last executing test programs: 5m58.586663107s ago: executing program 32 (id=2210): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x0, 0x0, 0x0) setns(0xc9, 0x0) r0 = socket(0x3, 0x3, 0x3) recvfrom$inet(r0, 0x0, 0x0, 0xd728c9e33e723dbc, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff033}]}, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) r5 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x82802, 0x1ec541d9ca5bf1ef) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000080)={r6, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffe, 0x0, 0x1, 0x5, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x3, 0xa]}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe4000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, &(0x7f0000000240)="66baf80cb888e47382ef66bafc0c66b8000066ef66baf80cb8262a3689ef66bafc0cec0f08b9800000c00f3235000100000f30b958080000b851580f1dba000000000f3002e82edef566b8d9000f00d0c4e15161c0c4c1fd14c0", 0x5a}], 0x1, 0x692dddffb6eb4d80, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000080)}, 0x815) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f0000000300)={0x1, 0x0, [{0x9fe, 0x0, 0x7}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000007c0)="2e0f1da90000de1f65f30f185306660f383df466b8c3d2c8fe0f23d00f21f866352000000e0f23f80f20d86635080000000f22d8dd860078194400dd74edf01807", 0x41}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) pwritev(r3, &(0x7f0000000bc0)=[{&(0x7f0000000400)="d3ba816815cb11729263a5e1944e1fc5c79ac0aa3351afb0acbbb99733708d1b5a921ab135fe974bea8e91271b5e01420f72fb2990d4f71be09cf5f7d606404c90a892abd48619dfa99376f68c0f5a37e5376f7c85d32bf124ca7b8a70dd855113036848c4b8cd30f38e1149263dadaaf7d46842b46f0a24c185b52978ef117fc9852a75b3b0056d53c0614f94f8f98dcfe0d1adaccf61e2e204bec926e9cc44123ade470ab4c638", 0xa8}, {&(0x7f00000004c0)="ad7237162d6f22d6230e5cc059cf7cf6f387490eed6be57eb9f89574e734ff88bc3403a7cae17c94e4b0f18b0cb4680e2171ecec63d042899e760d6038fd00871d639fe8765d97528c3b643abe5eb9ac52a85918edbb386670beac52769aa8a196f751cce1ca3a19efa1b145d9b3f248beddc50d92f5784f8cef5eaf", 0x7c}, {&(0x7f0000000540)="a436618f2af076bae68815dc265d64c5329e0d5da06f739cd06e85251dbf3290973c9a741c8b2b0f36836022b9dc7550c77169c72cf5aa59006ce8154395d33ef773eeaa863ad90e3334a5f756a83130edff3cb1e7e856280777ea229c9710f30be69bb7051e905fd1a93301df8834366bcce397cf5a8338e4063055df053a780c9814fb50c9a61d5a65cb3c850ec86cf6e48ef26896ea44769dfd7092bca8", 0x9f}, {&(0x7f0000000600)="2d0c61c3264cd59345d21f66b0c9864701cb65025055c21a8c24adbfefd7103e3731e5bab11db2bf4378e6aa5833d158412868e962d0920036ed00ec70b308af67480b955a8d1bab71f33ff3077312d968e615d92ccd237a6df68cfa36072183beddd42d2c10a7e117deb37e6d6c59905bff530022abba7a208d6093c53dfd22d33121", 0x83}, {&(0x7f00000006c0)="eb068b943c86c6981082ce3c1cf046ad784c4e72944b401a325bbf898df38f6b0434be98c6f0518dd62ae37bc5e1cdf4bf68333c434136c257085d3ef4f65b5252984ce13d7c3406ebe2eddb0395c7230ba52f4de1881baa2df7dc3dceb491f2b469da5b47", 0x65}, {&(0x7f0000000880)="037d76994d64cd0e661e1d996d799cdab51d223c9c5f6a53862a0d089553415e5d72733e8b2a4951c189434a3f732711191b40fa5835e322026ee9ed0690c4ada037280475f7f59064bd740ab11fafd4e0448f5756d80c38f4a05cf746cf6967a690f97535777bd9471441e5db74f38f3046dd0fb1f755c0b2d36bf903406344289370ab41a46fb5af1dee7716b07ff48abd2f4375b0977537f5df5a4cbf4c718fa67cec1fdda1a7d6aab2dd0bd62e682e08d39a1de6", 0xb6}, {&(0x7f0000000940)="1afe944b483e89d90f21cc1c836cdef7f4926ebdf68ff5c337ba0e6c3c9bb37cd4445a99a80668606465fead67932bc1d7bd69a0700ccc42865609662fa5fea66bc7e92a57d9e21b96bf0833790e925f9d7f1df11b42c62af127fcd4267200430b1674419ea98ad9f2ce0924f38872ca714ca99fa6474d45f829785d1c891afaf58a22d274aa93defcb20f54dc6dc72833c4c9f24109d046b53279ce1c", 0x9d}, {&(0x7f0000000a00)="2ffafa18798ca6b96f36f8ed401d82d6f111eeb3ef0363ebd39c5a395cc3506c8ce6614c8b3d79d631124212024c18db3ef819b9f217748360c45565f3c12275f396d4216ee3504dcbe5982cd88129756ee3df47bd725421f6ef8781796abd52479df2d1124a404297efe97449b44dda0b118a8f824f5f0d97edf5fa489313c00fd245ed2b63e9861f360e0e8ee7552e9c62a5ed5fe5048b34968767eecc7e314c6cf9f067081d4e10c273f9addd1e4af5de5c356b720b3edb204cfcc2e412c61e35450e42a818f10e6deddda11b326877475ab5786101923730c3007f45da0a16528a25d4ac322f32d42d0e243f94bf2a436cabee", 0xf5}, {&(0x7f0000000b00)="bb3a81c4e6cf2231028e0bcdc2f80c4ebc4e80dd9b2b7b6e13c96773b55341c3dcacd3585893a4ade3faa742f54d61d65e12278582ad85dab0d726d4739d5795172c6b78f5244f86c52bffaa7da0b8abac643a4d5b8326dfeafd48f4d143c495dc223b70391075cad2662aafb12519e41a6c24fffc53b2d2942c7966c4a17a871fa6a0e0c9096721450514", 0x8b}], 0x9, 0x8, 0x3) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r9 = syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000380)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r9], 0x1}, 0x58) 5m52.413124481s ago: executing program 33 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf042bbc7000fddbdf251200000008000300", @ANYRES32=r2, @ANYBLOB="0a000600080211000001000008001400", @ANYRES8=r1], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) 5m46.089649485s ago: executing program 34 (id=2304): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x1c, r0, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) (fail_nth: 6) 5m14.543337769s ago: executing program 35 (id=2468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x149540, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000001c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x31}, 0x80, &(0x7f00000000c0)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 4m50.961979705s ago: executing program 36 (id=2721): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0xe, 0x4, 0x2b0, 0xffffffff, 0x0, 0xe8, 0x180, 0xffffffff, 0xffffffff, 0xe8, 0x180, 0x218, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x4000, 0x0, 0x6, 0x0, @rand_addr=0x64010102, @broadcast}, {{0xfffc, 0x20, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0x0, 0x0, 0x8}}}}}}, 0x0) 4m37.978902146s ago: executing program 37 (id=2977): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0xc080) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000380), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8b924e6f917ab21f}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r2, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x888) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_SSID={0xa, 0x34, @random="9ac2e0d7c50fef8ece253a06facc760c6aa27f274a9c666dc839"}]}, 0xfffffd17}}, 0xc00) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, r4, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x74, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xf9779d35a700828f}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0x25dfdbff, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x1, 0x1, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4094) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000004c0)={@broadcast, @remote, 0x0}, &(0x7f0000000500)=0xc) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x54, 0x0, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x54}}, 0x24044800) 3m21.480881754s ago: executing program 38 (id=4203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000280)='hfsplus\x00', 0x442, 0x0) (async, rerun: 32) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000040)=0x100000001, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000440)=@IORING_OP_FILES_UPDATE={0x14, 0x23, 0x0, 0x0, 0x6, &(0x7f0000000540)=[r0, 0xffffffffffffffff, r0, 0xffffffffffffffff, r0, r0, r0, r0, 0xffffffffffffffff], 0x9}) (async) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000300)={0xffffffffffffffff, 0x1, {0x0, 0x0, 0x0, 0x1, 0x4385, 0x0, 0x4, 0xe, 0x4, "bccf41ecb7fa5186a4e15927126af61476ca0b9cd4152f2757808c54357cbf53e9d5702cf52342212b9186b0375c8f3ce5c133415405884f8036e825a5febdf0", "ea17cdb15d6d78051ac0882cc163fc19417aad22008ed13224e3d770a1ecff392724e95530caaf125bdded2cf277f5abe58dd3f1dedf7f3b57b9f56fa0205890", "414551b6dfcb524d8ac26ca42b206c794ca2a8c64dffba900558f579fadfa67f", [0x8, 0x9]}}) (async) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x406, r0) (async) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000200)="1c0000001a009b8a070000003b9b701f400004000000eb3f7a7f1de2", 0x1c) (async) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x4000) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r3, &(0x7f00000013c0)=""/15, 0xf, 0x404) (async, rerun: 32) syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), r1) (async, rerun: 32) write$binfmt_format(r1, &(0x7f0000000240)='-1\x00', 0x3) r4 = socket(0x10, 0x3, 0x0) (async) r5 = socket$inet(0x2, 0x80001, 0x84) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x44880, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (async) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r6, 0x4068aea3, &(0x7f0000000040)) (async) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000580)={0x3, 0x0, [{0x5, 0x3, 0x1, 0x0, @irqchip={0x8b, 0xce4}}, {0x800, 0x5, 0x0, 0x0, @adapter={0xceb000000, 0x9, 0x4, 0x8, 0x401}}, {0xb72, 0x1, 0x1, 0x0, @msi={0xe2, 0x0, 0x9, 0x7}}]}) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000140)={r7, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r7, 0x1e}, &(0x7f0000000100)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/filehandle\x00', 0x2, 0x0) syz_fuse_handle_req(r8, &(0x7f0000000780)="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", 0x2000, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='minix\x00', 0x200013, 0x0) (rerun: 32) 3m0.142207317s ago: executing program 39 (id=4628): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="01002abd7000000000006b00000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 2m44.190586768s ago: executing program 6 (id=4919): keyctl$session_to_parent(0x12) (async) keyctl$session_to_parent(0x12) (async) r0 = socket$pptp(0x18, 0x1, 0x2) (async) keyctl$session_to_parent(0x12) r1 = dup2(r0, r0) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x6}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6}]}, @NL80211_ATTR_HANDLE_DFS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4041861}, 0x4800) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) setns(r1, 0x0) r3 = syz_clone(0x60000000, &(0x7f0000000140)="06ad796d7e983e65d25fa81a770c332a01f87f20bf155dc3b994a7c7c1b9bded6a2e96a731d7f09cb384e093ef9985daa27cb6d3d760b751c678b5e67015e411b02912ab0b81c7ba2539e277fbb5bd4152ebde2de649863742ed120fde60bd3fecd249219e90befada99f849e19e839f0414b1b7b02212b85c24164b4e5b4927a4fb7a2206369936310a599774ce510ab60f9a197acbfcd1b62ff5da557fe2dce8ca432ccc6121c678ef4aa8055a1987ac04dc69e465e9e386a5389a02540f4d7deede", 0xc3, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)="74ead5dc47af5f224b916ae4b16964d5e2f4fbc96e") (async) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000340)=0x14) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r5 = syz_clone(0x16000, &(0x7f0000000380)="76eee58ff0b52c956d08c73af1503ed32f8e2f0c6874addadad2483b31db52034ccb8602039baf763866c640b6c83a1f32e7d125be46420db2876a66cd4946a13fc64590e622153d85aee45583164a5a10e0d0bc33196cb7db25887a7f464aa647f4ea6cfe57f38878cb8ea6944ef642a612df78f89fb23a21d315092bb0c578c7576bc7e0b79b8cf028b53ea1af66ecb61bb75f8d85bb68b3fe4d6cfe86f2d3867149e62e6273bcaffcc2d9923cbe4afbe443b621d39fe947c60062e5", 0xbd, &(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0)="38d271a0f40ca4c26b1efafb3d1a68bf594cdbd2a2a85bcff783913edebb7d6ed4c06dea470e677d2adf163e6afe23267c33908292ff9744e5ec5df1431ec89408fe32088f9d4a47528ba17869610f5e7cc970ffffb9a8ea6428a5fa50abb04095f634a29912c10738cf53e064e6e64ce2bd741f86ababe82b1eac7d02d3a4c78db2c8211cebd9c99e591dd7f5f364ae3b3ce51174fbc408a02f39ad5fb71d178d4a29b2b2aa1dad853094") sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000600)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) getsockname$packet(r1, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000680)=0x14) (async) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f00000006c0)={0x9, 0xa, {r5}, {0xee01}, 0x7fffffffffffffff, 0x1}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000700)={{{@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e22, 0x401, 0x4e21, 0x9, 0xa, 0x80, 0x80, 0x31, r4, r7}, {0x4, 0x5, 0x4, 0x0, 0x4, 0xfffffffffffffff9, 0x100000000, 0x6f6}, {0x4, 0x10000, 0x6, 0x9}, 0x4, 0x0, 0x0, 0x1, 0x2, 0x2}, {{@in=@broadcast, 0x4d4, 0x3c}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x2, 0x80, 0x10000, 0x7fffffff, 0x1}}, 0xe8) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000000, 0x13, r1, 0xebe4a000) (async) keyctl$session_to_parent(0x12) (async) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000800)={@remote, @private=0xa010100, r6}, 0xc) (async) process_vm_readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000840)=""/39, 0x27}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/34, 0x22}, {&(0x7f0000000980)=""/123, 0x7b}, {&(0x7f0000000a00)=""/18, 0x12}, {&(0x7f0000000a40)=""/193, 0xc1}], 0x6, &(0x7f0000002080)=[{&(0x7f0000000bc0)=""/157, 0x9d}, {&(0x7f0000000c80)=""/154, 0x9a}, {&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000001d40)=""/211, 0xd3}, {&(0x7f0000001e40)=""/173, 0xad}, {&(0x7f0000001f00)=""/128, 0x80}, {&(0x7f0000001f80)=""/244, 0xf4}], 0x7, 0x0) (async) syz_open_dev$mouse(&(0x7f0000002100), 0x4, 0x80) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADD(r9, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002240)={&(0x7f00000021c0)={0x64, r10, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @local}, @NLBL_UNLABEL_A_SECCTX={0x29, 0x7, 'system_u:object_r:policy_config_t:s0\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x44}, 0x20004011) (async) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000022c0)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x2}) (async) add_key$fscrypt_v1(&(0x7f0000002300), &(0x7f0000002340)={'fscrypt:', @desc3}, &(0x7f0000002380)={0x0, "ab9bd3f65e294ddbc01ce158dae815c9c7d22d4863e714216e5931deeaff42f3dc480a37aeebe51416bb6d86136e5b9d109527a065d39128323c7f30509c4456", 0x40}, 0x48, 0x0) (async) ioctl$UFFDIO_POISON(r1, 0xc020aa08, &(0x7f0000002400)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x40, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @broadcast}, @FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010102}, @FOU_ATTR_PEER_V4={0x8, 0x8, @dev={0xac, 0x14, 0x14, 0xe}}, @FOU_ATTR_IPPROTO={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4080}, 0x40) 2m43.502385635s ago: executing program 6 (id=4921): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80, 0x80800) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) (async) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x7, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_POSITION_ID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000800) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r2) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) (async) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r1) sendmsg$GTP_CMD_DELPDP(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48844}, 0x200400c0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000340)={0x0, 0xfee6}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000003c0)={r4}, &(0x7f0000000400)=0x8) r5 = socket(0x21, 0x1, 0x3) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x110, r6, 0x10, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'ip_vti0\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "e234ffe72f15490ac4627f5f1bac0c5aca6f67316a37913c"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "4df1d6837bb1551f7ed58c0301036f9e800a3b1b423b081b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x9eee5f2e8bdd6387}, 0xc004) bind$bt_l2cap(r0, &(0x7f00000006c0)={0x1f, 0x80, @none, 0x8001, 0x1}, 0xe) (async) bind$bt_l2cap(r0, &(0x7f00000006c0)={0x1f, 0x80, @none, 0x8001, 0x1}, 0xe) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r1, 0x8982, &(0x7f0000000700)={0x0, 'sit0\x00', {0x2}}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)=0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r9, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x99}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x54}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x299}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) (async) sendmsg$NFC_CMD_LLC_SET_PARAMS(r8, &(0x7f00000008c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x3c, r9, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x99}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x54}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x299}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000940), r2) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r12, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4040815) (async) sendmsg$BATADV_CMD_GET_HARDIF(r2, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x54, r12, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x101}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x10}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x4040010}, 0x4040815) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000b80)={@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x3, 0x0, 0x4, {0xa, 0x4e20, 0x8, @private1, 0x2}}}, {&(0x7f0000000a80)=""/181, 0xb5}, &(0x7f0000000b40), 0x78}, 0xa0) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000b80)={@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x0, 0x3, 0x0, 0x4, {0xa, 0x4e20, 0x8, @private1, 0x2}}}, {&(0x7f0000000a80)=""/181, 0xb5}, &(0x7f0000000b40), 0x78}, 0xa0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000cc0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000d00)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000d00)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r13, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r14, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) (async) sendmsg$NFC_CMD_DEV_DOWN(r13, &(0x7f0000000dc0)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x3c, r14, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r15}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r16}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008050) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000ec0)={0x0, 0x1, 0xe, 0xf04, @vifc_lcl_ifindex=r17, @broadcast}, 0x10) 2m43.500954521s ago: executing program 6 (id=4922): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000fffe01050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2m43.36161896s ago: executing program 6 (id=4923): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0xd, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x6, 0x0, 0x6}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc084}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60000, 0x156) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$peekuser(0x3, r4, 0x8) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000004340)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_sample={0x34, 0x12, 0x0, 0x0, {{0xb}, {0x4}, {0x6, 0x6, "9030"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x34) 2m43.310940387s ago: executing program 6 (id=4925): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000063d82600010000010100005566778899aabb0800450000140000000001ea0000010203040506070800000c0002000600060086ddffff0c0003"], 0x58}}, 0x0) 2m42.970128788s ago: executing program 6 (id=4932): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r3, 0x5411, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x1b}, './file1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r7, &(0x7f0000000000)="99b045fc99", 0x5) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0xa, 0x8, 0x8, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffc0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xff, 0x25, &(0x7f0000000440)=""/37, 0x41000, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x20cff, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0x1, 0x1, r5, r6, r5, r7], 0x0, 0x10, 0x1e9a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x88}, [@ldst={0x7, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) 2m42.859695574s ago: executing program 40 (id=4932): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x3, 0x81, 0xffffffff}) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000880)=0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setns(0xc9, 0x0) r3 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r3, 0x5411, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25ffdbfc, {0x0, 0x0, 0x0, r2, {0x4, 0xa}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x40200, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x1b}, './file1\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000002c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)='%-010d \x00'}, 0x20) r7 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r7, &(0x7f0000000000)="99b045fc99", 0x5) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x13, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x7, 0x1, 0xa, 0x8, 0x8, 0x50, 0xfffffffffffffff0}, @ldst={0x1, 0x0, 0x2, 0x8, 0x0, 0xffffffffffffffc0, 0x4}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xff, 0x25, &(0x7f0000000440)=""/37, 0x41000, 0x20, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x20cff, 0xffffffffffffffff, 0x0, &(0x7f00000006c0)=[0x1, 0x1, 0x1, r5, r6, r5, r7], 0x0, 0x10, 0x1e9a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x7, 0x0, 0x0, 0x0, 0x63, 0x11, 0x88}, [@ldst={0x7, 0x0, 0x3}]}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r8}, 0x94) 2m34.310077581s ago: executing program 7 (id=5006): ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f512, &(0x7f0000000000)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x20000000) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000180)={0x6, 0x7ff, 0x8, 0x3, 0x5, 0x2, 0x1, 0x5}, &(0x7f00000001c0)={0x1, 0x10, 0x3ff, 0xb6, 0x8, 0x2, 0x1, 0x80000000}, &(0x7f0000000200)={0x2, 0x6, 0x8, 0x3, 0x2000, 0x101, 0x8, 0xfff}, &(0x7f0000000280)={r2, r3+60000000}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x2]}, 0x8}) clock_gettime(0x0, &(0x7f00000023c0)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000002280)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)=""/217, 0xd9}, {&(0x7f0000000440)=""/174, 