last executing test programs: 2m20.097126401s ago: executing program 1 (id=18): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x26, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x18, 0x4040015}, 0x2004c011) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6ae053d2c3e58519}, 0x50) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0xc8}, {&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000000)=""/54, 0x36}, {&(0x7f0000000640)=""/122, 0x7a}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000dc0)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}, 0x4}], 0x2, 0xcb, &(0x7f0000008000)={r4, r5+60000000}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 2m20.091646568s ago: executing program 1 (id=21): mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) (async) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x36) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/self/fail-nth\x00', 0x2, 0x0) writev(r2, &(0x7f0000003800)=[{&(0x7f0000001540)="f7", 0x1}], 0x1) 2m19.983587475s ago: executing program 1 (id=25): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x38) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x3, 0x1, 0xe000, 0x1000, &(0x7f0000003000/0x1000)=nil}) syz_kvm_setup_cpu$x86(r6, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, &(0x7f00000000c0)="c744240083590000c744240200680000c7442406000000000f011c240fc7300f38cc4c5c5d670fc74c010fc79a090000003ef30fa7d00f01c4b9a90300000f322e0fc759bec4e2ed3fb2cb9b0000", 0x4e}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) sendto$inet6(r9, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de", 0x56, 0x6d91fb6102d8910c, 0x0, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e23, 0x505f, @mcast2, 0x101}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) splice(r8, 0x0, r7, 0x0, 0x1ffffffffffffe, 0x1) r10 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r11 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r11, 0xf5bd4000) sendmsg$BATADV_CMD_SET_VLAN(r10, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xfffffffffffffed4, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8815) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x13, 0x0, 0x8, 0x0, 0x10, 0x0, 0x3, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x7}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m19.794784469s ago: executing program 1 (id=32): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x9) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x9) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @loopback}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) 2m19.653241103s ago: executing program 1 (id=35): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x1d, r2}, 0x10, &(0x7f0000000080)={&(0x7f0000000680)=@canfd={{0x1, 0x1, 0x1}, 0x29, 0x0, 0x0, 0x0, "778460da5a78b70988c7cef79f1292b7f4d2f846c8d9f62dc9c53315d0a6aa342839452a03f9f4f8e9e0152bee759faa833953597ffb0f03f6285864ad2ef8fc"}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x20008050) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4040850) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000009c0)=ANY=[@ANYRES16=r3], 0x74}}, 0x24000840) r5 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r5, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000240)="6797f04cdb6f2b8ff1c922acb0da67dc3bf442976fc916d4a50f5d1ae7453eddc232ca4c6ae6c56d", 0x28}], 0x1}, 0x30008b08) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16, @ANYRES32=r3]) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r6}, @ldst={0x1, 0x2, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000300)={0x5, &(0x7f00000002c0)=[{0xf, 0x1, 0xdf, 0x2ff}, {0x7cc8, 0x1, 0x8, 0x7}, {0x6, 0x5f, 0x8, 0x7}, {0x2, 0x3, 0x63, 0xf}, {0x8001, 0x4, 0x8, 0x76}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xa4, &(0x7f0000000400)=[@in={0x2, 0x4e21, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x9, @remote, 0x2}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x8, @remote, 0x7518}, @in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e21, 0x1, @empty, 0x27039be4}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f00000001c0)={r8, @in={{0x2, 0x4e21, @multicast1}}, 0x3136147c, 0x64, 0x3, 0x40, 0xfffffff9}, &(0x7f0000000280)=0x98) r9 = getpid() r10 = syz_pidfd_open(r9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r11, 0x40104d05, &(0x7f0000000900)) setns(r10, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000340)={0x1d, r2}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x3, 0x8, 0x5, {r12, r13/1000+60000}, {0x77359400}, {0x1, 0x1}, 0x1, @canfd={{0x2, 0x1}, 0x9, 0xc7bc519aa0c693b3, 0x0, 0x0, "a496f546eabf2614b7beff43459d99188a3aed867cc81f0c9b235f4e493242574badf9e91b6f2792f93441338e2b48e559698ff2b6a8e2b5e14017dcb62410d6"}}, 0x80}, 0x1, 0x0, 0x0, 0x40015}, 0x200280c0) 2m19.5866648s ago: executing program 1 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x202, 0x0) dup2(r3, r2) execveat(r2, &(0x7f00000000c0)='./debug/lru_gen\x00', &(0x7f0000000380)={[&(0x7f0000000100)='\xfd\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='}[\x00']}, &(0x7f0000000580)={[&(0x7f00000003c0)='ife\x00', &(0x7f0000000400)='&:%\x00', &(0x7f0000000440)='debugfs\x00', &(0x7f0000000480)='Q}@*\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000540)='\x00']}, 0xc00) write(r1, &(0x7f0000000900)='- 1 0 1', 0x7) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x104, 0x30, 0x800, 0x0, 0x25dfdbfb, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x19, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x18}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd3a4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x62e0}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x20000000, 0x99f5, 0xfffffffa}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x59, 0x6, "c086a7a34f1062c54fe397f118175b8a4762b345fbbe972a4c16551aca7eb1e7801870a37ec6c220f9a516e55472cd86a4bf61349f4e27dc6ee62b6f4f8b11a3b60dbe39384f26d05e654238731dd19ed5f9e59ffe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x24004000}, 0x10000000) 1m57.424460545s ago: executing program 32 (id=37): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x202, 0x0) dup2(r3, r2) execveat(r2, &(0x7f00000000c0)='./debug/lru_gen\x00', &(0x7f0000000380)={[&(0x7f0000000100)='\xfd\x00', &(0x7f0000000300)='\x00', &(0x7f0000000340)='}[\x00']}, &(0x7f0000000580)={[&(0x7f00000003c0)='ife\x00', &(0x7f0000000400)='&:%\x00', &(0x7f0000000440)='debugfs\x00', &(0x7f0000000480)='Q}@*\x00', &(0x7f00000004c0)='\x00', &(0x7f0000000540)='\x00']}, 0xc00) write(r1, &(0x7f0000000900)='- 1 0 1', 0x7) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x104, 0x30, 0x800, 0x0, 0x25dfdbfb, {}, [{0xf0, 0x1, [@m_ife={0xec, 0x19, 0x0, 0x0, {{0x8}, {0x6c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0x2c, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x18}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0xd3a4}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x62e0}]}, @TCA_IFE_TYPE={0x6, 0x5, 0x8000}, @TCA_IFE_DMAC={0xa, 0x3, @remote}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xffff, 0x20000000, 0x99f5, 0xfffffffa}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_TCINDEX={0x6}]}]}, {0x59, 0x6, "c086a7a34f1062c54fe397f118175b8a4762b345fbbe972a4c16551aca7eb1e7801870a37ec6c220f9a516e55472cd86a4bf61349f4e27dc6ee62b6f4f8b11a3b60dbe39384f26d05e654238731dd19ed5f9e59ffe"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x24004000}, 0x10000000) 1m19.926432931s ago: executing program 4 (id=806): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x186, 0x0, 0x0, {0x3, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048801}, 0x20000800) (async) syz_emit_ethernet(0x3b6, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r3, 0xb01, 0x70bd28, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x40000) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000080)=0x14) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r3, 0x2, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 1m19.876929986s ago: executing program 4 (id=807): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000006c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000037c00000400c2800c0001800600060084"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = accept4(r0, 0x0, 0x0, 0x800) r3 = socket$netlink(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x32, 0x12, 0x1, {0x1, @sctp_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x19}, 0x4e24, 0x4e20, 0xf}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2a}, 0xc, 0x800, [0x4, 0x9]}, @tcp_ip6_spec={@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x4e22, 0x2}, {0x0, @local, 0x9, 0x401, [0x864, 0x400]}, 0xee73, 0x80040}, 0x400000000000017b}}) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x40800) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000200)={&(0x7f0000000140)="fb1ee74082faff60b923565502fc5a002dc82887f825da62c9d20db0b778e205501196c0", 0x24, 0x0}) ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r4, 0xc01064ac, &(0x7f00000003c0)={r5, 0xc9, &(0x7f00000002c0)=""/201}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000640)=""/88, 0x58}], 0x1}, 0x0) 1m19.827226547s ago: executing program 4 (id=808): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000780)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000910}, 0x8090) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002b40)=ANY=[@ANYBLOB="14000080460001000000"], 0x14}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) ioctl(r4, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0') r6 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r6, 0xc2604110, &(0x7f00000001c0)={0x7, [[0x9, 0x1, 0x20, 0x3, 0xf, 0x7, 0xcc, 0x324], [0x2, 0x7fffffff, 0x800, 0x5, 0x5, 0x3, 0x9, 0xa], [0x9, 0x8001, 0x7, 0x6, 0xff, 0x9, 0xfffffff7, 0x3]], '\x00', [{0x200, 0x101, 0x1, 0x1}, {0x5, 0xffffffff, 0x1, 0x1}, {0x3, 0x62c8, 0x0, 0x0, 0x0, 0x1}, {0x7, 0x2, 0x1, 0x1, 0x1, 0x1}, {0x4a, 0x6, 0x0, 0x1, 0x1}, {0x6, 0x5, 0x0, 0x1, 0x1}, {0xfffff001, 0x9, 0x1, 0x1, 0x1}, {0x4, 0x6, 0x0, 0x0, 0x0, 0x1}, {0x9, 0x9, 0x1, 0x0, 0x1}, {0xffffe906, 0x7, 0x0, 0x0, 0x1}, {0x4, 0x100, 0x1, 0x0, 0x0, 0x1}, {0x9, 0x725}], '\x00', 0x5}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r6, 0x806c4120, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r7, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$KVM_CAP_PMU_CAPABILITY(r7, 0x4068aea3, &(0x7f0000000000)={0xd4, 0x0, 0xa563}) 1m19.76608923s ago: executing program 4 (id=809): mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) (async) lremovexattr(&(0x7f0000000080)='./config\x00', &(0x7f00000000c0)=@known='security.apparmor\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x20, 0x3, 0x368, 0x0, 0xa, 0x148, 0x0, 0x10, 0x328, 0x2a8, 0x2a8, 0x328, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010101, @rand_addr=0x64010101, 0xff000000, 0x0, 'bridge0\x00', 'pim6reg\x00', {0xff}}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x5, 0x18f, 0x0, 0x0, 0x0, "f2f7b90ad2b60c45cb4e9be7bf902bdc2ff82e3f18458d3d40bfdc0bdc77378b6186274d7de56d5af300"}}}, {{@uncond, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x1, 0xff, 0x21, 0x0, 0x0, 0x7fff, 0x240}}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0x7, 0xfb88}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x3c8) (async) write(r0, &(0x7f0000000b00)='0x', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) (async) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a5b091, 0x0) (async) mount$bind(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x84000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) (async) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x2) (async) fstat(r0, &(0x7f0000000000)) 1m19.764700474s ago: executing program 4 (id=810): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x0, 0xffffffffffffffff}}, './file0\x00'}) setsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in=@private=0xa010101, 0x4e21, 0x5, 0x4e21, 0x9, 0xa, 0xa0, 0x20, 0x32, r1, r3}, {0x7fff, 0x8000000000000001, 0xa0b, 0x0, 0x6, 0x9, 0x9, 0x9}, {0x6, 0x4, 0x7fffffffffffffff, 0x800}, 0x1000, 0x6e6bbe, 0x1, 0x1, 0x1}, {{@in=@broadcast, 0x4d3, 0xff}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3504, 0x3, 0x3, 0x24, 0x51fd6b3, 0xfffff9c0, 0x9}}, 0xe8) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000280)={0x0, 0x10000000, 0xfffffffc, 0x1007e, 0xffffffff}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x11) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4800003e, r4, 0x0) readv(r5, &(0x7f0000000340)=[{&(0x7f0000000100)=""/174, 0xae}], 0x1) r6 = socket(0x10, 0x3, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f00000004c0), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r7, 0xc0844123, &(0x7f0000002180)) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0xb8, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x88, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x11}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x7}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0xa, 0xf, 0xa, 0xb, 0x1, 0xa, 0x7, 0x10, 0xd, 0x9, 0x3, 0xe, 0x5, 0x7, 0x4, 0x10], 0x1, [0x7f, 0x1, 0x3, 0x7, 0x9, 0x4, 0x7, 0x4, 0x0, 0x3, 0xd, 0x2, 0x5a, 0x101, 0x47, 0x92d1], [0x9f, 0xf, 0x4, 0x3, 0x9, 0x5, 0xc, 0x8, 0xfe45, 0x7f, 0x4, 0x1, 0x1, 0x5, 0x8, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}]}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 1m19.436033455s ago: executing program 4 (id=811): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000080004000000000008000500ea0000002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}}, 0x0) 1m19.330235096s ago: executing program 33 (id=811): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000006000000080004000000000008000500ea0000002200070073797374656d5f753a6f626a6563745f723a756e6c6162656c65645f74"], 0x48}}, 0x0) 1m9.366449946s ago: executing program 2 (id=971): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x38, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x20000, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x4], [0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x9, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf51, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7fffffff], [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802, 0x0, 0x2, 0x0, 0xfaea, 0x100, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x200, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) (async, rerun: 32) ioctl$UI_DEV_CREATE(r0, 0x5501) (rerun: 32) 1m9.286386052s ago: executing program 2 (id=973): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000140)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x4, 0x80000000, 0x4, 0x5274ef30, 0x80000000, 0x7ff, 0x90b4, 0x9, 0x25], 0x0, 0x1}) syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) (async) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000026800010042bd7000fbdbdf250200020000000000"], 0x18}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) (async) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x5}) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000240)={r6, 0x0, r7, 0x9, 0x6, 0x8, 0x8, 0x2, 0x3f, 0x9, 0xf, 0x6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x30, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="24000000190001000000000000c3b2000a0000000003c8000000000008000600ffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000300)="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") r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0) read$rfkill(r8, &(0x7f0000000040), 0x8) (async) read$rfkill(r8, &(0x7f0000000040), 0x8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) (async) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40300, 0x0) ioctl$TIOCCONS(r9, 0x541d) (async) ioctl$TIOCCONS(r9, 0x541d) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x9, r3}) 1m9.285626938s ago: executing program 2 (id=974): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x200880, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x1ff, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x0, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0xd9, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m9.215856215s ago: executing program 2 (id=976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x2, &(0x7f0000000000)=[{0x60, 0x4, 0xfd}, {0x6, 0x3}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'team_slave_1\x00', 0x100}) 1m8.383658484s ago: executing program 2 (id=986): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000340)={{0x87, @rand_addr=0x64010100, 0x4e24, 0x3, 'lblcr\x00', 0x1, 0x7, 0x7d}, {@multicast2, 0x4e24, 0x1, 0x7834, 0x7fff, 0x1}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x1, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0xa}, 0x94) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="cc0000001b00d115000000000000000003000000000000000000000000000000fe88000000000000000000000000000100000000000000000900000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000980)='/sys/power/pm_trace', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@gettfilter={0x44, 0x2e, 0x1, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0x2}, {0xfff2}, {0x3, 0xffff}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x4}, {0x8}, {0x8, 0xb, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r6, @ANYBLOB="6000508011000b004abee339084eeef16f162471f4000000080003000aac0f000500020007"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='.\x00', 0x50000, 0x100) fsetxattr$system_posix_acl(r7, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) 1m7.517016803s ago: executing program 2 (id=1007): syz_emit_ethernet(0x15, &(0x7f0000000300)={@broadcast, @random="748076b967f8", @val={@void, {0x8100, 0x6}}, {@x25={0x805, {0x1, 0x3, 0x5}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) setuid(0xee00) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xc4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000140)={0x3, 0xffffffff, 0x0, 0xf2, 0x7, 0x6f}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000007c0)=0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x66a42, 0x16a) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x480600, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000440)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f0000000340)=""/133, 0x85}], 0x3}, 0x120) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xeb, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000740)={@private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, 0xfffffff7, 0x8, 0x7ff, 0x200, 0x100000000, 0x80200010, r8}) 1m0.966972814s ago: executing program 3 (id=1139): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4c, &(0x7f0000000480)="0c1f59", &(0x7f0000000500)=""/76, 0x10, 0x30, 0x0, 0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$bsg(0xffffffffffffff9c, &(0x7f0000000380)='/dev/bsg/2:0:0:0\x00', 0x100, 0x0) (async) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000640)={0x51, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xad, 0xffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4c, &(0x7f0000000480)="0c1f59", &(0x7f0000000500)=""/76, 0x10, 0x30, 0x0, 0x1}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10b85}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async) 1m0.965789245s ago: executing program 3 (id=1140): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1a5042, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0xa8011, r0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0xc4, 0x3000, 0x0, 0x9) ioctl$BLKIOMIN(r1, 0x1278, &(0x7f00000000c0)) 1m0.844676404s ago: executing program 3 (id=1142): syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100000009040100118eeee2000905821704"], 0x0) (async) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100000009040100118eeee2000905821704"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000d80)=ANY=[@ANYRESOCT=r0], 0x98}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x5c4, &(0x7f00000005c0)=ANY=[]) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) 59.631146336s ago: executing program 3 (id=1155): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000700), &(0x7f0000000100)=r1}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000040), 0x0}, 0x20) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0f000000040000000800000004"], 0x50) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r0}, &(0x7f0000000700), &(0x7f0000000100)=r1}, 0x20) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000280)={r0, &(0x7f0000000040), 0x0}, 0x20) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) umount2(&(0x7f00000000c0)='./file0\x00', 0x1) (async) 59.577146808s ago: executing program 3 (id=1157): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x1, 0x1, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_IFNAME={0x14, 0x3, 'vlan1\x00'}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x6569}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20000010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r10, &(0x7f00000000c0)=ANY=[], 0xffffff6a) splice(r9, 0x0, r8, 0x0, 0x40010003, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0x1b) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000240)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r13, 0x4038ae7a, &(0x7f0000000000)={0x80, 0x40000105, 0x0, 0x0}) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x3f, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 59.291877965s ago: executing program 3 (id=1163): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x300) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket(0x23, 0xa, 0x4000003) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) (async) r3 = dup(r2) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f35", 0x77}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x3004c880) (async) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x3004c880) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@ax25={{0x3, @null}, [@rose, @remote, @remote, @rose, @default, @default, @rose]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/247, 0xf7}], 0x3, &(0x7f0000000580)=""/137, 0x89}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@ax25={{0x3, @null}, [@rose, @remote, @remote, @rose, @default, @default, @rose]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/247, 0xf7}], 0x3, &(0x7f0000000580)=""/137, 0x89}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000006c0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="7f188d78ca6d724a076a71f9900272159bef9251e262a4c83c7b5357871f8538a7cb240954bf2d83a55b73fa4f1d00", 0x2f}], 0x1, &(0x7f0000000800)=[{0x60, 0x0, 0xdb, "bd7858ec1edaefd018c36e526c4df5a6b2e04ad569daf9f4a8df5611de7caa80af56b24d4361bc65f00d1f3664741b4efd96b643e8cb672de08b0e59d235eebc000594908f47cc84377f9e0fe2d6f789"}], 0x60}, 0x20044055) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000000)="2848f4bf7b6f0ef25d0504ff8552f62d19652458e5b1b73907989c1eb14e2756a7ba5afae0", 0x25}, {&(0x7f0000000080)="a5738e", 0x3}, {&(0x7f0000000480)="e59857d4443e95794078c3be8e2468cbd5964fde5f1cf076b48104f71984c7f3ce23948d0ccaa0e8b96990a3c1969e109482e6027937a076eb0d6f651f148f2593791c94cfe5d85b2bcf3ca3759ef1df8e27cbace75593179e8e0b4afc4c07a7dc09fcce326ad35dead939dff0246a0696e646777b0317cedabbf5be6e272c838eb643d0722b6b52c986fae0815ddea9c542a7f08ea9512dbc00ff5e455b9547c68ec61cee33bf92ecf207b8b132c7a831bfeee2a9e5398e", 0xb8}], 0x3, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}]}}}]}, 0x3c}}, 0x0) pread64(r8, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5) 59.250290664s ago: executing program 34 (id=1163): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/versions\x00', 0x1, 0x0) write(r0, 0x0, 0x300) r1 = openat$sequencer2(0xffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket(0x23, 0xa, 0x4000003) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) dup(r2) (async) r3 = dup(r2) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) (async) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94", 0x12}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd", 0x67}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f35", 0x77}], 0x3, 0x0, 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff1f}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x3004c880) (async) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x91}, 0x3004c880) socket$netlink(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) (async) r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@ax25={{0x3, @null}, [@rose, @remote, @remote, @rose, @default, @default, @rose]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/247, 0xf7}], 0x3, &(0x7f0000000580)=""/137, 0x89}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)=@ax25={{0x3, @null}, [@rose, @remote, @remote, @rose, @default, @default, @rose]}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000280)=""/60, 0x3c}, {&(0x7f00000002c0)=""/119, 0x77}, {&(0x7f0000000340)=""/247, 0xf7}], 0x3, &(0x7f0000000580)=""/137, 0x89}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r6, 0x10c000) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r7], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) sendmsg$kcm(r7, &(0x7f0000000880)={&(0x7f00000006c0)=@un=@abs={0x1, 0x0, 0x4e20}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000740)="7f188d78ca6d724a076a71f9900272159bef9251e262a4c83c7b5357871f8538a7cb240954bf2d83a55b73fa4f1d00", 0x2f}], 0x1, &(0x7f0000000800)=[{0x60, 0x0, 0xdb, "bd7858ec1edaefd018c36e526c4df5a6b2e04ad569daf9f4a8df5611de7caa80af56b24d4361bc65f00d1f3664741b4efd96b643e8cb672de08b0e59d235eebc000594908f47cc84377f9e0fe2d6f789"}], 0x60}, 0x20044055) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pwritev(r1, &(0x7f0000000640)=[{&(0x7f0000000000)="2848f4bf7b6f0ef25d0504ff8552f62d19652458e5b1b73907989c1eb14e2756a7ba5afae0", 0x25}, {&(0x7f0000000080)="a5738e", 0x3}, {&(0x7f0000000480)="e59857d4443e95794078c3be8e2468cbd5964fde5f1cf076b48104f71984c7f3ce23948d0ccaa0e8b96990a3c1969e109482e6027937a076eb0d6f651f148f2593791c94cfe5d85b2bcf3ca3759ef1df8e27cbace75593179e8e0b4afc4c07a7dc09fcce326ad35dead939dff0246a0696e646777b0317cedabbf5be6e272c838eb643d0722b6b52c986fae0815ddea9c542a7f08ea9512dbc00ff5e455b9547c68ec61cee33bf92ecf207b8b132c7a831bfeee2a9e5398e", 0xb8}], 0x3, 0x2, 0xa) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8, 0x1d, 0x8}]}}}]}, 0x3c}}, 0x0) pread64(r8, &(0x7f0000001240)=""/102400, 0xffffff8c, 0x200000) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x5) 52.545153943s ago: executing program 35 (id=1007): syz_emit_ethernet(0x15, &(0x7f0000000300)={@broadcast, @random="748076b967f8", @val={@void, {0x8100, 0x6}}, {@x25={0x805, {0x1, 0x3, 0x5}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x80000002, 0x4) setuid(0xee00) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r0, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0xc4) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r4 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r4, 0xc018480b, &(0x7f0000000140)={0x3, 0xffffffff, 0x0, 0xf2, 0x7, 0x6f}) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r5, 