturate+0xf4/0x130 [ 134.538489][ T9121] handle_bug+0x1cd/0x2a0 [ 134.540018][ T9121] exc_invalid_op+0x17/0x50 [ 134.541643][ T9121] asm_exc_invalid_op+0x1a/0x20 [ 134.543218][ T9121] RIP: 0010:refcount_warn_saturate+0xf4/0x130 [ 134.545120][ T9121] Code: cc e8 f0 fc 0e fd 48 8d 3d c9 b2 e8 0b 67 48 0f b9 3a e8 df fc 0e fd 5b 5d e9 58 87 94 06 e8 d3 fc 0e fd 48 8d 3d bc b2 e8 0b <67> 48 0f b9 3a e8 c2 fc 0e fd 5b 5d c3 cc cc cc cc e8 b6 fc 0e fd [ 134.551019][ T9121] RSP: 0018:ffffc90003eb7120 EFLAGS: 00010293 [ 134.553294][ T9121] RAX: 0000000000000000 RBX: ffff8880232c9180 RCX: ffffffff84f9b33b [ 134.555866][ T9121] RDX: ffff88802c0b4a00 RSI: ffffffff84f9b3cd RDI: ffffffff90e26690 [ 134.558697][ T9121] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000004 [ 134.561370][ T9121] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880232c9180 [ 134.563936][ T9121] R13: ffffffff8a05cdb0 R14: 0000000000000000 R15: 0000000000000018 [ 134.566377][ T9121] ? __pfx_udp_destroy_sock+0x10/0x10 [ 134.568102][ T9121] ? refcount_warn_saturate+0x5b/0x130 [ 134.569830][ T9121] ? refcount_warn_saturate+0xed/0x130 [ 134.571550][ T9121] sk_common_release+0x260/0x370 [ 134.573115][ T9121] inet_release+0xed/0x200 [ 134.574530][ T9121] sock_release+0x91/0x1c0 [ 134.575959][ T9121] ? __pfx_rxe_ns_pernet_set_sk4+0x10/0x10 [ 134.577830][ T9121] rxe_sock_put+0xae/0x130 [ 134.579257][ T9121] ? __pfx_rxe_dellink+0x10/0x10 [ 134.580813][ T9121] rxe_net_del+0x83/0x120 [ 134.582171][ T9121] rxe_dellink+0x15/0x20 [ 134.583536][ T9121] nldev_dellink+0x289/0x3c0 [ 134.585230][ T9121] ? __pfx_nldev_dellink+0x10/0x10 [ 134.587228][ T9121] ? rcu_is_watching+0x12/0xc0 [ 134.588832][ T9121] ? cap_capable+0x10b/0x440 [ 134.590314][ T9121] ? bpf_lsm_capable+0x9/0x10 [ 134.591820][ T9121] ? security_capable+0x80/0x260 [ 134.593380][ T9121] ? ns_capable+0xd2/0xf0 [ 134.594750][ T9121] ? __pfx_nldev_dellink+0x10/0x10 [ 134.596363][ T9121] rdma_nl_rcv_msg+0x392/0x6f0 [ 134.597910][ T9121] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 134.599591][ T9121] ? __lock_acquire+0x4a5/0x2630 [ 134.601000][ T9121] rdma_nl_rcv_skb.constprop.0.isra.0+0x2cb/0x410 [ 134.602746][ T9121] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 134.604888][ T9121] ? netlink_deliver_tap+0x1ae/0xcc0 [ 134.606755][ T9121] netlink_unicast+0x585/0x850 [ 134.608326][ T9121] ? __pfx_netlink_unicast+0x10/0x10 [ 134.610013][ T9121] netlink_sendmsg+0x8b0/0xda0 [ 134.611536][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.613175][ T9121] ? __might_fault+0x70/0x140 [ 134.614617][ T9121] ____sys_sendmsg+0x9e1/0xb70 [ 134.616124][ T9121] ? __pfx_netlink_sendmsg+0x10/0x10 [ 134.617800][ T9121] ? __pfx_____sys_sendmsg+0x10/0x10 [ 134.619447][ T9121] ? folio_add_new_anon_rmap+0x44e/0x1690 [ 134.621220][ T9121] ? rcu_read_unlock+0x2d/0xb0 [ 134.622725][ T9121] ? rcu_read_unlock+0x2d/0xb0 [ 134.624233][ T9121] ___sys_sendmsg+0x190/0x1e0 [ 134.625709][ T9121] ? __pfx____sys_sendmsg+0x10/0x10 [ 134.627408][ T9121] __sys_sendmsg+0x170/0x220 [ 134.628871][ T9121] ? __pfx___sys_sendmsg+0x10/0x10 [ 134.630475][ T9121] ? _raw_spin_unlock_irq+0x2e/0x50 [ 134.632106][ T9121] ? rcu_is_watching+0x12/0xc0 [ 134.633604][ T9121] do_syscall_64+0x10b/0xf80 [ 134.635023][ T9121] ? clear_bhb_loop+0x40/0x90 [ 134.636472][ T9121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.638346][ T9121] RIP: 0033:0x7f9aea19ce59 [ 134.639818][ T9121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 134.646478][ T9121] RSP: 002b:00007f9aeafae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.649732][ T9121] RAX: ffffffffffffffda RBX: 00007f9aea416090 RCX: 00007f9aea19ce59 [ 134.652820][ T9121] RDX: 0000000000000004 RSI: 0000200000004680 RDI: 0000000000000003 [ 134.655965][ T9121] RBP: 00007f9aea232d6f R08: 0000000000000000 R09: 0000000000000000 [ 134.659079][ T9121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 134.662129][ T9121] R13: 00007f9aea416128 R14: 00007f9aea416090 R15: 00007ffc48ea1b58 [ 134.665284][ T9121] [ 134.667489][ T9121] Kernel Offset: disabled [ 134.669281][ T9121] Rebooting in 86400 seconds..