0xae}, {&(0x7f0000000500)=""/27, 0x1b}, {&(0x7f0000000540)=""/32, 0x20}], 0x4, &(0x7f00000005c0)=""/134, 0x86}}, {{&(0x7f0000000680)=@l2tp={0x2, 0x0, @initdev}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/126, 0x7e}, {&(0x7f0000000780)}], 0x2}, 0x42}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000800)=""/12, 0xc}, {&(0x7f0000000840)=""/26, 0x1a}, {&(0x7f0000000880)=""/255, 0xff}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/212, 0xd4}, {&(0x7f0000000b00)=""/12, 0xc}, {&(0x7f0000000b40)=""/4096, 0x1000}], 0x7}, 0x401}, {{&(0x7f0000001bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/75, 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000001d00)=""/106, 0x6a}, {&(0x7f0000001d80)=""/237, 0xed}, {&(0x7f0000001e80)=""/216, 0xd8}, {&(0x7f0000001f80)=""/127, 0x7f}, {&(0x7f0000002000)=""/218, 0xda}], 0x5, &(0x7f0000002180)=""/219, 0xdb}, 0xffffffff}], 0x5, 0x20, &(0x7f0000002400)={r4, r5+10000000}) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x28, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bridge_slave_1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0xc841}, 0x20008000) sendto(r0, &(0x7f0000002540)="19860186dcae221e2a93f664f2ecf527e2ae512cee981c1ba1ed31928015373e99f9ebbdf0e5d7b1884de11951fe32cfa6462967e69bfa71be84a01734bada61408113e2bee0c4130ba3dc8de42d8deb1f94d4e2dfe6f9bbedd7c69f2076a3e1a9281479b3302e2dbbc7417455454399546288ff4f6e0602eb370d977dd29868109fd5bb3cffd2d139e70c840eed", 0x8e, 0x10, &(0x7f0000002600)=@un=@file={0x0, './file0\x00'}, 0x80) socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000002680)={{{@in=@empty, @in=@empty}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000002780)=0xe8) connect$inet6(r6, &(0x7f00000027c0)={0xa, 0x4e24, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3}, 0x1c) connect$bt_l2cap(r6, &(0x7f0000002800)={0x1f, 0xfff9, @none, 0x3}, 0xe) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(r8, &(0x7f0000002940)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002900)={&(0x7f0000002880)={0x68, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}, ["", "", "", "", ""]}, 0x68}}, 0x40) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000002980)) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r7, 0x8010661b, &(0x7f00000029c0)) ioctl$sock_inet6_udp_SIOCOUTQ(r6, 0x5411, &(0x7f0000002a00)) fremovexattr(0xffffffffffffffff, &(0x7f0000002a40)=@known='system.posix_acl_access\x00') ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000002a80)={r8, 0x5, 0x1}) r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000002ac0), 0x181041, 0x0) r10 = ioctl$TIOCGPTPEER(r9, 0x5441, 0xc70) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x541b, &(0x7f0000002b00)) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r10, 0x84, 0x66, &(0x7f0000002b40)={0x0, 0x6}, &(0x7f0000002b80)=0x8) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002bc0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r11, 0xc0189378, &(0x7f0000002c00)={{0x1, 0x1, 0x18, r8, {r6}}, './file0\x00'}) sendmsg$nl_generic(r0, &(0x7f0000002f80)={&(0x7f0000002c40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002f40)={&(0x7f0000002d00)={0x220, 0x38, 0x400, 0x70bd2c, 0x25dfdbfc, {0xc}, [@nested={0x20a, 0x66, 0x0, 0x1, [@nested={0x4, 0x83}, @typed={0x8, 0x38, 0x0, 0x0, @ipv4=@loopback}, @generic="e4ec99faa2eb8c9a5b1895e8c995c118143dfa5dbdc29945fbc0a027909e21a4f8528615758c04c0953d931ed6c6a18eba456aa6b744597403dc3675e7445d966961ea5914c39cee26c7cd4d976af37469af34a5a2e8c1f2e762d5829ddb2650bc05fc43f5f2d0150e0d58bb", @generic="90fabd8dea1fa2a5ba03396ad36c22093b79e248f97f5dfc5c83b9d726e96feec4c43cb0cca7bf65fd6cd44553f54bc2a423041ad384ab6581f7c148307b9638a52d74534797180422979d080dd8b12c2b9b72bfa7af0478a4ce21f25540dd00596c73563b5ac9d9966db0e785832048f55205521f4d23fa3bf9e8c56bbd87829eecbe00463f64f6dd56d39cba7825de51ff3dfde6160c51799e8af84ee456380abc1251d24bdb182a2472bf3e7062e6e09cda201a9cddaa1b0b851e1c537bb6e95ca6cb7dc1aeb37accda3c61c2e79dff22af14d6dc95b00d83a70a8fa479c709af51211805ea0ba9e131037ee0229411", @generic="1757ed2794bb4853542c9ef2cfaebd01d517875a52e1eb6fc918db3ae298187582d58da396b96b89315d69245a87fd3cd0969cb18a42c4cc332b141b14fdb040c71dd1c438d32b3a9ba3187392c4d933695640e95324700b4730ab4c813c17fa936a5dde088cb747a0e6a62ce8b8f5dea9877c91c7be3adcd1252481b52ec2d30737cbf0354dc55bb5", @nested={0x4, 0x15}, @typed={0x8, 0x13b, 0x0, 0x0, @pid}, @typed={0x8, 0x29, 0x0, 0x0, @u32=0x5}]}]}, 0x220}, 0x1, 0x0, 0x0, 0x20004001}, 0x2004c001) 2m33.392282698s ago: executing program 7 (id=5018): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x80102, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f00003b6000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f6, &(0x7f0000000040)={0x0, 0x8000c897, 0xc000, 0x7ffe, 0x65}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="2400000020005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/dev\x00') pread64(r5, &(0x7f0000000100)=""/253, 0xfd, 0x1) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$unix(0x1, 0x1, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000003, 0x0, 0x1}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 2m33.210122528s ago: executing program 7 (id=5019): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000440)="8b3927", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="93a958290cfc98", 0x7}], 0x1, 0x0, 0x0, 0x1500}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002980)="06", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)="de68d855", 0x4}], 0x1}}], 0x4, 0x40480c0) 2m33.209785476s ago: executing program 7 (id=5020): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r1, &(0x7f0000000240)='./file0\x00') ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) 2m33.073496217s ago: executing program 7 (id=5021): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='add syz0 127.0.0.1\n\x00', 0x13) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000014f2f076a72cc91a0cf2a1b7000001000061199800000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000640)={&(0x7f0000000540)=[{0x50, 0x1, 0x0, 0x0}], 0x1}) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x80042, 0x0) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000340)={0x42}) r3 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='syz0\n\x00', 0x5) mount$afs(&(0x7f0000000140)=ANY=[@ANYBLOB="25564cb4c60f4e0a5046dbf2947273797a302e4f6561d96f6e6c7900"], &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00006e2e13"]) 2m32.855903279s ago: executing program 7 (id=5023): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf25050000000c000600020000000200000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="f661a8ab7a5e0862e2f4cfb67a91d2e2f5a06f54706454b4fb55acd29917b3aa3160f74047c7dfa45683b20bbf4cfa2387c7e20bb939c063dd45f468c4c96be38f352f41ef4bc1c96f02a12b2e463ab21ed20b6ced3d241234e4f36158883e0308f55698ee52458f71adb2c970e53999cd84b2f47ded615dc1642c9fb540494425b8b1e536b90bf9dfe9c228312e468db29276ef71d6c19addf0f55f56864bacf9557190211b", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x40004) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r7, 0xb03, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r8) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x79}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x8804) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_ACT={0x34, 0x3, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 2m32.658978852s ago: executing program 41 (id=5023): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000280)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf25050000000c000600020000000200000008000300", @ANYRES32=r4, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r6, @ANYBLOB="f661a8ab7a5e0862e2f4cfb67a91d2e2f5a06f54706454b4fb55acd29917b3aa3160f74047c7dfa45683b20bbf4cfa2387c7e20bb939c063dd45f468c4c96be38f352f41ef4bc1c96f02a12b2e463ab21ed20b6ced3d241234e4f36158883e0308f55698ee52458f71adb2c970e53999cd84b2f47ded615dc1642c9fb540494425b8b1e536b90bf9dfe9c228312e468db29276ef71d6c19addf0f55f56864bacf9557190211b", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x40004) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_LISTALL(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r7, 0xb03, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000c080}, 0x814) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r8) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r2, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r9, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xe}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4000850) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r8, &(0x7f0000000740)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x30, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x79}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x8804) r10 = openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r10, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x68, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x38, 0x2, [@TCA_FLOWER_ACT={0x34, 0x3, [@m_skbedit={0x30, 0x1, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20041890}, 0x0) 1m53.108954714s ago: executing program 2 (id=5386): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x400, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0x3, 0xfff0}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x1b}, {0x2, 0xfff2}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x4814) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x5, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x28001, @empty, 0xffffff5c}, 0x1c) listen(r1, 0x4e) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000001100)=0x3fa, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x8d, @empty, 0x80004}, 0x1c) listen(r2, 0x4c) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5}}, './file0\x00'}) fcntl$F_SET_RW_HINT(r3, 0x40c, &(0x7f00000000c0)=0x5) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}}, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c0007"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0xb, 0x12, r0, 0x0) munmap(&(0x7f0000ff9000/0x2000)=nil, 0x2000) mremap(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ff8000/0x2000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m53.040229878s ago: executing program 2 (id=5390): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1, 0x0, 0x0, 0x2000}}], 0x1, 0x20008050) 1m53.039670442s ago: executing program 2 (id=5391): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000014c0)={0xffffffffffffffff, 0x20, &(0x7f0000001480)={&(0x7f0000001400)=""/23, 0x17, 0x0, 0x0}}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0xa3e) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r2, &(0x7f0000000800), 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001500)={0x1}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000001540)=@base={0x11, 0x8001, 0x2, 0x408, 0x21400, 0xffffffffffffffff, 0x400, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x3}, 0x50) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r3, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001640)={{0x1}, &(0x7f00000015c0), &(0x7f0000001600)='%pS \x00'}, 0x20) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, 0x0, 0x0) accept$inet(r4, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x5, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map, r5, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={0x0, 0xfffffe07}}, 0x40440d0) getsockname$packet(r7, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd7000000000", @ANYRES32=r8, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) sendto$packet(r6, &(0x7f0000000480)="7eeb99b6f78c67515ea2f0d01d76", 0xac, 0x94, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 1m52.982375058s ago: executing program 2 (id=5393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc03, {0x0, 0x0, 0x0, r7, {0x1, 0x4}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xf, 0xe}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x700}, 0x0) 1m52.8283107s ago: executing program 2 (id=5394): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCXONC(r0, 0x540a, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1e) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2c}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r6, 0x40186f40, &(0x7f00000001c0)) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@ipv4_newnexthop={0x24, 0x68, 0x1, 0x70bd27, 0x25dfdbfb, {0x2, 0x0, 0x2}, [@NHA_FDB={0x4}, @NHA_ENCAP_TYPE={0x6, 0x7, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x0) ioctl$KVM_GET_TSC_KHZ_cpu(r3, 0xaea3) r8 = syz_open_dev$sndpcmp(&(0x7f0000000300), 0x1, 0x203) ppoll(&(0x7f0000000280)=[{r8, 0x10320}], 0x1, 0x0, 0x0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 1m52.570504306s ago: executing program 2 (id=5400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1, 0x0, 0x0, 0x2c01}}], 0x1, 0x20008050) 1m45.842164558s ago: executing program 8 (id=5456): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000070000000000000000000a40000000160a05000000000000000000020000000900010073797a300000000014000380080001400000000008000240000000030900020073797a300000000014000000110001"], 0x68}}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000001400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}, 0x1, 0x0, 0x3000000, 0x4084}, 0x8000) 1m45.78240699s ago: executing program 8 (id=5457): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e657665000020000280140007000000000000000000fffffff500000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m45.672245977s ago: executing program 8 (id=5458): r0 = socket(0x10, 0x802, 0xffffffff) write(r0, &(0x7f0000000100)="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", 0xfc) 1m45.672066282s ago: executing program 8 (id=5459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x480000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x84, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x1c, 0x2, 0x8000, 0x3, 0x5}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0x6}, 0x91, 0xfffffff7, 0x2}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x8000000000003ff, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000, 0x1000}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0x2301, 0x400000000000001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m45.471066522s ago: executing program 8 (id=5460): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$XFS_IOC_FSBULKSTAT(r2, 0xc0205865, &(0x7f00000003c0)={&(0x7f0000000040)=0xf9, 0x5, &(0x7f00000001c0)=[{}], &(0x7f0000000340)}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010825bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="804001000000010008001b000000000008000d0006"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$inet6(0xa, 0x1, 0x84) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$kcm(0x2, 0xa, 0x2) 1m45.231999328s ago: executing program 8 (id=5462): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000440)="8b3927", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="93a958290cfc98", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002980)="06", 0x218}], 0x1}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)="de68d855", 0x4}], 0x1}}], 0x4, 0x40480c0) 1m45.1205s ago: executing program 42 (id=5462): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r0, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002600)=[{&(0x7f0000000440)="8b3927", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f0000002680)="93a958290cfc98", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000002980)="06", 0x218}], 0x1}}, {{0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003b80)="de68d855", 0x4}], 0x1}}], 0x4, 0x40480c0) 1m36.588811438s ago: executing program 43 (id=5400): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1, 0x0, 0x0, 0x2c01}}], 0x1, 0x20008050) 1m16.529253999s ago: executing program 4 (id=5714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f80)=@newspdinfo={0x14, 0x28, 0x1}, 0x14}}, 0x0) (async) sendmsg$nl_xfrm(r4, &(0x7f0000004000)={0x0, 0x0, &(0x7f0000003fc0)={&(0x7f0000003f80)=@newspdinfo={0x14, 0x28, 0x1}, 0x14}}, 0x0) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010525bd7000fedbdf254300000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044084) (async) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010525bd7000fedbdf254300000008000300", @ANYRES32=r3, @ANYBLOB='\f\x00X'], 0x28}, 0x1, 0x0, 0x0, 0x4000040}, 0x4044084) socket$packet(0x11, 0x3, 0x300) (async) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000100)={0x0, &(0x7f0000000040)}, 0x10) 1m16.440377471s ago: executing program 4 (id=5715): r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0xc4}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0xfbb, 0x8002, 0x24, 0x4, r1}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000000c0)={0x2, 'ip6erspan0\x00', {0x8}, 0x4}) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f0000000100)=0x80000001) recvfrom$inet6(r0, &(0x7f0000000140)=""/74, 0x4a, 0x40, &(0x7f00000001c0)={0xa, 0x4e22, 0x2, @loopback, 0x1}, 0x1c) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000200)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000280)={r2, 0x3, r0, 0xa32d}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f00000002c0)={r2, 0x3ff, 0x1}) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000300)=0x10ae) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000340), 0x200400, 0x0) setns(r3, 0x40000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000003c0)=@generic={&(0x7f0000000380)='./file0\x00', r3}, 0x18) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, &(0x7f0000000440)={&(0x7f0000000400)=[{0x2, 0x400}], 0x1, 0x10, 0x3, 0x8}) sendmsg$AUDIT_USER_TTY(r3, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x464, 0x200, 0x70bd2b, 0x25dfdbfe, "c541c366b5e43c66763c", ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x48000) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000580)={r1, 0x1f, "22640894dcd7b6130465770c8daf4fb8293b8995272515efcfa359550cb159"}, &(0x7f00000005c0)=0x27) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000600)={r4, 0x6}, 0x8) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000640)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) ioctl$XFS_IOC_SCRUBV_METADATA(r0, 0xc0285840, &(0x7f00000006c0)={0x33d5, 0x4, 0x7, 0x0, 0x2, 0x1, 0x0, &(0x7f0000000680)=[{0xd, 0x1ff, 0xac73}]}) getresgid(&(0x7f0000000700)=0x0, &(0x7f0000000740), &(0x7f0000000780)) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000007c0)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f00000008c0)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000900)={0x80, 0x7d, 0x1, {{0x0, 0x67, 0x1, 0x4, {0x40, 0x3, 0x5}, 0x10000, 0x81, 0x78b, 0x5, 0xb, 'ip6erspan0\x00', 0xf, '/dev/dlm_plock\x00', 0xf, '/dev/dlm_plock\x00', 0xb, 'ip6erspan0\x00'}, 0x4, '$@(}', 0xffffffffffffffff, r5, r6}}, 0x80) r7 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0x525400, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r7, 0x40044900, 0x2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f00000009c0)={r4, 0x50, "fc318137787337b8b01f53b8f18c823cdc4acad16cce98419fc4808386d565b025d90352ca7f37c0180aeb80512bb86e25140859df2276a64b2aa791c14d4d2af23a11ef55709030509735a6c55162ec"}, &(0x7f0000000a40)=0x58) dup3(r7, r7, 0x0) r8 = openat2(r3, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x80800, 0x20, 0x4}, 0x18) ioctl$UBLK_U_CMD_GET_FEATURES(r8, 0x80207513, &(0x7f0000000b40)={0x0, 0xffff, 0x8, &(0x7f0000000b00)}) lsetxattr$security_capability(&(0x7f0000000bc0)='./file0\x00', &(0x7f0000000c00), &(0x7f0000000c40)=@v3={0x3000000, [{0x3, 0x3}, {0x0, 0xb35c}], r6}, 0x18, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000c80)={0x9, 0x1, 0x14, 0x80000001, 0x8, 0x4, 0x40, 0x7fffffff, r4}, &(0x7f0000000cc0)=0x20) 1m15.900136237s ago: executing program 4 (id=5721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e65766500002000028014000700000000000000000000fe000000000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m15.776343746s ago: executing program 4 (id=5724): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000108000a40fffffffc880000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000005c0003805800008008000340000000024c000b802c0001800a0001006c696d69740000001c0002800c00024000000000000000030c00014000000000000100001c000180090001006c617374000000000c0002800800014000000005140000001100", @ANYRES8], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="501a00000d0a010800000000000000000a0000000900020073797a31000000000900010073797a3100000000241a0380180000800c00018006000100000000000800034000000002"], 0x1a50}, 0x1, 0x0, 0x0, 0x805}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x20, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0xd0}, 0x4000) 1m15.776097506s ago: executing program 4 (id=5725): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000006280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000006240)={&(0x7f0000002680)={0x30, r3, 0x2, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCAN_SUPP_RATES={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008010}, 0x894) 1m15.717584193s ago: executing program 4 (id=5727): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line'], 0x23) close(r0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x80, 0x1, 0x1, 0xe, 0x4}) 1m14.038689669s ago: executing program 1 (id=5742): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000500)={0x48, 0x2, r1}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000800)={0x48, 0x2, r1}) (async) ioctl(r0, 0x3b89, &(0x7f00000002c0)="3000000004000000030000000600") 1m13.942406283s ago: executing program 1 (id=5743): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000001300)=ANY=[@ANYBLOB="0200000000020005000000e0000000fd", @ANYRES32=0x0, @ANYBLOB="040000000000000010000200000000002000000000000000"], 0x2c, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000100001000000000000000000d100000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a19020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d616376746170000000080001400000000514000000110001"], 0xe8}}, 0x0) 1m13.852173883s ago: executing program 1 (id=5744): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x9}) ppoll(&(0x7f0000000080)=[{r0, 0x210a}, {r0, 0x120}], 0x2, 0x0, 0x0, 0x0) 1m13.77095s ago: executing program 1 (id=5745): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80282, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000146558006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1m11.0101981s ago: executing program 1 (id=5749): socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000002c0)=[@in={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x1c}}, @in={0x2, 0x4e20, @local}], 0x20) r3 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./proc/fs/nfsd\x00', &(0x7f0000000380)='nfsd\x00', 0x0, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4e00, 0x0) ioctl$DVD_WRITE_STRUCT(r5, 0x5390, &(0x7f0000000880)=@manufact={0x4, 0x3, 0x800, "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"}) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000f06050025819dfa5dfc6483ca000009"], 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="550a000000000009611144000000000018000000000000000000000000210c009500000000000000255205a79f7c76e5b79fb494d3d42e8f05535d903ce3db040978f3f35b672c171d8308b68e4bbdae3ff23d10ffcb37"], &(0x7f0000000000)='GPL\x00'}, 0x80) recvmsg$can_raw(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) 1m10.869110134s ago: executing program 1 (id=5751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) write$selinux_create(r3, &(0x7f0000000080)=@access={'system_u:object_r:urandom_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x10001}, 0x69) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r1], 0xfdef) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) 1m0.658525718s ago: executing program 44 (id=5727): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r0, &(0x7f0000000280)=ANY=[@ANYBLOB='VOLUME \'Line'], 0x23) close(r0) r1 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r1, 0x40146f2c, &(0x7f00000000c0)={0x80, 0x1, 0x1, 0xe, 0x4}) 55.790314985s ago: executing program 45 (id=5751): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60001, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = open(&(0x7f0000000e00)='./file0\x00', 0x0, 0x1) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0x9fe}) write$selinux_create(r3, &(0x7f0000000080)=@access={'system_u:object_r:urandom_device_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x10001}, 0x69) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES64=r1], 0xfdef) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x23) 14.531280408s ago: executing program 3 (id=6293): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x138) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x40800) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000240000000000000001f"], 0x14}}, 0x80) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578"], 0x65) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}, {@xino_off}, {@index_off}, {@userxattr}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) pwritev2(r1, 0x0, 0x0, 0xca3, 0xffff, 0x18) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x100000020, 0xffffffffffffff79, 0x2, 0x106c, 0x103, 0x8000000000000, 0x1000000003, 0x4000, 0x8, 0x12, 0x6, 0x0, 0x8000], 0x26000, 0x8000}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000440)='/dev/bsg/2:0:0:0\x00', 0x20400, 0x0) ioctl$SG_SET_RESERVED_SIZE(r2, 0x2275, &(0x7f0000000000)=0x1) socket$unix(0x1, 0x2, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)="c10e000018001f06", 0x8, 0x4000000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000010a"], 0x14}}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002980)=ANY=[@ANYBLOB="14000000100001000000003105cb000100000a20000000000a01040000000000000000010092c128b70f0073797a3000000000140000001100010000000000000000000700000aa7bc9854c7da47e8f7d76a1fbf52f392675e6bf5a2fa2ce92629d57cf64605e57d1a2bf5355367c83d1ab3a7e7fd1ec233303796b83b1d0accdfa0b3f7e30010000000000000e3c99a00"/164], 0x48}}, 0x0) recvmmsg(r3, &(0x7f0000002840)=[{{0x0, 0x1d, 0x0}}, {{&(0x7f0000000340)=@nl=@proc, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000580)=""/106}, {&(0x7f0000000600)=""/129}, {&(0x7f00000006c0)=""/251}, {&(0x7f00000007c0)=""/122}, {&(0x7f0000000940)=""/171}], 0x0, &(0x7f0000000a80)=""/38}}, {{&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000b40)=""/30}, {&(0x7f0000000b80)=""/225}, {&(0x7f0000000c80)=""/71}], 0x0, &(0x7f0000000d40)=""/39}, 0x7fffffff}, {{&(0x7f0000000d80)=@l2tp={0x2, 0x0, @initdev}, 0x0, &(0x7f0000000f80)=[{&(0x7f0000000e00)=""/195}, {&(0x7f0000000f00)=""/116}], 0x0, &(0x7f0000000fc0)=""/218}, 0x6}, {{0x0, 0x0, &(0x7f00000026c0)=[{&(0x7f00000010c0)=""/175}, {&(0x7f0000001180)=""/119}, {&(0x7f0000001200)=""/107}, {&(0x7f0000001280)=""/174}, {&(0x7f0000001340)=""/64}, {&(0x7f0000001380)=""/219}, {&(0x7f0000001480)=""/82}, {&(0x7f0000001500)=""/163}, {&(0x7f00000015c0)=""/202}, {&(0x7f00000016c0)=""/4096}], 0x0, &(0x7f0000002780)=""/190}, 0x5}], 0x1, 0x40002160, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r6, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000400)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x8000000, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) 14.421781024s ago: executing program 3 (id=6295): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x78, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_b, @from_mac}, 0x0, @random=0x1800, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SMPS_MODE={0x5, 0xd5, 0x2}]}, 0x78}}, 0x0) 14.351599479s ago: executing program 3 (id=6299): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x6c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xb}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x1c}}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @loopback}]}, 0x6c}}, 0x8080) 14.266383086s ago: executing program 3 (id=6302): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) write$nci(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x20000, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a000100000000000000000102000001000000090000000005001b0001"], 0x24}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e23, @rand_addr=0x64010180}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r7 = socket$alg(0x26, 0x5, 0x0) accept4(r7, 0x0, 0x0, 0x80800) mmap$KVM_VCPU(&(0x7f0000c00000/0x400000)=nil, 0x930, 0x4, 0x43033, 0xffffffffffffffff, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="09002301000034020000020000001a000100", @ANYRES32=r9, @ANYBLOB], 0x1c}}, 0x0) write$nci(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="610306"], 0x10) dup(0xffffffffffffffff) openat$hpet(0xffffffffffffff9c, 0x0, 0x0, 0x0) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) accept4(r12, 0x0, 0x0, 0x80000) 13.941544857s ago: executing program 3 (id=6310): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0049364, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000840) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:02.0/config\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000580)="ffffffffff", 0x5, 0x1) mmap(&(0x7f0000dfe000/0x2000)=nil, 0x2000, 0xfffffffffffffffe, 0x10, r1, 0x4bb56000) fchmodat(r1, &(0x7f0000000180)='./mysys\x00', 0x48) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 10.921926665s ago: executing program 3 (id=6343): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0b00000005000000000400000900000001000000", @ANYRES32, @ANYBLOB='<\n\x00'/20, @ANYRESHEX=r0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000edffffff00000000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r2, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000940)=0x0, &(0x7f0000000980)=0x4) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4010, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a80)=@bpf_ext={0x1c, 0x2d, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000007000000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b70800000effffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001d49f30c0a000000851000000000000049690020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000100010085000000060000008500000083000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000880)='syzkaller\x00', 0x0, 0x6d, &(0x7f00000008c0)=""/109, 0x40f00, 0x73, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1bcfb, r4, 0x0, &(0x7f0000000a40)=[r0, r0], 0x0, 0x10, 0x1}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x12, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x1, 0x4, 0x0, 0x9, 0xfffffffffffffff8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x3}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r7, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @window={0x3, 0x7}, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x94b}, @sack_perm, @timestamp, @mss={0x2, 0x80000001}], 0x2000000000000042) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendmmsg(r7, &(0x7f0000003c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000d40)="3c974588005661", 0x7}], 0x1}}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000a80)="1cd2d176b105e80c4c6948cb8e03208676a247beee2e8079c3acecf7d41348143bb77f00f255ec126072189baa9cd36ab46f33aefd759eeedd359d6072abc0828f39002d90784457b6becc1e09605bb23066e9aabd5ecbbeae8fdd48b32d7a20472fd30a02597bc3d32221ded5c29d99f39b4fee7dead10267deeef489460ff04fa592950003137338aa2dc0ed9de834fc5329543e775ee8db9c778f57c4594dcd2f3f129310dfb10bb7ed508abd950c99467f8bd93e7769", 0xb8}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{0x0}], 0x1}}], 0x4, 0x44040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x6000000, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request={0x11, 0x0, 0x0, 0x90b8}}}}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000440)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r12, {0xd}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x4, 0xf, 0x10, 0x2, 0x84, 0x2, 0xf, 0x6, 0x3, 0x7, 0x9, 0x4, 0x1, 0x4], 0x1, [0xc, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x8005, 0xffff, 0xfff5, 0x4, 0x8, 0x0, 0x200, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1, 0x1]}}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x374}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_ext={0x1c, 0x3, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @cb_func={0x18, 0x8, 0x4, 0x0, 0x8}], &(0x7f0000000040)='syzkaller\x00', 0x3ff, 0xc7, &(0x7f00000000c0)=""/199, 0x41100, 0x4a, '\x00', r12, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xf, 0x6, 0x100}, 0x10, 0x17e65, r5, 0x1, 0x0, &(0x7f0000000300)=[{0x2, 0x5, 0x4, 0x2}], 0x10, 0x7f2e}, 0x94) 3.467894518s ago: executing program 0 (id=6417): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x94440}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000feff00000001050004000100000008000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.308720872s ago: executing program 0 (id=6419): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xd) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x2000fb) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 3.308503079s ago: executing program 0 (id=6420): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x5c}}, 0x0) r2 = openat$cgroup_int(r0, &(0x7f00000002c0)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @local, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @local, @mcast2={0xe}}}}}}}, 0x0) 3.221578012s ago: executing program 0 (id=6421): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd26, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000008440000300012800b00010067656e6576650000200002801400070000000000000000000000000000000001050004000100fffe08000a00", @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.139645615s ago: executing program 0 (id=6422): syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) (async) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) syz_clone(0xa0720811, 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0) (async) syz_clone(0xa0720811, 0x0, 0xfffffffffffffe53, 0x0, 0x0, 0x0) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_genetlink_get_family_id$ethtool(&(0x7f0000001b00), 0xffffffffffffffff) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f00000003c0)={&(0x7f0000000000/0x800000)=nil, 0x800000}) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001800dd8d000004000000000002000008e77f00000034000008001200020000005d4088cb3d72560640998503bcedfda8d8b2112630fa9bd4b5dc30d436bade75021582a1db360c9da78562a88fb26319be2b09a5ecc458ba943e17af1832c529230934f09fd1dd629847518e9fd18539ebf387e6005366a866c6e18550f1aabbbc1fc79cd44328bba1c0caf1e6d097af3f0a09ff45d83c3dc1989a94eb3c64f9ac7b772938fd1b4309263e69edcf88ec54cbdb3498c1a00b2de9d33d0e2b960eacbfc327352a4297b0481a2b4fececf7d452"], 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) (async) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001800dd8d000004000000000002000008e77f00000034000008001200020000005d4088cb3d72560640998503bcedfda8d8b2112630fa9bd4b5dc30d436bade75021582a1db360c9da78562a88fb26319be2b09a5ecc458ba943e17af1832c529230934f09fd1dd629847518e9fd18539ebf387e6005366a866c6e18550f1aabbbc1fc79cd44328bba1c0caf1e6d097af3f0a09ff45d83c3dc1989a94eb3c64f9ac7b772938fd1b4309263e69edcf88ec54cbdb3498c1a00b2de9d33d0e2b960eacbfc327352a4297b0481a2b4fececf7d452"], 0x24}, 0x1, 0x0, 0x0, 0x200400c8}, 0x4010) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000180)=""/159) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000080)=""/216) 2.267703562s ago: executing program 0 (id=6435): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) syz_usb_connect(0x0, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406a0800010000010203010902190001010080fa0904000001ffffff0007058102400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {0x0, 0x0, 0x2}, {}, {0x4}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {}, {}, {}, {0x20}, {}, {0x0, 0x0, 0x0, '\x00', 0xf7}, {0x3}, {}, {}, {}, {}, {0x6}, {}, {0x60, 0x0, 0x40}]}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/firmware/emi26!loader.fw/loading\x00', 0x1, 0x0) write(r7, &(0x7f0000000140)='1\x00', 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/firmware/emi26!loader.fw/data\x00', 0x1, 0x0) write(r8, &(0x7f00000001c0)="ff00"/32, 0x20) write(r7, &(0x7f0000000200)='0\x00', 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="040100001600010026bd7000ffdbdf25ac1e010e1414440000000000000000000000004e2000004e2f000000e4642fd1b913adaf4a3bc2574f2b6611ec8667c5d3b0270e96b3b5721751c2e0c21f3bbebb7d29c6172d9c618b02ad8e1f2875ffabf4bfde4c8efd4b633e01d23d863d15dccf27bfa687b510b84923dddeffb21f1be31c0d33f5b2363f24cfbaa567d0f1b993af9818cf3852f9df951880e1a633f19672029f49a1519bab0cabb75440365b4e4580acc846dd00"/198, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414bb000000000000000000000000000004d233000000ac1414bb000000000000000000000000f8ffffffffffffff0300000000000000ec030000000000000200000000000000070000000000000006000000000000000e00000000000000080000000000000074e30000000000000000000000000000060000000000000077f30000000000007f00000000000000020000002cbd700004350000020002020000000000000000000000001d1b00000c000f00f8ffffffffffffff"], 0x104}, 0x1, 0x0, 0x0, 0x4004000}, 0x40040c0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) r10 = socket$inet_udp(0x2, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r11 = openat$pmem0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) splice(r10, &(0x7f0000000040)=0x1ff, r11, &(0x7f0000000140)=0x8000, 0x8001, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) 1.699037628s ago: executing program 5 (id=6441): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="0414060fc920020900"], 0x9) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) r4 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r4, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000080)={'dvmrp0\x00', {0x2, 0x0, @remote}}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r5 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) close(r5) mkdirat(r5, &(0x7f0000000140)='./dev/mapper/control\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='my_configfs\x00', 0x0, 0x0, 0x0) r6 = syz_open_dev$dri(0x0, 0x1, 0x400) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r7, 0xc138fd07, &(0x7f0000000000)="04000000000000000000000038010000000000000000005d1c000000000000000000000000000000000000000000000074") socket$inet_smc(0x2b, 0x1, 0x0) fcntl$setstatus(r5, 0x4, 0x2c00) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x2, 0xff}, 0x40, [0x7ffd, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x100, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0xfffffffe, 0x0, 0x2, 0xe661, 0x4, 0x7, 0xdf, 0x9, 0x4c74, 0x80000000, 0x0, 0x7f, 0xe, 0x8, 0x8000806f, 0x100007, 0x200, 0x1, 0x9, 0x200, 0x3e, 0x2, 0x6, 0x6, 0xc, 0x5, 0x4, 0x2000008, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0xffffffff, 0x40], [0x10000009, 0x9, 0x8000012f, 0x8004, 0x1, 0xfffffff3, 0x129432e6, 0x88, 0xf9, 0xe, 0xa, 0x6c8, 0x9, 0xfffffffc, 0x8, 0x0, 0x4, 0x5, 0x2f, 0xe, 0x30e, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x6, 0x6, 0x1001, 0xff, 0x5, 0x7, 0x5f34, 0xd, 0x100004e0, 0x3, 0x4, 0xb, 0x8001, 0x9, 0x7, 0x9, 0x3b, 0x47, 0x8020, 0x1, 0xfffffffb, 0xffff, 0x3, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0xffffffff, 0xbc45, 0x48c93690, 0x43, 0x103], [0x9, 0xa, 0x4, 0x5, 0x7f, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x1, 0x5, 0x9, 0xffffff80, 0x4, 0x20000005, 0x0, 0x6, 0x5, 0x7f, 0x86, 0xf3, 0x303c, 0xbe7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x38, 0x800003, 0x200, 0x0, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x6, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x8b, 0xfffffff9, 0x0, 0x1000000a, 0x0, 0xc5f, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x80009, 0x3, 0x80000000, 0xb, 0x2, 0x93a, 0x6, 0x1000006, 0xfffffffe, 0xb9, 0xce7, 0x1ef, 0x3000, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0xa001, 0x10000, 0x7ff, 0x2, 0x5, 0x1, 0xf, 0x14d, 0x60a7, 0x3, 0x96, 0xfffffffe, 0x80000000, 0x5, 0x5, 0xc8, 0x2001, 0xfffff000, 0x2, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x1, 0x5, 0x200f, 0x30b1d683, 0xa1f, 0xf40, 0x6, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0x401]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) fcntl$lock(r0, 0x24, &(0x7f0000000040)={0x2, 0x3, 0x1ff, 0x6, r2}) socket$inet6_tcp(0xa, 0x1, 0x0) connect$bt_l2cap(r0, &(0x7f00000003c0)={0x1f, 0xc001}, 0xe) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0x4, 0x0, &(0x7f0000000080)) ioctl$XFS_IOC_GOINGDOWN(r3, 0x8004587d, &(0x7f00000000c0)=0x8) 401.418297ms ago: executing program 9 (id=6455): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x2c, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x3, 0x0, {[0x5, 0x6, 0x3, 0x0, 0x6, 0x6, 0xb4, 0x2]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 311.411446ms ago: executing program 5 (id=6456): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x40000) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffb, 0x10, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000040)="8f7d0a01007d79710600060000000000", 0x0, 0x10, 0x1001a, 0x0, 0x0}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="38000000801400018008000100ea00000108000200e0000000000000000000040000000000000200"], 0x38}}, 0x0) 311.151957ms ago: executing program 5 (id=6457): r0 = fsopen(&(0x7f0000000100)='gfs2meta\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000580), 0x3) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) (async) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x7, [{0x3, 0x1008b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x4a67, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x1, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1, 0x80000000}, {0x1100, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x4, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x9, 0x5}, {0x0, 0x7}, {0xa, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48801}, 0x40000) (async) setns(0xc9, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/hci\x00') preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000000)=""/120, 0x78}], 0x1, 0x4f, 0x2) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040)={0x10000000, 0x9, 0x7a8, 0x6, 0x94}, 0x14) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r1) 310.57575ms ago: executing program 9 (id=6458): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) 231.797126ms ago: executing program 9 (id=6459): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r0, 0x0, r1, 0x0, 0x100000038f9, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x5c, 0x1, 0x1, 0x301, 0x0, 0x0, {0xa}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x4ad}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x20040040) r3 = syz_open_dev$loop(&(0x7f0000000fc0), 0x3, 0x40) ioctl$BLKFLSBUF(r3, 0x1261, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000780)={@broadcast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x38, 0x3a, 0x1, @private2, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x2, 0x6, "29e50e", 0x0, 0x2b, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, [], "0a06efb2988b900b"}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000007912c8000000000095000000000001000400000000f0287e18e9def36f0400000000b6de278a28da1db9c8aaf7a30d431a823f93500a19eefd4990edb872ec964c6e130b5e8f5471212f80adc52c28c660167e08e125997b2c476706686f6a236e2a65db829b4bf313cc049a44093f66585f4efcd7cc9a9f1cb819183f139e5446e64028a72780221b802c3e1e7cb46bababebad0186b4e855ac648ceace30ebad83e1bfd08e3a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 231.529901ms ago: executing program 9 (id=6460): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x2) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000040)=0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)=@generic={&(0x7f00000000c0)='./file0\x00', 0x0, 0x28}, 0x18) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000140)={r1, r4}) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 141.706745ms ago: executing program 9 (id=6461): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 141.316035ms ago: executing program 9 (id=6462): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r2, 0x40184150, &(0x7f00000001c0)={0x0, 