0x40086607, &(0x7f00000007c0)=0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/trace\x00', 0x66a42, 0x16a) r7 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x480600, 0x0) recvmsg$inet_nvme(r7, &(0x7f0000000440)={&(0x7f0000000040)=@un=@abs, 0x80, &(0x7f0000000400)=[{&(0x7f00000000c0)=""/244, 0xf4}, {&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f0000000340)=""/133, 0x85}], 0x3}, 0x120) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r6, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000480)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000500)=[{}, {}], 0x10, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xeb, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000740)={@private2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @remote, 0xfffffff7, 0x8, 0x7ff, 0x200, 0x100000000, 0x80200010, r8}) 28.002049484s ago: executing program 7 (id=1742): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd22, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44040}, 0x20040844) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x3a, @private=0xa010101, 0x4e24, 0x4, 'lblcr\x00', 0x20, 0x2, 0x41}, 0x2c) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000002380)={0x1, 0x3, 0x1000, 0x1000, &(0x7f0000000380)="8a8906e69c8a0d05149e86ef736619b1e040498c0c1bf7d803f80a0b85f548e6048bf9d7312e9093a282190e89d028db06dcff3bcdfa541cdd367a4d42d2d2415b81a6588ec9d38e5bbbb3f30a1ca6d07c3d72e68dea43faf07363251e6d80ffac7034242dd525fee7a5dae0b49649e029f9b6d5735c6e0af8ccde36c4853e7d7aeaacddfba6afa110585fc8aff24d0215a68c57e052631ff8fc626828e295f729222d9a6721d8ec52391355581897824dbfbd8553f40bb40272ac5bde319fea15b4af256d5a28bbb168ee615dfba2b246cbf369032d26a41f58ec4b3d5c85c0bfa237f7733d913de2a44061987c19dd332292db9b4b7ba8a0c2e73072c474b7516d8a52fb1a6eddd4023c70677f0fc8b6ae8a584de4221c7afcd37b8dceabe5cc8b87cbc2d5570fc0d323c884cafc4807cf0e528b78c2bb962b9c228637d0601572bd5db4fecfaa0f7fec8f756e772730cc23930d2972e54444c174487235c49d8dfcc8d4e739ecd5fb32296b074337e5a1f691f9ffa38078e21b44a849671c6e18350850300074a848fd9dd3294e38abd233d56787c44add0d6776412b1d42677679aba7dcbfa80d2633a102a4c7166ddc95f2a89d6eb8e00d73a00071218d4a0bd7fb414d49cebf1305a16c55844b0996736ea9638e35d5e19ca72272e2a1c243c1fa4aa1bd7cc043b52c0b84dbc54453a06a7767de45501c74169f252e95254671d7c81ac09f751b693b8ddb7c8565e9fdf276bc82f6ad8fc72b45f4f866cd477abb27256f72533b9b4517f724534c88184afc53686d0f157a727f21b97e0e5e6e763217c336732162efab9d9745dabd01685dc98de42bd035d997df0a02b036b3c01d1b2e8783cb3435db61231504e71a09e3cbc03de4e007b81eb4ee48c2de7827bf8993450391f1a515d0246df96d530302a54cddab23953f70a66aaaba512ac19f3b151f0591017293e7fc997fd95c0696ead7af1b704b510e82a37386a200c2c8cd9c565ebaed273649514b8701e04b57b057429a9d4ac927aad2ff36b5746f1459059e8d34a94b997075f8474e9ba24dadc0b57822acdd0fa07c04e871ee078b5054317f6372cc2f37a87c54e2ccc5ccd3cec2112177476c2dc5913a140e6a4c9e78335f9cf02427e7a73f31c0b17de84eca8eca3f87d9a29cb8e4f5847f8b878e904a114f7612ee99feeda1a03a09c2aec064f95a51d5b41f54e8b3650ffd82cba762e767419c59a6a8c1b03b8f00a44037a8835746c1038646f0a08cb2dddf3bdb811007a98c831afcf517d13004a0814529709fb478dde53039e0b6cb0701d1505c5c98b20baee8cd9a76dde538ea11205964c70549e4c8ab99277ca130eed0d6acab4e99b65951ba88147c33fac26b4d143979ff96709d66c063bc09317b5725008b983b1ef375e37dd1698adbf6d9a3e3acf5abeb77b7b2dc6ec0fa427f0c56cedcabc3af82d6b6e9e07d6496a5fa08343ef204723d50c4f3872bdd0d1216a18ed616c3e39cf179ce28ae82b8cddad34d15fb4313960a896983f3bbfc1fa5ca8ad2806c925d7d62fc3895eef7f366d3e167866516381d2e243412780224834d357f6296dfb130a5bad1b05785ba05c255f1ae938691510c75092af6b72614b28be41e9c5db928da9379b8d6ae3047a9ea968a7928ad3d990b548647631c64b8b94ad38e5f15742b0bf6e11f28d18eb67b2c91714aeab8eb7ed12a9e02531899a32498fce0aa08deb080428685fcae0dbb8cb306b86a489a7d678da4f38455b151a62b1e1466940b5f2db7bf0bd6c734d12421d7acc45d1f9dcffb2b2a160cf8a974ad673fd2735132b5cbc7912d56bc723e27fdd232254a3d8ce1402c63415167ef2c193abc8f9c4bf4677735be6a583c2c20e0ea8e6ff1b0849d1d9711d3796181be47dd830c02d0b81e9508aae05b42ad7f5e7b33da824a6e269d7a4847975345d952954de199820700d844d5f3455e56f7a9030d76c2dfcfe01ba424323921f1e2d2ba6e38913e36bba8de05f0a37dca6bf73ffa710dd018f9435e3cc092bb390d9d68c1ac2a3aac8f900a12dcc8b1149ca9437f6a5cde7006dea1f478f09de36d2ecaf0927a9bb9602a43428ac11cfa6b590067f1f97e3d321f65c1d72f1ec2364089d3673eb24e98924575c97e22f15aa3fcf997ceeb16f8bec1dd27249069d62c869491f8967bb433163c37655c707af64c087e0c79ae57fbb561040368c0d8de5723ecae5fbac0db0298b1558ae0eec28ad8234f0008fe98f28ce36be4d4683ed35f71ecc21a0f791471b5b625562daabe9536e97091b261141500ae37ee712ee051eac463c8d3bd4275507bd646494c8fe512d420aee40eeb5a77811c7519da46f58745ea8e5298e97ff87f4e1d35f569c5f7a11532f1b7c884d07b76fd37fe55bd5c6d466607f036c410a1f9419f23d585efd15f4d2491b48d5f124813aa7c5a7324252e8fc88c98a7b7cde24b77f4c01cfd0883c6af175057f516a53a97c813294285723713e14fac6ac1c6a93c5eeec66c73923895fcafaa2d83c9f57fbab97024a2c5cd35218f5093a25122db21173f7f10c9c019b6872fd5da8af56d5ba155e62f8dbc34ddf8646fbf8f1cc691499fbe6915ec5eb35f584903fcb5ff02281fe4837db7c8096fbac1b48f06ac1402307f0ebbbe45399020695e2ad3bd6c7d32e7689f3b59448f6ad172ed5feb4361059c27504408002084c7b86a026083081f825ec9882519cc55b3b3ad3c550369b5e637c987abe9a9bcf859010d64127876c7c85934c7fa62a8df1229f55bb2323040a7dc6c0382387e5c64e6d2933471b61e72d85f256967a7d3be683fbdad89d03504f40eaa6cb0cbe0d8bfc41e3263f8ae3c3e3e6f8e1d41fb72e01132d7c28437129d6b7a721d103e26fbd346a41f9bf1a71f21c89f0e8c72de97659ec23923cd0312ccacd71508413086bf51a611aab91bc92aeb5cf912f0f1d5f54f6ec3934e646cc0db9a9ed0938e82c65c5064b1dd70b7ae7fa42829d66bf45659fbfbbfedd099767589e696de521e663332a9942915896ff25b75c785c6cfa5ca0a74fb3f6016f6370fa5936d3932c63d42674db3fbe210200a98d2d9519859c4eb5c2c6f8266c72018a6b0c09888157b2963daa2a851d900bf5a5f721eaf2eb723a8ae5f385a0c95dc0f625616009a243b041cf4a36faf2946f789fa33aa301e231a838a3f21bd6e10c4df28ef33821a03a21016209246a793eca84a2ef6f4b988f75b99c46e2ff63712edbd7170170f88951ff27d79a45cb1372eb137679bf71b2a0f6c50f443b37c2d6d9ebaf241e1f8365e48fc92da58457eccd5237cfeb311c30fb23de279423cb4ef28952c6dbe62970618c19c80a12b4609925937bf244b16d12470a84daa2e4e56ac9f607411126c2062b39dcf9705d97a392f75fa874a7229a4f2d5a326798a4ba210bb3d006b5f5b2acc1d4bd330731553fd55f95787e225b7c9e741c47f63e1d5d507985bed0a40afec392ed08fd26765509e352a7e59e2e95e67971291dfc4be9df16d9a34558f16fe74b3502547e0d54375ecde8641a04444e877af4acabf4165350bb427439ce154c747d73a667793d62c898683b98947e0a73e2f504fe5024b3b5a0732febf23f3f8352958e0f1ffe667ccca41b8d5c6cee97c26942f9392980afbcf68d1498244af1aad1b23002c06f9afef6bc96c623d0b3c4709105fa595e79b30170a724bf17c52075f7daf6109a75f4580e6ce18b62d16f2bf3c852f8d2d7d6444e60879439170edb8bbc1344305ff374a363923747f4aa6ad0e1babc0eec6a199f52b456e1cc100208c7b3c77060aabc4ffaec0978cf9e5720006a3d6c3b24abc38bf966f7767e5eda9394dca2c609457adf8104863afb8b726b0b983b6d268d31282f873ce59f28858658b8d42bb770f3094f02df5acc2f6b9b51a0809b32f46d3f59b26550882471da410dabefaf61053b21e471be85f7deb27101beca7b2e95e5c3199b9a8fd8aafc203b179f37dafe15df77d008d1239bb360800818b08cf5eac79367e13c31e1e29c63cc8291eeaec5c88a3011d2a71fa4cef5f8914b3927be08cf483b2d033b15a8d9b89a1232772a436b92172891a4c3b21d221b6e8da9fd94b915b89c829edeebd962825998e5353586d8745ed1a26597b2785e7f86da87f35b64fd88f257ae43e28bea2d865a8a86827e85ffdb40fb41169e5c46d43ca18705c172e242c7b9260db96e8fe618d5d2f3ebd2196344356d9ae3e3d7300780fabae17fbb592325fe02e7e3d1ddafdb675ce16f4d37dd4fa7647cb4327d76a5a600d78c9dc350c0db27001613a116c8bbe83671988e529f37a187219e80051029f5876ec7831e55077ae5017250ccc47ba9930cc39dd4f6d5ff51e1427d33ef75c6b3051b3591a90797eed5f11496fa3f162ae2d5e8ddd5f8efc487d516186cdb050ead95891e88d231be90f976d1bc3c03432b3022019b3a6c9f690d321e696972eef4bcb690b4c21889eebf8a0b066a8350e821ef8bd7f87c891f88e6bd7d59808883461111a526075d67552c1d90bbc40f396e19f841f7926c3eeb9e2d7f499e479efbe7b6471bdb8c82b445411e3cf9d7209ed61b1aa208e59fa2ce56906a0c1afabd951f5789adfad7588a93a9c842bf8bea8c3addd1fcef51fd712054225928f16145ff810727c52760827862af1ed065e3bdc3cb0e376234c1d73d002fa35eb4d06321f76bda679077195f8624b02072fa49ee29fd32d81b9ea378fc4ba88f323559243dbfba1b0962458672f255117f3486c0e349883311ca6e53f0bca466b31757c32ee394df73e8da514a515cb384a5643b8f8a910c29cf8f5c94d5d7add303db2e21c6520bd7440b47fde1398bc018486a0144da214a6ba564d2a9d2649d2a03c2284bc4ff2b0e27ac760799a26b3a55b5d0ab2e9898907cea165ff3ff2c4ca92fa12bb02c7e6162c860eaebb57030a0bb68543de6eb006e42d5d752a273b33db4f6f4148b3f2898038c17427079dc5ffab719f1fc6a5e231296f52d30388e422a7eb05dd71ce847fbb6e690df18ccb23140a7a5741bfb9d23ff686091b2b8ab76f9d8b7a5f21adabd00041b85781824988f925fce4ec08e9a5a41063febcc1d6fec2ce526b9e93e7ee0492d17dc6a1298cba22c7e5d86d8fb3c83c9d1af4295479c1a59ae46c2d1271fd8e3260f3169f6fac07ac66df3fdfa8b3fd8cb8b17b3c932fa7fa27e8a8c43d84e68d47170e8d2042128335e5477eacdb4944ea6f5b9e171a923a0226f02afa3f8c4b54a75f7e9bb08104cc4312684778b163737e448ee981259bf821f72392629932f2f5e4e446a0dcb1939b08fdc21e3c9e06226d1657d70ee1ca6751b64bd59384ac4533f15ad637d341425d6056d0cafd5c68aee0520be775951967bc3ce5b0456ae42868422012c8cc2bb05c745553e3fdaf072f95d1c242838614cbb60f94f913098c3c628f2ce4748b0616b271c2f06331d377c122d8d3716c96428529d00922a6806eb41d91c37142b09929149721e792269a3afe37753dedfff3baa5b643fb56d166055d37c8e602e0fe146c337a7f662536162d5280b4d8753841f3b605bb5c4f5ddb675d28b312203888f70dd9b19ca952681ce4c21a593daeaed12d613732dc69d3af9dc457a80b2f36c485f77cca24916dd5fe78435ae8260e5c44eaadcac2fc879291e837f017c070efdd776330a8c700acc09925d35087dbd5b7f99f8ba90e2aa57a228885be9fe0e8fcdc564d8255761726298423bc25c1cf6bf0b0", 0x1000, 0x0, &(0x7f0000001380)="eb04f471ff9ce709223c25a3093577227bfd23d9afe257376a2210aae707bbbeb5d8b031f3896a41292b39bb3546e4dcaba4d8dfd6fd0c3ed82799c98d29317ee960419f78549dc0b2d8fcd49206c9275abafb0292f6c26b07932188aeb3b63aa4b4567834f7c03fea41aed16e860d400390d797e993adb1ff55248afb01b0ad2f3b29376dbcc11adc5257b4c27c324d1fa9bac8c647f90f3c1bc88aa052c6350d8be3c99a87e8f077ea6f48556187552a7849823084ba7c2cc5f6e5eb936a933e74826458823991da0ce9fc9b2906562b2f8cb8d1dfb55444577d248e72bec909122ff67e6d52fc63251aa169fa29c028bde07c4878b0b8de6d345184b6cc1d06f71cf36d968c039d7333de6ff48fad8d109fed93f6c0796cbc6f1798ee19bec357afb775b7df1956a7c016cd541d1395c3ba7b98453fb617bcafe50168383fb2e3771a21345e620fa224f5313c0a8389d1d6d6b8e011d9a5621e67b8ba6f0c486c83c82e425237c15b771f38b6e34b0c66f7d9fe48c3764e7e3ac1dbfbc270d02f744c22f0aa5f22c14687bcce7971d0080e9ba404fe4743ad5b795b42ebe66bb16d2b0b77e02323d43cb01dc7ec0034440021b79a7ba3952d2d6b9e26c78cb3624130841083cfe9603f754c10c980c191f5373ccdba7a849111a458eb86e1be885740caf1173e4b52312ec037c526e5edd54a4fbb1b00ce908752d34564fc70c681372454a7e67c6464b01ba84739f304705f4d56bd9a60e15de1a832f0163f1ef9d6deaab730684933d24841b51a6a84f0d58ac53ebbef0da060a1776248b80fe6420056e4209f1499063383beae56d90dfb3dde5920317b93d4f6f548f5877e42d673a0ea3315ca05289c30dcea096c4632aa857abc59d1055e27f4749823bc97eb62698aeca1873a7008bfd76d14a90f4b492e2f8387bb8bd4b1ed4d63d212a887f041c4b01f4081ed7f256a45a067b3ff22cee3e8b7455dea64d30190b58abd351977d966e443ff9cf1ac67cb1d8af92bc432c183240deb3a77fcbef9bcebc863f3fee797cddc45d3218b39a68a78511e87c400545914ddd180876dd2b2c9b670d138ac92eb3ed9dcb35b9b8e75ba49b2bcded1d4ab72494f43853c86ae7669c8e187e798a649ddf90aae881c45ccd6cab693fefc88e56dc145060abe2d9a7a6f42dcc2a2e00aae095bcb378b05988c2ebab00fc28dd3651dbcffa1c5a672cc7a92c9e1f693645902c886a3d506266bd6cd331956ef84e29e16b5ee9f41b923bbe98a9fd0641ae8d3b34507095cdd373030a220a2a9516d3cd940fe89518bc3317fa8913f25abb1bc10bb70d734a9e96068011b6a133da73aa7ee31b2b2232fe1427405a4432f6596a0471f0df6ad63bb7edced28e41f05da97b31c37fb92d71c1b6e92e4446b95a709f16e8f01cb876c67f2452a442855a1160c71a557f8a45c9667e8242996c5fa986d87a117b2eb6e0a4ddb41c019a977037be74ef0b6eacdc33faeba34eae896600d06fd17a4ada6959c026c29b8ee36e4919047a49d0ca1bcced24a4eb9142ef90b2defac03e4ca2a5ddd9133685c814fc0c8a85186cfb08362978b27f18481c6043895c916d11ad0506442d7f1450234b99de3f3fffd49808464829f23572adfccd05923328ead8128458fdd047b8a4a168dc0194320388615c2bfb64257a0c097ef55635e87010fd9c8c2bab87fa8b258b0f755777f5c01523531351865436a84d93a1ff856da67bc315f76498d8c8a14e042ca8e98c62509c98faf1f8f0d9a6e2131e10bdd204b4af119a0cf3f4694565441a1a95377ae2ca2656ac516d5c68052120c0bf7c62b7950a069868029ce9afe3c2bd4e805e5e4b3c085bfb59b246a4604d9eae1ae0085c3d2c7202560921f06c3e9df07a0a57c33cf486f8b0fc11e371bc0f5bc9465bc232b5e2b8b95b566dddfb96273b602d6f0c8cf0c4410dcea4e3d629a388b8f543642fe7141c707028ae70b33dfb3a1b8e80b8cb5eb4fb1bdd5e2afcacab4dd7f81ed680de49d31e98bfdf49ea1d08a43cb26998b0ed75582a19258a572dae995d850921b5f149f615c95c72fd91acaf1cf5c2614bb482e562db61ec14d4d901ba825b618b77cf959241bf442b44065068d957a5e1c41d1911e3d2002bec96845ab72e11d5c684d98f872bda43c5dc9dc8a17c4518c5001052d89ea8a0abb79ca97b6a21200bec3f73304363ced393b301e93cfce1c2170eda8f4ea8f9066e1d30c98df8a994d4f41a24296b006fc1d9269073e5cc72e5101ae088e704b6f93eba778f89e10a21c33c38f13645253fb4ee14dc1242624023d07f592a4d17e04de18b0e27984478bc4383ff44c68fccb3d0e6b2ce607a1d50d00a18bb8d9744fa42412c37aebd0e141047980bc6c8683afc9cfa67d3cdda85fd93700d868cc2e68d5fe8ef50d5d971e2af3192856f53d8021ff42179d2618d8f626ac9949aa6a2f34a74e6c17f001cb3921b51c0bced2f59d48480e439648cab3484e82f03568aa956b9af5e866585f513880403b45de2b0461b438be1cff3dee5bd144a54c37919e44d044fa3fa8b1fd83016ae70b0eaefbcdce08556a439d3252fd8d1754f66c9094dc5c5ba636513073838255b570ab62bcb86e9733bc7072834d74d151470fab0ad77ea35c85a6424fb2e1e8fa9c3550123d0e73d7226e46cf9a0a2b7ecd4bee4bd3424df4be017a32c97baab663b79e9d709714a8b2d2c91229d5fb68818f10d68b52469ac1dcd0ea8092597ff183736d814f8aacee195cc46f3d50d243a7db28fb3212f243863e939a748f6ba31f31a40bd305ea48e55b8d8e52b4e64973c21f7083dea428a2bf02598b4deb62533ac15c39bcc8add7aee9eb7fd1e94d53e306552dac7480d3c7a7e6ef537b7933d12ff7a8cd3ee9f9f2aadef21b24dab67c977d144c5e7d5cd2b58baa5f703e06eec5598c8d2895d6681b454fb87726b6d3b2e585844fc467b82695b1cd7c5b84020af2f89e2c38558e5176414bbefa1b1d43da14d7e5ccb4e32f288ad29a2ed127705b64cea461b32f2dd9bd9d61c433ebf3243dcd37ce56737d0c884466aeebdfbd1af064bee167f564c25ae28c896f507e2709e563e9541460c230d218fbea964f335381989b6fe45f5acc02ec6a98fb6b0b92f1a6e0b1a87029c2904c2024f49d4c2156152f4b7bd1386bf39349bbd0131e8f1b91af81254fd9f64e802358dfef067725b4b129444bbb33ff9d908665fd3b47099d0ab2512fa55806549817228983920a54d3590ac87f4ebc81e34e3260240406645c14ed0bd335e758a4fcb5beae1b3a653774837f4fd554ca9f73ad3c31707c8ff4cef71e38501d8a6dc4ff1bc1281ccd1977af06a985e73526f1ef9c00db5ff68c8a8e0e92b18729eafe7dd27c9830d722ba10b574ced6092bcc16f7b556a377565e373198c1c9ab0fc000bafb7aa810d401a9700a23dc3bd33f80bb1a75969a0f12da79e7180f5237ec2c09ecbe3da1d45bd861d593821a28a6f46ecdd6af063edebf974042c69e22baaa397a7e6914152681437b54405d980e6fc7df9a151516aa7e454ce221564be85940ab3337ce6378934f25d55fcf0f342f6b414d11e7908213c4dd15b3f12003f3e64cc6f4f8b66777c16cf62a49fb743f1dbc96844edb12eca43d0eb960a114f33d342aef4f4ab8a17b5e871b31cc671b26428dbf6308f777dc0a9dc0b71dda340a75ed382a66a3b7e39e09396bdd50cb55486d9d9ca0e11e95f6fc006169f820e644cd1a49f07e346c01add561e06696fbe7c9f6ae33f5709c5fd33e151019926f84427e394dbe7a7c805138f061e272e64080ca6d788c283e22d79f38bfd54973b4b8a2cfef9e6350bb32d6096d5530061dc4a40956b78b00eba72db0ec4f1750d39b7b10ba6e0c9955dda38bd10eadcf7748b5376a88a38dcbbfbbef4977cc89b84358f77d0c0e409f2f6eabc69c67804a9096212277d95580f7ee5abaa68363bec2e5ad5675e16e91df021d891c6ffe783d6cd4a95ed7a083fd434a6df0118c3f13abb49a57e4241030a2031c712812cd4fbb9ed06f087b72ad083e8aac57219d6741718c4c4232100a3a513e82d770527f8b43dcb7d35d3ba45ed28200da4ee753c271f6abaa9ee3b37ee3af9c5944eb4b31775ddd8a07a1e9067a5e95244416212f2e23b674c071b49dde88be56c4e000d1730745ddb2cd9edba6b461fe340e5c4ee3e42793d1c4090dc629af714a4e14af2e597dacf601425cc108eb27ad9e4e9bc6c3666dffcfc2b1597d0247cca67613d16ef2a0a45a1e89b34bd2c9a9491f59893914f9adb0a8fb8f2fc933e6ff4ede680a5886f658af81a598f2a5543f87326b7dfbd9aee902121601af15503a6dc9248b160d22b0587e24d73455ea7de25182fa2ba252f5c45bdb59ddb8f1265428c25e189d31063187edec75b2d345051d1e1763bf2e50d17d1773ba17986eaf4fd2f3a0102047c3fb5b5431692336467841aa5378405466ed5a46c21e96e56ca29d83e250e7ad9d1320f8a3da8d6fda9a7c2ffe59e88fbc1bd3e179bb66d2d58537259a937f5d326cbbb8bdc8ccb2192a3817bf297bbc0609b9f780b647a1acf9eec503bd8acec46a77bf4995b617695d9fac8deaaea3d7a43c279fe60e7795fdcebb3402ccd20ed8c1730f72cb0f25b06090e96e20f6930eeb96beb90929138dd11661531b8450e0bb65783ce89fa11ece066da841282fb8effac8f8c318e390882308fcc55517b3fe651900e8ecb57e849397af620054e350338503cc333219bc0a9eb86e12b1b4a453256770357f4ca6cf6d583c6074dd4d8953f6fc64db264096f0b93f263e2c37bef61dd65b545ca547d50ea2ff49e18577c430e261a31b22a081f4fc3d97b05b4a584e5daa91203cf5680760184fa02f9220b5a7dd2a796bec3879cb9697fba57f389b59ce1446128367cca4899883aa3d902d1a4b3d5c07f0ea1c651f1bd98cb9d1ce9d9b631def9a70a2a13d4da81a13188e800249e0bb7d36958c97aa5102d24ce4fd30a6c3208530f4748170ec617fc9d452cbe199b7a66d9c3cbed139c34c94f2c76678f771f9aa3217249116096ad6c28bfd4fd0774cb363aa8385f1c1da22769712b3a954ef9007cb8706703001ade6a75eff87ed76333c0a8089072f22fd2e4dec8cbc53d1034b69160d40e36e870c67bf13e756fe5564b1ece11a753f2ea735839647a33b6f9ea34138552de7d34757432578e7bc54f7bffb7e6eb8baccafaec4b325164d42d4e9c198730a39024975b1d2537f5592990e929f3d8ca544f4faacfa4990cfab66ca9d13af6f6097d10a081de63ab29487146885f3d7dba7b46361c47f065a692a70cb0d75204ed768b3093e01a1d2ea574f3e516da1beeda5fd5a9cc510b9d61f2549b27e337c8eb3b6d2b5dde9ba18af52a6ed2ba51e4895866cf61ab077cfe95842c88a304302dc94746067bd75b63401dc8f08d553ff8ddaf45aef7d053761078227c21960c131ed2d0f816588f25ddad960c8e4407378f5cc0f6017d6e553329d8f749deedb075861795ed3b4241fcfb9f6c8a55caa6fac09dde2eec4a6968ce1a5d1153e38f2bf18141e6aac3834f4baf436bb46e7bb340cc2a90b7f6cb6f713decea23dbe99e2e1de7030b405b0e69b763dc630a0727ef4fe7923edaecff9836fedc7e09b4159d6d23bdf8088eb8c09c94b6e667d6d2d5e65c32e0fc036875e490b6b9c0c8a15077de61f884e6668087c69bf789d3412452a7af609da4b709fdf80ffc274948328d408b14833a2b5"}) 27.916884541s ago: executing program 7 (id=1744): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000074") (async) ioctl(r0, 0xc138fd0e, &(0x7f0000000000)="0400000000000000000000007e0100003801") (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', r2}, 0x94) (async) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371c00000069bd6efb2502eaf60d000100020400bf050005001201", 0x2e}], 0x1}, 0x0) 27.757346362s ago: executing program 7 (id=1747): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) r1 = socket$kcm(0xa, 0x2, 0x0) close(r1) r2 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1a, 0x3}, 0x80, 0x0}, 0x26004055) setsockopt$sock_attach_bpf(r1, 0x0, 0x4, 0x0, 0x0) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) fcntl$setflags(r1, 0x2, 0x1) 27.696766672s ago: executing program 7 (id=1748): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r2, @ANYBLOB="1c001281220001006970366572001200"/28], 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) lstat(&(0x7f0000000140)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000700)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r7 = socket$inet_udp(0x2, 0x2, 0x0) socketpair(0x1a, 0x3, 0x5, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000780)=0x0) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@private2, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@local}}, &(0x7f0000000800)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r12 = socket(0x10, 0x3, 0x0) write(r12, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r12, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r13, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r14 = openat$incfs(r1, &(0x7f0000003380)='.log\x00', 0x6000, 0x0) r15 = syz_clone(0x1020300, &(0x7f00000033c0)="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", 0x1000, &(0x7f00000043c0), &(0x7f0000004400), &(0x7f0000004440)="b143a45836f66fb2be9ae4d552d5b53d621f4d0cc55ef62786a07a7e3067a5394dc923c008f08c1b1c9c120b85b5d2968c3ae68ff6e9e802dfd0fd619acab579b80717dff1135d83218dd9124893e72630d4") r16 = geteuid() r17 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r17, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r17, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r17, &(0x7f0000006180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0x4, 0x2000, 0xa8, r18, r19, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r3, &(0x7f0000004540)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000240)="760b736e0413f1a87c6971a958cfcbd5076851dfd680d5245f52e5eda3a7fa4511d1993f2770b8c04610b84a3b80d73f095b2d0e3cb16509d2be5bccdbe03e6cba2c5325c1a50d164060e2fa7e52e86fcb73636bc9fd49f822cd52ca714bccca05d8a51db28184341b28c3670083d3f39c4a3e7e54c4d7b9453d8bd5bd946f07199e6181f7e817e9a5d81602bf2e06f02eebc34f2cdde9fab4bfeba4a0ce945765f689c6b955bbcc92ba1a26244448b7f32a8cdca739dcde9e4f0515acfed5b391d293f2b29799b523f4b7b544f2cbe46da516e8146f9ae7582c0e8c3a6357af874ba97b77161917a60cc12c43b763ff8385eacc165657d75bf50891ce", 0xfd}, {&(0x7f0000000380)="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", 0xfe}, {&(0x7f0000000480)="0abf858051b80d42efe4afd9a60936788f784eb80cc4373de9a0f5ddcf0cc4577a2624ef6a060712c9a96f01f567d9f908e6f401b41363ba83645a10ffe802ee55689db4e84248b1211bafd9a7f398daa4e78afdcdc4d0849fa0d6d2f527e2b65f394235882154af3b93c3f725ea66d30ab7986339272a4089ce1321710a6bb42c578ff2b6e345fee4880c9b15a4383102f140c65bde924938363fa66b9fbdea772495aa1042db06181cd24ecd96974fcbd048ae31d4799d2fd94456c99d3efea83675", 0xc3}, {&(0x7f0000000580)="5785ace0bf50ab2584d5838037e12563cf62756f6a2f724a47002da4cb16e08f585ab040c989bef07bdd2956917b4295d6e138bc6f4514f91be67a03ef49c0ed5fe683712bddb1890c794fe666bf5d30565d470590aeae599b080c812ae651c1e82bf59fe4e8a9b4796a6e633b948a525f332156e3d259a4ef24a384", 0x7c}], 0x4, &(0x7f0000002b80)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=r5, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r0, @ANYRES16=r8, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="000000001c0000000000e80d0000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0xb0, 0x28048011}}, {{0x0, 0x0, &(0x7f00000032c0)=[{&(0x7f0000002c40)="81c22a87e10f7f5fd33d2517871303d58328cc09e1e344ed56b3d0888287fadcad5908b60ad7db3212323b8b706b6dcb465ce2583b399eb3f8afe69f871064ef6a674ee0807e552ab19f8fdd078fd6ff65b83ef1a4ce643948c06e992c4f764ce9ee95c61d21074b8b3b6b78ddabe5e2bf5da96ebf923ce51ba3d8835bde8e778c959470d3b4c81a97e68e787cbe439e6c0bbd16f8214fc66cd957f9a623c81b71d02b99a124b75549c33c12d6927a4192253fefa7", 0xb5}, {&(0x7f0000002d00)="60518ab3d0ad82fda1a51609090a6e986d576d2ab3f25700578c38b49e6542a6c0c17b73c08ef992c62992fc09363a49e8af3d9c707d4ca0fa2e7d53bc34120badc4092cd3784ba25ec68362c6532acd2c5d150ff0f7cae0b50a3b29e639cb342057b3da6c06137aba0230110a240d52d5b65681292c86a351a1c9596a42a79a8d895fbd85f23b98a3d7ac64d873c63df033143350f1609688c4d99af6b15938c1300a110de4d203a172366bf69222efcd588a15c1853682708dc96729efa4991cf45473ea8e0c21dfcf9938fb6deacc3061f0d15898c1791867b1ac5b53e865f9a963f41348", 0xe6}, {&(0x7f0000002e00)="51ce4d9f1ba5e42c0c4acf1b796683427f6c8646376caf40a695c8b464ed6b8ac1bd21fe6a55e6b91548fa01416b07f3f05b38045b09ed5299c11754ea8f3a796cf56dc9fd55292c718b62123100c24987bb490e2a1173e4f4817f29e4d72964c70b4acb0a80bb0aa6057dc3e84db9d1b2549465b1da56e9", 0x78}, {&(0x7f0000002e80)="f52bfa27f885a24b93f0ad831087b4aac52dbdb17f1ce24ced2d35bc", 0x1c}, {&(0x7f0000002ec0)="05c4b917b2b6ebe788e6b80124703d35cf32c03df8569b1a71016a986307720c726f18a6e158b24bbba975102d76e747922511ba552c6e7b184f3b8078a29ee10d9cbc62e4db7943d43f0422b7cc587fc4de585a527ec228d5719a21e37c170077e1bd872be06648322b", 0x6a}, {&(0x7f0000002f40)="0589876b84ea484c54b643721b0455eda49aa5761e92c55072d84589a84d82f7eaab1e72739947acc9332f7cb43a4f70899198a4d990b8f79c88612eeccd75a1d4e0113dd59788fb463783ee8e18c3c102846b3285da4c719274205d6ec67f5a3621075712a426694fa3b7b29e55f1e00d945ad52b45e6ef5ee8bb5d9fd44948ae57bf180f4c2b51b3303940b0d5966d458cfb7438bfbf84da", 0x99}, {&(0x7f0000003000)="8328771d6bf4ffda82105912e0333fa4bcf9c3afe97a6908487d629bbfdafde1c52b37c4c11d82fd693af85ceb94dc31f575a9318429c1b499388b74575d7f853c5c8e552ef9200a39225fb486a5d2ae16e69eaf402b1505b719f0fe2a2b27004837d81116914a506842530fefba003ee485e940c9109a955056eeeabe8b223a053df323462faf67fc551436dd3c3f6e794ce69feb3e1f090180bb277c626b2bea9f0780d17962f13c9a09d05f4e34bc82d4336f4a38d52586bc33014d1484220933fdf0cd4d5386abeb5e8ef0fefb6794da75bf01cce9bbbcff0fb02b0dc5b51df33caaf5568f5c16964d", 0xeb}, {&(0x7f0000003100)="21c0b8a8c29ce16f6e13029e87a4bea89d023e06ffc3dfd1ee0da53881080b955b2716949b5b12ed7329bf5a3abdd9ec7d0aae3cb5ce55eef72df19537344d136e62929f822158263977286361f0e28ddf6f21a2f8bab939d387e157e90a903aaa6db3711945b899fee4c351d5169f6e2db966180a0fed76fb48c6f4124699449c286be19be0842204b9680f23acc23b75a9b4f4b2602711a2c0a60aac1a583aa3717686b695c2273d4b235f3af0af21107e739b03b3f76b03", 0xb9}, {&(0x7f00000031c0)="d239e9a538dcc60b828497d2f144aec4c6ea37a780606e006e38f9d2a3590fce0888b89086a0265f21a18a73c47218713cd1663588a3b416d25f6a1f3e5d5503acd8e35a897af06c64c63b8efa68eccf8eea6140e80d8d2e49967d", 0x5b}, {&(0x7f0000003240)="aa8a99cddc41972c1b01c701484a0374e8f1a9137d2cf2c9ed95efd27d194486cde5c48a61909e1c609f1dc262b0c32373d884961d09700d37dce83078173e48c453b5", 0x43}], 0xa, &(0x7f0000000900)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r13, @ANYRES32=r12, @ANYRES32=r0, @ANYRES32=r14, @ANYRES32=r0, @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r1, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r19, @ANYBLOB="0048d1edb7000000"], 0x80, 0x4}}], 0x2, 0x80080) 27.595160635s ago: executing program 7 (id=1749): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async, rerun: 32) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) (async, rerun: 32) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) (rerun: 32) ioctl$TCFLSH(r1, 0x4b45, 0x2) write(r0, &(0x7f0000000140)='0000:00:02.0\x00', 0xd) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ohci-pci\x00', 0x9) r3 = socket(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = semget$private(0x0, 0x7, 0x180) semtimedop(r4, &(0x7f0000000040)=[{0x1, 0x3ff, 0x800}, {0x0, 0x0, 0x800}, {0x4, 0x800, 0x800}, {0x1, 0x16e}, {0x1, 0x4, 0x1800}, {0x0, 0x5, 0x800}, {0x2, 0x800, 0x800}, {0x4, 0x5a38, 0x3000}], 0x14, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6f95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0x1c}}, 0xc000) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000001, 0x31, 0xffffffffffffffff, 0xffffd000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x40, 0x2) (async) mbind(&(0x7f00004c9000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x20, 0x2) (async, rerun: 32) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ohci-pci/bind\x00', 0x1, 0x0) (async, rerun: 32) r6 = getuid() newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/ohci-pci/bind\x00', &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) mount$fuse(0x0, &(0x7f0000000000)='./sys/bus/pci/drivers/ohci-pci/bind\x00', &(0x7f0000000280), 0xb88c4, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1400}}, {@max_read={'max_read', 0x3d, 0x4}}], [{@fsuuid={'fsuuid', 0x3d, {[0x55, 0x38, 0x37, 0x30, 0x31, 0x31, 0x65, 0x63], 0x2d, [0x36, 0x61, 0xf, 0x35], 0x2d, [0x37, 0x61, 0x30, 0xaab379d9bea75938], 0x2d, [0x35, 0x64, 0x34, 0x62], 0x2d, [0x35, 0x37, 0x39, 0x36, 0x62, 0x39, 0x0, 0x35]}}}, {@appraise}]}}) (async, rerun: 32) write(r5, &(0x7f0000000240)='0000:00:02.0\x00', 0xd) (rerun: 32) 27.525137733s ago: executing program 7 (id=1750): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x6) flistxattr(r0, &(0x7f0000000080)=""/173, 0xad) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xb9}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000001c0)={{0x8, 0x8, &(0x7f0000000180)=[{0x3, 0x0, 0x4}, {0x2, 0x0, 0x10001}, {0x4, 0x0, 0x1}, {0x80, 0x0, 0x7ff}, {0x8, 0x0, 0x9}, {0xa, 0x0, 0x4}, {0x1, 0x0, 0x8bd6}, {0x4, 0x0, 0x800}]}, 0x11, 0x4, 0x9e, 0x1, 0x0, 0xffffffffffffff01, 0x9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000002c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000300)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000340)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000380)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000540)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000005c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000680)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000006c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000700)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000740)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000780)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000880)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000980)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000a00)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r0, 0xc0186449, &(0x7f0000000cc0)={r1, 0x0, {0x28, 0x6, &(0x7f0000000bc0)=[{0xea, 0x6d526530, 0xba11cdda08ef4240, 0x4, 0x0, {0x10, 0xa, &(0x7f0000000400)=[{0xff, r2, 0x1}, {0x80000000, r3, 0x1}, {0x0, r4, 0x18}, {0x1, r5, 0x5}, {0x1, r6, 0x3}, {0x1, 0x0, 0x9}, {0x1, 0x0, 0x2}, {0xff, r7, 0xdee}, {0x1, r8, 0x100000000}, {0x0, r9, 0x35a7}]}}, {0x4, 0xece0f3c0, 0x7de67d335bda7b80, 0x0, 0x0, {0x10, 0x5, &(0x7f0000000600)=[{0x0, r10, 0x3}, {0xff, r11, 0x4}, {0x0, r12, 0x2}, {0x80000000, r13, 0x10000}, {0x80000000, r14, 0x44c2e655}]}}, {0x0, 0x9bf1f158, 0x84086b0ccdd26d80, 0x3, 0x0, {0x10, 0x9, &(0x7f00000007c0)=[{0xff, 0x0, 0x3}, {0x1, 0x0, 0x6fc}, {0xff, 0x0, 0x1}, {0x80000000, r15, 0xffffffffffff58a9}, {0x80000000, r16, 0x8000000000000001}, {0x0, r17, 0x2}, {0xff, r18, 0x5}, {0x0, r19, 0xfffffffffffff801}, {0x80000000, 0x0, 0x9}]}}, {0x2, 0x4e0c1730, 0x5c5c7e77f8ca3f40, 0x9fb0, 0x0, {0x10, 0x3, &(0x7f0000000940)=[{0x1, r20, 0x3}, {0x0, r21, 0x63a}, {0x0, r22, 0x7}]}}, {0xce, 0x7408d628, 0xf38e7dba73178600, 0x51, 0x0, {0x10, 0x1, &(0x7f00000009c0)=[{0x80000000, r23, 0xfff}]}}, {0x9709, 0x2f5c9920, 0xf0ecc2f58a31b00, 0xfffffffd, 0x0, {0x10, 0x6, &(0x7f0000000b40)=[{0x1, r24, 0x5}, {0x1, 0x0, 0x9}, {0x1, 0x0, 0x6a0f}, {0x1, 0x0, 0x4000000000000}, {0x0, 0x0, 0xa32}, {0xff, 0x0, 0x5}]}}]}}) 12.533883172s ago: executing program 36 (id=1750): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$eventfd(r0, &(0x7f0000000040), 0x8) ioctl$CDROM_SELECT_SPEED(r0, 0x5322, 0x6) flistxattr(r0, &(0x7f0000000080)=""/173, 0xad) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000140)={0x0, 0x2, 0x7, 0xb9}) ioctl$DRM_IOCTL_PANTHOR_GROUP_CREATE(r0, 0xc0386447, &(0x7f00000001c0)={{0x8, 0x8, &(0x7f0000000180)=[{0x3, 0x0, 0x4}, {0x2, 0x0, 0x10001}, {0x4, 0x0, 0x1}, {0x80, 0x0, 0x7ff}, {0x8, 0x0, 0x9}, {0xa, 0x0, 0x4}, {0x1, 0x0, 0x8bd6}, {0x4, 0x0, 0x800}]}, 0x11, 0x4, 0x9e, 0x1, 0x0, 0xffffffffffffff01, 0x9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000240)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000280)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000002c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000300)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000340)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000380)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f00000003c0)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f00000004c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000500)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000540)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000580)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000005c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000680)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f00000006c0)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000700)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000740)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000780)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000880)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f00000008c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01864c2, &(0x7f0000000900)={0x0, 0x1, r0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01864c2, &(0x7f0000000980)={0x0, 0x0, r0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000a00)={0x0, 0x1}) ioctl$DRM_IOCTL_PANTHOR_GROUP_SUBMIT(r0, 0xc0186449, &(0x7f0000000cc0)={r1, 0x0, {0x28, 0x6, &(0x7f0000000bc0)=[{0xea, 0x6d526530, 0xba11cdda08ef4240, 0x4, 0x0, {0x10, 0xa, &(0x7f0000000400)=[{0xff, r2, 0x1}, {0x80000000, r3, 0x1}, {0x0, r4, 0x18}, {0x1, r5, 0x5}, {0x1, r6, 0x3}, {0x1, 0x0, 0x9}, {0x1, 0x0, 0x2}, {0xff, r7, 0xdee}, {0x1, r8, 0x100000000}, {0x0, r9, 0x35a7}]}}, {0x4, 0xece0f3c0, 0x7de67d335bda7b80, 0x0, 0x0, {0x10, 0x5, &(0x7f0000000600)=[{0x0, r10, 0x3}, {0xff, r11, 0x4}, {0x0, r12, 0x2}, {0x80000000, r13, 0x10000}, {0x80000000, r14, 0x44c2e655}]}}, {0x0, 0x9bf1f158, 0x84086b0ccdd26d80, 0x3, 0x0, {0x10, 0x9, &(0x7f00000007c0)=[{0xff, 0x0, 0x3}, {0x1, 0x0, 0x6fc}, {0xff, 0x0, 0x1}, {0x80000000, r15, 0xffffffffffff58a9}, {0x80000000, r16, 0x8000000000000001}, {0x0, r17, 0x2}, {0xff, r18, 0x5}, {0x0, r19, 0xfffffffffffff801}, {0x80000000, 0x0, 0x9}]}}, {0x2, 0x4e0c1730, 0x5c5c7e77f8ca3f40, 0x9fb0, 0x0, {0x10, 0x3, &(0x7f0000000940)=[{0x1, r20, 0x3}, {0x0, r21, 0x63a}, {0x0, r22, 0x7}]}}, {0xce, 0x7408d628, 0xf38e7dba73178600, 0x51, 0x0, {0x10, 0x1, &(0x7f00000009c0)=[{0x80000000, r23, 0xfff}]}}, {0x9709, 0x2f5c9920, 0xf0ecc2f58a31b00, 0xfffffffd, 0x0, {0x10, 0x6, &(0x7f0000000b40)=[{0x1, r24, 0x5}, {0x1, 0x0, 0x9}, {0x1, 0x0, 0x6a0f}, {0x1, 0x0, 0x4000000000000}, {0x0, 0x0, 0xa32}, {0xff, 0x0, 0x5}]}}]}}) 3.855763006s ago: executing program 5 (id=2039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) syz_open_dev$dvb_demux(&(0x7f0000000100), 0xcd79, 0x141000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000001c0), 0x40b80) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r3, 0xc05c5340, &(0x7f0000000200)={0x0, 0xffffffff, 0xbd18, {0x4, 0xfffffffa}, 0x4, 0x3}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x3d2, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}, 0x8}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x303, 0x70bd2a, 0x25dfdbff, {0xa}}, 0x14}}, 0x20000024) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x4c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000500)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(camellia-generic)\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f0000000400)=""/198, 0x0, 0x10, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x3c, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1a, 0x0, 0x0, 0x10, 0x200}, 0x94) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0xa69, &(0x7f0000000240)='\x00') prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000000)='(/\x00') r5 = syz_open_dev$ndb(&(0x7f00000023c0), 0x0, 0x400) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r7, 0x4001af84, &(0x7f0000000000)) ioctl$VHOST_SET_OWNER(r7, 0xaf01, 0x0) dup3(r6, r7, 0x0) ioctl$NBD_SET_TIMEOUT(r5, 0xab09, 0x8) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex:Di', 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x7c800, 0x0) r8 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) syz_kvm_setup_syzos_vm$x86(r8, &(0x7f0000bfe000/0x400000)=nil) 3.472993834s ago: executing program 5 (id=2040): socket$nl_audit(0x10, 0x3, 0x9) r0 = socket$inet6_udp(0xa, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file1\x00', 0x124) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000540)='\x93\xe8\x87b\xc3rN\xac\xfa\xfb\xcfR5\xbaz\xcejZ\xa5\xe8\v\xe5r\xe4\xd0\x8d\xed\xb6\x11\xbb\x7f\xc2B\xa7O\xce w\r\xfe\x8c\x1d\xc3\xe5\x8c\xd5\x97\xd3\t\xe6\xafS\xfbz\xa5\xce\xd0\x84v\x86\x8bWgy\x96b|\x94\xb7\xdf\xb2\x02h\xe6\xdfo\xac\xdc2m\r erd\x9a+\x10\xc5\xd2\xfb\xa8\xf2\xc2\xcf1\xf1=\xb4M\xe5\x98\xc0\x0e\xe7`d\x9c\xeb\xf4\'\xd8|\xe5\x94\xb1\xbe{J\xb40\xbaL\x97\x87\xfdl\xb8\xd1\x93%c\xed\xabmW\x11\x7f\x1e,\xc1uCr\xd5\xc6\x9fo\xa3\x15\xa6\x01\xfe3[\xcbd;k$1\x9bT\xe1M\b\xbc\x9e\x19\x14V\xed{\xd0\xdf\x90\x06\xe4') r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937e, &(0x7f00000019c0)={{0x1, 0x1, 0x1018, r2}, './file1\x00'}) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)={{0x1, 0x1, 0x18, r3, {0x4}}, './file1\x00'}) syz_emit_ethernet(0x42, &(0x7f00000004c0)=ANY=[@ANYBLOB="33330000000100000000000086dd60000000000c2c40fe800000000000000000000000000001ff020000000000000000000000000001"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001000ffff25bd7000fbdbdf2500000000", @ANYRESDEC=r0, @ANYBLOB="17200000212000004c0012800c008bad825163766c616e003c00028008000300030000000800010010000000280005800a00040096aaaaaaaaaa00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaab0000008000500", @ANYRES64=r4], 0x74}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.361252614s ago: executing program 5 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x0, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x823}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 3.3605129s ago: executing program 5 (id=2042): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@gettaction={0x14, 0x32, 0x300, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x10008040) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x3f, 0x2}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = userfaultfd(0x80001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000279000/0x4000)=nil, 0x4000}}) dup(r2) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$kcm(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @local}, {0x2, 0x4e20, @loopback}, {0x2, 0x4e21, @private=0xa010101}, 0x6a, 0x0, 0x0, 0x0, 0x1b, &(0x7f0000000180)='ip6gretap0\x00', 0x5, 0x1f67, 0x6}) sendmsg$kcm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)="d8000000180081054e81f782db4cb904021d0800fe207c05e8fe55a10a0015000200142603600e12080005007f370401a8001600200006000500027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2e98a61e284ce5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) r5 = dup(r1) r6 = epoll_create1(0x0) epoll_pwait(r6, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) epoll_wait(r6, &(0x7f0000000240)=[{}], 0x1, 0x404) ioctl$RTC_SET_TIME(r5, 0x4024700a, &(0x7f00000000c0)={0x1f, 0x26, 0xd, 0x1b, 0x2, 0x2, 0x6, 0x6, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) 3.255097886s ago: executing program 0 (id=2043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="c80000000002010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000bb14000400200100000000000000000000000000020c00028005000100000000003c0003800c00028005000100000000002c00018014000300fc00000000000000000000000000000014000400fe8000000000000000000000000000bb3c0002800c00028005000100000000002cf443ace763d0f970a5c1d900018014000300fe8000000000000000000000000000bb14000400fe80000000"], 0xc8}}, 0x0) pipe(&(0x7f0000000080)) 3.099214222s ago: executing program 0 (id=2046): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x122, 0x0, 0x2}]}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000440)={0x48, 0x2, r4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r4, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000480)="fef0eda8c799a4a0c7cb5b0006000000009b7a000100e83ac55324dcd8cdde11b71f986ea0c28be9", 0x28, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r7 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000000)={0x13, &(0x7f0000000040)=[{0x23, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x3, @uvalue=0x3}, {0x0, @svalue=0x5}, {0x2, @uvalue=0x1}]}, 0x1}]}) keyctl$dh_compute(0x17, &(0x7f0000000140)={r6, r6, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) close(r0) 3.042229194s ago: executing program 0 (id=2048): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000041000100fcff070004000000010000000400488014000180100010800c000b8008500100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008014) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x40008090) 2.958049636s ago: executing program 0 (id=2050): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x0, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x823}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 2.901112843s ago: executing program 0 (id=2051): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES64=r0, @ANYRES8=r0], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100103052abd70000007000000000000dacc92853d0c56a0618f9991a2a67c7fc56ddc6f45c68fc306151a2327c5da3575154d027bad452e3b718b93177816da3a7f9927597cc8355a2ed43fd14bd960cfec6a2169b6088eb2c053209a948cfb0188ff9e4bb02eb95a159d6f8d7629c3c3c6fd1774a2c9f43973bd5e800da644158dad45d7482323021e58c1c77f18a81a6214ec87d6065fda098f5e6c21e126ccd266b5914c1b381f50be5664c0ea1c2c18ca9ce25e538624fd0ecacfbf75e0b8942b745e5d68c61d9e1e3eb29a8ebd067343bfe3649334f189aad3ec73f68ff9e92768", @ANYRES32=0x0, @ANYBLOB="00000000063800001c0012800900010069706970000000000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB], 0x44}}, 0x0) 2.900562276s ago: executing program 0 (id=2053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x10, 0x80, 0x8, 0xe, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_MARK_BLOCK={0x8}]}}]}, 0x150}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x2c}}, 0x0) r3 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000080)={'dt2815\x00', [0x3c4, 0x10, 0x2, 0x3, 0x14000000, 0x0, 0xfffffffc, 0x2, 0xffd, 0x7ffe, 0x3, 0x723, 0x400, 0x2, 0x13, 0x100, 0xffffffa7, 0x9, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0xe2df, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x6]}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x4c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x3}]}}]}, 0x4c}}, 0x40440c0) bind$packet(r4, &(0x7f0000000040)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r4, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x42, 0x95, 0x33, 0x8, 0x1430, 0x6cdc, 0x85cc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x8, 0x7, 0x80, 0x5, "", [{{0x9, 0x4, 0xc6, 0x0, 0x1, 0xff, 0x5d, 0x1, 0x4, [], [{{0x9, 0x5, 0xa, 0xb, 0x3ff, 0x1c, 0x3, 0x6}}]}}]}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}, {0x97, &(0x7f0000000440)=@string={0x97, 0x3, "c45faf5eac6190bd060dcab2218e4a9f90be7cd37186d55939b6e18188b0738784a9b2fb8e459fa61fdf9796e96c5d6081b9a21304b922cff95cbc6ee6ebaa784106fc446a466e2eaabf824f719efe5f84e8165475d6b0280c220097c018ff7b530a05adb069a24aee6b0746bb738c1d7f4e6298c3f806fd31c606f70c14313f2a2ea65bc8f58b525dda3c3805491d1a6aea9897d7"}}]}) 1.706823999s ago: executing program 6 (id=2068): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x0, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x823}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 1.705082026s ago: executing program 6 (id=2069): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file7/file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x5a, 0x2, 0x0, 0x0}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000140)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1000}}}}}}}, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents(r2, &(0x7f0000000440)=""/175, 0xaf) getdents64(r2, 0x0, 0x0) clock_settime(0x8d71ca88fffffffd, &(0x7f0000000000)) 1.616770735s ago: executing program 6 (id=2070): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x2000000000000019, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0xf, &(0x7f0000006f80)=0x1, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f0000000300)='./file0\x00', 0x49) r5 = fanotify_init(0x1a, 0x800) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r5, 0x441, 0x4800001a, r6, 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r7 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r7, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x6, 0x7fffffff, 0x9, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x19}}}, 0xa0) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r3, 0x0, 0x0}, 0x10) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000900)=@nat={'nat\x00', 0x1b, 0x5, 0x430, 0x1c8, 0x1c8, 0xffffffff, 0x1c8, 0xa8, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, &(0x7f0000000040), {[{{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x3, @empty, @broadcast, @port=0x4e21, @icmp_id=0x65}}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@ttl={{0x28}, {0xc58f395f05c3c42a, 0x2}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x1, 0x2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x11, @local, @private=0xa010100, @gre_key=0x3, @gre_key=0x9}}}}, {{@ip={@multicast2, @rand_addr=0x64010101, 0x0, 0xffffff00, 'erspan0\x00', 'ipvlan1\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x80}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@icmp={{0x28}, {0x8, "a698"}}, @common=@addrtype={{0x30}, {0x8, 0x100, 0x1}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x2, @remote, @loopback, @icmp_id=0x64, @icmp_id=0x3}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xfd}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x519db7e6cd3e77b0, @multicast2, @dev={0xac, 0x14, 0x14, 0x1e}, @icmp_id=0x67, @gre_key=0x91}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) 1.545622359s ago: executing program 6 (id=2072): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x5, 0xfff3}, {0x0, 0xfff3}, {0x9, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_INDEV={0x14, 0x2, 'wg2\x00'}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20041891}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x388) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) mount$pvfs2(&(0x7f0000000180), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x24, &(0x7f0000000540)=ANY=[@ANYBLOB="3a075b2c002c2c6d756c746971002c6175646974c55603c40d61866e745f686173682c4b756e633d4b455845435f3345524e454c5f434845434b2c0000000000000000000000000022000000"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000356b15f139dda11e3000000030000000020000000000000001000004ffffffff000000000300000000000000000000000000000203000000000000000000000902000000000083de0e7e83cb759a4a45d2f09d7e9e452b88e8f0b0c4054b1c3c826917c41ff9a8e6b51b"], 0x0, 0x4a}, 0x20) listen(0xffffffffffffffff, 0xc) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x4880) fcntl$getflags(r7, 0x408) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000010058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) fchdir(r8) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000200)={0x7}, 0x20) sendmmsg$sock(r5, &(0x7f00000019c0)=[{{&(0x7f0000000440)=@ll={0x11, 0x10, r1, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000700)="61d5609c01525c15ff6d4fc3368ee47913c402e49ad8f32dc40323064b70b5f4053f3d931c2693b9067008a43fa738cd40f492d8dff35055679a028f6255d2890f1699b1626139019274efe5f7e8b4daf0675090a6fa3e1a5305b597163fcaf2f609486137dfa2b32ef1a9cf751cbf3290456d7e5c24c405722063dfb940e9d6a1071b39a9e8b6e5ec63f4d9096a824ed1cb355fad4a7ef10bd0504d857c02c78490a102ca5142d4b8bfe608e245f0b1e363597154f5f8def854ad6cd9dbac892b4e29be932837a22f883aef0c518b3dba26319ea70dc64c49aab419e113bc926ab5", 0xe2}, {&(0x7f0000000800)="b3e41a5d4b331960eb366b900197407cb3b19842683f2e74fa0a56066a3ecfc299b0afdf21f05f890e2efa677af340a22717b318c37ab04a371fc925e47ffd400f7c82b0fc0ac490dd2161d8bfdd8b1c35ae2a1fa6fcd733a2e1d54d4862b55854e7ed4520ec79fba16c66e103f23631f676d66e09ddf02f89541b648a68003ff087b8ac8c381bfdc360083d562db242604474bc388b1bfa9f2af83d67bb565b2ff865ce0065219d5cb9b14af03c", 0xae}, {&(0x7f00000008c0)="9e807970765683e811fefd9ebf0362034efc77677d6ec077580138a0a2db601b131119d37a839113c91c18f6366f0a8afd5ec71287d979be6e749b1320408d0d000342b3cfa967b956c6759a60fdafca79577a3fb067700b47ba64ce1f305fb213fd8015f42b4fcef9cab79ad72c89c1d082cc3e4165f216fcd0857e5605041034ad6385549f61ab3d0e9c0fef12ceeed4b132babb17a1b1756db2cd96", 0x9d}, {&(0x7f0000000980)="314570ea371bedf4d4d659acd5805655fce596bbb41f34e4788bdef7b7154bb019855096b8d8d70684cd3b429ff4888d0c7543bdcc137f130268df676e03d9321d4cbbcf93838bb3b765487bea4ad8d51a4be5c5dccac2336c6aedcf409b4aab845fffd090c8776fe6c8c7e3a29e120d9f30f468566e3f38c202654e2f65fda01ea2012cff94ae8a6a4e0a8101d9ba02ce4203c2a3ef9f5145596285759293cf8f6f7e2af2411962940f7bb64dca2943f3ed66368cd813ea072892aafa0d482dbb8428cb8d36e372d3", 0xc9}, {&(0x7f0000000a80)="d1ea82a286", 0x5}, {&(0x7f0000000ac0)="1ed6703f7fdd2e110b2c21829fc9d67aab1b409f9f271eae3de92d3bb264369e7460f1ede9f835ceae9720943a1e5be6d49d2a5d43df234413443234e48e90a4049707246065d8f1ed513307ee3f4ed5ea291a3e3b7ff61dc77aaefc60f9a641f542e70500eb", 0x66}, {&(0x7f0000000b40)="421c9f412539be6e174a9edd284d5f65af1355b4ce49c6942361ad148f252606067f870039f1e19d0f6ca308bab24f8499ef3198ca80ec4a8b69e4d5c8ccba1ad39588e40e39d25985f79353278ccd4e6e558558ca2f3a48fd570e93a8a538334439ff778b7a8ede9e8eca4983c11ddcd0c18c345e70e44c909ed214df00b8672168c7", 0x83}], 0x7, &(0x7f0000000c80)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x100}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0x800}}, @mark={{0x14, 0x1, 0x24, 0xa9d}}], 0xc0}}, {{&(0x7f0000000d40)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80, &(0x7f0000001280)=[{&(0x7f0000000dc0)="ae427573f7463165a485cf546500ef18ffaf1d7613048aba7e903add3f160fc0fd4c22cb8be3aac37efae057ed24139dfb37405130f05174dff5d50fc8c00c8ff6e3deb479449a25b880e2821835846e3cfba65d5c7c6d97f5a601d1f4e42fe6b26a64d04909b6e96139c52191eeb1110a6baea361a2fe27cc06e5d899fafc338efbd127a172d1149ac2bdd3b00f74dc238f820c1a534b5c505658a1d1fb34365202b8267b46ec34", 0xa8}, {&(0x7f0000000e80)="c4ff849bdbc3a257792e07f7b8d6b44bcb4983264d53f6b6abfd2f382c5feb3ae7d8198a7d8d6dc69c34d4d8b662442789002f92be1d49f614e5468f5f91cea06c876ebd8ff2880a180eeb1ba52ba4de5ac62270460a8ca3148b1c1e1480eb4232b67b3d63ae7f2cf8157d12eecbc25c3f93e5de1d290bdb3ff8b3cd603429ac7b7cdf3e2e6f3a3650063d47e161f35bd244d71d496baace60e56b0fac5bb492006d0c9f2fd4092811e95dd3", 0xac}, {&(0x7f0000000f40)="17e9a6799a5c5f294dda644abbbb6cdfd01b102f63260479e512cda9025d2a567bad2792d9f93f8daeca43a2c738e63a1d307776234a93f4aae47d56401adb2ee51f81c49f9a022a9602931a8c3d3eee66c545d9b5e786d79ba85813106d20798c16a8d54c6796de76ec021316318b2f3a435f9cabb31ba2650c3056fa6766a7e892f66cc130b6c1b1009bac60534540e2b6534ab254dcfa19b7a11aa5ff43de5e3e3f9b4dbe4759a972dfd2587983b8b59f7faf273797b8e9b4aab64f", 0xbd}, {&(0x7f0000001000)="39f16e2987a9518fb1328ec81db326b6724678f07db281aa22925ed91aa8bf874d8529901a796d5f052e7e45325fe7a8d0751af836afde370830fad1206db8a9f83a7285b54d714a7c1f571ac277b198117dea95919a0b7da060deee05394ca7bd10321ff06173264470f5776d81570bae69d23b30d53180dedfbb9417a72dbb4ae6f18406192e71a82329187bf99bbeb1fe540532db95a987f27e00b182e43fbf5aaa74c06751eba7e5b10ffc71a6e69b1e045ae656d34481", 0xb9}, {&(0x7f00000010c0)=':', 0x1}, {&(0x7f0000001100)="08d33e5cd03aaeecc9067e026a9429247b99a16b49e5bf38cdcb53e708b0a99de2b4b288810556952194fe8d4ed500f0a25ec2da7710609ed3d87ad78b2e2dcf84fe23a6fc7a2e4e63e6e4e3e2aef6f5a1110af8a71517172be606677f80f74d4072760bae9bfb77bf08d9ed39ab775ff4", 0x71}, {&(0x7f0000001180)="1f0c027877141999eb5e04c50396978b3e403c814c944c18e6a158fbdcaeb6afe963cd9e43929d6a098e3a0dd8a562c9b3bba6e7bc9813ab4f3a63f82239ef704d609caa774bad3d58cf75b2ddf340ef849c7fffe0c44bca41725bbfbbb7f390b3da2356829281fc4344b7b3a85777ee619205e284ec3d39bc1e62b45bd0890e9bc4e136fd758eb46c27c82293c2b1de5326e3810fc57a5639201d56a1804962a7632e59d1475cbf1c46c20f43fc5d40054b10563b60e6e025479f0f63278e676f08dcf23d79a80efa6e4f8c074b340f410deed78bd5eb9009165e6812e39bce59171c935a943c", 0xe7}], 0x7}}, {{&(0x7f0000001300)=@pppol2tpv3={0x18, 0x1, {0x0, r8, {0x2, 0x4e22, @multicast2}, 0x4, 0x1, 0x3}}, 0x80, &(0x7f0000001540)=[{&(0x7f0000001380)="45bfc2d6f82536f64a9c23a15b91ec4ad83e583af27ed0d15bbb1d2f44ac535195df7b3465c87a1b722d540fc1b17e4bc90aeabbbfa2d8f590e09d40784528f7ec779f62d48830db956b38f91c54fa2d3ca8de2525a076daad4374f4ddc83092ed09896d0fa64363db427308c51fc48def7a700eeb25a6f3edfc36c332778b65fee1b3", 0x83}, {&(0x7f0000001440)="60cb5991fd67dc673d93044f7cd5d4d77cfa5fd7b8b804730e9702901c9bf59749b961986309865e6a0d9c4ecfc1f384d7ee89a580a054eaab0ba51a65145170ae1ad726734188663b51406b080804e699d996a772746cd1782903c7b1e897a3946bae9b176462a38db61c3f2eb720b7a92ded7054ed6d2d34600ee75206053984652e73a0403e9ab889294239f1245c0b1ada2c4b1a96fca3f74280546f521e64d739da3b147c841fc95d447a76ac24d15408abd9cc6fb6867233e917ec3337b6f2", 0xc2}], 0x2, &(0x7f0000001580)=[@mark={{0x14, 0x1, 0x24, 0x1000}}, @timestamping={{0x14, 0x1, 0x25, 0x8}}, @mark={{0x14, 0x1, 0x24, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x78}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001600)="925ba0c42f55cc3f570f2b7cd600e758b4fd3dda0cb86270543145ccab76106acc54827e33858686ab969a045927971e3023b82a9f2c5769fdf7a31c706baccb86866423227d7a8486f31db7c5bde12ff41c3713b0f7f0f966a3f5cc48c3e8ad5ce9f94049956135297011479198", 0x6e}, {&(0x7f0000001680)="b3e7cf3661d62ef698b3ed3584b0ced66a0813c13fd2047b4cd3e2b773c5ca1b1d8c470aaa5e31523ce7dfa37a7478696f4ff440dd900f6ff6388afea8517e5357825a56847ff048f92575a1fa1e9421c36bde2a386ae5f73ef39ffcee8018dcf2bdcf108bdc85f3d3f62864a20de9f7b3d8507e981e8e9e64a2eb555c6bff227e4501b001", 0x85}, {&(0x7f0000001740)="19171d6822e242dbf03560fe2a943a8dcf61e5175b55060372d7d52af7cfe7b184643b3e877f3322bfe8f99aae90580135ce8644f19e075643f3e552bbb5621c17ce9420ae21c55bd902dd503fa23116416b97f9389b3fb98f0fd132c8c1dd60c967267ce481", 0x66}, {&(0x7f00000017c0)="8c45ffd69ee4e663d9b9ffbf4e4dab3e9d7ee70cf62d8fbb6e7823f8d5bdecd52fbda40dddd08dce516bf2a99247d06787a30959888b6614b0dd6815ded3666aed4d3a8e824dbaf7bc88348e25801d83d56346b18caae795697a1264e4a2bebf608a5f3d1e5986ef6b99e2727248", 0x6e}, {&(0x7f0000001840)="5475cecdd694925657019f7c36351b2075f0c7340a726428e39591d76ef7de05de55b81c83bd1104e229f014f42864b837260c0d35f1936432b465c5da855c44a4b31d8e6b73680a76629c7a1f6447ed4d814fc824f05c5e30aaf40ef1660bd7d42cd16582e77e74708cc0cd5e8a81fbcfca72d731", 0x75}, {&(0x7f00000018c0)="5f8a19b1d3a182e5ada0b872b676cc141a99afa62e9b5a533e27ff0718ec8b463e27643d36", 0x25}], 0x6, &(0x7f0000001980)=[@mark={{0x14, 0x1, 0x24, 0x88001}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x30}}], 0x4, 0x240480c5) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x10000, 0x0) fsetxattr$trusted_overlay_opaque(r9, &(0x7f00000001c0), 0x0, 0x0, 0x1) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100febfffff0000000001000000040007800c00060002000000000000000c00020001000100000000008897658f62399c7f076e237f74f39df0b951776b3e169358f4dc9d7f94159c6d76680149e5e176a69901b0ae498d799139336666ac203e4b5f2469e02965d2080999722b290d380ad775e9dcd3d3a1c98e45bebda278c7744f35959af4b5c994841362aadfa67bafccf3cd0255037d865cac1d73f2dbff711c11395d50c2cf441bba9c8831832c6712d21599350866e91a322b0ce492c711e8d216cf7ad8cb9f83466e78ad253b37df39cc10226b912ef506b3562933fed164699e19035f1865b8a8f7356e0e944c09d59449451dd133fcd825c3a101c52e78ebc6344d"], 