0x0}) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1002000018000100feffffff0001000000000000000000000000ffffac1414aafc0100000020000000000000000000010001071c4e2300050000a02004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010000000000000000000b000000080002000c"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000080) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x20000810) 139.403698ms ago: executing program 5 (id=6463): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4001c00) r1 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracefs_dir/trace_marker/../file0\x00', &(0x7f00000001c0)='hostfs\x00', 0x1ac8006, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = userfaultfd(0x80000) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x700}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracefs_dir/trace_marker\x00', 0x1, 0x0) write$tcp_mem(r3, 0x0, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006d6163736563000014000280050009000100000005000b"], 0x44}}, 0x0) 57.733395ms ago: executing program 5 (id=6464): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x42, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000007000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280080002"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) 0s ago: executing program 5 (id=6465): ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f9, 0x0) mkdir(&(0x7f0000000000)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000140)) recvmsg$unix(r0, &(0x7f00000025c0)={&(0x7f0000000180), 0x6e, &(0x7f0000002580)=[{&(0x7f0000000240)=""/122, 0x7a}, {&(0x7f0000002480)=""/245, 0xf5}], 0x2}, 0x12020) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000500)={0x32c, 0x0, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x305, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @device_a, @device_a, @initial, {0xc, 0xc45}, @value=@ver_80211n={0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xf7d6, @default, 0x1040, @val={0x0, 0x17, @random="f8d9c3537204b0b478308bf7aa17d3cb35af8f0b1ac7ef"}, @val, @void, @val={0x4, 0x6, {0x8, 0x6, 0xec6, 0x4}}, @val={0x6, 0x2, 0x3}, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x0, 0x6, 0x8}}, @void, @void, @val={0x71, 0x7, {0x0, 0x1, 0x0, 0x0, 0x2, 0xf3, 0x20}}, @void, [{0xdd, 0x5f, "ccff396922e15cae25aef7da02fcbfdfdcbfdb1ff313dae170d604445f1aa40580eb457c61f5ff5a6a0bc277b68baa4c9420a4621fd39d72837be063f927610c4e1b1bc20271c35aa02cdfcf53398a468e407d653243c60d2b68860d62aed5"}, {0xdd, 0x53, "12afa0c19f87a0279bd0de26be87d147bede4c85aff63beb5f60aa299323961d8db4aace7501eb0330f5201fafc3c35dd56fa22c22d7c0039fb3c421a9f2d41cf5db01ea14b1a88919c12696cfae6244b567a5"}, {0xdd, 0xed, "6b6f3c17950396eb8c709cd3d676c6300a0c381a951fd45bc3f65f0cc9298dbc972a0de3f29325d320c61fb8db027485430d8dfe931407edbcc4c9eacbe8288c6d51bf48b5a9625eac8ea03993dc0a592fd764360483ab4dc98d4e07bdb0484866c6b6b41d70191142ed091ca9626c5ec9e4549889e9c754eed87a13afba49d41c937e4ca94a08a309610d242d5cbf137de2b925638e09c39b763e4a082166607fd4c968d24976e5be28647bed3b019a2fa62a91151d6aaf1128472357b37ed798d3571d47ec939a465c9cca298e134ee90549d6b48c137137ff93887da8bde8c56ba608687a523e86df18683f"}, {0xdd, 0x6, "9f5f0f2c6222"}, {0xdd, 0x80, "0c8f613c6e46c88b8595b2cc97d1c524601d51fbdabfbbd9ad6862aac5450011800d535c32253756aa149cde7dca16d7991e300171e1ba1755f1c44c022d29e0f668956a6178d5298fb495af7e7cffed2c6f28b47ff8807db0c4673b7dd7a3a9d1d7ca849c26671e5bbd1fee5ff36180152627ee3566165701f8319fce104668"}, {0xdd, 0x6, 'K@AD T'}, {0xdd, 0x25, "ae91fad7e0599960d08aa5c296595ea80142e940d48658b5e4af5631b87b91c3fe3915f5e4"}, {0xdd, 0x1e, "059d8cb3b1122c12ddecd25f84b3ee6bd2d013ca76a47d77f5c89e2f33fa"}, {0xdd, 0x23, "cf80b8f78e71a29e379db9d70c04e567fd24e2f058610a1ae5a5c05360538904427a4f"}]}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x32c}, 0x1, 0x0, 0x0, 0x20000081}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000f40), 0xa42, 0x0) r6 = syz_io_uring_setup(0x111, &(0x7f0000000b00)={0x0, 0x35da, 0x8, 0x7, 0x367}, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000000)) mmap$IORING_OFF_CQ_RING(0x0, 0x4000, 0xa, 0x13, r6, 0x8000000) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x5, r7, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW$syz(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0x8, r8, 0x0, 0x9, 0x71d16, 0x5d, 0x0, 0x10001}) write(r4, &(0x7f0000000400)="00000000090209000101008001120100020000004000000000000000000001", 0x1f) recvmsg$can_raw(r4, &(0x7f0000003a80)={&(0x7f0000002600)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000003980)=[{&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/215, 0xd7}, {&(0x7f0000003780)=""/244, 0xf4}, {&(0x7f0000003880)=""/232, 0xe8}], 0x4, &(0x7f00000039c0)=""/132, 0x84}, 0x0) read$FUSE(r4, &(0x7f0000000440)={0x2020}, 0x2020) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r9, &(0x7f00000003c0)={0x1f, 0xc001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0xe) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x2, &(0x7f0000000040)=[{0x20}, {0x6}]}) r11 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0xc0080, 0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f00000000c0)={0xb0002000}) getsockopt$bt_BT_CHANNEL_POLICY(r9, 0x112, 0x4, 0x0, &(0x7f0000000080)) 0s ago: executing program 9 (id=6466): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1, 0x3}, 0x10) r2 = openat$selinux_policy(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000040)=@sg0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r4, &(0x7f0000000f00)='file0', 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf257300000008000300", @ANYRES32=r7, @ANYBLOB="fa692149b7f4e8fbe98940598ba3c936455c8a8476c9f5051ee745fa778297ff81fbba1b8109487b089bbcc5192bf5fed1918f1ec2835c61667092e960932f13e96a189755d4d76f22ef0028519b2e2d85b781ea2442c557580699cbfa37063ac10c71d95d280a7bf5ab97ed8ad8bea728d8e96dd0b76ecb5cf066c5084583014fdb98367063c4087a775796b29c6c7818d1014241c9ef912a6a776ec32e630497a64dafe6906fc18b4c1a6444"], 0x1c}, 0x1, 0x0, 0x0, 0x8014}, 0x40080) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001380), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000480)={0x1ff, 0x48d7, 0x3, 0x0, 0x2000000000000008, 0xc, 0x651, 0xfffffffffffffff9, 0x8000009657, 0x3f84, 0x1, 0xfffffffffffffffc, 0xe, 0xa86, 0x80000000000000, 0xcc6, 0x6, 0xfffffffffffffffe, 0x94d2, 0x0, 0xfffffffffffffffc, 0x809, 0xfffffffffffffff7, 0x80, 0x3, 0x2000000000009}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r8, 0x40345410, &(0x7f00000013c0)={{0x1, 0x2, 0xaf9c, 0x0, 0x10000}}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x190ec) kernel console output (not intermixed with test programs): T55] usb 10-1: Product: syz [ 494.405617][ T55] usb 10-1: Manufacturer: syz [ 494.407793][ T55] usb 10-1: SerialNumber: syz [ 494.601408][T12743] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 494.614071][T12743] usb 8-1: USB disconnect, device number 48 [ 494.627769][T12743] usblp0: removed [ 494.630009][ T55] cdc_ncm 10-1:1.0: bind() failure [ 494.647982][ T55] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 494.650492][ T55] cdc_ncm 10-1:1.1: bind() failure [ 494.655026][ T55] usb 10-1: USB disconnect, device number 13 [ 495.136954][T12743] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 495.297205][T12743] usb 8-1: Using ep0 maxpacket: 32 [ 495.303115][T12743] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 495.310949][T12743] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 495.316597][T12743] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 495.326902][T12743] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 495.330432][T12743] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 495.333457][T12743] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 495.346885][T12743] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 495.349714][T12743] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.355912][T12743] usb 8-1: config 0 descriptor?? [ 495.576774][T12743] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 49 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 495.682869][T23849] __nla_validate_parse: 1 callbacks suppressed [ 495.682882][T23849] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5822'. [ 495.697264][T23849] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 495.777330][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 495.777356][ T42] audit: type=1400 audit(495.705:26566): avc: denied { read write } for pid=23830 comm="syz.3.5817" name="lp0" dev="devtmpfs" ino=3844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 495.798393][ C3] usblp0: nonzero read bulk status received: -71 [ 495.799299][ T5878] usb 8-1: USB disconnect, device number 49 [ 495.803462][ T42] audit: type=1400 audit(495.705:26567): avc: denied { open } for pid=23830 comm="syz.3.5817" path="/dev/usb/lp0" dev="devtmpfs" ino=3844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 496.001496][T23831] usblp0: removed [ 496.561617][T23855] netlink: 'syz.3.5824': attribute type 1 has an invalid length. [ 496.594514][T23855] 8021q: adding VLAN 0 to HW filter on device bond30 [ 496.638513][T23855] bond30: (slave geneve21): making interface the new active one [ 496.655398][T23855] bond30: (slave geneve21): Enslaving as an active interface with an up link [ 496.893601][T23865] batadv0: mtu less than device minimum [ 496.935871][T23871] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5829'. [ 496.959295][ T42] audit: type=1400 audit(496.885:26568): avc: denied { write } for pid=23867 comm="syz.5.5828" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 496.997358][ T42] audit: type=1400 audit(496.885:26569): avc: denied { ioctl } for pid=23867 comm="syz.5.5828" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x5006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 497.057181][T23878] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 497.225179][ T5512] libceph: connect (1)[c::]:6789 error -101 [ 497.232551][ T5512] libceph: mon0 (1)[c::]:6789 connect error [ 497.258099][T23880] ceph: No mds server is up or the cluster is laggy [ 497.348167][T23880] openvswitch: netlink: Missing valid actions attribute. [ 497.353677][T23880] openvswitch: netlink: Actions may not be safe on all matching packets [ 497.378336][T23364] udevd[23364]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 497.398967][ T42] audit: type=1400 audit(497.305:26570): avc: denied { map } for pid=23879 comm="syz.3.5831" path="socket:[124518]" dev="sockfs" ino=124518 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 497.478873][T23893] netlink: 400 bytes leftover after parsing attributes in process `syz.5.5832'. [ 497.490563][T23894] netlink: 400 bytes leftover after parsing attributes in process `syz.5.5832'. [ 497.556396][T23896] netlink: 'syz.5.5833': attribute type 1 has an invalid length. [ 497.622785][T23896] 8021q: adding VLAN 0 to HW filter on device bond5 [ 497.690589][T23896] bond5: (slave geneve4): making interface the new active one [ 497.710116][T23896] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 497.987149][T23907] kvm: pic: level sensitive irq not supported [ 498.234659][T23919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5841'. [ 498.237003][T23920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5841'. [ 498.450843][ T42] audit: type=1400 audit(498.385:26571): avc: denied { accept } for pid=23925 comm="syz.3.5843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 498.463875][T23926] syzkaller0: entered promiscuous mode [ 498.466380][T23926] syzkaller0: entered allmulticast mode [ 498.657377][T23930] ip_tables: iptables: counters copy to user failed while replacing table [ 498.671862][T23930] ip_tables: iptables: counters copy to user failed while replacing table [ 498.738423][ T42] audit: type=1400 audit(498.675:26572): avc: denied { unmount } for pid=19286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 498.809886][T23935] netlink: 92 bytes leftover after parsing attributes in process `syz.3.5847'. [ 498.829491][T23935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=23935 comm=syz.3.5847 [ 498.901929][T23937] syzkaller0: entered promiscuous mode [ 498.904264][T23937] syzkaller0: entered allmulticast mode [ 499.190787][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 499.211580][ T5730] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 499.215594][ T5730] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 499.219699][ T5730] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 499.222954][ T5730] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 499.466370][T23969] loop5: detected capacity change from 0 to 7 [ 499.485535][T23969] Dev loop5: unable to read RDB block 7 [ 499.489184][T23969] loop5: unable to read partition table [ 499.491243][T23969] loop5: partition table beyond EOD, truncated [ 499.495663][T23969] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 499.730875][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.830088][ T42] audit: type=1400 audit(499.765:26573): avc: denied { append } for pid=23983 comm="syz.5.5859" name="demux0" dev="devtmpfs" ino=951 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 499.935808][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.081368][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.160712][T23947] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.163126][T23947] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.165665][T23947] bridge_slave_0: entered allmulticast mode [ 500.169551][T23947] bridge_slave_0: entered promiscuous mode [ 500.173416][T23947] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.175783][T23947] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.180149][T23947] bridge_slave_1: entered allmulticast mode [ 500.188309][T23947] bridge_slave_1: entered promiscuous mode [ 500.225324][T24001] : renamed from bond_slave_0 (while UP) [ 500.234048][T24001] netlink: 'syz.5.5862': attribute type 10 has an invalid length. [ 500.238641][T24001] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5862'. [ 500.239760][T23947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 500.276553][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.298265][T23947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 500.314049][T23947] team0: Port device team_slave_0 added [ 500.318058][T23947] team0: Port device team_slave_1 added [ 500.334415][T23947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.336657][T23947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.345020][T23947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.349572][T23947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.351800][T23947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 500.359727][T23947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.391810][T23947] hsr_slave_0: entered promiscuous mode [ 500.398077][T24006] xt_ipcomp: unknown flags 1D [ 500.401705][T23947] hsr_slave_1: entered promiscuous mode [ 500.406285][T23947] debugfs: 'hsr0' already exists in 'hsr' [ 500.408360][T23947] Cannot create hsr debugfs directory [ 500.756639][ T42] audit: type=1400 audit(500.685:26574): avc: denied { write } for pid=24018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.830070][ T12] bridge_slave_1: left allmulticast mode [ 500.836255][ T12] bridge_slave_1: left promiscuous mode [ 500.853323][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.866578][ T12] bridge_slave_0: left allmulticast mode [ 500.876907][ T12] bridge_slave_0: left promiscuous mode [ 500.882068][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.900582][ T42] audit: type=1400 audit(500.835:26575): avc: denied { write } for pid=24030 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.106079][ T12] bond6 (unregistering): (slave geneve4): Releasing active interface [ 501.115807][ T12] bond3 (unregistering): (slave geneve3): Releasing active interface [ 501.122591][ T12] bond1 (unregistering): (slave geneve2): Releasing backup interface [ 501.142755][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.148147][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.152729][ T12] bond0 (unregistering): Released all slaves [ 501.163010][ T12] bond1 (unregistering): Released all slaves [ 501.176463][ T12] bond2 (unregistering): Released all slaves [ 501.192938][ T12] bond3 (unregistering): Released all slaves [ 501.203208][ T12] bond4 (unregistering): Released all slaves [ 501.215554][ T12] bond5 (unregistering): Released all slaves [ 501.226161][ T12] bond6 (unregistering): Released all slaves [ 501.246642][ T5435] 8021q: adding VLAN 0 to HW filter on device eth17 [ 501.247053][ T64] Bluetooth: hci0: command tx timeout [ 501.436122][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.439706][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.445866][ T42] audit: type=1400 audit(501.375:26576): avc: denied { write } for pid=24035 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.568709][ T64] Bluetooth: hci2: command 0x1003 tx timeout [ 501.575590][ T5730] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 501.657154][ T42] audit: type=1400 audit(501.595:26577): avc: denied { write } for pid=24040 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.733666][ T5435] 8021q: adding VLAN 0 to HW filter on device eth18 [ 501.834169][ T42] audit: type=1400 audit(501.775:26578): avc: denied { write } for pid=24049 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.890738][ T42] audit: type=1400 audit(501.815:26579): avc: denied { write } for pid=24057 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.981349][ T5435] 8021q: adding VLAN 0 to HW filter on device eth19 [ 502.061482][T24068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 502.124035][ T12] hsr_slave_0: left promiscuous mode [ 502.125743][ T42] audit: type=1400 audit(502.055:26580): avc: denied { write } for pid=24071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.139975][ T12] hsr_slave_1: left promiscuous mode [ 502.143405][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.146305][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.152441][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.158200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.185468][ T42] audit: type=1400 audit(502.115:26581): avc: denied { write } for pid=24074 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 502.221521][ T12] veth1_macvtap: left promiscuous mode [ 502.223756][ T12] veth0_macvtap: left promiscuous mode [ 502.225860][ T12] veth1_vlan: left promiscuous mode [ 502.229087][ T12] veth0_vlan: left promiscuous mode [ 502.256397][T24079] EXT4-fs (loop3): unable to read superblock [ 502.502163][ T12] team0 (unregistering): Port device team_slave_1 removed [ 502.520436][ T12] team0 (unregistering): Port device team_slave_0 removed [ 502.628025][ T5435] 8021q: adding VLAN 0 to HW filter on device eth20 [ 502.670226][T24092] syzkaller0: entered promiscuous mode [ 502.672046][T24092] syzkaller0: entered allmulticast mode [ 502.846605][ T42] audit: type=1400 audit(502.775:26582): avc: denied { unmount } for pid=22684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 503.330645][ T64] Bluetooth: hci0: command tx timeout [ 504.041032][ T5730] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 504.063251][ C2] hpet: Lost 1 RTC interrupts [ 504.112444][ C2] hpet: Lost 1 RTC interrupts [ 504.113916][ T5730] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 504.161695][ T5730] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 504.209767][ T5730] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 504.212543][ T5730] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 505.407994][ T64] Bluetooth: hci0: command tx timeout [ 506.251159][ T42] audit: type=1400 audit(506.185:26583): avc: denied { write } for pid=24112 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.310429][ T42] audit: type=1400 audit(506.235:26584): avc: denied { write } for pid=24116 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.365950][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5881'. [ 506.369070][ T64] Bluetooth: hci2: command tx timeout [ 506.376791][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5881'. [ 506.380583][T24122] netlink: 'syz.5.5881': attribute type 11 has an invalid length. [ 506.385490][T24122] netlink: 'syz.5.5881': attribute type 7 has an invalid length. [ 506.429088][ T42] audit: type=1400 audit(506.355:26585): avc: denied { write } for pid=24123 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.440140][T24122] jffs2: notice: (24122) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 506.459583][ T42] audit: type=1400 audit(506.385:26586): avc: denied { write } for pid=24119 comm="syz.5.5881" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 506.515131][ T42] audit: type=1400 audit(506.445:26587): avc: denied { write } for pid=24130 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.601042][ T42] audit: type=1400 audit(506.535:26588): avc: denied { create } for pid=24133 comm="syz.5.5883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 506.633786][ T42] audit: type=1400 audit(506.565:26589): avc: denied { write } for pid=24135 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.642120][T24134] netlink: 'syz.5.5883': attribute type 21 has an invalid length. [ 506.697295][ T42] audit: type=1400 audit(506.635:26590): avc: denied { write } for pid=24141 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.762613][T24144] netlink: 'syz.5.5885': attribute type 2 has an invalid length. [ 506.767374][T24144] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5885'. [ 506.823388][T24144] : entered promiscuous mode [ 506.864879][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.883771][T24152] netlink: 'syz.5.5887': attribute type 11 has an invalid length. [ 506.905557][T23947] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 506.910451][T23947] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.940763][T23947] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 506.947659][T23947] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 506.950986][T24150] tun0: tun_chr_ioctl cmd 1074025675 [ 506.952754][T24150] tun0: persist enabled [ 506.966088][T23947] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 506.966937][ T42] audit: type=1400 audit(506.895:26591): avc: denied { write } for pid=24155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.980710][T23947] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 506.984526][T24150] tun0: tun_chr_ioctl cmd 1074025675 [ 506.987038][T24150] tun0: persist disabled [ 507.045967][ T42] audit: type=1400 audit(506.975:26592): avc: denied { write } for pid=24161 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.055032][T24163] openvswitch: netlink: IP tunnel dst address not specified [ 507.065421][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.113954][T23947] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 507.128428][T23947] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 507.157556][T24159] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 507.163250][T24159] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 507.182147][T24159] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 507.191271][T24159] 8021q: adding VLAN 0 to HW filter on device eth0 [ 507.197697][T24159] 8021q: adding VLAN 0 to HW filter on device eth1 [ 507.199584][T24163] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 507.201319][T24159] 8021q: adding VLAN 0 to HW filter on device eth2 [ 507.207133][T24159] 8021q: adding VLAN 0 to HW filter on device eth3 [ 507.231361][T24159] 8021q: adding VLAN 0 to HW filter on device bond6 [ 507.339545][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.359618][ T5878] usb 8-1: new low-speed USB device number 50 using dummy_hcd [ 507.402313][T24108] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.404761][T24108] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.407455][T24108] bridge_slave_0: entered allmulticast mode [ 507.410265][T24108] bridge_slave_0: entered promiscuous mode [ 507.433081][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.446192][T24108] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.449404][T24108] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.451872][T24108] bridge_slave_1: entered allmulticast mode [ 507.454810][T24108] bridge_slave_1: entered promiscuous mode [ 507.481510][T24108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.498976][T24108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.520310][ T5878] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 507.524038][ T5878] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 507.535977][ T5878] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 507.539896][ T5878] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 507.544206][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 507.549358][ T5878] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 507.553159][ T5878] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 507.553192][T24108] team0: Port device team_slave_0 added [ 507.564414][ T5878] usb 8-1: string descriptor 0 read error: -22 [ 507.570299][ T5878] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 507.571994][T24108] team0: Port device team_slave_1 added [ 507.573249][ T5878] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.587101][ T5878] usb 8-1: config 0 descriptor?? [ 507.593547][ T5878] hub 8-1:0.0: bad descriptor, ignoring hub [ 507.597655][ T5878] hub 8-1:0.0: probe with driver hub failed with error -5 [ 507.609285][T22787] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 507.620691][ T5878] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input38 [ 507.699486][T24108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.703183][T24108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.714046][T24108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.801091][T24163] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.827723][T24108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.830522][T24108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.843612][T24108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.926724][ T12] bridge_slave_1: left allmulticast mode [ 507.933453][ T12] bridge_slave_1: left promiscuous mode [ 507.937046][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.941384][ T12] bridge_slave_0: left allmulticast mode [ 507.943284][ T12] bridge_slave_0: left promiscuous mode [ 507.945293][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.977231][ T847] usb 8-1: USB disconnect, device number 50 [ 508.077327][T24215] netlink: 260 bytes leftover after parsing attributes in process `syz.5.5892'. [ 508.161904][ T12] bond13 (unregistering): (slave geneve12): Releasing active interface [ 508.169650][ T12] bond10 (unregistering): (slave geneve11): Releasing active interface [ 508.176099][ T12] bond9 (unregistering): (slave geneve10): Releasing backup interface [ 508.185178][ T12] bond8 (unregistering): (slave geneve9): Releasing active interface [ 508.202357][ T12] bond7 (unregistering): (slave geneve8): Releasing backup interface [ 508.213728][ T12] bond6 (unregistering): (slave geneve7): Releasing backup interface [ 508.228266][ T12] bond5 (unregistering): (slave geneve6): Releasing active interface [ 508.233781][T24221] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5893'. [ 508.241442][ T12] bond4 (unregistering): (slave geneve5): Releasing backup interface [ 508.253092][ T12] bond3 (unregistering): (slave geneve4): Releasing backup interface [ 508.259172][ T12] bond2 (unregistering): (slave geneve3): Releasing active interface [ 508.265281][ T12] bond1 (unregistering): (slave geneve2): Releasing active interface [ 508.281628][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.286462][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.294050][ T12] bond0 (unregistering): Released all slaves [ 508.302156][ T12] bond1 (unregistering): Released all slaves [ 508.312098][ T12] bond2 (unregistering): Released all slaves [ 508.323036][ T12] bond3 (unregistering): Released all slaves [ 508.333671][ T12] bond4 (unregistering): Released all slaves [ 508.347282][ T12] bond5 (unregistering): Released all slaves [ 508.372453][ T12] bond6 (unregistering): Released all slaves [ 508.383394][ T12] bond7 (unregistering): Released all slaves [ 508.394226][ T12] bond8 (unregistering): Released all slaves [ 508.410741][ T12] bond9 (unregistering): Released all slaves [ 508.427156][ T12] bond10 (unregistering): Released all slaves [ 508.443388][ T12] bond11 (unregistering): Released all slaves [ 508.449842][ T64] Bluetooth: hci2: command tx timeout [ 508.464697][ T12] bond12 (unregistering): Released all slaves [ 508.489562][ T12] bond13 (unregistering): Released all slaves [ 508.522016][ T13] openvswitch: cpu_id mismatch with handler threads [ 508.560686][T24108] hsr_slave_0: entered promiscuous mode [ 508.565282][T24108] hsr_slave_1: entered promiscuous mode [ 508.567839][T24108] debugfs: 'hsr0' already exists in 'hsr' [ 508.569734][T24108] Cannot create hsr debugfs directory [ 508.627551][T23947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.719014][T24225] netlink: 45 bytes leftover after parsing attributes in process `syz.5.5895'. [ 508.723896][T23947] 8021q: adding VLAN 0 to HW filter on device team0 [ 508.785893][T20586] usb 8-1: new full-speed USB device number 51 using dummy_hcd [ 508.829026][ T12] IPVS: stopping backup sync thread 23283 ... [ 508.872040][T12484] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.874417][T12484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 508.878624][T12484] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.880966][T12484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 508.928247][T16207] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.958123][T16207] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.963066][T16207] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.969252][T20586] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.972596][T20586] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 6 [ 508.973084][T24230] x_tables: duplicate underflow at hook 1 [ 508.976682][T20586] usb 8-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 508.982596][T20586] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.011216][T24230] program syz.5.5896 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 509.011901][T20586] keyspan 8-1:1.0: Keyspan 2 port adapter converter detected [ 509.033674][T20586] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 81 [ 509.036392][T20586] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 1 [ 509.044529][T20586] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 84 [ 509.047712][T20586] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 2 [ 509.052496][T20586] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 509.077619][T20586] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 88 [ 509.080167][T20586] keyspan 8-1:1.0: found no endpoint descriptor for endpoint 6 [ 509.084143][T20586] usb 8-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 509.209524][T24239] Bluetooth: MGMT ver 1.23 [ 509.239939][T16207] bond0: (slave 30): interface is now down [ 509.243514][T16207] bond0: (slave bond_slave_1): interface is now down [ 509.257782][T16207] bond0: (slave 30): interface is now down [ 509.262569][T16207] bond0: (slave bond_slave_1): interface is now down [ 509.310578][T16207] bond0: now running without any active interface! [ 509.412779][ T12] hsr_slave_0: left promiscuous mode [ 509.415801][ T12] hsr_slave_1: left promiscuous mode [ 509.418728][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 509.421025][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 509.424180][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 509.426335][T20586] usb 8-1: USB disconnect, device number 51 [ 509.428618][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 509.434734][ T12] batman_adv: batadv0: Removing interface: ipvlan4 [ 509.437338][T20586] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 509.444361][T20586] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 509.447682][T20586] keyspan 8-1:1.0: device disconnected [ 509.463772][ T12] veth0_vlan: left promiscuous mode [ 509.629692][ T12] team0 (unregistering): Port device team_slave_1 removed [ 509.643403][ T12] team0 (unregistering): Port device team_slave_0 removed [ 509.791438][T16207] openvswitch: cpu_id mismatch with handler threads [ 509.791654][T16207] openvswitch: cpu_id mismatch with handler threads [ 509.919419][ T847] openvswitch: cpu_id mismatch with handler threads [ 509.960989][T23947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 510.181463][ T5435] 8021q: adding VLAN 0 to HW filter on device eth21 [ 510.415204][T24299] Sensor A: ================= START STATUS ================= [ 510.422011][T24299] Sensor A: Test Pattern: Alternating Hor Lines [ 510.485627][T24299] Sensor A: Show Information: All [ 510.488111][T24299] Sensor A: Vertical Flip: false [ 510.497449][T24299] Sensor A: Horizontal Flip: false [ 510.499874][T24299] Sensor A: Brightness: 128 [ 510.501928][T24299] Sensor A: Contrast: 3 [ 510.503727][T24299] Sensor A: Hue: 0 [ 510.505349][T24299] Sensor A: Saturation: 128 [ 510.510109][T24299] Sensor A: Pixel Rate: 160000000 [ 510.512707][T24299] Sensor A: Horizontal Blanking: 800 [ 510.515005][T24299] Sensor A: Vertical Blanking: 3223 [ 510.517695][T24299] Sensor A: ================== END STATUS ================== [ 510.535743][ T64] Bluetooth: hci2: command tx timeout [ 512.616372][ T64] Bluetooth: hci2: command tx timeout [ 513.396525][ T5435] 8021q: adding VLAN 0 to HW filter on device eth22 [ 513.397827][ T12] IPVS: stop unused estimator thread 0... [ 513.512763][T24306] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=24306 comm=syz.5.5905 [ 513.629053][T23947] veth0_vlan: entered promiscuous mode [ 513.646663][T24108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 513.655039][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 513.655058][ T42] audit: type=1400 audit(513.585:26614): avc: denied { write } for pid=24313 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.676428][T24108] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.683069][T23947] veth1_vlan: entered promiscuous mode [ 513.688427][T24108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 513.698867][T24108] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.709592][T24108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 513.723236][T24108] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.733495][ T42] audit: type=1400 audit(513.665:26615): avc: denied { write } for pid=24320 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 513.768170][T24108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 513.784166][T24108] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.811716][T23947] veth0_macvtap: entered promiscuous mode [ 513.826461][T23947] veth1_macvtap: entered promiscuous mode [ 513.835816][ T5435] 8021q: adding VLAN 0 to HW filter on device eth23 [ 513.855158][T23947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.857970][T24333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5910'. [ 513.873406][T23947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.938960][T22787] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.980177][T24335] nftables ruleset with unbound chain [ 513.988836][T24335] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 513.995239][T24335] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 514.002893][T24108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 514.048188][T24108] 8021q: adding VLAN 0 to HW filter on device team0 [ 514.128389][T12484] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.130740][T12484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 514.145574][ T42] audit: type=1400 audit(514.075:26616): avc: denied { write } for pid=24337 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.170842][T12484] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.175351][T23472] bridge0: port 2(bridge_slave_1) entered blocking state [ 514.175899][T12484] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.177717][T23472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.197890][T16207] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.207118][ C3] openvswitch: cpu_id mismatch with handler threads [ 514.219483][T16207] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.245174][ T42] audit: type=1400 audit(514.165:26617): avc: denied { write } for pid=24349 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.252158][T23472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.252182][T23472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.253091][T16207] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.291588][T24352] netlink: 'syz.5.5915': attribute type 1 has an invalid length. [ 514.306457][T24352] 8021q: adding VLAN 0 to HW filter on device bond7 [ 514.336947][ T5435] 8021q: adding VLAN 0 to HW filter on device eth24 [ 514.368196][T24352] bond7: (slave geneve5): making interface the new active one [ 514.375951][T24352] bond7: (slave geneve5): Enslaving as an active interface with an up link [ 514.470063][ T42] audit: type=1400 audit(514.395:26618): avc: denied { write } for pid=24357 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.668485][ T42] audit: type=1400 audit(514.595:26619): avc: denied { write } for pid=24371 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.784610][ T42] audit: type=1400 audit(514.715:26620): avc: denied { write } for pid=24384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.832112][ T42] audit: type=1400 audit(514.765:26621): avc: denied { listen } for pid=24388 comm="syz.9.5922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 514.863322][ T42] audit: type=1400 audit(514.795:26622): avc: denied { write } for pid=24390 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 514.966302][T24108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.976222][ T42] audit: type=1400 audit(514.905:26623): avc: denied { write } for pid=24400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 515.037647][T24108] veth0_vlan: entered promiscuous mode [ 515.055757][T24108] veth1_vlan: entered promiscuous mode [ 515.066315][T24413] Mass Storage Function, version: 2009/09/11 [ 515.092128][T24413] LUN: removable file: (no medium) [ 515.094033][T24108] veth0_macvtap: entered promiscuous mode [ 515.100495][T24108] veth1_macvtap: entered promiscuous mode [ 515.112058][T24108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.124193][T24108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.146001][T24416] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5928'. [ 515.148251][T24413] LUN: removable file: (no medium) [ 515.178030][T22787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.229382][T16207] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.241725][T16207] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.309732][T12477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.321057][T12477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.351931][T12477] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.357337][T12477] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.387962][T16207] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.607344][T24438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5932'. [ 515.610460][T24438] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5932'. [ 515.613364][T24438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5932'. [ 515.769413][T24466] SELinux: Context system_u:object_r:semanage_exec_t:s0 is not valid (left unmapped). [ 515.919551][T24480] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 515.924837][T24482] libceph: resolve '0' (ret=-3): failed [ 516.022185][T24494] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 516.065634][T24493] netlink: NAT attribute has 5 unknown bytes [ 516.069352][T24493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 516.076533][T24491] netlink: 'syz.5.5948': attribute type 12 has an invalid length. [ 516.085176][T24491] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 516.142311][T24505] netlink: 'syz.0.5950': attribute type 1 has an invalid length. [ 516.158123][T24505] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 516.193371][T24508] netlink: 'syz.9.5951': attribute type 10 has an invalid length. [ 516.433385][T24529] tipc: Started in network mode [ 516.435771][T24529] tipc: Node identity e6feea06efdf, cluster identity 4711 [ 516.439123][T22495] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 516.442700][T24529] tipc: Enabled bearer , priority 0 [ 516.446121][T24530] tipc: Enabling of bearer rejected, already enabled [ 516.489663][T24529] syzkaller0: entered promiscuous mode [ 516.492044][T24529] syzkaller0: entered allmulticast mode [ 516.495198][T24529] tipc: Resetting bearer [ 516.572728][T12484] tipc: Resetting bearer [ 516.592326][T24530] bond1: Removing last arp target with arp_interval on [ 516.604683][T22495] usb 10-1: Using ep0 maxpacket: 32 [ 516.611714][T22495] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 516.627160][T22495] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 516.634516][T22495] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 516.638438][T24529] bond2: Removing last arp target with arp_interval on [ 516.640697][T22495] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 516.650128][T24528] tipc: Resetting bearer [ 516.653682][T22495] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 516.658606][T22495] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.662012][T22495] usb 10-1: Product: syz [ 516.663858][T22495] usb 10-1: Manufacturer: syz [ 516.665622][T22495] usb 10-1: SerialNumber: syz [ 516.674486][ C0] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 516.686701][T22495] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input39 [ 516.838667][T24540] program syz.3.5957 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.916994][T22495] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 516.921686][T22495] (id 0x00) [ 516.984396][T22495] rc_core: IR keymap rc-imon-pad not found [ 516.990395][T22495] Registered IR keymap rc-empty [ 516.992633][T22495] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 517.007835][T22495] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 517.145094][T22495] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 517.151555][T22495] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input40 [ 517.192566][T22495] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:14> initialized [ 517.726911][T24545] imon:send_packet: task interrupted [ 517.729266][T24545] imon:send_packet: packet tx failed (-512) [ 517.739061][T24545] imon:vfd_write: send packet #1 failed [ 517.767035][T24545] imon:send_packet: packet tx failed (-32) [ 517.812020][T24545] imon:vfd_write: send packet #0 failed [ 517.875237][ T5878] usb 10-1: USB disconnect, device number 14 [ 518.726102][T24552] netlink: 'syz.5.5959': attribute type 1 has an invalid length. [ 520.528480][T24528] tipc: Disabling bearer [ 520.536493][T24541] workqueue: Failed to create a rescuer kthread for wq "bond31": -EINTR [ 520.546202][ T56] tipc: Node number set to 153217542 [ 520.580142][T24572] netlink: 'syz.3.5961': attribute type 7 has an invalid length. [ 520.588440][T24572] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5961'. [ 520.605852][T24572] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5961'. [ 520.613439][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 520.613453][ T42] audit: type=1400 audit(520.545:26648): avc: denied { write } for pid=24570 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.686231][ T42] audit: type=1400 audit(520.615:26649): avc: denied { write } for pid=24577 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.772227][ T42] audit: type=1400 audit(520.705:26650): avc: denied { write } for pid=24583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.793856][T24586] VFS: Mount too revealing [ 520.924269][T24604] netlink: 'syz.0.5971': attribute type 7 has an invalid length. [ 520.928374][ T42] audit: type=1400 audit(520.865:26651): avc: denied { write } for pid=24597 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 520.929142][T24604] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5971'. [ 520.955439][T24604] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5971'. [ 520.981764][T24607] syz_tun: left allmulticast mode [ 520.986910][T24607] syz_tun: left promiscuous mode [ 520.988656][T24607] bridge0: port 3(syz_tun) entered disabled state [ 521.081475][T24607] bridge_slave_0: left allmulticast mode [ 521.092643][T24607] bridge_slave_0: left promiscuous mode [ 521.094540][T24607] bridge0: port 1(bridge_slave_0) entered disabled state [ 521.113670][ T42] audit: type=1400 audit(521.045:26652): avc: denied { write } for pid=24609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.160939][T24607] bridge_slave_1: left allmulticast mode [ 521.172526][T24607] bridge_slave_1: left promiscuous mode [ 521.174532][T24607] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.271328][ T42] audit: type=1400 audit(521.205:26653): avc: denied { write } for pid=24641 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 521.320319][T24607] bond0: (slave bond_slave_0): Releasing backup interface [ 521.361021][T24607] bond0: (slave bond_slave_1): Releasing backup interface [ 521.418916][T24607] team0: Port device team_slave_0 removed [ 521.434641][T24607] team0: Port device team_slave_1 removed [ 521.437567][T24607] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 521.440042][T24607] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 521.443733][T24607] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.446127][T24607] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.450769][T24607] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 521.475244][T24632] team0: Port device xfrm0 added [ 521.492102][ T42] audit: type=1326 audit(521.425:26654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24651 comm="syz.9.5979" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f807bd9e0d9 code=0x0 [ 522.828761][ C2] hpet: Lost 1 RTC interrupts [ 523.167296][ C3] openvswitch: cpu_id mismatch with handler threads [ 524.079458][ C2] hpet: Lost 1 RTC interrupts [ 524.125593][ C2] hpet: Lost 1 RTC interrupts [ 525.268293][T24653] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 525.372313][T24676] netlink: 'syz.3.5983': attribute type 7 has an invalid length. [ 525.397403][T24676] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5983'. [ 525.403309][T24676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5983'. [ 525.405731][T24684] netlink: 'syz.0.5985': attribute type 1 has an invalid length. [ 525.412336][T24685] netlink: 'syz.9.5984': attribute type 1 has an invalid length. [ 525.429687][T24687] program syz.5.5986 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.444165][T24685] 8021q: adding VLAN 0 to HW filter on device bond3 [ 525.499823][T24685] bond3: (slave geneve2): making interface the new active one [ 525.504707][T24685] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 525.622731][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 525.622748][ T42] audit: type=1400 audit(525.555:26657): avc: denied { write } for pid=24692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.709909][ T42] audit: type=1400 audit(525.645:26658): avc: denied { write } for pid=24700 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.711839][T24698] batman_adv: batadv0: Adding interface: dummy0 [ 525.718453][T24698] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.738461][T24698] batman_adv: batadv0: Interface activated: dummy0 [ 525.746211][T24706] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 525.782217][T24698] netlink: 'syz.9.5988': attribute type 10 has an invalid length. [ 525.842570][T24703] batadv0: mtu less than device minimum [ 525.849024][ T42] audit: type=1400 audit(525.785:26659): avc: denied { write } for pid=24708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.860391][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.865218][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.868965][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.872673][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.876397][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.880155][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.883950][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.887683][T24703] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 525.898387][ T42] audit: type=1400 audit(525.835:26660): avc: denied { write } for pid=24716 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 525.906062][T24709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5991'. [ 525.916708][ T42] audit: type=1400 audit(525.845:26661): avc: denied { getopt } for pid=24701 comm="syz.5.5990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 525.919105][T24698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.963350][T24698] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 526.034373][ T42] audit: type=1400 audit(525.965:26662): avc: denied { write } for pid=24722 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.092278][ T42] audit: type=1400 audit(526.025:26663): avc: denied { write } for pid=24732 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.230220][ T42] audit: type=1400 audit(526.165:26664): avc: denied { write } for pid=24745 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.256751][ T42] audit: type=1400 audit(526.185:26665): avc: denied { write } for pid=24749 comm="syz.5.5999" path="socket:[129340]" dev="sockfs" ino=129340 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 526.312257][ T42] audit: type=1400 audit(526.245:26666): avc: denied { write } for pid=24755 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 526.327798][T24761] netlink: 'syz.3.6001': attribute type 7 has an invalid length. [ 526.331632][T24761] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6001'. [ 526.334387][T24761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6001'. [ 526.375904][ T5435] veth0_vlan: left promiscuous mode [ 526.410162][T24765] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 526.422967][T14482] veth0_vlan: entered promiscuous mode [ 526.439781][T24768] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6004'. [ 526.443695][T24768] tipc: Invalid UDP bearer configuration [ 526.443741][T24768] tipc: Enabling of bearer rejected, failed to enable media [ 526.524374][T24780] fuse: Unknown parameter 'rotmode' [ 526.702062][T24787] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 526.887395][T24798] netlink: 5120 bytes leftover after parsing attributes in process `syz.9.6011'. [ 526.935693][T24803] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 526.952681][T24803] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6013'. [ 526.970879][T24808] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 527.076114][T24821] netlink: 'syz.0.6016': attribute type 1 has an invalid length. [ 527.197108][T20586] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 527.346980][T20586] usb 14-1: Using ep0 maxpacket: 8 [ 527.355117][T20586] usb 14-1: config index 0 descriptor too short (expected 8192, got 45) [ 527.360779][T20586] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 527.366931][T20586] usb 14-1: config 0 has no interfaces? [ 527.373128][T20586] usb 14-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 527.379707][T20586] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.388512][T20586] usb 14-1: config 0 descriptor?? [ 527.420010][T24836] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6020'. [ 527.480522][T24838] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 527.690415][T20586] usb 14-1: string descriptor 0 read error: -71 [ 527.697238][T20586] usb 14-1: USB disconnect, device number 4 [ 527.985133][T24857] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 528.205592][T24861] netlink: 'syz.3.6027': attribute type 30 has an invalid length. [ 528.261028][T24862] netlink: 'syz.3.6027': attribute type 30 has an invalid length. [ 528.277657][T24861] netlink: 'syz.3.6027': attribute type 30 has an invalid length. [ 528.313436][T24868] net_ratelimit: 12 callbacks suppressed [ 528.313456][T24868] openvswitch: netlink: IP tunnel TTL not specified. [ 528.319706][T24868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.433508][T24878] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6032'. [ 528.480199][T24881] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6033'. [ 528.551834][T24884] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6035'. [ 528.565446][T24887] netlink: 'syz.5.6036': attribute type 2 has an invalid length. [ 528.631039][T24885] netlink: 'syz.0.6034': attribute type 178 has an invalid length. [ 528.636283][T24885] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 528.671989][T24891] fuse: Invalid rootmode [ 528.821350][T24898] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 528.822464][T24900] KVM: debugfs: duplicate directory 24900-6 [ 528.875548][T24908] vlan7: entered promiscuous mode [ 528.879379][T24908] gretap0: entered promiscuous mode [ 529.108908][T24917] openvswitch: netlink: Key type 168 is out of range max 32 [ 529.138791][ T1127] ata1.00: exception Emask 0x0 SAct 0x8000000 SErr 0x0 action 0x6 [ 529.145697][ T1127] ata1.00: waking up from sleep [ 529.147540][ T1127] ata1: hard resetting link [ 529.217535][T24923] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 529.220610][T24923] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 529.226046][T24923] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 529.236909][T24923] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 529.239423][T24923] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 529.347152][T24929] nvme_fabrics: missing parameter 'traddr=%s' [ 529.416251][T24935] xt_hashlimit: size too large, truncated to 1048576 [ 529.461300][T24938] geneve0: entered promiscuous mode [ 529.478036][ T1127] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 529.488423][ T1127] ata1.00: configured for UDMA/100 [ 529.493841][ T1127] ata1: EH complete [ 529.805350][T24952] netlink: 'syz.3.6055': attribute type 11 has an invalid length. [ 529.976720][T24966] 8021q: adding VLAN 0 to HW filter on device bond4 [ 530.000461][T24966] bond4: (slave geneve3): Enslaving as an active interface with an up link [ 530.017037][ T5823] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 530.210132][ T5823] usb 10-1: Using ep0 maxpacket: 32 [ 530.218821][T24977] netlink: 'syz.9.6064': attribute type 10 has an invalid length. [ 530.218972][ T5823] usb 10-1: unable to get BOS descriptor or descriptor too short [ 530.240279][ T5823] usb 10-1: string descriptor 0 read error: -22 [ 530.242785][ T5823] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 530.246404][ T5823] usb 10-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 530.300598][ T5823] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 530.306590][ T5823] dw2102: su3000_power_ctrl: 1, initialized 0 [ 530.314002][ T5823] dvb-usb: bulk message failed: -22 (2/0) [ 530.328374][ T5823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.332410][ T5823] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 530.336734][ T5823] usb 10-1: media controller created [ 530.343706][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 530.349278][ T5823] dw2102: i2c transfer failed. [ 530.352606][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 530.354440][ T5823] dw2102: i2c transfer failed. [ 530.356008][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 530.360788][ T5823] dw2102: i2c transfer failed. [ 530.362347][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 530.364172][ T5823] dw2102: i2c transfer failed. [ 530.365628][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 530.368149][ T5823] dw2102: i2c transfer failed. [ 530.369761][ T5823] dvb-usb: bulk message failed: -22 (6/0) [ 530.371615][ T5823] dw2102: i2c transfer failed. [ 530.373122][ T5823] dvb-usb: MAC address: 02:02:02:02:02:02 [ 530.382762][ T5823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.400883][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 530.403639][ T5823] dw2102: command 0x0e transfer failed. [ 530.408987][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 530.410834][ T5823] dw2102: command 0x0e transfer failed. [ 530.494926][T24977] team0 (unregistering): Port device team_slave_0 removed [ 530.514019][T24977] team0 (unregistering): Port device team_slave_1 removed [ 530.720784][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 530.722746][ T5823] dw2102: command 0x0e transfer failed. [ 530.724953][ T5823] dvb-usb: bulk message failed: -22 (3/0) [ 530.731911][ T5823] dw2102: command 0x0e transfer failed. [ 530.734660][ T5823] dvb-usb: bulk message failed: -22 (1/0) [ 530.737711][ T5823] dw2102: command 0x51 transfer failed. [ 530.761776][ T5823] DVB: Unable to find symbol ds3000_attach() [ 530.764441][ T5823] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 530.837764][ T5823] rc_core: IR keymap rc-su3000 not found [ 530.839669][ T5823] Registered IR keymap rc-empty [ 530.842913][ T5823] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0 [ 530.850404][ T5823] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.5/usb10/10-1/rc/rc0/input41 [ 530.855445][ T5823] dvb-usb: schedule remote query interval to 150 msecs. [ 530.858047][ T5823] dw2102: su3000_power_ctrl: 0, initialized 1 [ 530.865727][ T5823] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 530.885684][ T5823] usb 10-1: USB disconnect, device number 15 [ 530.934789][ T5823] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 530.946333][T24998] rdma_rxe: rxe_newlink: failed to add lo [ 531.092243][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 531.092265][ T42] audit: type=1400 audit(531.025:26676): avc: denied { read } for pid=25020 comm="syz.5.6075" laddr=172.20.20.170 lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 531.247017][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 531.249641][ T64] Bluetooth: hci4: command 0x0c1a tx timeout [ 531.364614][T25029] __nla_validate_parse: 9 callbacks suppressed [ 531.364628][T25029] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6077'. [ 531.499981][ T42] audit: type=1400 audit(531.435:26677): avc: denied { remount } for pid=25031 comm="syz.5.6078" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 531.552483][ T42] audit: type=1400 audit(531.485:26678): avc: denied { watch } for pid=25033 comm="syz.3.6079" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 531.564432][ T42] audit: type=1400 audit(531.485:26679): avc: denied { watch_sb watch_reads } for pid=25033 comm="syz.3.6079" path="/sys/kernel/rcu_expedited" dev="sysfs" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=file permissive=1 [ 531.703223][T25034] netlink: 'syz.3.6079': attribute type 19 has an invalid length. [ 531.748003][ T5823] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 531.748860][T25040] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.6081'. [ 531.912836][ T5823] usb 14-1: unable to get BOS descriptor or descriptor too short [ 531.918037][ T5823] usb 14-1: config 0 has no interfaces? [ 531.924959][ T5823] usb 14-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice=42.26 [ 531.935517][ T5823] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.936892][ T42] audit: type=1400 audit(531.865:26680): avc: denied { write } for pid=25042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 531.939001][ T5823] usb 14-1: Product: syz [ 531.949076][ T5823] usb 14-1: Manufacturer: syz [ 531.950857][ T5823] usb 14-1: SerialNumber: syz [ 531.959751][ T5823] usb 14-1: config 0 descriptor?? [ 532.000185][ T42] audit: type=1400 audit(531.935:26681): avc: denied { write } for pid=25045 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 532.522098][T25055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.529887][T25055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.634705][T25067] comedi comedi2: dac02: I/O base address or length out of range [ 532.837171][T25075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6089'. [ 532.881870][T25075] team0: Port device team_slave_0 removed [ 533.121882][ T5730] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 533.143916][T20586] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 533.223334][T25099] netlink: 'syz.3.6098': attribute type 1 has an invalid length. [ 533.260488][T25099] 8021q: adding VLAN 0 to HW filter on device bond31 [ 533.307559][T25099] bond31: (slave geneve22): making interface the new active one [ 533.316223][T25099] bond31: (slave geneve22): Enslaving as an active interface with an up link [ 533.327014][ T5730] Bluetooth: hci2: command 0x0c1a tx timeout [ 533.417724][T20586] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 533.631376][T25114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6102'. [ 533.645616][T25114] 8021q: adding VLAN 0 to HW filter on device bond32 [ 533.773307][T25119] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6104'. [ 533.931008][T20586] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 534.178949][T12743] usb 14-1: USB disconnect, device number 5 [ 534.207310][T25089] ceph: No mds server is up or the cluster is laggy [ 534.280219][T25145] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 534.485797][T25158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6115'. [ 534.498795][T25158] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.530840][T25158] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 534.603802][T25163] syz.0.6117: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 534.609895][T25163] CPU: 3 UID: 0 PID: 25163 Comm: syz.0.6117 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.609923][T25163] Tainted: [L]=SOFTLOCKUP [ 534.609930][T25163] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 534.609949][T25163] Call Trace: [ 534.609965][T25163] [ 534.609973][T25163] dump_stack_lvl+0x100/0x190 [ 534.610109][T25163] warn_alloc.cold+0x94/0xa8 [ 534.610150][T25163] ? __pfx_warn_alloc+0x10/0x10 [ 534.610191][T25163] ? register_lock_class+0x40/0x560 [ 534.610230][T25163] ? kasan_save_stack+0x3f/0x50 [ 534.610253][T25163] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 534.610270][T25163] ? xskq_create+0x52/0x1d0 [ 534.610317][T25163] ? xsk_setsockopt+0x743/0xab0 [ 534.610335][T25163] ? do_sock_setsockopt+0xf3/0x1d0 [ 534.610373][T25163] ? __sys_setsockopt+0x195/0x220 [ 534.610392][T25163] ? __x64_sys_setsockopt+0xbd/0x160 [ 534.610411][T25163] ? do_syscall_64+0x115/0x870 [ 534.610434][T25163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.610456][T25163] ? xskq_create+0xfb/0x1d0 [ 534.610477][T25163] __vmalloc_node_range_noprof+0x136c/0x1630 [ 534.610510][T25163] ? xskq_create+0xfb/0x1d0 [ 534.610534][T25163] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 534.610562][T25163] ? kasan_save_track+0x14/0x30 [ 534.610580][T25163] ? __kasan_kmalloc+0xaa/0xb0 [ 534.610601][T25163] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 534.610617][T25163] ? xskq_create+0xfb/0x1d0 [ 534.610636][T25163] vmalloc_user_noprof+0x9e/0xe0 [ 534.610659][T25163] ? xskq_create+0xfb/0x1d0 [ 534.610678][T25163] xskq_create+0xfb/0x1d0 [ 534.610698][T25163] xsk_setsockopt+0x743/0xab0 [ 534.610717][T25163] ? __pfx_xsk_setsockopt+0x10/0x10 [ 534.610744][T25163] ? find_held_lock+0x2b/0x80 [ 534.610758][T25163] ? __fget_files+0x215/0x3d0 [ 534.610780][T25163] ? selinux_socket_setsockopt+0x6a/0x80 [ 534.610836][T25163] ? __pfx_xsk_setsockopt+0x10/0x10 [ 534.610857][T25163] do_sock_setsockopt+0xf3/0x1d0 [ 534.610885][T25163] __sys_setsockopt+0x195/0x220 [ 534.610911][T25163] __x64_sys_setsockopt+0xbd/0x160 [ 534.610933][T25163] ? do_syscall_64+0x90/0x870 [ 534.610955][T25163] ? lockdep_hardirqs_on+0x78/0x100 [ 534.610977][T25163] do_syscall_64+0x115/0x870 [ 534.610997][T25163] ? clear_bhb_loop+0x70/0xc0 [ 534.611018][T25163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.611035][T25163] RIP: 0033:0x7f583d99e0d9 [ 534.611051][T25163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.611066][T25163] RSP: 002b:00007f583e896028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 534.611083][T25163] RAX: ffffffffffffffda RBX: 00007f583dc25fa0 RCX: 00007f583d99e0d9 [ 534.611094][T25163] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 534.611104][T25163] RBP: 00007f583da35024 R08: 0000000000000029 R09: 0000000000000000 [ 534.611114][T25163] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.611124][T25163] R13: 00007f583dc26038 R14: 00007f583dc25fa0 R15: 00007ffde332c678 [ 534.611169][T25163] [ 534.611200][T25163] Mem-Info: [ 534.698185][T12743] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 534.699912][T25163] active_anon:57132 inactive_anon:537 isolated_anon:63 [ 534.699912][T25163] active_file:4771 inactive_file:29229 isolated_file:0 [ 534.699912][T25163] unevictable:3048 dirty:234 writeback:0 [ 534.699912][T25163] slab_reclaimable:10283 slab_unreclaimable:91222 [ 534.699912][T25163] mapped:25741 shmem:44753 pagetables:4262 [ 534.699912][T25163] sec_pagetables:305 bounce:0 [ 534.699912][T25163] kernel_misc_reclaimable:0 [ 534.699912][T25163] free:384836 free_pcp:23960 free_cma:0 [ 534.748983][T25163] Node 0 active_anon:220204kB inactive_anon:2148kB active_file:19084kB inactive_file:116428kB unevictable:2000kB isolated(anon):1848kB isolated(file):0kB mapped:57756kB dirty:936kB writeback:0kB shmem:176884kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:20480kB pagetables:7588kB sec_pagetables:1220kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 534.761657][T25163] Node 1 active_anon:6696kB inactive_anon:0kB active_file:0kB inactive_file:488kB unevictable:10192kB isolated(anon):0kB isolated(file):0kB mapped:45208kB dirty:0kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:8192kB kernel_stack:280kB pagetables:9376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 534.774887][T25163] Node 0 DMA free:5192kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:5104kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:456kB local_pcp:128kB