0x30}}, 0x20000010) 1.406868185s ago: executing program 6 (id=2073): r0 = socket(0x11, 0x2, 0x0) setsockopt(r0, 0x10a, 0x1, &(0x7f0000000080)="110000000000060000071a80010061cc", 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480ef42b", 0x4e}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) 726.225485ms ago: executing program 6 (id=2082): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x8000}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8, 0x1, @val=0x54}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0x7) read$FUSE(r2, &(0x7f0000001680)={0x2020}, 0x2020) io_uring_enter(r2, 0x1a8f, 0x630c, 0x47, &(0x7f0000000000)={[0xa1e]}, 0x8) 246.920438ms ago: executing program 8 (id=2086): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x2}, @TCA_GRED_DPS={0x10, 0x3, {0xa, 0x1, 0x0, 0x7}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x100, 0x823}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 246.378451ms ago: executing program 5 (id=2087): r0 = socket$kcm(0xa, 0x1, 0x106) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r0, &(0x7f0000000100)='nl80211\x00', 0x50000, &(0x7f0000000180)={@_ha_fsid={[0xfffffe00, 0x9]}, {0xb0, 0x8, 0x82, 0x1}}, 0x1e27, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000280)=0x800}, {[0x5b4, 0x0, 0x400, 0xff]}, 0xfffffffc, 0x8a, &(0x7f00000002c0)=""/138}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) close(0x3) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000480)={r6, 0x7}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000002c0)={r8, 0xf}, 0x8) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x10, 0x3f6, 0x1, 0x70bd26, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x4044085) syz_open_dev$video4linux(0x0, 0x0, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r10, 0x0, 0xd1, &(0x7f0000000000)=0xfd, 0x4) setsockopt$packet_rx_ring(r9, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$kcm(r0, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x9, @local, 0x2}, 0x80, 0x0}, 0x4) r11 = socket$netlink(0x10, 0x3, 0x8000000004) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) r12 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000580), 0x40, 0x0) sendmsg$nl_route(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) writev(r11, &(0x7f0000000240)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc4510010000000000000458000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x13) 245.863422ms ago: executing program 8 (id=2088): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRESOCT=0x0], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1000000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x2, 0x80805, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000000440)={'\x00', 0x0, 0x6, 0x2, 0x0, 0x1, "f70000000000000000deffffff00", "88007600", "0300", "0001ffff", ["50d5c2a7c5ae5cace40000b6", "808e88e2e9ffffffffff00", "0cdd42000000000000c20d00", "00080100"]}) sendmmsg$inet(r2, &(0x7f0000002240)=[{{&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000007000000860811000003060214"], 0x30}}], 0x1, 0x48014) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8840) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) pwritev2(r4, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x0, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r5, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r5, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', 0x101001, 0x2c) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/39, 0x27, 0x0, &(0x7f00000000c0)=""/155, 0x9b}, &(0x7f00000001c0)=0x40) 162.420061ms ago: executing program 8 (id=2089): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xf}, {0x7, 0xb}, {0xffff, 0xfff1}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r4) (async) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) (async, rerun: 32) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_DELETE(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)={0x4c, r7, 0x8, 0x70bd25, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x4, 0x2, '\xb8^\x7f\x03\xb0'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x0, 0x1, r2}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004801}, 0xc000) (async, rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010826bd70001700000000000800f263fa0900000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001"], 0x34}}, 0xc0) (async) mkdir(&(0x7f00000000c0)='./file0\x00', 0x10) (async, rerun: 32) mount$bpf(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200), 0x200, &(0x7f0000000640)={[{@gid}], [{@fsname={'fsname', 0x3d, '\\{&-)'}}]}) (rerun: 32) 162.098869ms ago: executing program 5 (id=2090): bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xb5d}, 0x8) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x10001}]}}]}, 0x38}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}}, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r3, 0xc0046686, &(0x7f0000000100)={0x1, 0xaf, "fbe5ea531385af14d5ab3b40c2816bbe407a18312f322af53d92f27dfe30e441c84ebb688f082df02a7543de187cbac7e6282c90671d6962483c304c131deeca18f4e83a0dbcda9c02e30e354b489c81a69dc34fda33e73f0c8f8903a5eb70caf0cc003177dda6aad719a6dec3a059f2d94db62f2630e968efbad0fa912c4186a7d876135ffc950b8e775aeffa2f11ed51ce30f6ab3595e6da282a46312f41924dfb5a87022dc099b25306baa1014b"}) 76.865164ms ago: executing program 8 (id=2091): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f00000095"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x41, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x20, 0x4, &(0x7f0000000480)=@framed={{}, [@ldst={0x1, 0x1, 0x4, 0x0, 0x2, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8e6273c9505a7ce1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000005"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@generic={0x73, 0x1, 0x1, 0x1f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 76.602373ms ago: executing program 8 (id=2092): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/sync_on_suspend', 0x101a02, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0xf48, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1}, 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) sendfile(r0, r0, 0x0, 0x9) 0s ago: executing program 8 (id=2093): r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = creat(&(0x7f00000001c0)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x0) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x3, &(0x7f0000000140)=[{0x0}, {}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f0000000280)={r2, 0x1}) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='file0', 0x5) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x201, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x900, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x9, 0xe, &(0x7f0000000040)=ANY=[@ANYRES8=r0, @ANYRES16], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x40}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x3}, 0x10, 0x0, r4}, 0x94) kernel console output (not intermixed with test programs): ket permissive=1 [ 143.624563][T10255] SELinux: Context system_u:object_r:initctl_t:s0 is not valid (left unmapped). [ 143.637086][ T42] audit: type=1400 audit(1786367035.456:9120): avc: denied { relabelto } for pid=10254 comm="syz.6.1229" name="RAWv6" dev="sockfs" ino=32359 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=rawip_socket permissive=1 trawcon="system_u:object_r:initctl_t:s0" [ 143.655544][ T42] audit: type=1400 audit(1786367035.476:9121): avc: denied { append } for pid=10254 comm="syz.6.1229" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 143.663371][T10255] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 143.668887][T10255] SELinux: failed to load policy [ 143.699410][ T42] audit: type=1400 audit(1786367035.516:9122): avc: denied { write } for pid=10256 comm="syz.5.1234" name="buffer_subbuf_size_kb" dev="tracefs" ino=1052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 143.781032][ T42] audit: type=1400 audit(1786367035.606:9123): avc: denied { setattr } for pid=10260 comm="syz.5.1235" name="/" dev="9p" ino=76833015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 144.215161][T10270] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 144.605343][T10290] __nla_validate_parse: 2 callbacks suppressed [ 144.605396][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 144.617002][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1244'. [ 144.722756][ T42] audit: type=1400 audit(1786367036.546:9124): avc: denied { rename } for pid=10297 comm="syz.5.1247" name="file0" dev="tmpfs" ino=798 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 144.731363][ T42] audit: type=1400 audit(1786367036.546:9125): avc: denied { create } for pid=10297 comm="syz.5.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.737457][ T42] audit: type=1400 audit(1786367036.546:9126): avc: denied { ioctl } for pid=10297 comm="syz.5.1247" path="socket:[32388]" dev="sockfs" ino=32388 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 144.836498][T10307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1250'. [ 144.907205][T10312] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 145.005744][T10318] input: syz1 as /devices/virtual/input/input20 [ 145.118099][ T5740] Bluetooth: hci2: unexpected event for opcode 0x200c [ 145.150233][ T5740] Bluetooth: hci1: command tx timeout [ 145.549411][T10355] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1266'. [ 145.612317][ T5726] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 145.624214][ T5726] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 145.629340][ T5726] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 145.634572][ T5726] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 145.637167][ T5726] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 145.839264][T10393] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1276'. [ 145.916500][T10365] lo speed is unknown, defaulting to 1000 [ 146.260903][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.263388][T10365] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.265761][T10365] bridge_slave_0: entered allmulticast mode [ 146.268483][T10365] bridge_slave_0: entered promiscuous mode [ 146.285480][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.288681][T10365] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.292445][T10365] bridge_slave_1: entered allmulticast mode [ 146.296489][T10365] bridge_slave_1: entered promiscuous mode [ 146.324284][T10365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.331826][T10365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.369846][T10365] team0: Port device team_slave_0 added [ 146.377097][T10365] team0: Port device team_slave_1 added [ 146.424909][T10365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.427832][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.447964][T10365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.460284][T10365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.464959][T10365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 146.475608][T10365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.519128][T10365] hsr_slave_0: entered promiscuous mode [ 146.522491][T10365] hsr_slave_1: entered promiscuous mode [ 146.525546][T10365] debugfs: 'hsr0' already exists in 'hsr' [ 146.528077][T10365] Cannot create hsr debugfs directory [ 146.761705][T10365] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 146.769132][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 146.773308][T10365] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 146.781322][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 146.785282][T10365] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 146.791511][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 146.795407][T10365] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 146.803692][T10365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 146.838123][T10365] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.841200][T10365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.844349][T10365] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.849397][T10365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.905320][T10365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.971188][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.979276][T10468] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 146.983082][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.991177][T10468] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 147.014825][T10365] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.031883][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.034954][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.044637][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.047627][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.232928][ T5726] Bluetooth: hci1: command tx timeout [ 147.301462][T10489] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 147.304193][T10489] x_tables: duplicate underflow at hook 1 [ 147.304315][T10487] fuse: fd is not a fuse device [ 147.413889][T10504] syz_tun: entered allmulticast mode [ 147.416758][T10504] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 147.422095][T10504] mroute: pending queue full, dropping entries [ 147.426021][T10504] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 147.429427][T10504] mroute: pending queue full, dropping entries [ 147.435460][T10502] syz_tun: left allmulticast mode [ 147.452858][T10365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.550702][T10520] netlink: 45 bytes leftover after parsing attributes in process `syz.6.1305'. [ 147.610633][ T1036] IPVS: starting estimator thread 0... [ 147.661076][T10365] veth0_vlan: entered promiscuous mode [ 147.666546][T10365] veth1_vlan: entered promiscuous mode [ 147.702311][ T5726] Bluetooth: hci4: command tx timeout [ 147.702605][T10365] veth0_macvtap: entered promiscuous mode [ 147.712139][T10529] IPVS: using max 42 ests per chain, 100800 per kthread [ 147.715343][T10365] veth1_macvtap: entered promiscuous mode [ 147.726571][T10365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.741854][T10365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.770339][ T5806] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.776981][ T5806] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.835983][T10545] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1313'. [ 147.904980][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.908742][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.930770][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.933818][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.940615][ T5779] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.945189][ T5779] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.955443][T10555] overlay: Unknown parameter '' [ 148.040662][ T5726] Bluetooth: hci4: hcon ffff88805824c000 sent 1 < count 5 [ 148.065487][T10566] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1317'. [ 148.283389][ T5726] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 148.286610][ T5726] CPU: 1 UID: 0 PID: 5726 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.286632][ T5726] Tainted: [L]=SOFTLOCKUP [ 148.286637][ T5726] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 148.286661][ T5726] Workqueue: hci1 hci_rx_work [ 148.286762][ T5726] Call Trace: [ 148.286781][ T5726] [ 148.286786][ T5726] dump_stack_lvl+0x100/0x190 [ 148.286843][ T5726] sysfs_warn_dup.cold+0x1c/0x28 [ 148.286876][ T5726] sysfs_create_dir_ns+0x24b/0x2b0 [ 148.286903][ T5726] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 148.286916][ T5726] ? find_held_lock+0x2b/0x80 [ 148.286943][ T5726] ? kobject_add_internal+0x25f/0x930 [ 148.286970][ T5726] ? kobject_add_internal+0x25f/0x930 [ 148.286985][ T5726] ? do_raw_spin_unlock+0x145/0x1e0 [ 148.287012][ T5726] kobject_add_internal+0x2c8/0x930 [ 148.287028][ T5726] kobject_add+0x16a/0x1e0 [ 148.287045][ T5726] ? __pfx_kobject_add+0x10/0x10 [ 148.287056][ T5726] ? class_to_subsys+0x10f/0x150 [ 148.287099][ T5726] ? kobject_put+0xb9/0x640 [ 148.287111][ T5726] ? _raw_spin_unlock+0x28/0x50 [ 148.287135][ T5726] device_add+0x294/0x1970 [ 148.287167][ T5726] ? __pfx_dev_set_name+0x10/0x10 [ 148.287185][ T5726] ? __pfx_device_add+0x10/0x10 [ 148.287203][ T5726] ? mgmt_send_event_skb+0x2fb/0x460 [ 148.287234][ T5726] hci_conn_add_sysfs+0x1a3/0x260 [ 148.287259][ T5726] le_conn_complete_evt+0x11eb/0x1f60 [ 148.287279][ T5726] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 148.287300][ T5726] ? hci_event_packet+0x186/0xcd0 [ 148.287319][ T5726] hci_le_conn_complete_evt+0x23c/0x3a0 [ 148.287341][ T5726] ? skb_pull_data+0x15f/0x1e0 [ 148.287387][ T5726] hci_le_meta_evt+0x34a/0x5f0 [ 148.287413][ T5726] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 148.287436][ T5726] hci_event_packet+0x51c/0xcd0 [ 148.287455][ T5726] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 148.287477][ T5726] ? __pfx_hci_event_packet+0x10/0x10 [ 148.287498][ T5726] ? kcov_remote_start+0x384/0x670 [ 148.287524][ T5726] ? lockdep_hardirqs_on+0x78/0x100 [ 148.287543][ T5726] hci_rx_work+0x451/0xfc0 [ 148.287567][ T5726] process_one_work+0xa23/0x1940 [ 148.287592][ T5726] ? __pfx_process_one_work+0x10/0x10 [ 148.287616][ T5726] ? __pfx_hci_rx_work+0x10/0x10 [ 148.287637][ T5726] worker_thread+0x5ef/0xe50 [ 148.287658][ T5726] ? kthread+0x13a/0x450 [ 148.287669][ T5726] ? __pfx_worker_thread+0x10/0x10 [ 148.287688][ T5726] kthread+0x370/0x450 [ 148.287700][ T5726] ? __pfx_kthread+0x10/0x10 [ 148.287718][ T5726] ret_from_fork+0x72b/0xd50 [ 148.287743][ T5726] ? __pfx_ret_from_fork+0x10/0x10 [ 148.287769][ T5726] ? __switch_to+0x800/0x10f0 [ 148.287786][ T5726] ? __pfx_kthread+0x10/0x10 [ 148.287804][ T5726] ret_from_fork_asm+0x1a/0x30 [ 148.287840][ T5726] [ 148.287857][ T5726] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 148.386321][ T5726] Bluetooth: hci1: failed to register connection device [ 148.449200][T10592] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1326'. [ 148.488649][T10594] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 148.491851][T10592] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1326'. [ 148.570623][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 148.570645][ T42] audit: type=1400 audit(1786367040.386:9145): avc: denied { write } for pid=10595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.669287][ T42] audit: type=1400 audit(1786367040.486:9146): avc: denied { write } for pid=10611 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 148.738530][T10602] loop9: detected capacity change from 0 to 524287999 [ 148.752896][T10602] buffer_io_error: 11 callbacks suppressed [ 148.752910][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.759483][ T42] audit: type=1400 audit(1786367040.576:9147): avc: denied { create } for pid=10624 comm="syz.6.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 148.770733][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.774156][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.780241][ T42] audit: type=1400 audit(1786367040.576:9148): avc: denied { write } for pid=10624 comm="syz.6.1332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 148.782065][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.795983][ T6291] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.803749][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.808647][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.808895][T10618] overlayfs: failed lookup in lower (newroot/5, name='bus', err=-40): overlapping layers [ 148.812803][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.815925][T10618] overlayfs: missing 'lowerdir' [ 148.818341][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.825646][T10602] ldm_validate_partition_table(): Disk read failed. [ 148.828600][T10602] Buffer I/O error on dev loop9, logical block 0, async page read [ 148.832569][T10602] Dev loop9: unable to read RDB block 0 [ 148.835150][T10602] loop9: unable to read partition table [ 148.837678][T10602] loop_reread_partitions: partition scan of loop9 (3 x) failed (rc=-5) [ 148.876276][T10632] netlink: 'syz.7.1335': attribute type 2 has an invalid length. [ 148.935879][T10636] syz_tun: entered promiscuous mode [ 148.942996][T10636] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 149.320234][ T42] audit: type=1400 audit(1786367041.136:9149): avc: denied { bind } for pid=10661 comm="syz.6.1345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 149.670958][ T1036] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 149.763449][T10692] vivid-000: ================= START STATUS ================= [ 149.769849][T10692] vivid-000: RDS Tx I/O Mode: Controls [ 149.773301][T10692] vivid-000: RDS Program ID: 32904 [ 149.776578][T10692] vivid-000: RDS Program Type: 3 [ 149.782617][ T5726] Bluetooth: hci4: command tx timeout [ 149.787869][T10692] vivid-000: RDS PS Name: VIVID-TX [ 149.791568][ T847] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 149.794117][T10692] vivid-000: RDS Radio Text: [ 149.796267][T10692] vivid-000: RDS Stereo: true [ 149.798301][T10692] vivid-000: RDS Artificial Head: false [ 149.801132][T10692] vivid-000: RDS Compressed: false [ 149.803337][T10692] vivid-000: RDS Dynamic PTY: false [ 149.805557][T10692] vivid-000: RDS Traffic Announcement: false [ 149.808076][T10692] vivid-000: RDS Traffic Program: true [ 149.809805][T10692] vivid-000: RDS Music: true [ 149.812032][T10692] vivid-000: ================== END STATUS ================== [ 149.831097][ T1036] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 149.835933][ T1036] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 149.839620][ T1036] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 149.843906][ T1036] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 149.847458][ T1036] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 149.851950][ T1036] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 149.857968][ T1036] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 149.862175][ T1036] usb 10-1: Product: syz [ 149.864086][ T1036] usb 10-1: Manufacturer: syz [ 149.874080][ T1036] cdc_wdm 10-1:1.0: skipping garbage [ 149.875979][ T1036] cdc_wdm 10-1:1.0: skipping garbage [ 149.880080][ T1036] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 149.882672][ T1036] cdc_wdm 10-1:1.0: Unknown control protocol [ 149.942449][T10702] xt_l2tp: missing protocol rule (udp|l2tpip) [ 149.950757][ T847] usb 11-1: Using ep0 maxpacket: 8 [ 149.953074][ T847] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.956901][ T847] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.965389][ T847] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.968682][ T847] usb 11-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 149.973184][ T847] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 149.977248][ T847] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 149.981000][ T847] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.985448][ T847] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.028440][ T42] audit: type=1400 audit(1786367041.846:9150): avc: denied { write } for pid=10705 comm="syz.7.1357" name="file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.028488][T10708] openvswitch: netlink: IPv4 tunnel dst address is zero [ 150.028722][ T42] audit: type=1400 audit(1786367041.846:9151): avc: denied { open } for pid=10705 comm="syz.7.1357" path="/20/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.042159][T10708] openvswitch: netlink: IPv4 tunnel dst address is zero [ 150.048304][ T42] audit: type=1400 audit(1786367041.846:9152): avc: denied { ioctl } for pid=10705 comm="syz.7.1357" path="/20/file0" dev="tmpfs" ino=132 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 150.050278][T10708] openvswitch: netlink: IPv4 tunnel dst address is zero [ 150.074479][ T42] audit: type=1400 audit(1786367041.896:9153): avc: denied { read write } for pid=10670 comm="syz.5.1346" name="cdc-wdm0" dev="devtmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 150.083765][ C0] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 150.084461][ T1346] usb 10-1: USB disconnect, device number 4 [ 150.086032][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 150.089828][ C0] cdc_wdm 10-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 150.095010][ T42] audit: type=1400 audit(1786367041.896:9154): avc: denied { open } for pid=10670 comm="syz.5.1346" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 150.192403][ T847] usb 11-1: GET_CAPABILITIES returned 0 [ 150.194181][ T847] usbtmc 11-1:16.0: can't read capabilities [ 150.221075][ T1036] usb 11-1: USB disconnect, device number 2 [ 150.263766][T10729] overlayfs: missing 'lowerdir' [ 150.436984][T10745] netlink: 'syz.6.1367': attribute type 9 has an invalid length. [ 150.463461][T10752] netlink: 'syz.0.1369': attribute type 63 has an invalid length. [ 150.466971][T10752] __nla_validate_parse: 4 callbacks suppressed [ 150.466985][T10752] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1369'. [ 150.484638][T10754] vlan2: entered promiscuous mode [ 150.486923][T10754] hsr0: entered promiscuous mode [ 150.489622][T10754] vlan2: entered allmulticast mode [ 150.492138][T10754] hsr0: entered allmulticast mode [ 150.494316][T10754] hsr_slave_0: entered allmulticast mode [ 150.497096][T10754] hsr_slave_1: entered allmulticast mode [ 150.510446][T10754] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1370'. [ 150.514746][T10754] hsr_slave_0: left promiscuous mode [ 150.517945][T10754] hsr_slave_1: left promiscuous mode [ 150.545286][T10762] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 150.562674][ T847] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 150.591538][T10767] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=6 sclass=netlink_audit_socket pid=10767 comm=syz.0.1373 [ 150.721028][ T847] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 150.726195][ T847] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 150.729870][ T847] usb 10-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 150.734672][ T847] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 150.738207][ T847] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 150.745323][ T847] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 150.751918][ T847] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 150.755392][ T847] usb 10-1: Product: syz [ 150.757322][ T847] usb 10-1: Manufacturer: ꪕ榱볛Ⴠ﷈ꮛ矍꣒褖ᩋ㎍⾠뙗꣯꫹䣛및뗈埱똈㘰媹స숇࣪ﻚꔂ륷먹赆泌䜞 [ 150.775615][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 150.779937][ T847] cdc_wdm 10-1:1.0: skipping garbage [ 150.793024][ T847] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 150.795601][ T847] cdc_wdm 10-1:1.0: Unknown control protocol [ 150.976421][ T5878] usb 10-1: USB disconnect, device number 5 [ 151.070615][T10815] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1381'. [ 151.154652][T10819] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1383'. [ 151.165361][T10819] vlan2: entered allmulticast mode [ 151.167444][T10819] bond0: entered allmulticast mode [ 151.241710][T10821] ADFS-fs (loop7): error: unable to read block 3, try 0 [ 151.374542][T10819] ip6_vti0: Master is either lo or non-ether device [ 151.527089][T10831] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1386'. [ 151.647550][T10847] netlink: 'syz.6.1392': attribute type 12 has an invalid length. [ 151.653332][T10847] netlink: 'syz.6.1392': attribute type 29 has an invalid length. [ 151.655947][T10847] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1392'. [ 151.658872][T10847] netlink: 'syz.6.1392': attribute type 3 has an invalid length. [ 151.658883][T10847] netlink: 'syz.6.1392': attribute type 2 has an invalid length. [ 151.658892][T10847] netlink: 35 bytes leftover after parsing attributes in process `syz.6.1392'. [ 151.665654][T10847] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10847 comm=syz.6.1392 [ 151.730578][T10860] Bluetooth: MGMT ver 1.23 [ 151.775629][T10864] 8021q: VLANs not supported on ip_vti0 [ 151.842969][T10870] erspan0: entered promiscuous mode [ 151.870643][ T5726] Bluetooth: hci4: command tx timeout [ 151.943815][T10884] netlink: 'syz.6.1403': attribute type 32 has an invalid length. [ 151.991981][T10894] IPVS: set_ctl: invalid protocol: 0 10.1.1.1:20004 [ 152.010697][T10894] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 152.022715][T10895] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 152.097547][T10901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1407'. [ 152.272022][ T5726] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 152.740974][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'. [ 152.745938][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1416'. [ 153.074719][T10933] netlink: 'syz.6.1419': attribute type 2 has an invalid length. [ 153.357187][ T5726] Bluetooth: hci2: Malformed Event: 0x13 [ 153.624253][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 153.624269][ T42] audit: type=1400 audit(1786367045.446:9172): avc: denied { write } for pid=10956 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.721847][T10967] SELinux: policydb version 0 does not match my version range 15-35 [ 153.725155][T10967] SELinux: failed to load policy [ 153.893173][T10976] zonefs (loop6) ERROR: Not a zoned block device [ 153.940817][ T5726] Bluetooth: hci4: command tx timeout [ 154.071705][T10984] ieee802154 phy1 wpan1: encryption failed: -22 [ 154.170214][ T50] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 154.207311][T10987] jffs2: notice: (10987) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 154.218672][ T42] audit: type=1400 audit(1786367046.036:9173): avc: denied { write } for pid=10986 comm="syz.6.1433" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.240234][ T42] audit: type=1400 audit(1786367046.036:9174): avc: denied { add_name } for pid=10986 comm="syz.6.1433" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 154.249664][ T42] audit: type=1400 audit(1786367046.036:9175): avc: denied { read append open } for pid=10986 comm="syz.6.1433" path="/68/file0/blkio.bfq.io_service_time_recursive" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 154.261569][ T42] audit: type=1400 audit(1786367046.036:9176): avc: denied { write } for pid=10986 comm="syz.6.1433" name="blkio.bfq.io_service_time_recursive" dev="jffs2" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 154.320305][ T50] usb 12-1: Using ep0 maxpacket: 32 [ 154.323581][ T50] usb 12-1: New USB device found, idVendor=1b3d, idProduct=0178, bcdDevice=b4.2d [ 154.326338][ T42] audit: type=1400 audit(1786367046.146:9177): avc: denied { shutdown } for pid=10990 comm="syz.6.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 154.328626][ T50] usb 12-1: config 8 has an invalid interface number: 122 but max is 3 [ 154.336841][ T50] usb 12-1: config 8 contains an unexpected descriptor of type 0x2, skipping [ 154.339921][ T50] usb 12-1: config 8 has an invalid interface number: 71 but max is 3 [ 154.343910][ T50] usb 12-1: config 8 has an invalid interface number: 153 but max is 3 [ 154.346862][ T50] usb 12-1: config 8 has an invalid interface number: 5 but max is 3 [ 154.350686][ T50] usb 12-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 154.353869][ T50] usb 12-1: config 8 has 5 interfaces, different from the descriptor's value: 4 [ 154.357671][ T50] usb 12-1: config 8 has no interface number 1 [ 154.361324][ T50] usb 12-1: config 8 has no interface number 2 [ 154.366013][ T50] usb 12-1: config 8 has no interface number 3 [ 154.376498][ T50] usb 12-1: config 8 has no interface number 4 [ 154.379171][ T50] usb 12-1: config 8 interface 122 altsetting 2 endpoint 0x6 has invalid maxpacket 96, setting to 64 [ 154.383563][ T50] usb 12-1: config 8 interface 122 altsetting 2 has a duplicate endpoint with address 0x6, skipping [ 154.387142][ T50] usb 12-1: config 8 interface 122 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 154.391637][ T50] usb 12-1: config 8 interface 122 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 154.395989][ T50] usb 12-1: config 8 interface 122 altsetting 2 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 154.399803][ T50] usb 12-1: config 8 interface 0 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 154.404225][ T50] usb 12-1: config 8 interface 0 altsetting 3 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 154.408439][ T50] usb 12-1: config 8 interface 0 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 154.413082][ T50] usb 12-1: config 8 interface 0 altsetting 3 has a duplicate endpoint with address 0xC, skipping [ 154.416899][ T50] usb 12-1: config 8 interface 0 altsetting 3 has a duplicate endpoint with address 0xA, skipping [ 154.422115][ T50] usb 12-1: config 8 interface 0 altsetting 3 has a duplicate endpoint with address 0x3, skipping [ 154.426045][ T50] usb 12-1: config 8 interface 0 altsetting 3 has 10 endpoint descriptors, different from the interface descriptor's value: 15 [ 154.432027][ T50] usb 12-1: too many endpoints for config 8 interface 71 altsetting 201: 64, using maximum allowed: 30 [ 154.436100][ T50] usb 12-1: config 8 interface 71 altsetting 201 has a duplicate endpoint with address 0xF, skipping [ 154.440848][ T50] usb 12-1: config 8 interface 71 altsetting 201 has an invalid descriptor for endpoint zero, skipping [ 154.445434][ T50] usb 12-1: config 8 interface 71 altsetting 201 has a duplicate endpoint with address 0x2, skipping [ 154.449425][ T50] usb 12-1: config 8 interface 71 altsetting 201 has a duplicate endpoint with address 0x9, skipping [ 154.454302][ T50] usb 12-1: config 8 interface 71 altsetting 201 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 154.458829][ T50] usb 12-1: config 8 interface 71 altsetting 201 has 5 endpoint descriptors, different from the interface descriptor's value: 64 [ 154.464486][ T50] usb 12-1: config 8 interface 153 altsetting 232 has a duplicate endpoint with address 0xD, skipping [ 154.468464][ T50] usb 12-1: config 8 interface 153 altsetting 232 has an invalid descriptor for endpoint zero, skipping [ 154.473168][ T50] usb 12-1: config 8 interface 5 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 154.477445][ T50] usb 12-1: config 8 interface 122 has no altsetting 0 [ 154.480670][ T50] usb 12-1: config 8 interface 0 has no altsetting 0 [ 154.483466][ T50] usb 12-1: config 8 interface 71 has no altsetting 0 [ 154.485787][ T50] usb 12-1: config 8 interface 153 has no altsetting 0 [ 154.488520][ T50] usb 12-1: config 8 interface 5 has no altsetting 0 [ 154.493829][ T50] usb 12-1: Dual-Role OTG device on HNP port [ 154.496406][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.499314][ T50] usb 12-1: Product: 弣됿ᆤ [ 154.501734][ T50] usb 12-1: Manufacturer: 캦Ⳇ୸ⱌ붋㮲嫬蓌蕚횔德鋴஻时靪ᑋ鑽ᢖᑠ岬荸프䓲釱閕ࢢ﫢丹㵈훟휠㔡ᕟ豰໢鮅읒辅왒쏢餸稫뜣뒩嘏楖ᾠ帲觴벻卷Ꮭ땕詤ソ턝꿚╦㥏懊৤筇ᅱ線𢡄ᏸ㓌窎ᨚ搬惟垝 [ 154.511079][ T50] usb 12-1: SerialNumber: syz [ 154.723290][T10980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.726884][T10980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.730977][T10980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.735711][T10980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.749657][ T50] ftdi_sio 12-1:8.122: FTDI USB Serial Device converter detected [ 154.753981][ T50] ftdi_sio ttyUSB0: unknown device type: 0xb42d [ 154.759897][ T50] ftdi_sio 12-1:8.0: FTDI USB Serial Device converter detected [ 154.763291][ T50] ftdi_sio ttyUSB1: unknown device type: 0xb42d [ 154.768715][ T50] ftdi_sio 12-1:8.71: FTDI USB Serial Device converter detected [ 154.771931][ T50] ftdi_sio ttyUSB2: unknown device type: 0xb42d [ 154.776134][ T50] ftdi_sio 12-1:8.153: FTDI USB Serial Device converter detected [ 154.779304][ T50] ftdi_sio ttyUSB3: unknown device type: 0xb42d [ 154.782616][ T50] ftdi_sio 12-1:8.5: FTDI USB Serial Device converter detected [ 154.785745][ T50] ftdi_sio ttyUSB4: unknown device type: 0xb42d [ 154.793048][ T50] usb 12-1: USB disconnect, device number 2 [ 154.802010][ T50] ftdi_sio 12-1:8.122: device disconnected [ 154.810823][ T50] ftdi_sio 12-1:8.0: device disconnected [ 154.814437][ T50] ftdi_sio 12-1:8.71: device disconnected [ 154.821098][ T50] ftdi_sio 12-1:8.153: device disconnected [ 154.824449][ T50] ftdi_sio 12-1:8.5: device disconnected [ 154.849241][T11010] EXT4-fs (nbd5): unable to read superblock [ 155.320726][ T42] audit: type=1400 audit(1786367047.146:9178): avc: denied { kexec_image_load } for pid=11017 comm="syz.7.1441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 155.447642][ T42] audit: type=1400 audit(1786367047.266:9179): avc: denied { append } for pid=11030 comm="syz.7.1444" name="usbmon3" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.462390][ T42] audit: type=1400 audit(1786367047.276:9180): avc: denied { ioctl } for pid=11030 comm="syz.7.1444" path="/dev/usbmon3" dev="devtmpfs" ino=745 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.890353][ T24] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 155.941830][T11056] overlayfs: workdir and upperdir must be separate subtrees [ 156.040507][ T24] usb 12-1: Using ep0 maxpacket: 32 [ 156.046873][ T24] usb 12-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 156.052287][ T24] usb 12-1: config 0 has an invalid interface number: 119 but max is 0 [ 156.055698][ T24] usb 12-1: config 0 has no interface number 0 [ 156.058216][ T24] usb 12-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.064042][ T24] usb 12-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xD3, changing to 0x83 [ 156.068901][ T24] usb 12-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 7 [ 156.075181][ T24] usb 12-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 59236, setting to 1024 [ 156.079685][ T24] usb 12-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.088718][ T24] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.092253][ T24] usb 12-1: Product: syz [ 156.093971][ T24] usb 12-1: Manufacturer: syz [ 156.095983][ T24] usb 12-1: SerialNumber: syz [ 156.109632][ T24] usb 12-1: config 0 descriptor?? [ 156.134773][ T24] input: bcm5974 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.119/input/input22 [ 156.313055][ T42] audit: type=1400 audit(1786367048.136:9181): avc: denied { create } for pid=11068 comm="syz.5.1454" name="control" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 156.449973][T11066] Process accounting resumed [ 156.538109][T11074] kvm: kvm [11073]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 156.703225][T11086] __nla_validate_parse: 5 callbacks suppressed [ 156.703245][T11086] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1458'. [ 156.831027][T11089] overlay: ./file0 is not a directory [ 156.923641][T11108] fuse: Bad value for 'group_id' [ 156.925974][T11108] fuse: Bad value for 'group_id' [ 156.945076][T11110] bond8: entered promiscuous mode [ 156.947409][T11110] bond8: entered allmulticast mode [ 156.950324][T11110] 8021q: adding VLAN 0 to HW filter on device bond8 [ 157.022565][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1468'. [ 157.026907][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1468'. [ 157.102372][T11127] netlink: 'syz.5.1471': attribute type 13 has an invalid length. [ 157.242521][T11134] jffs2: notice: (11134) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 157.394406][T11145] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1476'. [ 157.463874][T11144] lo: Caught tx_queue_len zero misconfig [ 157.473583][T11139] null_blk: disk nullb1 created [ 157.567094][T11151] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1481'. [ 157.571800][T11151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60 sclass=netlink_route_socket pid=11151 comm=syz.6.1481 [ 157.633497][T11156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1483'. [ 157.717111][T11158] size and base must be multiples of 4 kiB [ 157.719776][T11158] CPU: 1 UID: 0 PID: 11158 Comm: syz.5.1482 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.719805][T11158] Tainted: [L]=SOFTLOCKUP [ 157.719812][T11158] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 157.719823][T11158] Call Trace: [ 157.719843][T11158] [ 157.719852][T11158] dump_stack_lvl+0x100/0x190 [ 157.719948][T11158] mtrr_add.cold+0x74/0x87 [ 157.719973][T11158] mtrr_ioctl+0x25a/0xcf0 [ 157.720024][T11158] ? __pfx_mtrr_ioctl+0x10/0x10 [ 157.720073][T11158] ? __pfx_mtrr_ioctl+0x10/0x10 [ 157.720113][T11158] proc_reg_unlocked_ioctl+0x229/0x320 [ 157.720150][T11158] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 157.720179][T11158] __x64_sys_ioctl+0x18e/0x210 [ 157.720224][T11158] do_syscall_64+0x115/0x870 [ 157.720286][T11158] ? clear_bhb_loop+0x70/0xc0 [ 157.720313][T11158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.720335][T11158] RIP: 0033:0x7f423d99e0d9 [ 157.720351][T11158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.720368][T11158] RSP: 002b:00007f423e796028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 157.720397][T11158] RAX: ffffffffffffffda RBX: 00007f423dc25fa0 RCX: 00007f423d99e0d9 [ 157.720412][T11158] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000004 [ 157.720425][T11158] RBP: 00007f423da35024 R08: 0000000000000000 R09: 0000000000000000 [ 157.720438][T11158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.720450][T11158] R13: 00007f423dc26038 R14: 00007f423dc25fa0 R15: 00007ffdb67f0e58 [ 157.720478][T11158] [ 157.995855][T11187] Invalid option length (480) for dns_resolver key [ 158.143905][T11199] comedi comedi2: dac02: I/O base address or length out of range [ 158.183777][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 158.213370][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1497'. [ 158.237771][T11199] xt_TCPMSS: Only works on TCP SYN packets [ 158.240804][T11199] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 158.400378][ T5977] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 158.479754][ T1036] usb 12-1: USB disconnect, device number 3 [ 158.514948][T11230] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11230 comm=syz.0.1503 [ 158.544865][T11231] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.552704][T11231] netlink: 'syz.7.1504': attribute type 4 has an invalid length. [ 158.552717][ T5977] usb 11-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 158.559168][ T5977] usb 11-1: too many configurations: 9, using maximum allowed: 8 [ 158.565412][T11234] CIFS: Attempting to mount //127.0.0.1/share [ 158.568901][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.574426][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.578781][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.582932][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.585985][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.590334][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.593822][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.597068][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.601494][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.604964][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.608016][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.612233][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.615531][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.619083][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.625847][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.629265][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.634016][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.637789][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.641969][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.645663][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.650069][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.654434][ T5977] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 158.658568][ T5977] usb 11-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 158.665318][ T5977] usb 11-1: config 0 interface 0 has no altsetting 0 [ 158.669418][ T5977] usb 11-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 158.671844][ T42] kauditd_printk_skb: 11 callbacks suppressed [ 158.671859][ T42] audit: type=1400 audit(1786367050.496:9193): avc: denied { create } for pid=11245 comm="syz.7.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 158.672590][ T5977] usb 11-1: Product: syz [ 158.684191][ T5977] usb 11-1: Manufacturer: syz [ 158.685879][ T5977] usb 11-1: SerialNumber: syz [ 158.690582][ T5977] usb 11-1: config 0 descriptor?? [ 158.705459][ T5977] yurex 11-1:0.0: USB YUREX device now attached to Yurex #0 [ 158.799514][T11254] CUSE: unknown device info "" [ 158.802328][T11254] CUSE: unknown device info "" [ 158.804339][T11254] CUSE: unknown device info "" [ 158.806371][T11254] CUSE: unknown device info "" [ 158.808297][T11254] CUSE: DEVNAME unspecified [ 158.811596][T11254] tmpfs: Bad value for 'mpol' [ 158.902766][ T1036] usb 11-1: USB disconnect, device number 3 [ 158.910789][ T1036] yurex 11-1:0.0: USB YUREX #0 now disconnected [ 159.194493][T11259] syz.7.1512 (11259): drop_caches: 2 [ 159.339065][T11268] x_tables: duplicate underflow at hook 1 [ 159.340325][T11269] IPVS: set_ctl: invalid protocol: 33 255.255.255.255:20003 [ 159.389822][T11234] CIFS: VFS: Error connecting to socket. Aborting operation. [ 159.396860][T11234] CIFS: VFS: cifs_mount failed w/return code = -4 [ 159.448584][T11280] overlayfs: failed to clone upperpath [ 159.477884][T11280] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1516'. [ 159.529793][ T42] audit: type=1400 audit(1786367051.346:9194): avc: denied { setopt } for pid=11290 comm="syz.7.1521" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 159.728860][ T42] audit: type=1400 audit(1786367051.546:9195): avc: denied { create } for pid=11315 comm="syz.6.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 159.737524][T11319] netlink: 'syz.0.1527': attribute type 5 has an invalid length. [ 159.825841][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1530'. [ 159.868545][ T42] audit: type=1400 audit(1786367051.686:9196): avc: denied { read } for pid=11335 comm="syz.6.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 159.926201][T11340] batadv_slave_0: Caught tx_queue_len zero misconfig [ 159.940038][T11345] MPI: mpi too large (16392 bits) [ 159.954258][T11345] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 159.991969][T11353] overlayfs: failed to clone upperpath [ 159.997354][ T42] audit: type=1400 audit(1786367051.816:9197): avc: denied { setopt } for pid=11350 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.010832][ T42] audit: type=1400 audit(1786367051.826:9198): avc: denied { connect } for pid=11350 comm="syz.0.1538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 160.034959][T11359] CIFS: enabling forceuid mount option implicitly because uid= option is specified [ 160.039261][T11359] CIFS mount error: No usable UNC path provided in device string! [ 160.039261][T11359] [ 160.043730][T11359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 160.068131][T11362] kvm: emulating exchange as write [ 160.128897][T11372] fuse: fd is not a fuse device [ 160.189834][ T42] audit: type=1400 audit(1786367052.006:9199): avc: denied { mount } for pid=11374 comm="syz.0.1545" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 160.582843][T11400] program syz.7.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.656191][T11405] bond1: (slave batadv0): Device is not bonding slave [ 160.658463][T11405] bond1: option active_slave: invalid value (batadv0) [ 160.662550][T11405] bond1 (unregistering): Released all slaves [ 160.797897][T11415] tipc: Started in network mode [ 160.799554][T11415] tipc: Node identity ac141441, cluster identity 4711 [ 160.805631][T11415] tipc: Enabled bearer , priority 10 [ 160.996851][T11425] syz_tun: left promiscuous mode [ 161.022728][T11425] dummy0: left promiscuous mode [ 161.068039][T11425] veth0_vlan: left promiscuous mode [ 161.107662][T11425] gretap2: left promiscuous mode [ 161.115982][T11425] bond6: left promiscuous mode [ 161.120164][T11425] vlan2: left allmulticast mode [ 161.121784][T11425] bond0: left allmulticast mode [ 161.126829][T11425] bond8: left promiscuous mode [ 161.128783][T11425] bond8: left allmulticast mode [ 161.131087][ T5878] lo speed is unknown, defaulting to 1000 [ 161.134739][ T5878] syz0: Port: 1 Link DOWN [ 161.160375][ T5779] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.164046][ T5779] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.167346][ T5779] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.171616][ T5779] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.200073][ T42] audit: type=1400 audit(1786367053.016:9200): avc: denied { write } for pid=11432 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.258172][ T42] audit: type=1400 audit(1786367053.076:9201): avc: denied { write } for pid=11437 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.351394][ T42] audit: type=1400 audit(1786367053.176:9202): avc: denied { write } for pid=11439 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 161.379473][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048827400: rx timeout, send abort [ 161.386851][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888048827400: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.713354][T11462] netlink: 'syz.5.1570': attribute type 7 has an invalid length. [ 161.920515][ T1036] tipc: Node number set to 2886997057 [ 162.033606][T11476] CIFS: Attempting to mount //127.0.0.1/share,ser=rojvK~ot [ 162.036645][T11476] CIFS: VFS: Error connecting to socket. Aborting operation. [ 162.039030][T11476] CIFS: VFS: cifs_mount failed w/return code = -101 [ 162.183378][T11491] overlayfs: failed to resolve './file0': -2 [ 162.201247][T11493] [U] [ 162.203203][T11493] [U] [ 162.204085][T11493] [U] [ 162.204980][T11493] [U] [ 162.206068][T11493] [U] [ 162.206946][T11493] [U] [ 162.207859][T11493] [U] [ 162.208756][T11493] [U] [ 162.213782][T11493] [U] [ 162.214707][T11493] [U] [ 162.215624][T11493] [U] [ 162.215917][T11491] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 162.216500][T11493] [U] [ 162.219900][T11491] overlayfs: failed to set xattr on upper [ 162.222156][T11493] [U] [ 162.223993][T11493] [U] [ 162.224817][T11491] overlayfs: ...falling back to redirect_dir=nofollow. [ 162.224896][T11493] [U] [ 162.227959][T11493] [U] [ 162.228350][T11491] overlayfs: ...falling back to index=off. [ 162.230820][T11491] overlayfs: ...falling back to uuid=null. [ 162.247263][T11492] [U] [ 162.271028][T11496] overlayfs: failed to resolve './cgroup': -2 [ 162.274067][T11496] overlayfs: failed to clone upperpath [ 162.279441][T11497] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=537 sclass=netlink_route_socket pid=11497 comm=syz.7.1584 [ 162.304438][T11500] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.304440][T11499] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.304461][T11499] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.307652][T11500] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.311015][T11499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.311120][T11499] IPv6: NLM_F_CREATE should be set when creating new route [ 162.311141][T11499] IPv6: NLM_F_CREATE should be set when creating new route [ 162.311153][T11499] IPv6: NLM_F_CREATE should be set when creating new route [ 162.311305][T11499] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.311339][T11499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.311398][T11499] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.311430][T11499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.311479][T11499] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.315104][T11500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.350768][T11499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.351186][T11500] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.353718][T11499] netlink: 'syz.0.1586': attribute type 21 has an invalid length. [ 162.356623][T11500] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.362081][T11499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 162.532660][T11516] netlink: 'syz.5.1591': attribute type 10 has an invalid length. [ 162.541835][T11516] team0: Port device veth0 added [ 162.590834][T11522] gadgetfs: bound to dummy_udc driver [ 162.809802][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.812527][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.825593][ T5779] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 162.899035][T11549] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11549 comm=syz.5.1600 [ 162.958744][T11552] __nla_validate_parse: 1 callbacks suppressed [ 162.958763][T11552] netlink: 220 bytes leftover after parsing attributes in process `syz.5.1600'. [ 163.021837][T11553] netlink: 'syz.5.1600': attribute type 1 has an invalid length. [ 163.050600][T11553] 8021q: adding VLAN 0 to HW filter on device bond4 [ 163.085880][T11559] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_team, syncid = 2, id = 0 [ 163.127402][T11561] 9p: Bad value for 'wfdno' [ 163.256147][T11565] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 163.262102][T11565] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 163.273350][T11565] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1606'. [ 163.279030][T11565] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1606'. [ 163.318615][T11567] ieee802154 phy1 wpan1: encryption failed: -22 [ 163.329949][T11567] support for the xor transformation has been removed. [ 163.380354][ T5740] Bluetooth: hci3: command 0x1003 tx timeout [ 163.380824][ T5726] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 163.583324][T11572] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1608'. [ 163.642328][T11578] netlink: 'syz.6.1610': attribute type 1 has an invalid length. [ 163.732021][T11584] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29473 sclass=netlink_route_socket pid=11584 comm=syz.0.1613 [ 163.800582][T11591] netlink: 124 bytes leftover after parsing attributes in process `syz.5.1614'. [ 163.822894][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 163.842600][T11593] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1616'. [ 163.864923][ T5806] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.868481][ T5806] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.873771][ T5806] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.882227][T11597] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1618'. [ 163.900299][ T5806] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 163.907150][T11601] binder: 11600:11601 ioctl c0c0583b 200000000700 returned -22 [ 163.909865][T11599] ip_tables: iptables: counters copy to user failed while replacing table [ 163.958852][T11602] binder: 11600:11602 ioctl c0306201 2000000003c0 returned -14 [ 163.958880][T11603] binder: 11600:11603 unknown command 0 [ 163.963237][T11603] binder: 11600:11603 ioctl c0306201 200000000000 returned -22 [ 164.112411][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 164.112435][ T42] audit: type=1400 audit(1786367055.936:9215): avc: denied { write } for pid=11611 comm="syz.5.1622" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.114652][T11612] random: crng reseeded on system resumption [ 164.117307][ T42] audit: type=1400 audit(1786367055.936:9216): avc: denied { ioctl } for pid=11611 comm="syz.5.1622" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 164.205568][ T42] audit: type=1400 audit(1786367056.026:9217): avc: denied { bind } for pid=11613 comm="syz.5.1623" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 164.274975][T11616] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 164.285189][ T42] audit: type=1400 audit(1786367056.106:9218): avc: denied { write } for pid=11613 comm="syz.5.1623" name="cluster" dev="configfs" ino=30 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 164.287130][T11617] pvfs2: Unknown parameter 'w^' [ 164.298557][ T42] audit: type=1400 audit(1786367056.106:9219): avc: denied { write } for pid=11613 comm="syz.5.1623" name="node" dev="configfs" ino=39107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 164.320179][ T42] audit: type=1400 audit(1786367056.106:9220): avc: denied { mounton } for pid=11613 comm="syz.5.1623" path="/232/config" dev="configfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 164.328238][ T42] audit: type=1800 audit(1786367056.126:9221): pid=11617 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1623" name="ipv4_address" dev="configfs" ino=39110 res=0 errno=0 [ 164.614119][T11628] overlayfs: failed to resolve './file2': -2 [ 164.661402][T11632] xt_hashlimit: size too large, truncated to 1048576 [ 164.661999][T11631] gtp0: entered allmulticast mode [ 164.867225][T11650] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11650 comm=syz.6.1634 [ 165.118434][T11660] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1639'. [ 165.330203][ T42] audit: type=1400 audit(1786367057.146:9222): avc: denied { write } for pid=11680 comm="syz.5.1645" path="socket:[38596]" dev="sockfs" ino=38596 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 165.384561][ T42] audit: type=1400 audit(1786367057.206:9223): avc: denied { bind } for pid=11682 comm="syz.5.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 165.493376][T11685] overlayfs: overlapping lowerdir path [ 165.560502][T11696] ieee802154 phy1 wpan1: encryption failed: -22 [ 165.630000][ T42] audit: type=1400 audit(1786367057.446:9224): avc: denied { listen } for pid=11702 comm="syz.7.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 165.689054][T11706] 9p: Could not find request transport: Rdma [ 165.726531][ T5726] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 165.738782][T11713] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.811930][T11713] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.929974][T11713] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 165.939201][T11738] omfs: Invalid superblock (0) [ 165.949420][T11738] CIFS: bad ip= option (.RHe'ˠ/1C~1WexEAeSb{~R) [ 165.962531][T11735] netlink: 88 bytes leftover after parsing attributes in process `syz.6.1660'. [ 166.043305][T11713] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 166.261066][ T5779] netdevsim netdevsim0 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.266508][ T5779] netdevsim netdevsim0 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.270054][ T5779] netdevsim netdevsim0 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.281636][ T5779] netdevsim netdevsim0 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.374224][T11756] fuse: fd is not a fuse device [ 166.426690][T11771] sctp: [Deprecated]: syz.0.1669 (pid 11771) Use of int in maxseg socket option. [ 166.426690][T11771] Use struct sctp_assoc_value instead [ 166.476220][T11779] CUSE: info not properly terminated [ 166.487938][T11781] cgroup2: Unknown parameter 'euid' [ 166.540897][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13 [ 166.575639][T11785] gadgetfs: bound to dummy_udc driver [ 166.662784][T11795] gfs2: not a GFS2 filesystem [ 166.787491][ T5440] 8021q: adding VLAN 0 to HW filter on device eth14 [ 166.910424][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 166.913536][T11811] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.931632][T11812] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 166.939632][T11811] IPv6: NLM_F_REPLACE set, but no existing node found! [ 167.034246][ T5440] 8021q: adding VLAN 0 to HW filter on device eth15 [ 167.216648][T11822] infiniband syz2: set active [ 167.218303][T11822] infiniband syz2: added veth0 [ 167.225951][T11822] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 167.229271][T11822] infiniband syz2: Couldn't open port 1 [ 167.234453][T11822] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 167.239133][T11822] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 167.244810][T11822] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 167.272710][T11822] RDS/IB: syz2: added [ 167.274847][T11822] smc: adding ib device syz2 with port count 1 [ 167.277904][T11822] smc: ib device syz2 port 1 has pnetid S (user defined) [ 167.282302][ T5440] 8021q: adding VLAN 0 to HW filter on device eth16 [ 167.378174][T11841] ref_ctr increment failed for inode: 0x290 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88802631d940 [ 167.384781][T11840] uprobe: syz.6.1685:11840 failed to unregister, leaking uprobe [ 167.425768][T11845] validate_nla: 3 callbacks suppressed [ 167.425787][T11845] netlink: 'syz.6.1686': attribute type 1 has an invalid length. [ 167.443586][T11845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 167.651760][ T6291] udevd[6291]: incorrect bcache checksum on /dev/loop0 [ 167.670585][T11851] zonefs (nullb1) ERROR: Not a zoned block device [ 167.830408][ T5779] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.833653][ T5779] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.836492][ T5779] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.839287][ T5779] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 167.845619][T11868] batadv_slave_1: entered promiscuous mode [ 167.857029][T11856] batadv_slave_1: left promiscuous mode [ 167.910019][T11875] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.915118][T11875] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 1th superblock [ 167.918191][T11875] F2FS-fs (nbd6): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 167.920962][T11875] F2FS-fs (nbd6): Can't find valid F2FS filesystem in 2th superblock [ 167.924455][T11877] netlink: 'syz.0.1697': attribute type 2 has an invalid length. [ 167.942950][T11875] bridge_slave_0: default FDB implementation only supports local addresses [ 167.988555][T11880] __nla_validate_parse: 41 callbacks suppressed [ 167.988572][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 167.996619][T11880] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=11880 comm=syz.0.1698 [ 168.052109][T11886] trusted_key: encrypted_key: hex blob is missing [ 168.128520][T11893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1703'. [ 168.165211][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=11897 comm=syz.0.1705 [ 168.169341][T11898] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1705'. [ 168.171241][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18953 sclass=netlink_route_socket pid=11897 comm=syz.0.1705 [ 168.177702][T11897] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=11897 comm=syz.0.1705 [ 168.203707][T11898] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1705'. [ 168.243417][T11904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1706'. [ 168.334933][T11913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2049 sclass=netlink_route_socket pid=11913 comm=syz.0.1707 [ 168.459337][T11915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 168.466216][T11915] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1708'. [ 168.927293][T11949] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1715'. [ 169.096440][T11956] netlink: 'syz.7.1719': attribute type 4 has an invalid length. [ 169.099661][T11956] netlink: 17 bytes leftover after parsing attributes in process `syz.7.1719'. [ 169.421323][T11976] overlayfs: failed to clone upperpath [ 169.512313][T11985] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1728'. [ 169.526521][T11985] bond2: Invalid ad_actor_system MAC address. [ 169.528504][T11985] bond2: option ad_actor_system: invalid value (65541) [ 169.533822][T11985] bond2 (unregistering): Released all slaves [ 169.999853][T12028] IPv6: NLM_F_CREATE should be specified when creating new route [ 170.045529][T12034] IPVS: set_ctl: invalid protocol: 58 10.1.1.1:20004 [ 170.078291][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 170.078317][ T42] audit: type=1400 audit(1786367061.896:9240): avc: denied { ioctl } for pid=12035 comm="syz.0.1743" path="socket:[42060]" dev="sockfs" ino=42060 ioctlcmd=0x8929 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 170.121328][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.128935][T12041] bridge_slave_0 (unregistering): left allmulticast mode [ 170.132406][T12041] bridge_slave_0 (unregistering): left promiscuous mode [ 170.134753][T12041] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.604101][ T42] audit: type=1400 audit(1786367062.426:9241): avc: denied { connect } for pid=12078 comm="syz.6.1753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 170.775734][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.309548][T12092] syzkaller0: entered allmulticast mode [ 171.343431][T12094] /dev/nullb0: Can't lookup blockdev [ 171.910937][ T5807] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 172.060741][ T5807] usb 10-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 172.065838][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 172.082019][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 172.085957][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 136, changing to 11 [ 172.089540][ T5807] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 8850, setting to 1024 [ 172.096183][ T5807] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.098820][ T5807] usb 10-1: Product: syz [ 172.100444][ T5807] usb 10-1: Manufacturer: syz [ 172.102188][ T5807] usb 10-1: SerialNumber: syz [ 172.106199][ T5807] usb 10-1: config 0 descriptor?? [ 172.317512][ T5807] adutux 10-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 172.533015][ T1036] usb 10-1: USB disconnect, device number 6 [ 172.647895][T12156] overlayfs: missing 'lowerdir' [ 173.209298][ T5726] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 173.288310][T12159] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.419106][T12159] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.504062][T12159] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.569288][T12159] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.770201][ T5806] netdevsim netdevsim5 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.841203][ T5806] netdevsim netdevsim5 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.844270][ T5806] netdevsim netdevsim5 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.847204][ T5806] netdevsim netdevsim5 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.895463][ T42] audit: type=1400 audit(1786367065.716:9242): avc: denied { write } for pid=12172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 173.944169][ T42] audit: type=1400 audit(1786367065.766:9243): avc: denied { write } for pid=12175 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.011848][ T5440] 8021q: adding VLAN 0 to HW filter on device eth17 [ 174.132372][ T42] audit: type=1400 audit(1786367065.946:9244): avc: denied { write } for pid=12186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.144776][ T42] audit: type=1400 audit(1786367065.966:9245): avc: denied { lock } for pid=12192 comm="syz.0.1784" path="socket:[44226]" dev="sockfs" ino=44226 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 174.160766][T12197] netlink: 'syz.6.1785': attribute type 1 has an invalid length. [ 174.198196][ T42] audit: type=1400 audit(1786367066.016:9246): avc: denied { write } for pid=12198 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.249985][ T5440] 8021q: adding VLAN 0 to HW filter on device eth18 [ 174.289573][ T42] audit: type=1400 audit(1786367066.106:9247): avc: denied { ioctl } for pid=12205 comm="syz.0.1787" path="socket:[43079]" dev="sockfs" ino=43079 ioctlcmd=0x61f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 174.347071][T12212] __nla_validate_parse: 3 callbacks suppressed [ 174.347089][T12212] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1788'. [ 174.367646][ T42] audit: type=1400 audit(1786367066.186:9248): avc: denied { mount } for pid=12205 comm="syz.0.1787" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 174.384041][ T42] audit: type=1400 audit(1786367066.196:9249): avc: denied { write } for pid=12209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 174.519431][ T5440] 8021q: adding VLAN 0 to HW filter on device eth19 [ 174.532448][T12232] netlink: 124 bytes leftover after parsing attributes in process `syz.0.1794'. [ 174.655065][T12247] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 174.665773][T12251] fuse: fd is not a fuse device [ 174.709703][T12247] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12247 comm=syz.6.1796 [ 174.754370][ T5440] 8021q: adding VLAN 0 to HW filter on device eth20 [ 174.946478][T12266] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.949312][T12266] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 1th superblock [ 174.955977][T12266] F2FS-fs (nbd5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 174.959208][T12266] F2FS-fs (nbd5): Can't find valid F2FS filesystem in 2th superblock [ 175.005214][T12274] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 175.037816][T12274] 8021q: adding VLAN 0 to HW filter on device bond9 [ 175.052214][T12272] bond6: entered allmulticast mode [ 175.054619][T12272] 8021q: adding VLAN 0 to HW filter on device bond6 [ 175.065106][T12274] vlan3: entered allmulticast mode [ 175.067353][T12274] bond9: entered allmulticast mode [ 175.085377][T12274] bond9: (slave geneve3): making interface the new active one [ 175.089835][T12274] geneve3: entered allmulticast mode [ 175.095689][T12280] netlink: 'syz.5.1803': attribute type 1 has an invalid length. [ 175.098654][T12274] bond9: (slave geneve3): Enslaving as an active interface with an up link [ 175.213485][T12292] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1807'. [ 175.217596][T12292] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 175.221745][T12292] netlink: 'syz.5.1807': attribute type 12 has an invalid length. [ 175.266752][T12293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1808'. [ 175.277425][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1808'. [ 175.287176][T12298] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1809'. [ 175.298947][T12293] nfs4: Bad value for 'source' [ 175.306486][T12299] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 175.617234][T12333] netlink: 'syz.0.1819': attribute type 322 has an invalid length. [ 175.644847][T12335] SELinux: security_context_str_to_sid (5] S9q#) failed with errno=-22 [ 175.693749][T12339] fuse: fd is not a fuse device [ 175.696522][T12339] Cannot find add_set index 3 as target [ 175.700505][ C3] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 175.792531][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 175.792587][ T42] audit: type=1804 audit(1786367067.616:9254): pid=12310 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.6.1812" name="/newroot/154/file0" dev="tmpfs" ino=849 res=1 errno=0 [ 175.858990][T12355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1826'. [ 175.914943][T12358] fuse: fd is not a fuse device [ 175.989522][ T9] IPVS: starting estimator thread 0... [ 176.080330][T12368] IPVS: using max 42 ests per chain, 100800 per kthread [ 176.295553][T12396] tmpfs: Bad value for 'mpol' [ 176.330278][T12366] input: syz0 as /devices/virtual/input/input24 [ 176.355053][T12399] overlayfs: failed to clone upperpath [ 176.501989][ C0] sr 2:0:0:0: [sr0] tag#19 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 176.505292][ C0] sr 2:0:0:0: [sr0] tag#19 CDB: Regenerate(16) 82 5a 86 a5 26 a3 50 1f b1 dd 8d ff 3e 90 d6 f5 [ 176.545679][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1844'. [ 176.549158][T12410] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1844'. [ 176.556191][T12412] fuse: Unknown parameter '' [ 176.638194][T12416] syzkaller0: entered promiscuous mode [ 176.640928][T12416] syzkaller0: entered allmulticast mode [ 176.711640][T12418] netlink: 'syz.6.1846': attribute type 5 has an invalid length. [ 176.718656][T12418] ip6erspan0: entered promiscuous mode [ 176.724292][T12418] netlink: 'syz.6.1846': attribute type 32 has an invalid length. [ 176.735997][T12418] bond2: option coupled_control: invalid value (110) [ 176.739562][T12418] bond2 (unregistering): Released all slaves [ 176.810872][T12421] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 176.889542][T12423] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.899179][ T42] audit: type=1400 audit(1786367068.716:9255): avc: denied { override_creds } for pid=12422 comm="syz.6.1848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 176.915168][T12427] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 176.978600][T12434] loop2: detected capacity change from 0 to 7 [ 176.991869][T12434] Dev loop2: unable to read RDB block 7 [ 176.994460][T12434] loop2: AHDI p1 p2 p3 [ 176.996344][T12434] loop2: partition table partially beyond EOD, truncated [ 177.007528][T12434] loop2: p1 start 1601398130 is beyond EOD, truncated [ 177.012464][T12434] loop2: p2 start 1702059890 is beyond EOD, truncated [ 177.019679][ T42] audit: type=1800 audit(1786367068.836:9256): pid=12440 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.1853" name="addr_trsvcid" dev="configfs" ino=43230 res=0 errno=0 [ 177.028507][ T42] audit: type=1400 audit(1786367068.846:9257): avc: denied { write } for pid=12439 comm="syz.5.1853" name="subsystems" dev="configfs" ino=36892 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 177.055710][ T42] audit: type=1400 audit(1786367068.876:9258): avc: denied { ioctl } for pid=12441 comm="syz.6.1854" path="/dev/input/mouse0" dev="devtmpfs" ino=945 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 177.235383][T12453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.251335][T12453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.472628][ T1036] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 177.600328][ T1036] usb 11-1: device descriptor read/64, error -71 [ 177.850463][ T1036] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 177.990234][ T1036] usb 11-1: device descriptor read/64, error -71 [ 178.028057][ T42] audit: type=1400 audit(1786367069.846:9259): avc: denied { write } for pid=12469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.092382][ T42] audit: type=1400 audit(1786367069.916:9260): avc: denied { write } for pid=12472 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.100592][ T1036] usb usb11-port1: attempt power cycle [ 178.450264][ T1036] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 178.481152][ T1036] usb 11-1: device descriptor read/8, error -71 [ 178.561061][T12481] bond7: entered promiscuous mode [ 178.565202][T12481] bond7: entered allmulticast mode [ 178.567661][T12481] 8021q: adding VLAN 0 to HW filter on device bond7 [ 178.578949][T12481] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 178.750414][ T1036] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 178.780736][ T1036] usb 11-1: device descriptor read/8, error -71 [ 178.842629][ T42] audit: type=1400 audit(1786367070.666:9261): avc: denied { write } for pid=12496 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 178.870936][ T42] audit: type=1400 audit(1786367070.696:9262): avc: denied { ioctl } for pid=12500 comm="syz.5.1870" path="/300/trace/trace" dev="tracefs" ino=1046 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 178.890397][ T1036] usb usb11-port1: unable to enumerate USB device [ 178.893378][T12502] ieee802154 phy1 wpan1: encryption failed: -22 [ 178.897655][T12502] comedi comedi2: unsupported base address 0x3ff [ 178.903043][ T42] audit: type=1800 audit(1786367070.706:9263): pid=12504 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1871" name="nullb0" dev="tmpfs" ino=195 res=0 errno=0 [ 179.051701][T12509] 9p: Unknown Cache mode or invalid value f [ 179.102301][T12511] netlink: 'syz.5.1873': attribute type 2 has an invalid length. [ 179.113606][T12511] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input25 [ 179.176382][T12511] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 179.196657][T12511] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.214460][T12511] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 179.236344][T12511] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.252595][T12511] 8021q: adding VLAN 0 to HW filter on device bond5 [ 179.422034][ T5726] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 179.435294][ T5726] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 179.493997][T12529] syzkaller1: entered promiscuous mode [ 179.496212][T12529] syzkaller1: entered allmulticast mode [ 179.531289][T12537] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 179.531316][T12538] netlink: 'syz.0.1877': attribute type 1 has an invalid length. [ 179.659252][T12548] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 180.477137][T12580] netlink: 'syz.0.1888': attribute type 1 has an invalid length. [ 180.608871][T12590] __nla_validate_parse: 7 callbacks suppressed [ 180.608889][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1891'. [ 180.616220][T12590] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1891'. [ 180.785529][T12599] bridge0: entered promiscuous mode [ 180.787497][T12599] bridge0: entered allmulticast mode [ 180.859233][T12605] overlayfs: failed to clone upperpath [ 180.925835][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 180.925852][ T42] audit: type=1400 audit(1786367072.746:9272): avc: denied { write } for pid=12606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.992693][ T42] audit: type=1400 audit(1786367072.816:9273): avc: denied { write } for pid=12611 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.432835][T12637] netlink: 'syz.0.1902': attribute type 1 has an invalid length. [ 181.448135][T12637] bond11: entered promiscuous mode [ 181.452824][T12637] 8021q: adding VLAN 0 to HW filter on device bond11 [ 181.463654][T12637] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.468148][T12637] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 181.482595][T12637] bond11: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 181.544496][T12639] bond11: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 181.548980][T12639] bond11: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 181.594249][ T42] audit: type=1400 audit(1786367073.416:9274): avc: denied { write } for pid=12645 comm="syz.5.1904" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 181.603985][T12646] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 181.681480][T12651] netlink: 'syz.5.1905': attribute type 39 has an invalid length. [ 181.715073][ T42] audit: type=1400 audit(1786367073.536:9275): avc: denied { setattr } for pid=12652 comm="syz.0.1906" path="socket:[43330]" dev="sockfs" ino=43330 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 181.902081][ T5740] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 181.906694][ T5740] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 181.917504][ T5740] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 181.924295][ T5740] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 181.927016][ T5740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 182.200379][T12670] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1910'. [ 182.206889][T12670] bond0: entered promiscuous mode [ 182.209814][T12670] bond_slave_0: entered promiscuous mode [ 182.214672][T12670] bond_slave_1: entered promiscuous mode [ 182.218902][T12670] gretap0: entered promiscuous mode [ 182.221515][T12670] debugfs: 'hsr0' already exists in 'hsr' [ 182.223409][T12670] Cannot create hsr debugfs directory [ 182.230567][T12670] hsr0: entered promiscuous mode [ 182.284639][T12673] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1912'. [ 182.317514][T12655] lo speed is unknown, defaulting to 1000 [ 182.570544][ T5977] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 182.584116][T12687] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12687 comm=syz.6.1914 [ 182.730244][ T5977] usb 10-1: Using ep0 maxpacket: 8 [ 182.741592][ T5977] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 182.752126][ T5977] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.756031][ T5977] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 182.761757][ T5977] usb 10-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 182.767265][ T5977] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 182.780226][ T5977] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 182.784262][ T5977] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.789340][ T5977] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.925487][T12655] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.928702][T12655] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.933232][T12655] bridge_slave_0: entered allmulticast mode [ 182.937574][T12655] bridge_slave_0: entered promiscuous mode [ 182.949229][T12655] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.952478][T12655] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.957913][T12655] bridge_slave_1: entered allmulticast mode [ 182.964091][T12655] bridge_slave_1: entered promiscuous mode [ 182.997948][T12655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.005260][T12655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 183.017398][ T5977] usb 10-1: GET_CAPABILITIES returned 0 [ 183.019665][ T5977] usbtmc 10-1:16.0: can't read capabilities [ 183.030538][ T42] audit: type=1400 audit(1786367074.846:9276): avc: denied { write } for pid=12706 comm="syz.6.1917" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 183.090963][T12655] team0: Port device team_slave_0 added [ 183.094826][T12655] team0: Port device team_slave_1 added [ 183.108116][T12712] x_tables: ip6_tables: TCPOPTSTRIP target: only valid for protocol 6 [ 183.119262][T12655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 183.121742][T12655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.130252][T12655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 183.135153][T12655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 183.137458][T12655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 183.146803][T12655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 183.186727][T12655] hsr_slave_0: entered promiscuous mode [ 183.189529][T12655] hsr_slave_1: entered promiscuous mode [ 183.192177][T12655] debugfs: 'hsr0' already exists in 'hsr' [ 183.194544][T12655] Cannot create hsr debugfs directory [ 183.437853][ T42] audit: type=1400 audit(1786367075.256:9277): avc: denied { write } for pid=12713 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.445915][T12655] netdevsim netdevsim0 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.525980][ T42] audit: type=1400 audit(1786367075.346:9278): avc: denied { write } for pid=12716 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.591916][T12718] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 183.593972][T12718] syzkaller1: Linktype set failed because interface is up [ 183.598709][T12718] btrfs: Unknown parameter 'discard2mפ' [ 183.601432][ T42] audit: type=1400 audit(1786367075.416:9279): avc: denied { mounton } for pid=12674 comm="syz.5.1911" path="/314/bus" dev="tmpfs" ino=1726 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 183.609571][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.627305][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.630576][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.633644][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.636564][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.639626][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.642926][ T42] audit: type=1400 audit(1786367075.466:9280): avc: denied { write } for pid=12719 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.651455][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.655436][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.658979][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.662663][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.666478][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.670337][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.686148][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.689410][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.693198][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.696970][ C1] usbtmc 10-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 183.718402][ T42] audit: type=1400 audit(1786367075.536:9281): avc: denied { write } for pid=12723 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 183.722182][T12655] netdevsim netdevsim0 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.836540][T12655] netdevsim netdevsim0 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.926088][T12655] netdevsim netdevsim0 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.021588][ T5726] Bluetooth: hci3: command tx timeout [ 184.229924][T12655] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 184.237187][T12655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 184.242292][T12655] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 184.248632][T12655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 184.253675][T12655] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 184.262173][T12655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 184.266686][T12655] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 184.275833][T12655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 184.359463][T12655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.375769][T12655] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.385244][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.388281][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.405269][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.408292][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.723129][T12655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.755283][T12655] veth0_vlan: entered promiscuous mode [ 184.761696][T12655] veth1_vlan: entered promiscuous mode [ 184.778241][T12655] veth0_macvtap: entered promiscuous mode [ 184.786217][T12655] veth1_macvtap: entered promiscuous mode [ 184.797873][T12655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.808738][T12655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.891061][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.896000][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.952035][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.955447][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.007217][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.011177][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.012775][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.021978][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.209553][T12793] netlink: 'syz.6.1924': attribute type 1 has an invalid length. [ 185.255757][T12793] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.287778][T12796] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.293720][T12796] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 185.297827][T12796] bond2: (slave gre1): Error -95 calling set_mac_address [ 185.348366][T12793] gretap1: entered promiscuous mode [ 185.359216][T12793] bond2: (slave gretap1): making interface the new active one [ 185.362492][T12793] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 185.436243][T12793] macvlan2: entered promiscuous mode [ 185.438083][T12793] macvlan2: entered allmulticast mode [ 185.445915][T12793] bond2: entered promiscuous mode [ 185.455718][T12793] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 185.468117][T12793] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 185.477137][ T1346] usb 10-1: USB disconnect, device number 7 [ 185.492280][T12793] bond2: left promiscuous mode [ 185.667081][T12827] xt_connbytes: Forcing CT accounting to be enabled [ 185.671246][ T5740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.684201][ T5740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.687292][ T5740] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.700219][ T5740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.703374][ T5740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 186.067689][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 186.067709][ T42] audit: type=1400 audit(1786367077.886:9302): avc: denied { write } for pid=12856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.100376][ T5726] Bluetooth: hci3: command tx timeout [ 186.129624][T12865] jffs2: notice: (12865) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 2 of xref (0 dead, 1 orphan) found. [ 186.165992][ T42] audit: type=1400 audit(1786367077.986:9303): avc: denied { write } for pid=12864 comm="syz.5.1938" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 186.169216][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.204688][ T42] audit: type=1400 audit(1786367077.986:9304): avc: denied { write } for pid=12866 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.233390][ T42] audit: type=1400 audit(1786367077.996:9305): avc: denied { getopt } for pid=12864 comm="syz.5.1938" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.250222][ T42] audit: type=1400 audit(1786367077.996:9306): avc: denied { ioctl } for pid=12864 comm="syz.5.1938" path="/319/file0/blkio.bfq.io_service_time_recursive" dev="jffs2" ino=3 ioctlcmd=0x565a scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 186.259274][T12829] lo speed is unknown, defaulting to 1000 [ 186.358293][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.379635][ T42] audit: type=1400 audit(1786367078.196:9307): avc: denied { write } for pid=12878 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.417591][T12877] lo speed is unknown, defaulting to 1000 [ 186.446034][T12889] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 186.453978][T12889] tmpfs: Unknown parameter 'usrquotae' [ 186.477516][ T42] audit: type=1400 audit(1786367078.296:9308): avc: denied { write } for pid=12888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.509914][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.643173][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.693809][T12903] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 186.699321][ T42] audit: type=1400 audit(1786367078.516:9309): avc: denied { write } for pid=12893 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.732951][T12906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1947'. [ 186.796389][ T42] audit: type=1400 audit(1786367078.616:9310): avc: denied { write } for pid=12908 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 186.862471][T12912] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2961764976 (5923529952 ns) > initial count (2430913814 ns). Using initial count to start timer. [ 186.934062][ T42] audit: type=1400 audit(1786367078.756:9311): avc: denied { write } for pid=12915 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 187.006612][ T12] bridge_slave_1: left promiscuous mode [ 187.014954][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.257557][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.270575][ T1478] usb 11-1: new full-speed USB device number 8 using dummy_hcd [ 187.293389][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.299947][ T12] bond0 (unregistering): Released all slaves [ 187.414330][ T1478] usb 11-1: device descriptor read/64, error -71 [ 187.462888][ T12] IPVS: stopping master sync thread 11559 ... [ 187.586724][T12829] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.589625][T12829] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.592599][T12829] bridge_slave_0: entered allmulticast mode [ 187.595705][T12829] bridge_slave_0: entered promiscuous mode [ 187.601468][T12829] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.611772][T12829] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.614790][T12829] bridge_slave_1: entered allmulticast mode [ 187.618053][T12829] bridge_slave_1: entered promiscuous mode [ 187.660966][ T1478] usb 11-1: new full-speed USB device number 9 using dummy_hcd [ 187.790439][ T1478] usb 11-1: device descriptor read/64, error -71 [ 187.790557][ T5726] Bluetooth: hci2: command tx timeout [ 187.856547][T12829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 187.865205][T12829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 187.911371][ T1478] usb usb11-port1: attempt power cycle [ 187.932626][T12829] team0: Port device team_slave_0 added [ 187.937386][T12829] team0: Port device team_slave_1 added [ 188.003802][ T5841] netdevsim netdevsim7 eth15: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.008822][ T5841] netdevsim netdevsim7 eth14: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.015305][T12829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.032708][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.041120][T12829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.045991][T12829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.048254][T12829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 188.056641][T12829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.123392][ T12] hsr_slave_0: left promiscuous mode [ 188.126890][ T12] hsr_slave_1: left promiscuous mode [ 188.129803][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.133630][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.140501][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.143387][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.154832][ T12] veth1_macvtap: left promiscuous mode [ 188.156787][ T12] veth0_macvtap: left promiscuous mode [ 188.159192][ T12] veth1_vlan: left promiscuous mode [ 188.163539][ T12] veth0_vlan: left promiscuous mode [ 188.190890][ T5726] Bluetooth: hci3: command tx timeout [ 188.270427][ T1478] usb 11-1: new full-speed USB device number 10 using dummy_hcd [ 188.290922][ T1478] usb 11-1: device descriptor read/8, error -71 [ 188.420862][ T12] team0 (unregistering): Port device team_slave_1 removed [ 188.435782][ T12] team0 (unregistering): Port device team_slave_0 removed [ 188.491992][ T37] smc: removing ib device syz2 [ 188.536836][ T5440] 8021q: adding VLAN 0 to HW filter on device eth13 [ 188.544392][ T5807] syz2: Port: 1 Link DOWN [ 188.550358][ T1478] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 188.553157][T12829] hsr_slave_0: entered promiscuous mode [ 188.557987][T12829] hsr_slave_1: entered promiscuous mode [ 188.560231][T12829] debugfs: 'hsr0' already exists in 'hsr' [ 188.562046][T12829] Cannot create hsr debugfs directory [ 188.583509][ T1478] usb 11-1: device descriptor read/8, error -71 [ 188.590152][ T13] netdevsim netdevsim7 eth16: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.591634][ T37] smbdirect: ib_dev[syz2] removed [ 188.592665][ T13] netdevsim netdevsim7 eth13: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.690431][ T1478] usb usb11-port1: unable to enumerate USB device [ 188.946617][ T5440] 8021q: adding VLAN 0 to HW filter on device eth14 [ 189.039399][T13006] netlink: 'syz.5.1966': attribute type 1 has an invalid length. [ 189.093001][T13006] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 189.214744][T13025] veth0_macvtap: Caught tx_queue_len zero misconfig [ 189.223855][T13029] tmpfs: Bad value for 'mpol' [ 189.239374][ T5440] 8021q: adding VLAN 0 to HW filter on device eth15 [ 189.346342][T12829] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 189.358513][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 189.363871][T12829] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 189.371553][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 189.374361][T12829] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 189.387283][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 189.390764][T12829] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 189.413572][T12829] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 189.465342][T13053] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1974'. [ 189.557962][T12829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.585807][T12829] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.597293][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.599733][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.617955][ T106] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.620363][ T106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.635431][ T5440] 8021q: adding VLAN 0 to HW filter on device eth16 [ 189.855515][T13078] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1977'. [ 189.872817][ T5726] Bluetooth: hci2: command tx timeout [ 189.987848][T12829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.209082][T12829] veth0_vlan: entered promiscuous mode [ 190.218001][T12829] veth1_vlan: entered promiscuous mode [ 190.249104][T12829] veth0_macvtap: entered promiscuous mode [ 190.256442][T12829] veth1_macvtap: entered promiscuous mode [ 190.260321][ T5726] Bluetooth: hci3: command tx timeout [ 190.271763][T12829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.279106][T12829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.356914][ T5841] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.367200][ T5841] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.387576][ T1163] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.390642][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.394296][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.397525][ T1163] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.509983][ T1163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.514264][ T1163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.569553][T13115] ipvlan0: entered promiscuous mode [ 190.574787][T13115] ipvlan0: entered allmulticast mode [ 190.582738][T13115] veth0_vlan: entered allmulticast mode [ 191.034551][T13154] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 191.039961][T13154] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1993'. [ 191.110708][T13159] xt_hashlimit: size too large, truncated to 1048576 [ 191.283335][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 191.283347][ T42] audit: type=1400 audit(1786367083.106:9333): avc: denied { append } for pid=13168 comm="syz.5.1999" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 191.334163][T13175] tmpfs: Unknown parameter 'mpol^' [ 191.525499][T13186] netlink: 'syz.5.2002': attribute type 11 has an invalid length. [ 191.528570][T13186] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2002'. [ 191.577950][ T42] audit: type=1400 audit(1786367083.396:9334): avc: denied { getopt } for pid=13187 comm="syz.5.2003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 191.680894][T13195] ceph: No mds server is up or the cluster is laggy [ 191.880781][ T5825] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 191.937001][T13203] CPU: 2 UID: 0 PID: 13203 Comm: syz.5.2007 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.937018][T13203] Tainted: [L]=SOFTLOCKUP [ 191.937021][T13203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.937056][T13203] Call Trace: [ 191.937077][T13203] [ 191.937081][T13203] dump_stack_lvl+0x100/0x190 [ 191.937111][T13203] hid_report_raw_event.cold+0xbd/0xf0 [ 191.937135][T13203] ? mark_held_locks+0x40/0x70 [ 191.937156][T13203] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.937171][T13203] ? lockdep_hardirqs_on+0x78/0x100 [ 191.937186][T13203] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.937200][T13203] __hid_input_report.constprop.0+0x349/0x470 [ 191.937255][T13203] uhid_char_write+0xb6b/0x10e0 [ 191.937275][T13203] vfs_write+0x2aa/0x1050 [ 191.937292][T13203] ? __pfx_uhid_char_write+0x10/0x10 [ 191.937309][T13203] ? __pfx_vfs_write+0x10/0x10 [ 191.937322][T13203] ? find_held_lock+0x2b/0x80 [ 191.937336][T13203] ? __fget_files+0x215/0x3d0 [ 191.937355][T13203] ? __fget_files+0x215/0x3d0 [ 191.937376][T13203] ? __fget_files+0x21f/0x3d0 [ 191.937391][T13203] ksys_write+0x1f8/0x250 [ 191.937402][T13203] ? __pfx_ksys_write+0x10/0x10 [ 191.937416][T13203] do_syscall_64+0x115/0x870 [ 191.937430][T13203] ? clear_bhb_loop+0x70/0xc0 [ 191.937445][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.937457][T13203] RIP: 0033:0x7f423d99e0d9 [ 191.937467][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.937477][T13203] RSP: 002b:00007f423bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.937497][T13203] RAX: ffffffffffffffda RBX: 00007f423dc26090 RCX: 00007f423d99e0d9 [ 191.937504][T13203] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000008 [ 191.937510][T13203] RBP: 00007f423da35024 R08: 0000000000000000 R09: 0000000000000000 [ 191.937517][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.937523][T13203] R13: 00007f423dc26128 R14: 00007f423dc26090 R15: 00007ffdb67f0e58 [ 191.937537][T13203] [ 191.950823][ T5740] Bluetooth: hci2: command tx timeout [ 191.951445][T13205] overlay: filesystem on ./file0 not supported as upperdir [ 191.955845][T13203] CPU: 2 UID: 0 PID: 13203 Comm: syz.5.2007 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.955863][T13203] Tainted: [L]=SOFTLOCKUP [ 191.955866][T13203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.955873][T13203] Call Trace: [ 191.955877][T13203] [ 191.955882][T13203] dump_stack_lvl+0x100/0x190 [ 191.955901][T13203] hid_report_raw_event.cold+0xbd/0xf0 [ 191.955919][T13203] ? mark_held_locks+0x40/0x70 [ 191.955933][T13203] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.955949][T13203] ? lockdep_hardirqs_on+0x78/0x100 [ 191.955964][T13203] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.955979][T13203] __hid_input_report.constprop.0+0x349/0x470 [ 191.956014][T13203] uhid_char_write+0xb6b/0x10e0 [ 191.956031][T13203] vfs_write+0x2aa/0x1050 [ 191.956042][T13203] ? __pfx_uhid_char_write+0x10/0x10 [ 191.956055][T13203] ? __pfx_vfs_write+0x10/0x10 [ 191.956064][T13203] ? find_held_lock+0x2b/0x80 [ 191.956074][T13203] ? __fget_files+0x215/0x3d0 [ 191.956086][T13203] ? __fget_files+0x215/0x3d0 [ 191.956099][T13203] ? __fget_files+0x21f/0x3d0 [ 191.956115][T13203] ksys_write+0x1f8/0x250 [ 191.956125][T13203] ? __pfx_ksys_write+0x10/0x10 [ 191.956139][T13203] do_syscall_64+0x115/0x870 [ 191.956154][T13203] ? clear_bhb_loop+0x70/0xc0 [ 191.956168][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.956180][T13203] RIP: 0033:0x7f423d99e0d9 [ 191.956190][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.956201][T13203] RSP: 002b:00007f423bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.956213][T13203] RAX: ffffffffffffffda RBX: 00007f423dc26090 RCX: 00007f423d99e0d9 [ 191.956219][T13203] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000008 [ 191.956226][T13203] RBP: 00007f423da35024 R08: 0000000000000000 R09: 0000000000000000 [ 191.956232][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.956238][T13203] R13: 00007f423dc26128 R14: 00007f423dc26090 R15: 00007ffdb67f0e58 [ 191.956252][T13203] [ 191.984182][T13207] netlink: 'syz.6.2008': attribute type 1 has an invalid length. [ 191.987882][T13203] CPU: 2 UID: 0 PID: 13203 Comm: syz.5.2007 Tainted: G L syzkaller #0 PREEMPT(full) [ 191.987918][T13203] Tainted: [L]=SOFTLOCKUP [ 191.987922][T13203] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 191.987930][T13203] Call Trace: [ 191.987934][T13203] [ 191.987939][T13203] dump_stack_lvl+0x100/0x190 [ 191.987958][T13203] hid_report_raw_event.cold+0xbd/0xf0 [ 191.987976][T13203] ? mark_held_locks+0x40/0x70 [ 191.987991][T13203] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 191.988006][T13203] ? lockdep_hardirqs_on+0x78/0x100 [ 191.988021][T13203] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 191.988037][T13203] __hid_input_report.constprop.0+0x349/0x470 [ 191.988056][T13203] uhid_char_write+0xb6b/0x10e0 [ 191.988070][T13203] vfs_write+0x2aa/0x1050 [ 191.988081][T13203] ? __pfx_uhid_char_write+0x10/0x10 [ 191.988094][T13203] ? __pfx_vfs_write+0x10/0x10 [ 191.988103][T13203] ? find_held_lock+0x2b/0x80 [ 191.988113][T13203] ? __fget_files+0x215/0x3d0 [ 191.988125][T13203] ? __fget_files+0x215/0x3d0 [ 191.988139][T13203] ? __fget_files+0x21f/0x3d0 [ 191.988154][T13203] ksys_write+0x1f8/0x250 [ 191.988164][T13203] ? __pfx_ksys_write+0x10/0x10 [ 191.988178][T13203] do_syscall_64+0x115/0x870 [ 191.988193][T13203] ? clear_bhb_loop+0x70/0xc0 [ 191.988207][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.988219][T13203] RIP: 0033:0x7f423d99e0d9 [ 191.988229][T13203] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.988239][T13203] RSP: 002b:00007f423bbf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 191.988251][T13203] RAX: ffffffffffffffda RBX: 00007f423dc26090 RCX: 00007f423d99e0d9 [ 191.988258][T13203] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000008 [ 191.988264][T13203] RBP: 00007f423da35024 R08: 0000000000000000 R09: 0000000000000000 [ 191.988270][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.988276][T13203] R13: 00007f423dc26128 R14: 00007f423dc26090 R15: 00007ffdb67f0e58 [ 191.988290][T13203] [ 192.191763][T13207] bond3: entered promiscuous mode [ 192.196711][T13207] 8021q: adding VLAN 0 to HW filter on device bond3 [ 192.208599][T13207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=13207 comm=syz.6.2008 [ 192.233307][ T42] audit: type=1400 audit(1786367084.056:9335): avc: denied { write } for pid=13214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.277401][ T42] audit: type=1400 audit(1786367084.096:9336): avc: denied { write } for pid=13217 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.384039][T13225] bond1: entered promiscuous mode [ 192.385717][T13225] bond1: entered allmulticast mode [ 192.387609][T13225] 8021q: adding VLAN 0 to HW filter on device bond1 [ 192.398529][T13225] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 192.493784][T13235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2012'. [ 192.540772][T13237] openvswitch: netlink: Missing valid actions attribute. [ 192.543444][T13237] openvswitch: netlink: Actions may not be safe on all matching packets [ 192.561506][T13240] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2013'. [ 192.745794][ T5726] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 192.819776][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 192.825373][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2017'. [ 192.828836][T13260] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2017'. [ 192.834136][T13260] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2017'. [ 192.946386][T13276] echo interval is out of bounds [ 192.946386][T13276] [ 192.949247][T13276] CIFS: VFS: echo interval is out of bounds [ 192.982306][T13281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=133 sclass=netlink_route_socket pid=13281 comm=syz.8.2016 [ 192.990044][T13281] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8224 sclass=netlink_route_socket pid=13281 comm=syz.8.2016 [ 193.063164][T13285] tipc: Enabling of bearer rejected, already enabled [ 193.294096][T13285] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 193.296818][T13299] tmpfs: Bad value for 'mpol' [ 193.335722][T13300] 9p: Bad value for 'rfdno' [ 193.336228][ T42] audit: type=1400 audit(1786367085.156:9337): avc: denied { create } for pid=13298 comm="syz.5.2026" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 193.341111][T13286] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 193.355133][ T42] audit: type=1400 audit(1786367085.176:9338): avc: denied { create } for pid=13298 comm="syz.5.2026" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 193.409933][T13303] netlink: 'syz.8.2027': attribute type 1 has an invalid length. [ 193.496370][T13303] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 193.499551][T13303] team0: Device ipvlan2 failed to register rx_handler [ 193.551820][T13286] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 193.681416][T13304] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 193.704997][T13304] team0: Device ipvlan2 failed to register rx_handler [ 193.725409][ T42] audit: type=1326 audit(1786367086.549:9339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13305 comm="syz.5.2028" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f423d99e0d9 code=0x0 [ 193.949448][T13329] vlan2: entered allmulticast mode [ 193.967461][T13333] netlink: 'syz.8.2035': attribute type 1 has an invalid length. [ 193.972422][T13333] netlink: 756 bytes leftover after parsing attributes in process `syz.8.2035'. [ 194.030562][ T5726] Bluetooth: hci2: command tx timeout [ 194.050212][ T50] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 194.210351][ T50] usb 11-1: Using ep0 maxpacket: 32 [ 194.213765][ T50] usb 11-1: New USB device found, idVendor=05ac, idProduct=0240, bcdDevice= 0.40 [ 194.218860][ T50] usb 11-1: config 1 interface 0 altsetting 211 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.223373][ T50] usb 11-1: config 1 interface 0 altsetting 211 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.227089][ T50] usb 11-1: config 1 interface 0 has no altsetting 0 [ 194.231997][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.235094][ T50] usb 11-1: Product: syz [ 194.236722][ T50] usb 11-1: Manufacturer: syz [ 194.238534][ T50] usb 11-1: SerialNumber: syz [ 194.274944][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.471868][ T42] audit: type=1400 audit(1786367087.299:9340): avc: denied { create } for pid=13320 comm="syz.6.2031" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.494709][ T50] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/input/input27 [ 194.513935][ T5123] bcm5974 11-1:1.0: could not read from device [ 194.523914][ T5123] bcm5974 11-1:1.0: could not read from device [ 194.543234][ T50] usb 11-1: USB disconnect, device number 12 [ 194.545124][ T5123] bcm5974 11-1:1.0: could not read from device [ 194.578766][T13356] autofs: Unknown parameter 'brNR5zjZ rЍBO w՗ SzЄvWgyb|߲ho2m erd+1' [ 194.585167][T13356] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 194.589215][T13356] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2040'. [ 194.608545][T13356] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2040'. [ 194.798119][T13367] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2043'. [ 194.867666][ T42] audit: type=1400 audit(1786367087.689:9341): avc: denied { setopt } for pid=13368 comm="syz.8.2045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 194.886152][ T42] audit: type=1400 audit(1786367087.709:9342): avc: denied { ioctl } for pid=13359 comm="syz.5.2042" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=50353 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 194.899126][T13360] netlink: 'syz.5.2042': attribute type 21 has an invalid length. [ 194.903123][T13360] netlink: 'syz.5.2042': attribute type 6 has an invalid length. [ 194.911629][T13373] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 195.028517][T13380] openvswitch: netlink: VXLAN extension message has 8 unknown bytes. [ 195.050908][T13375] kvm: kvm [13374]: vcpu0, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0 [ 195.102805][T13386] macvtap0: entered allmulticast mode [ 195.104979][T13386] veth0_macvtap: entered allmulticast mode [ 195.105506][T13388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=272 sclass=netlink_route_socket pid=13388 comm=syz.0.2051 [ 195.362844][T13400] netlink: 'syz.6.2054': attribute type 3 has an invalid length. [ 195.372133][T13400] netlink: 'syz.6.2054': attribute type 2 has an invalid length. [ 195.427072][T13402] fuse: Bad value for 'fd' [ 195.632356][T13413] hugetlbfs: Bad value for 'uid' [ 195.634437][T13413] hugetlbfs: Bad value for 'uid' [ 195.636974][T13413] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 195.881183][T13423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=52753 sclass=netlink_route_socket pid=13423 comm=syz.6.2063 [ 196.338304][T13442] overlayfs: failed to resolve './file7/file0': -2 [ 196.532057][T13451] netlink: 'syz.8.2071': attribute type 1 has an invalid length. [ 196.660794][T13455] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 196.667444][T13455] qnx6: wrong signature (magic) in superblock #1. [ 196.670396][T13455] qnx6: unable to read the first superblock [ 196.677239][T13455] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 196.682651][T13455] overlayfs: missing 'lowerdir' [ 196.734083][ T42] audit: type=1400 audit(1786367089.559:9343): avc: denied { bind } for pid=13456 comm="syz.8.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.745769][ T42] audit: type=1400 audit(1786367089.569:9344): avc: denied { listen } for pid=13456 comm="syz.8.2075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 196.782087][T13457] device-mapper: ioctl: Unable to rename non-existent device, to B [ 196.859451][T13460] fuse: Unknown parameter '000000000000000000000000x0000000000000003' [ 196.991353][T13467] xt_SECMARK: invalid mode: 2 [ 196.994527][ T42] audit: type=1400 audit(1786367089.809:9345): avc: denied { write } for pid=13466 comm="syz.8.2078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 197.058696][T13469] thunderbolt 0000:00:00.0: error -EINVAL: cannot obtain PCI resources, aborting [ 197.065396][T13469] thunderbolt 0000:00:00.0: probe with driver thunderbolt failed with error -22 [ 197.220899][ T42] audit: type=1400 audit(1786367090.049:9346): avc: denied { create } for pid=13474 comm="syz.8.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.228465][ T42] audit: type=1400 audit(1786367090.049:9347): avc: denied { read } for pid=13474 comm="syz.8.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 197.421412][T13484] syzkaller0: entered promiscuous mode [ 197.423848][T13484] syzkaller0: entered allmulticast mode [ 197.822187][T13495] __nla_validate_parse: 15 callbacks suppressed [ 197.822206][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2087'. [ 197.829092][T13495] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2087'. [ 197.857007][ T42] audit: type=1400 audit(1786367090.679:9348): avc: denied { create } for pid=13496 comm="syz.8.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 197.866025][ T42] audit: type=1400 audit(1786367090.679:9349): avc: denied { write } for pid=13496 comm="syz.8.2089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 198.012980][ T42] audit: type=1400 audit(1786367090.839:9350): avc: denied { write } for pid=13509 comm="syz.8.2093" name="functions" dev="configfs" ino=13132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 198.013229][T13510] Mass Storage Function, version: 2009/09/11 [ 198.038263][T13510] LUN: removable file: (no medium) [ 198.047846][T13510] [ 198.049208][T13510] ====================================================== [ 198.052405][T13510] WARNING: possible circular locking dependency detected [ 198.055340][T13510] syzkaller #0 Tainted: G L SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 198.058521][T13510] ------------------------------------------------------ [ 198.059921][ T42] audit: type=1400 audit(1786367090.879:9351): avc: denied { write } for pid=5712 comm="syz-executor" path="pipe:[7527]" dev="pipefs" ino=7527 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 198.061841][T13510] syz.8.2093/13510 is trying to acquire lock: [ 198.061855][T13510] ffff88802af8a450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 198.061917][T13510] [ 198.061917][T13510] but task is already holding lock: [ 198.061924][T13510] ffff88803c809920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 198.101264][T13510] [ 198.101264][T13510] which lock already depends on the new lock. [ 198.101264][T13510] [ 198.101274][T13510] [ 198.101274][T13510] the existing dependency chain (in reverse order) is: [ 198.101281][T13510] [ 198.101281][T13510] -> #4 (&common->filesem){+.+.}-{4:4}: [ 198.101332][T13510] lock_acquire+0x1b9/0x370 [ 198.101353][T13510] down_write+0x8b/0x1f0 [ 198.101369][T13510] fsg_store_file+0x193/0x450 [ 198.101383][T13510] configfs_write_iter+0x302/0x4e0 [ 198.101408][T13510] vfs_write+0x6ac/0x1050 [ 198.101418][T13510] ksys_write+0x12a/0x250 [ 198.101426][T13510] do_syscall_64+0x115/0x870 [ 198.101440][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.101452][T13510] [ 198.101452][T13510] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 198.101468][T13510] lock_acquire+0x1b9/0x370 [ 198.101483][T13510] down_read+0x99/0x4c0 [ 198.101498][T13510] configfs_read_iter+0x346/0x6f0 [ 198.101511][T13510] __kernel_read+0x397/0xad0 [ 198.101527][T13510] integrity_kernel_read+0x7e/0xb0 [ 198.101550][T13510] ima_calc_file_hash_tfm+0x25e/0x350 [ 198.101562][T13510] ima_calc_file_hash+0x1e3/0x380 [ 198.101573][T13510] ima_collect_measurement+0x94f/0xb30 [ 198.101585][T13510] process_measurement+0xdfe/0x2350 [ 198.101596][T13510] ima_file_check+0xc3/0x110 [ 198.101605][T13510] security_file_post_open+0xc4/0x210 [ 198.101624][T13510] path_openat+0x985/0x4280 [ 198.101636][T13510] do_file_open+0x20e/0x430 [ 198.101648][T13510] do_sys_openat2+0x10f/0x1e0 [ 198.101661][T13510] __x64_sys_openat+0x12d/0x210 [ 198.101676][T13510] do_syscall_64+0x115/0x870 [ 198.101694][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.101708][T13510] [ 198.101708][T13510] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 198.101730][T13510] lock_acquire+0x1b9/0x370 [ 198.101748][T13510] __mutex_lock+0x1a4/0x1bd0 [ 198.101767][T13510] configfs_read_iter+0x79/0x6f0 [ 198.101786][T13510] __kernel_read+0x397/0xad0 [ 198.101809][T13510] integrity_kernel_read+0x7e/0xb0 [ 198.101837][T13510] ima_calc_file_hash_tfm+0x25e/0x350 [ 198.101853][T13510] ima_calc_file_hash+0x1e3/0x380 [ 198.101869][T13510] ima_collect_measurement+0x94f/0xb30 [ 198.101886][T13510] process_measurement+0xdfe/0x2350 [ 198.101901][T13510] ima_file_check+0xc3/0x110 [ 198.101916][T13510] security_file_post_open+0xc4/0x210 [ 198.101939][T13510] path_openat+0x985/0x4280 [ 198.101954][T13510] do_file_open+0x20e/0x430 [ 198.101968][T13510] do_sys_openat2+0x10f/0x1e0 [ 198.101987][T13510] __x64_sys_openat+0x12d/0x210 [ 198.102008][T13510] do_syscall_64+0x115/0x870 [ 198.102029][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.102045][T13510] [ 198.102045][T13510] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 198.102069][T13510] lock_acquire+0x1b9/0x370 [ 198.102088][T13510] __mutex_lock+0x1a4/0x1bd0 [ 198.102109][T13510] ima_file_truncate+0xe6/0x190 [ 198.102125][T13510] security_file_truncate+0xf9/0x1e0 [ 198.102139][T13510] path_openat+0x3584/0x4280 [ 198.102154][T13510] do_file_open+0x20e/0x430 [ 198.102172][T13510] do_sys_openat2+0x10f/0x1e0 [ 198.102192][T13510] __x64_sys_openat+0x12d/0x210 [ 198.102211][T13510] do_syscall_64+0x115/0x870 [ 198.102231][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.102248][T13510] [ 198.102248][T13510] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 198.102279][T13510] check_prev_add+0xeb/0xe60 [ 198.102305][T13510] __lock_acquire+0x136c/0x1a40 [ 198.102327][T13510] lock_acquire+0x1b9/0x370 [ 198.102348][T13510] mnt_want_write+0x6f/0x410 [ 198.102364][T13510] path_openat+0xad9/0x4280 [ 198.102383][T13510] do_file_open+0x20e/0x430 [ 198.102401][T13510] file_open_name+0x1c3/0x3e0 [ 198.102423][T13510] filp_open+0x2e/0x50 [ 198.102444][T13510] fsg_lun_open+0x6b/0x7b0 [ 198.102464][T13510] fsg_store_file+0x1e7/0x450 [ 198.102482][T13510] configfs_write_iter+0x302/0x4e0 [ 198.102502][T13510] vfs_write+0x6ac/0x1050 [ 198.102516][T13510] ksys_write+0x12a/0x250 [ 198.102529][T13510] do_syscall_64+0x115/0x870 [ 198.102553][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.102571][T13510] [ 198.102571][T13510] other info that might help us debug this: [ 198.102571][T13510] [ 198.102577][T13510] Chain exists of: [ 198.102577][T13510] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 198.102577][T13510] [ 198.102614][T13510] Possible unsafe locking scenario: [ 198.102614][T13510] [ 198.102619][T13510] CPU0 CPU1 [ 198.102625][T13510] ---- ---- [ 198.102630][T13510] lock(&common->filesem); [ 198.102644][T13510] lock(&p->frag_sem); [ 198.102658][T13510] lock(&common->filesem); [ 198.102672][T13510] rlock(sb_writers#6); [ 198.102690][T13510] [ 198.102690][T13510] *** DEADLOCK *** [ 198.102690][T13510] [ 198.102695][T13510] 5 locks held by syz.8.2093/13510: [ 198.102705][T13510] #0: ffff8880253280f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 198.102754][T13510] #1: ffff8880241fe450 (sb_writers#18){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 198.102800][T13510] #2: ffff88802e307c80 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 198.102846][T13510] #3: ffff88805811c170 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 198.102895][T13510] #4: ffff88803c809920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 198.102941][T13510] [ 198.102941][T13510] stack backtrace: [ 198.102955][T13510] CPU: 3 UID: 0 PID: 13510 Comm: syz.8.2093 Tainted: G L syzkaller #0 PREEMPT(full) [ 198.102981][T13510] Tainted: [L]=SOFTLOCKUP [ 198.102988][T13510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 198.102999][T13510] Call Trace: [ 198.103007][T13510] [ 198.103015][T13510] dump_stack_lvl+0x100/0x190 [ 198.103040][T13510] print_circular_bug.cold+0x178/0x1c7 [ 198.103090][T13510] check_noncircular+0x146/0x160 [ 198.103110][T13510] ? __lock_acquire+0xd5b/0x1a40 [ 198.103136][T13510] check_prev_add+0xeb/0xe60 [ 198.103159][T13510] __lock_acquire+0x136c/0x1a40 [ 198.103183][T13510] ? try_to_unlazy+0x296/0x910 [ 198.103212][T13510] lock_acquire+0x1b9/0x370 [ 198.103233][T13510] ? path_openat+0xad9/0x4280 [ 198.103253][T13510] ? __pfx___might_resched+0x10/0x10 [ 198.103278][T13510] mnt_want_write+0x6f/0x410 [ 198.103298][T13510] ? path_openat+0xad9/0x4280 [ 198.103316][T13510] path_openat+0xad9/0x4280 [ 198.103339][T13510] ? __pfx_path_openat+0x10/0x10 [ 198.103357][T13510] ? kasan_save_stack+0x30/0x50 [ 198.103386][T13510] ? kasan_save_track+0x14/0x30 [ 198.103406][T13510] ? __kasan_slab_alloc+0x89/0x90 [ 198.103428][T13510] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 198.103448][T13510] ? do_getname_kernel+0x5d/0x250 [ 198.103468][T13510] ? filp_open+0x1d/0x50 [ 198.103488][T13510] ? fsg_lun_open+0x6b/0x7b0 [ 198.103506][T13510] ? fsg_store_file+0x1e7/0x450 [ 198.103528][T13510] do_file_open+0x20e/0x430 [ 198.103547][T13510] ? __pfx_do_file_open+0x10/0x10 [ 198.103574][T13510] ? rcu_is_watching+0x12/0xc0 [ 198.103604][T13510] file_open_name+0x1c3/0x3e0 [ 198.103626][T13510] ? __pfx_file_open_name+0x10/0x10 [ 198.103647][T13510] ? do_getname_kernel+0x5d/0x250 [ 198.103669][T13510] ? __asan_memcpy+0x3c/0x60 [ 198.103686][T13510] ? do_getname_kernel+0x1be/0x250 [ 198.103708][T13510] filp_open+0x2e/0x50 [ 198.103729][T13510] fsg_lun_open+0x6b/0x7b0 [ 198.103748][T13510] ? __pfx_down_read+0x10/0x10 [ 198.103775][T13510] fsg_store_file+0x1e7/0x450 [ 198.103796][T13510] configfs_write_iter+0x302/0x4e0 [ 198.103819][T13510] vfs_write+0x6ac/0x1050 [ 198.103834][T13510] ? __pfx_configfs_write_iter+0x10/0x10 [ 198.103856][T13510] ? __pfx_vfs_write+0x10/0x10 [ 198.103878][T13510] ksys_write+0x12a/0x250 [ 198.103893][T13510] ? __pfx_ksys_write+0x10/0x10 [ 198.103912][T13510] do_syscall_64+0x115/0x870 [ 198.103935][T13510] ? clear_bhb_loop+0x70/0xc0 [ 198.103955][T13510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.103973][T13510] RIP: 0033:0x7fe19379e0d9 [ 198.103988][T13510] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.104005][T13510] RSP: 002b:00007fe1919f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.104022][T13510] RAX: ffffffffffffffda RBX: 00007fe193a25fa0 RCX: 00007fe19379e0d9 [ 198.104034][T13510] RDX: 0000000000000005 RSI: 0000200000000f00 RDI: 0000000000000003 [ 198.104044][T13510] RBP: 00007fe193835024 R08: 0000000000000000 R09: 0000000000000000 [ 198.104054][T13510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.104064][T13510] R13: 00007fe193a26038 R14: 00007fe193a25fa0 R15: 00007ffdc8e1d1b8 [ 198.104080][T13510] [ 198.117272][T13510] mass_storage.usb0/lun.0: unable to open backing file: file0 [ 198.706881][ T12] bridge_slave_1: left allmulticast mode [ 198.709375][ T12] bridge_slave_1: left promiscuous mode [ 198.712104][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.716681][ T12] bridge_slave_0: left promiscuous mode [ 198.718959][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.758120][T12398] SELinux: failure in sel_netif_sid_slow(), invalid network interface (87) [ 198.819545][ T12] bond1 (unregistering): (slave erspan1): Releasing active interface [ 198.823362][ T12] erspan1 (unregistering): left promiscuous mode [ 198.866564][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.873564][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.877694][ T12] bond0 (unregistering): Released all slaves [ 198.881528][ T12] bond1 (unregistering): Released all slaves [ 198.886416][ T12] bond2 (unregistering): Released all slaves [ 198.891193][ T12] bond3 (unregistering): Released all slaves [ 198.896107][ T12] bond4 (unregistering): Released all slaves [ 198.901384][ T12] bond5 (unregistering): Released all slaves [ 198.906429][ T12] bond6 (unregistering): Released all slaves [ 198.911352][ T12] bond7 (unregistering): Released all slaves [ 198.999637][ T12] tipc: Disabling bearer [ 199.010288][ T12] tipc: Left network mode [ 199.219349][ T12] hsr_slave_0: left promiscuous mode [ 199.222224][ T12] hsr_slave_1: left promiscuous mode [ 199.224763][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.227855][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.231459][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.234315][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.240696][ T12] veth1_macvtap: left promiscuous mode [ 199.243284][ T12] veth0_macvtap: left promiscuous mode [ 199.245701][ T12] veth1_vlan: left promiscuous mode [ 199.247868][ T12] veth0_vlan: left promiscuous mode [ 199.307160][ T9] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 199.421298][ T12] team0 (unregistering): Port device team_slave_1 removed [ 199.427539][ T12] team0 (unregistering): Port device team_slave_0 removed [ 199.453498][ T12] team0 (unregistering): Port device veth0 removed [ 199.747755][ T12] IPVS: stop unused estimator thread 0... [ 199.966698][ T12] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.034590][ T12] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.083411][ T42] audit: type=1400 audit(1786367092.909:9352): avc: denied { write } for pid=13513 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.092599][ T12] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.177715][ T12] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.261868][ T8673] netdevsim netdevsim8 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.282936][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.286656][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.310549][ T8673] netdevsim netdevsim8 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.313748][ T8673] netdevsim netdevsim8 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.316811][ T8673] netdevsim netdevsim8 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.334968][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.339233][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.399007][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.405027][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.418733][ T5440] 8021q: adding VLAN 0 to HW filter on device eth21 [ 200.475227][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.479381][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.595920][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.610243][ T8673] netdevsim netdevsim6 eth28: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.613728][ T8673] netdevsim netdevsim6 eth27: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.616743][ T8673] netdevsim netdevsim6 eth26: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.619709][ T8673] netdevsim netdevsim6 eth25: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.656095][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.714693][ T5440] 8021q: adding VLAN 0 to HW filter on device eth22 [ 200.724550][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.796340][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.854614][ T5440] 8021q: adding VLAN 0 to HW filter on device eth23 [ 200.897638][ T8673] netdevsim netdevsim0 eth31: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.900784][ T8673] netdevsim netdevsim0 eth29: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.911551][ T12] bridge_slave_1: left allmulticast mode [ 200.914018][ T12] bridge_slave_1: left promiscuous mode [ 200.916530][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.922430][ T12] bridge_slave_0: left allmulticast mode [ 200.924886][ T12] bridge_slave_0: left promiscuous mode [ 200.927410][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.935747][ T12] bridge_slave_1: left allmulticast mode [ 200.938310][ T12] bridge_slave_1: left promiscuous mode [ 200.941595][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.947002][ T12] bridge_slave_0: left allmulticast mode [ 200.950843][ T12] bridge_slave_0: left promiscuous mode [ 200.953134][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.960388][ T12] bridge_slave_1: left allmulticast mode [ 200.962556][ T12] bridge_slave_1: left promiscuous mode [ 200.964800][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.969458][ T12] bridge_slave_0: left allmulticast mode [ 200.974009][ T12] bridge_slave_0: left promiscuous mode [ 200.976042][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.069499][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.078408][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.083267][ T12] bond0 (unregistering): Released all slaves [ 201.109894][ T12] gretap0 (unregistering): left promiscuous mode [ 201.114898][ T12] bond2 (unregistering): (slave gretap1): Releasing active interface [ 201.136410][ T12] bond0 (unregistering): left promiscuous mode [ 201.139163][ T12] bond_slave_0: left promiscuous mode [ 201.147917][ T12] bond_slave_1: left promiscuous mode [ 201.155417][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.161037][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.165970][ T12] bond0 (unregistering): Released all slaves [ 201.171519][ T12] bond1 (unregistering): Released all slaves [ 201.177061][ T12] bond2 (unregistering): Released all slaves [ 201.182325][ T12] bond3 (unregistering): Released all slaves [ 201.205773][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.211037][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.215464][ T12] bond0 (unregistering): Released all slaves [ 201.219502][ T12] bond1 (unregistering): Released all slaves [ 201.240309][ T8673] netdevsim netdevsim0 eth32: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.243083][ T8673] netdevsim netdevsim0 eth30: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.308272][ T12] tipc: Disabling bearer [ 201.310844][ T12] tipc: Left network mode [ 201.380063][ T5440] 8021q: adding VLAN 0 to HW filter on device eth24 [ 201.624604][ T5440] 8021q: adding VLAN 0 to HW filter on device eth25 [ 201.744106][ T12] hsr_slave_0: left promiscuous mode [ 201.746488][ T12] hsr_slave_1: left promiscuous mode [ 201.748727][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.751511][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.754779][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.757389][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.762339][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.765261][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.768377][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.771830][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.776264][ T12] hsr_slave_0: left promiscuous mode [ 201.778655][ T12] hsr_slave_1: left promiscuous mode [ 201.780990][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.783706][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.787078][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.790004][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.800356][ T12] veth1_macvtap: left promiscuous mode [ 201.802351][ T12] veth0_macvtap: left promiscuous mode [ 201.804352][ T12] veth1_vlan: left promiscuous mode [ 201.806231][ T12] veth0_vlan: left promiscuous mode [ 201.808633][ T12] veth1_macvtap: left promiscuous mode [ 201.811150][ T12] veth0_macvtap: left allmulticast mode [ 201.813064][ T12] veth0_macvtap: left promiscuous mode [ 201.815075][ T12] veth1_vlan: left promiscuous mode [ 201.816846][ T12] veth0_vlan: left promiscuous mode [ 201.819515][ T12] veth1_macvtap: left promiscuous mode [ 201.821849][ T12] veth0_macvtap: left promiscuous mode [ 201.824178][ T12] veth1_vlan: left promiscuous mode [ 201.826159][ T12] veth0_vlan: left promiscuous mode [ 201.969399][ T12] team0 (unregistering): Port device team_slave_1 removed [ 201.976659][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.065076][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.071626][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.162807][ T12] team0 (unregistering): Port device team_slave_1 removed [ 202.168654][ T12] team0 (unregistering): Port device team_slave_0 removed [ 202.227936][ T5440] 8021q: adding VLAN 0 to HW filter on device eth26 [ 202.293693][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 202.293712][ T42] audit: type=1400 audit(1786367095.119:9372): avc: denied { write } for pid=13576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.331838][ T42] audit: type=1400 audit(1786367095.159:9373): avc: denied { write } for pid=13579 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.367775][ T5440] 8021q: adding VLAN 0 to HW filter on device eth27 [ 202.430006][ T42] audit: type=1400 audit(1786367095.249:9374): avc: denied { write } for pid=13582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.462544][ T42] audit: type=1400 audit(1786367095.279:9375): avc: denied { write } for pid=13585 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.504226][ T5440] 8021q: adding VLAN 0 to HW filter on device eth28 [ 202.558332][ T42] audit: type=1400 audit(1786367095.379:9376): avc: denied { write } for pid=13588 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.593252][ T42] audit: type=1400 audit(1786367095.419:9377): avc: denied { write } for pid=13591 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.638122][ T5440] 8021q: adding VLAN 0 to HW filter on device eth29 [ 202.706280][ T42] audit: type=1400 audit(1786367095.529:9378): avc: denied { write } for pid=13594 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.744603][ T42] audit: type=1400 audit(1786367095.569:9379): avc: denied { write } for pid=13597 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.780488][ T5440] 8021q: adding VLAN 0 to HW filter on device eth30 [ 202.849516][ T42] audit: type=1400 audit(1786367095.669:9380): avc: denied { write } for pid=13600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.884413][ T42] audit: type=1400 audit(1786367095.709:9381): avc: denied { write } for pid=13603 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.915828][ T5440] 8021q: adding VLAN 0 to HW filter on device eth31 [ 203.043464][ T5440] 8021q: adding VLAN 0 to HW filter on device eth32 [ 203.158728][ T12] IPVS: stop unused estimator thread 0...