free_cma:0kB [ 534.777133][ T10] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 534.785686][T25163] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 534.791212][T25163] Node 0 DMA32 free:63848kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:215288kB inactive_anon:2068kB active_file:19084kB inactive_file:116428kB unevictable:2000kB writepending:936kB zspages:0kB present:2080628kB managed:1255332kB mlocked:0kB bounce:0kB free_pcp:29636kB local_pcp:11264kB free_cma:0kB [ 534.803262][T25163] lowmem_reserve[]: 0 0 0 0 0 [ 534.805069][T25163] Node 1 Normal free:1471396kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6656kB inactive_anon:0kB active_file:0kB inactive_file:488kB unevictable:10192kB writepending:0kB zspages:1700kB present:2097152kB managed:1781884kB mlocked:8192kB bounce:0kB free_pcp:65120kB local_pcp:37096kB free_cma:0kB [ 534.816248][T25163] lowmem_reserve[]: 0 0 0 0 0 [ 534.818129][T25163] Node 0 DMA: 4*4kB (UM) 5*8kB (UM) 1*16kB (U) 4*32kB (U) 2*64kB (U) 4*128kB (U) 5*256kB (UM) 4*512kB (UM) 1*1024kB (U) 0*2048kB 0*4096kB = 5192kB [ 534.829629][T25163] Node 0 DMA32: 1238*4kB (UME) 694*8kB (UME) 134*16kB (UM) 495*32kB (UME) 79*64kB (UME) 33*128kB (UME) 25*256kB (UME) 18*512kB (UM) 10*1024kB (M) 0*2048kB 0*4096kB = 63624kB [ 534.836763][T25163] Node 1 Normal: 25*4kB (M) 112*8kB (UME) 268*16kB (UM) 274*32kB (UM) 257*64kB (UME) 245*128kB (UM) 206*256kB (UME) 196*512kB (UME) 157*1024kB (UM) 7*2048kB (UE) 264*4096kB (UM) = 1471396kB [ 534.847759][T25163] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.851798][T25163] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 534.855285][T25163] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 534.859694][T25163] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 534.863728][T25163] 78696 total pagecache pages [ 534.865705][T25163] 0 pages in swap cache [ 534.867655][T12743] usb 14-1: Using ep0 maxpacket: 16 [ 534.870154][T25163] Free swap = 122300kB [ 534.871978][T25163] Total swap = 124996kB [ 534.874227][T25163] 1048443 pages RAM [ 534.875467][T25166] netlink: 'syz.5.6118': attribute type 20 has an invalid length. [ 534.877156][T25163] 0 pages HighMem/MovableOnly [ 534.879564][T25166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6118'. [ 534.880847][T25163] 285299 pages reserved [ 534.885432][T12743] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 534.890115][T25163] 0 pages cma reserved [ 534.893363][T12743] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.902989][T12743] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 534.909294][T12743] usb 14-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 534.913856][T12743] usb 14-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 534.926793][T12743] usb 14-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 534.931020][T12743] usb 14-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 534.934249][T12743] usb 14-1: Manufacturer: syz [ 534.938632][ T10] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 534.938919][T12743] usb 14-1: config 0 descriptor?? [ 534.948109][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 534.952817][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 534.958683][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 534.962694][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 534.966364][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 534.971283][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 534.976678][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 534.982696][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 534.989811][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 534.998537][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 535.002415][T25169] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6119'. [ 535.006916][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 535.013590][T25169] bond0: entered promiscuous mode [ 535.014206][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 535.015794][T25169] : entered promiscuous mode [ 535.021722][T25169] bond_slave_1: entered promiscuous mode [ 535.022698][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 535.031625][T25169] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 535.035509][T25169] hsr1: entered promiscuous mode [ 535.036957][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 535.050973][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 535.062449][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 535.066688][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 535.072236][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 535.076002][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 535.080664][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 535.085256][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 535.090788][ T10] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 535.094699][ T10] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 535.099643][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 535.104348][ T10] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 535.108658][ T10] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 535.112341][ T10] usb 8-1: Product: syz [ 535.114197][ T10] usb 8-1: Manufacturer: syz [ 535.116237][ T10] usb 8-1: SerialNumber: syz [ 535.137811][ T10] usb 8-1: config 0 descriptor?? [ 535.162568][ T10] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 535.247597][T12743] rc_core: IR keymap rc-hauppauge not found [ 535.252283][T12743] Registered IR keymap rc-empty [ 535.254534][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.277673][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.307466][T12743] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0 [ 535.310714][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 535.313573][T12743] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.0/rc/rc0/input42 [ 535.325779][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.347033][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.351079][T14470] usb 8-1: USB disconnect, device number 53 [ 535.358351][T25188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6124'. [ 535.361878][T14470] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 535.361987][T25188] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6124'. [ 535.366947][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.387343][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.408054][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.426959][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.427043][T25193] 8021q: adding VLAN 0 to HW filter on device bond2 [ 535.447412][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.466978][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.497872][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.517017][T12743] mceusb 14-1:0.0: Error: mce write submit urb error = -90 [ 535.539398][T12743] mceusb 14-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 535.542729][T12743] mceusb 14-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 535.553239][T12743] usb 14-1: USB disconnect, device number 6 [ 535.587347][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 535.602757][T25198] netlink: 'syz.0.6127': attribute type 7 has an invalid length. [ 535.793872][T25213] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.798056][T25213] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.802283][T25213] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.805518][T25213] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.070807][T25240] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 536.108369][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 536.126788][T25182] ceph: No mds server is up or the cluster is laggy [ 536.128505][T25249] sch_tbf: burst 7 is lower than device ip6tnl0 mtu (1452) ! [ 536.334488][ T42] audit: type=1400 audit(536.265:26682): avc: denied { map } for pid=25261 comm="syz.9.6146" path="socket:[131900]" dev="sockfs" ino=131900 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 536.348183][T25264] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29968 sclass=netlink_route_socket pid=25264 comm=syz.5.6147 [ 536.423107][ T42] audit: type=1400 audit(536.355:26683): avc: denied { write } for pid=25265 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.506184][T25287] overlayfs: workdir and upperdir must reside under the same mount [ 536.510741][ T42] audit: type=1400 audit(536.445:26684): avc: denied { write } for pid=25285 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.577042][T12743] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 536.614185][T25299] netlink: 'syz.5.6157': attribute type 7 has an invalid length. [ 536.619085][T25299] __nla_validate_parse: 5 callbacks suppressed [ 536.619097][T25299] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6157'. [ 536.628028][T25299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6157'. [ 536.645317][ T42] audit: type=1400 audit(536.575:26685): avc: denied { write } for pid=25295 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.679434][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6158'. [ 536.689056][T14470] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 536.699784][ T42] audit: type=1400 audit(536.635:26686): avc: denied { write } for pid=25304 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.716477][T25303] 8021q: adding VLAN 0 to HW filter on device bond8 [ 536.747503][T12743] usb 8-1: Using ep0 maxpacket: 8 [ 536.753039][T12743] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 536.762182][T12743] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 536.769950][T12743] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 536.784115][T12743] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 536.790808][T12743] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 536.806992][T12743] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 536.816987][T12743] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.857231][T14470] usb 14-1: Using ep0 maxpacket: 8 [ 536.862985][T14470] usb 14-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 536.871060][T14470] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.889023][T14470] pvrusb2: Hardware description: Terratec Grabster AV400 [ 536.890191][T25317] netlink: 'syz.5.6162': attribute type 11 has an invalid length. [ 536.892758][T14470] pvrusb2: ********** [ 536.892771][T14470] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 536.892783][T14470] pvrusb2: Important functionality might not be entirely working. [ 536.892791][T14470] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 536.892800][T14470] pvrusb2: ********** [ 536.981899][ T42] audit: type=1400 audit(536.905:26687): avc: denied { write } for pid=25321 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.086735][ T42] audit: type=1400 audit(537.015:26688): avc: denied { write } for pid=25335 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.091886][T12743] usb 8-1: GET_CAPABILITIES returned 0 [ 537.101866][T12743] usbtmc 8-1:16.0: can't read capabilities [ 537.108714][ T2511] pvrusb2: Invalid write control endpoint [ 537.211411][T25340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6165'. [ 537.214278][T25340] netlink: 'syz.5.6165': attribute type 10 has an invalid length. [ 537.216719][T25340] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6165'. [ 537.301066][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.304606][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.308059][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.311783][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.317503][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.321318][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.325030][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.330752][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.334590][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.338378][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.339655][ T2511] pvrusb2: Invalid write control endpoint [ 537.342312][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.342349][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.345218][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.349314][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 537.350946][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.350985][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.351016][ C3] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 537.360211][T25270] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.363718][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 537.374020][T25270] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.376165][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 537.381713][ T2511] pvrusb2: Device being rendered inoperable [ 537.397520][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 537.401276][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 537.420584][T25270] kAFS: Invalid Command on /proc/fs/afs/cells file [ 537.422217][ T2511] pvrusb2: Attached sub-driver cx25840 [ 537.425575][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 537.428660][ T55] usb 8-1: USB disconnect, device number 54 [ 537.430809][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 537.495505][ T1036] usb 14-1: USB disconnect, device number 7 [ 537.539826][ T42] audit: type=1400 audit(537.475:26689): avc: denied { write } for pid=25346 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.558167][ T42] audit: type=1400 audit(537.485:26690): avc: denied { create } for pid=25353 comm="syz.9.6167" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 537.604283][ T42] audit: type=1400 audit(537.535:26691): avc: denied { write } for pid=25358 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.629335][T25355] netlink: 44 bytes leftover after parsing attributes in process `syz.9.6167'. [ 537.679587][T25362] netlink: 'syz.0.6169': attribute type 1 has an invalid length. [ 537.719744][T25362] 8021q: adding VLAN 0 to HW filter on device bond5 [ 537.725818][T25362] bond4: (slave bond5): making interface the new active one [ 537.729321][T25362] bond4: (slave bond5): Enslaving as an active interface with an up link [ 537.829682][T25379] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6171'. [ 537.848937][T25379] dlm: no local IP address has been set [ 537.860758][T25379] dlm: cannot start dlm midcomms -107 [ 538.213875][T25413] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 538.559927][T25446] bridge_slave_0: default FDB implementation only supports local addresses [ 539.181537][T25467] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6194'. [ 539.255909][T25467] 8021q: adding VLAN 0 to HW filter on device bond5 [ 539.267712][T25467] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6194'. [ 539.268792][T25469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.326088][T25469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.394108][T25469] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 539.514554][T25494] netlink: 'syz.3.6198': attribute type 1 has an invalid length. [ 539.545032][T25494] 8021q: adding VLAN 0 to HW filter on device bond33 [ 539.569072][T25494] bond33: (slave geneve23): making interface the new active one [ 539.576574][T25494] bond33: (slave geneve23): Enslaving as an active interface with an up link [ 539.969688][T25504] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6201'. [ 540.067631][T25507] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 540.069568][T25509] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 540.290123][T25514] 8021q: adding VLAN 0 to HW filter on device bond34 [ 540.335476][T25518] /dev/sg0: Can't lookup blockdev [ 540.338473][T25518] netlink: 'syz.3.6205': attribute type 4 has an invalid length. [ 540.934668][T25542] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 540.959041][T25545] netlink: 'syz.3.6213': attribute type 1 has an invalid length. [ 540.976484][T25549] CIFS: Attempting to mount //127.0.0.1/share [ 540.989805][T25545] 8021q: adding VLAN 0 to HW filter on device bond35 [ 541.003519][T25549] CIFS: VFS: \\127.0.0.1 Error -2 creating socket [ 541.006561][T25549] CIFS: VFS: Error connecting to socket. Aborting operation. [ 541.013600][T25549] CIFS: VFS: cifs_mount failed w/return code = -2 [ 541.017235][T25546] 8021q: adding VLAN 0 to HW filter on device bond9 [ 541.038119][T25545] bond35: (slave geneve24): making interface the new active one [ 541.043424][T25545] bond35: (slave geneve24): Enslaving as an active interface with an up link [ 541.243137][T25571] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 541.253391][T25573] overlayfs: upper fs does not support tmpfile. [ 541.275201][T25577] netlink: 'syz.9.6221': attribute type 16 has an invalid length. [ 541.278836][T25577] SELinux: security_context_str_to_sid (E) failed with errno=-22 [ 541.339141][T25582] 8021q: adding VLAN 0 to HW filter on device bond36 [ 541.367315][T25587] netlink: 'syz.5.6227': attribute type 1 has an invalid length. [ 541.408726][T25587] 8021q: adding VLAN 0 to HW filter on device bond10 [ 541.479321][T25587] bond10: (slave geneve6): making interface the new active one [ 541.492055][T25587] bond10: (slave geneve6): Enslaving as an active interface with an up link [ 541.553527][T25598] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 541.729108][ C3] openvswitch: cpu_id mismatch with handler threads [ 541.734559][T25607] Failed to initialize the IGMP autojoin socket (err -2) [ 541.787287][T25610] __nla_validate_parse: 15 callbacks suppressed [ 541.787303][T25610] netlink: 5 bytes leftover after parsing attributes in process `syz.3.6234'. [ 541.806469][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 541.806491][ T42] audit: type=1400 audit(541.735:26711): avc: denied { read write } for pid=25611 comm="syz.9.6236" name="cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 541.820866][ T42] audit: type=1400 audit(541.735:26712): avc: denied { open } for pid=25611 comm="syz.9.6236" path="/70/dev/cpu_dma_latency" dev="devtmpfs" ino=1338 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 541.840199][T25607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6234'. [ 541.923757][T25610] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 542.008386][T25620] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6238'. [ 542.022108][T25620] 8021q: adding VLAN 0 to HW filter on device bond6 [ 542.031163][T25620] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6238'. [ 542.114714][T25629] netlink: 'syz.3.6241': attribute type 7 has an invalid length. [ 542.117387][T25629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6241'. [ 542.120338][T25629] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6241'. [ 542.175779][T25632] device-mapper: ioctl: Invalid data size in the ioctl structure: 2279545226 [ 542.199264][T25637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6243'. [ 542.250953][T25637] team1: entered promiscuous mode [ 542.252671][T25637] team1: entered allmulticast mode [ 542.254704][T25637] 8021q: adding VLAN 0 to HW filter on device team1 [ 542.313273][T25644] netlink: 76 bytes leftover after parsing attributes in process `syz.5.6245'. [ 542.351734][T25649] netlink: 'syz.0.6246': attribute type 12 has an invalid length. [ 542.423406][T25655] hfs: unable to load iocharset "io#harset" [ 542.499128][ T42] audit: type=1400 audit(542.435:26713): avc: denied { write } for pid=25668 comm="syz.3.6251" name="/" dev="9p" ino=75524105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 542.530318][T25671] netlink: 'syz.5.6252': attribute type 7 has an invalid length. [ 542.536072][T25671] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6252'. [ 542.541314][T25671] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6252'. [ 542.730668][T25678] overlayfs: failed to decode file handle (len=1, type=0, flags=0, err=-22) [ 542.817858][T25684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25684 comm=syz.3.6258 [ 542.892529][T25690] netlink: 'syz.3.6261': attribute type 1 has an invalid length. [ 542.934348][T25690] bond37: entered promiscuous mode [ 542.940616][T25690] 8021q: adding VLAN 0 to HW filter on device bond37 [ 542.967725][T25696] netlink: 'syz.0.6263': attribute type 7 has an invalid length. [ 542.997900][T25694] veth3: entered allmulticast mode [ 543.002024][T25694] bond37: (slave veth3): making interface the new active one [ 543.004389][T25694] veth3: entered promiscuous mode [ 543.006630][T25694] bond37: (slave veth3): Enslaving as an active interface with an up link [ 543.117523][T25705] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 543.132358][T25708] : renamed from vlan0 (while UP) [ 543.224742][T25714] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 543.339142][ T42] audit: type=1400 audit(543.273:26714): avc: denied { write } for pid=25726 comm="syz.3.6273" name="subsystems" dev="configfs" ino=5476 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.356471][ T42] audit: type=1400 audit(543.283:26715): avc: denied { write } for pid=25726 comm="syz.3.6273" name="namespaces" dev="configfs" ino=135886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 543.360213][T25727] nvmet: adding nsid 1 to subsystem testnqn [ 543.374861][T25727] nvmet: failed to open block device (null): (-22) [ 543.388879][ T42] audit: type=1400 audit(543.313:26716): avc: denied { shutdown } for pid=25715 comm="syz.9.6271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 543.644192][ T42] audit: type=1400 audit(543.583:26717): avc: denied { write } for pid=25739 comm="syz.0.6281" name="/" dev="9p" ino=75524105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 543.715531][ T42] audit: type=1400 audit(543.643:26718): avc: denied { write } for pid=25747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.774040][ T42] audit: type=1400 audit(543.703:26719): avc: denied { write } for pid=25751 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.865771][T25758] ieee802154 phy0 wpan0: encryption failed: -22 [ 543.874335][ T42] audit: type=1400 audit(543.803:26720): avc: denied { write } for pid=25755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 543.988577][T25765] netlink: 'syz.5.6284': attribute type 49 has an invalid length. [ 544.018081][T25765] bond0: (slave 30): Releasing backup interface [ 544.025475][T25765] : left promiscuous mode [ 544.103007][T25765] : entered promiscuous mode [ 544.105214][T25765] : entered allmulticast mode [ 544.129686][T25768] bond11 (unregistering): Released all slaves [ 544.149806][T25767] 8021q: adding VLAN 0 to HW filter on device bond38 [ 544.295555][ T5730] Bluetooth: hci4: unexpected event for opcode 0x1405 [ 545.149849][T25804] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 545.155058][T25804] SELinux: failed to load policy [ 545.166499][T25804] loop5: detected capacity change from 0 to 7 [ 545.175467][T25804] Dev loop5: unable to read RDB block 7 [ 545.178990][T25804] loop5: AHDI p1 p3 p4 [ 545.183051][T25804] loop5: partition table partially beyond EOD, truncated [ 545.186398][T25804] loop5: p1 size 100663296 extends beyond EOD, truncated [ 545.207967][T25804] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 545.286730][T24974] udevd[24974]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 545.302857][T24665] udevd[24665]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 545.331702][T25815] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 545.336378][T25815] overlayfs: failed to set xattr on upper [ 545.340396][T25815] overlayfs: ...falling back to redirect_dir=nofollow. [ 545.344592][T25815] overlayfs: ...falling back to index=off. [ 545.348687][T25815] overlayfs: ...falling back to uuid=null. [ 545.352245][T25815] overlayfs: ...falling back to xino=off. [ 545.514145][T11731] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 545.559171][T25845] 8021q: adding VLAN 0 to HW filter on device bond6 [ 545.577909][T25850] netlink: 'syz.9.6305': attribute type 2 has an invalid length. [ 545.606004][T25852] tmpfs: Unknown parameter '?1N' [ 545.618959][T25827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 545.724187][T25862] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 546.218504][T25876] netlink: 'syz.9.6314': attribute type 1 has an invalid length. [ 546.405269][T25889] netlink: 'syz.9.6318': attribute type 1 has an invalid length. [ 546.432369][T25889] 8021q: adding VLAN 0 to HW filter on device bond7 [ 546.437759][T25852] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 546.441377][T25852] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 546.474773][T25889] bond7: (slave geneve4): making interface the new active one [ 546.481921][T25889] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 546.678554][ T5870] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 546.807184][ T42] kauditd_printk_skb: 9116 callbacks suppressed [ 546.807211][ T42] audit: type=1326 audit(546.743:35837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.819259][ T42] audit: type=1326 audit(546.743:35838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.829135][ T42] audit: type=1326 audit(546.743:35839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.836891][ T5870] usb 10-1: Using ep0 maxpacket: 8 [ 546.844116][ T42] audit: type=1326 audit(546.743:35840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.855751][ T5870] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 546.860630][ T42] audit: type=1326 audit(546.743:35841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.864839][ T5870] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 546.868896][ T42] audit: type=1326 audit(546.743:35842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.877991][ T42] audit: type=1326 audit(546.743:35843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.884966][ T42] audit: type=1326 audit(546.743:35844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.889696][ T5870] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 546.892982][ T42] audit: type=1326 audit(546.743:35845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.903102][ T42] audit: type=1326 audit(546.743:35846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25863 comm="syz.3.6310" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e8b39e0d9 code=0x50000 [ 546.905151][ T5870] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 546.923181][ T5870] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 546.933043][ T5870] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 546.939305][ T5870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.154089][ T5870] usb 10-1: usb_control_msg returned -32 [ 547.158628][ T5870] usbtmc 10-1:16.0: can't read capabilities [ 547.207117][ T5808] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 547.359963][ T5808] usb 14-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 547.363782][ T5808] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.374124][ T5808] usb 14-1: Product: syz [ 547.375515][ T5808] usb 14-1: Manufacturer: syz [ 547.377166][ T5808] usb 14-1: SerialNumber: syz [ 547.532865][T20586] usb 10-1: USB disconnect, device number 16 [ 547.607638][ T5808] usb 14-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 547.624480][ T5808] usb 14-1: unit 10 not found! [ 547.701852][T25923] __nla_validate_parse: 15 callbacks suppressed [ 547.701873][T25923] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6329'. [ 547.737020][ T5730] Bluetooth: hci4: command 0x0c1a tx timeout [ 547.771585][ T5808] snd-usb-audio 14-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 547.780795][ T5808] usb 14-1: USB disconnect, device number 8 [ 547.818509][T24665] udevd[24665]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb14/14-1/14-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.142957][T25940] netlink: 92 bytes leftover after parsing attributes in process `syz.0.6335'. [ 548.250532][T25950] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6338'. [ 548.446951][ T5730] Bluetooth: hci2: command 0x0c1a tx timeout [ 548.470106][T25954] netlink: 84 bytes leftover after parsing attributes in process `syz.0.6338'. [ 548.738570][T25961] netlink: 'syz.0.6342': attribute type 7 has an invalid length. [ 548.742181][T25961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6342'. [ 548.745378][T25961] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6342'. [ 548.809509][T25965] bond7: ARP target 9.0.0.0 is already present [ 548.811518][T25965] bond7: option arp_ip_target: invalid value (9) [ 548.814450][T25965] bond7 (unregistering): Released all slaves [ 548.920743][T25968] netlink: 'syz.0.6346': attribute type 1 has an invalid length. [ 548.932745][T25968] 8021q: adding VLAN 0 to HW filter on device bond7 [ 548.950221][T25968] bond7: (slave geneve4): making interface the new active one [ 548.953963][T25968] bond7: (slave geneve4): Enslaving as an active interface with an up link [ 548.982789][ T5730] Bluetooth: hci2: ISO packet for unknown connection handle 201 [ 549.075359][T25973] blkio.reset_stats is deprecated [ 549.122684][T25975] program syz.0.6349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 549.225869][T25985] netlink: 'syz.0.6353': attribute type 7 has an invalid length. [ 549.231373][T25985] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6353'. [ 549.236074][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6353'. [ 549.467597][ T5870] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 549.627087][ T5870] usb 14-1: Using ep0 maxpacket: 16 [ 549.631358][ T5870] usb 14-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 60, changing to 9 [ 549.635902][ T5870] usb 14-1: config 1 interface 0 has no altsetting 0 [ 549.641536][ T5870] usb 14-1: New USB device found, idVendor=0079, idProduct=1843, bcdDevice= 0.40 [ 549.645336][ T5870] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.648889][ T5870] usb 14-1: Product: Џ [ 549.650775][ T5870] usb 14-1: Manufacturer: 릴뮧藺᧾㍇⽾ණ [ 549.653373][ T5870] usb 14-1: SerialNumber: 爈쒒祽䦎ਙ䋐⭚﮸푓ᕋ襘⡒筿۲ [ 549.807026][ T5730] Bluetooth: hci4: command 0x0c1a tx timeout [ 549.869365][ T5870] usbhid 14-1:1.0: can't add hid device: -71 [ 549.871359][ T5870] usbhid 14-1:1.0: probe with driver usbhid failed with error -71 [ 549.878955][ T5870] usb 14-1: USB disconnect, device number 9 [ 550.178961][T25992] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6356'. [ 550.192480][T25992] 8021q: adding VLAN 0 to HW filter on device bond8 [ 550.606564][T26009] netlink: 'syz.9.6362': attribute type 7 has an invalid length. [ 550.612302][T26009] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6362'. [ 550.897063][ T24] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 551.053719][ T24] usb 14-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 551.056762][ T24] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.059908][ T24] usb 14-1: Product: syz [ 551.061270][ T24] usb 14-1: Manufacturer: syz [ 551.063020][ T24] usb 14-1: SerialNumber: syz [ 551.082190][T12743] usb 14-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 551.831973][T26031] netlink: 'syz.5.6370': attribute type 1 has an invalid length. [ 551.873957][T26031] 8021q: adding VLAN 0 to HW filter on device bond11 [ 552.049107][T26025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.059840][T26025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.068375][T26025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.080136][T26025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.114211][T26025] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.127525][T26025] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.142386][ T42] kauditd_printk_skb: 16530 callbacks suppressed [ 552.142413][ T42] audit: type=1400 audit(552.073:52377): avc: denied { create } for pid=26010 comm="syz.9.6363" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 552.192037][T26044] netlink: 'syz.0.6375': attribute type 1 has an invalid length. [ 552.214562][T26044] 8021q: adding VLAN 0 to HW filter on device bond9 [ 552.252929][T26044] bond9: (slave geneve5): making interface the new active one [ 552.258101][T26044] bond9: (slave geneve5): Enslaving as an active interface with an up link [ 552.319631][T26048] comedi comedi1: pcl724: I/O base address or length out of range [ 552.458813][T26053] syzkaller0: entered promiscuous mode [ 552.462866][T26053] syzkaller0: entered allmulticast mode [ 552.687091][T12743] usb 14-1: Service connection timeout for: 256 [ 552.692010][T12743] ath9k_htc 14-1:1.0: ath9k_htc: Unable to initialize HTC services [ 552.715514][T12743] ath9k_htc: Failed to initialize the device [ 552.740980][T26060] __nla_validate_parse: 2 callbacks suppressed [ 552.740996][T26060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6381'. [ 552.770825][T12743] usb 14-1: ath9k_htc: USB layer deinitialized [ 552.774635][T26060] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6381'. [ 552.999095][T26064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6383'. [ 553.013630][T12743] usb 14-1: USB disconnect, device number 10 [ 553.030286][T26066] netlink: 'syz.5.6384': attribute type 1 has an invalid length. [ 553.065220][T26066] 8021q: adding VLAN 0 to HW filter on device bond12 [ 553.104296][T26066] bond12: (slave geneve7): making interface the new active one [ 553.112086][T26066] bond12: (slave geneve7): Enslaving as an active interface with an up link [ 553.145150][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6385'. [ 553.218009][T26069] 8021q: adding VLAN 0 to HW filter on device bond13 [ 553.323444][ T42] audit: type=1400 audit(553.253:52378): avc: denied { write } for pid=26072 comm="syz.5.6386" name="functions" dev="configfs" ino=37425 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 553.324776][T26074] file system registered [ 553.350750][ T42] audit: type=1400 audit(553.283:52379): avc: denied { mount } for pid=26072 comm="syz.5.6386" name="/" dev="functionfs" ino=139043 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 553.799180][T26084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6390'. [ 553.813568][T26084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6390'. [ 553.827112][ T1036] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 553.994827][T26095] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6393'. [ 554.002063][ T1036] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 554.007253][ T1036] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 554.012475][ T1036] usb 14-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 554.026887][ T1036] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.033194][ T1036] spcp8x5 14-1:1.0: SPCP8x5 converter detected [ 554.042368][ T1036] usb 14-1: SPCP8x5 converter now attached to ttyUSB0 [ 554.125735][ T42] audit: type=1400 audit(554.042:52380): avc: denied { unmount } for pid=22684 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 554.140504][T22684] ffs_data_put(): freeing [ 554.195673][T26099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6394'. [ 554.221239][T26099] 8021q: adding VLAN 0 to HW filter on device bond14 [ 554.310912][T26106] netlink: 'syz.5.6396': attribute type 7 has an invalid length. [ 554.313881][T26106] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6396'. [ 554.317524][T26106] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6396'. [ 554.409731][T26077] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 554.414262][T26077] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 554.417440][T26077] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 554.488810][ T42] audit: type=1400 audit(554.412:52381): avc: denied { write } for pid=26115 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.505220][T26077] SPCP8x5 ttyUSB0: Set UART format 0x70b failed (error = -32) [ 554.571478][ T42] audit: type=1400 audit(554.492:52382): avc: denied { write } for pid=26118 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 554.638713][ T56] usb 14-1: USB disconnect, device number 11 [ 554.674699][ T56] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 554.691215][ T56] spcp8x5 14-1:1.0: device disconnected [ 554.872278][ T42] audit: type=1400 audit(554.792:52383): avc: denied { listen } for pid=26123 comm="syz.5.6400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 554.882710][ T42] audit: type=1400 audit(554.802:52384): avc: denied { accept } for pid=26123 comm="syz.5.6400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 555.172683][T26127] i2c i2c-0: new_device: Invalid device name [ 555.176170][ T42] audit: type=1400 audit(555.092:52385): avc: denied { audit_read } for pid=26126 comm="syz.0.6401" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 555.198910][ T42] audit: type=1326 audit(555.122:52386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26129 comm="syz.9.6402" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f807bd9e0d9 code=0x0 [ 555.765480][T26141] netlink: 'syz.5.6405': attribute type 7 has an invalid length. [ 555.956465][T26150] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.969973][T26149] uprobe: syz.5.6409:26149 failed to unregister, leaking uprobe [ 556.093658][T26154] /dev/sg0: Can't lookup blockdev [ 556.175865][T26160] printk: legacy console [ttyGS0] disabled [ 556.234119][T26168] netlink: 'syz.0.6417': attribute type 1 has an invalid length. [ 556.276563][T26168] 8021q: adding VLAN 0 to HW filter on device bond10 [ 556.291352][T26171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=26171 comm=syz.9.6418 [ 556.318582][T26168] bond10: (slave geneve6): making interface the new active one [ 556.322704][T26168] bond10: (slave geneve6): Enslaving as an active interface with an up link [ 556.383025][T26175] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 556.401193][T26175] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 556.486654][T26180] 8021q: adding VLAN 0 to HW filter on device bond11 [ 556.956515][T26201] netlink: 'syz.9.6427': attribute type 1 has an invalid length. [ 556.968537][T26201] 8021q: adding VLAN 0 to HW filter on device bond8 [ 556.986384][T26201] bond8: (slave geneve5): making interface the new active one [ 556.991292][T26201] bond8: (slave geneve5): Enslaving as an active interface with an up link [ 557.179723][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 557.179736][ T42] audit: type=1400 audit(557.102:52392): avc: denied { remount } for pid=26219 comm="syz.9.6433" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 557.272811][T26224] netlink: 'syz.5.6434': attribute type 2 has an invalid length. [ 557.417405][ T5808] usb 14-1: new full-speed USB device number 12 using dummy_hcd [ 557.459704][T26237] zonefs (loop5) ERROR: Not a zoned block device [ 557.469676][T26237] netlink: 'syz.5.6437': attribute type 1 has an invalid length. [ 557.472492][T26237] netlink: 'syz.5.6437': attribute type 3 has an invalid length. [ 557.568691][ T5808] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.572090][ T5808] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 557.575091][ T5808] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 557.579087][ T5808] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 557.581938][ T5808] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.589718][ T5808] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 557.593006][ T5808] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 557.595553][ T5808] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 557.599488][ T5808] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 557.603547][ T5808] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 557.607999][ T5808] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 557.614227][ T5808] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 557.625425][T26245] netlink: 'syz.5.6439': attribute type 10 has an invalid length. [ 557.634676][T26245] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.638099][T26245] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.649411][T26245] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.652520][T26245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 557.655691][T26245] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.658602][T26245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 557.665696][T26245] bridge0: entered promiscuous mode [ 557.669322][T26245] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 557.676037][T26241] bridge_slave_1: left allmulticast mode [ 557.678473][T24544] bond0: (slave bridge0): interface is now down [ 557.681411][T26241] bridge_slave_1: left promiscuous mode [ 557.683786][T26241] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.689729][T26241] bridge_slave_0: left allmulticast mode [ 557.692034][T26241] bridge_slave_0: left promiscuous mode [ 557.694430][T26241] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.700739][ T13] bond0: (slave bridge0): interface is now down [ 557.715974][T26241] bond0: (slave bridge0): Releasing backup interface [ 557.719584][T26241] bridge0 (unregistering): left promiscuous mode [ 557.831602][T22495] usb 14-1: USB disconnect, device number 12 [ 557.868885][T22495] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 557.880462][T22495] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 557.896592][T22495] keyspan 14-1:1.0: device disconnected [ 557.978765][ T42] audit: type=1400 audit(557.902:52393): avc: denied { lock } for pid=26249 comm="syz.5.6441" path="socket:[139395]" dev="sockfs" ino=139395 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 558.413035][T26253] bond9: option downdelay: invalid value (18446744073709551615) [ 558.416328][T26253] bond9: option downdelay: allowed values 0 - 2147483647 [ 558.423750][T26253] bond9 (unregistering): Released all slaves [ 558.572997][T26260] netlink: 'syz.9.6444': attribute type 7 has an invalid length. [ 558.576320][T26260] __nla_validate_parse: 14 callbacks suppressed [ 558.576337][T26260] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6444'. [ 558.583473][T26260] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6444'. [ 558.622790][ T42] audit: type=1400 audit(558.542:52394): avc: denied { write } for pid=26261 comm="syz.9.6445" name="configs" dev="configfs" ino=37426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 558.731459][T26269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3599605440 (3599605440 ns) > initial count (3285526220 ns). Using initial count to start timer. [ 558.741178][T26269] ufs: You didn't specify the type of your ufs filesystem [ 558.741178][T26269] [ 558.741178][T26269] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 558.741178][T26269] [ 558.741178][T26269] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 558.900093][T26273] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46864 sclass=netlink_route_socket pid=26273 comm=syz.9.6448 [ 558.900132][T26272] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=46864 sclass=netlink_route_socket pid=26272 comm=syz.9.6448 [ 558.968431][ T42] audit: type=1400 audit(558.892:52395): avc: denied { accept } for pid=26276 comm="syz.9.6449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 558.975761][ T42] audit: type=1400 audit(558.892:52396): avc: denied { accept } for pid=26276 comm="syz.9.6449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 559.061121][T26279] jffs2: notice: (26279) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 1 orphan) and 5 of xref (0 dead, 2 orphan) found. [ 559.170019][T26293] netlink: 'syz.9.6453': attribute type 7 has an invalid length. [ 559.172939][T26293] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6453'. [ 559.176214][T26293] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6453'. [ 559.409904][T26306] gfs2: path_lookup on c::: returned error -2 [ 559.478679][T26315] netlink: 'syz.9.6460': attribute type 10 has an invalid length. [ 559.482028][T26315] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.484579][T26315] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.493942][T26315] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.496325][T26315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.498931][T26315] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.501227][T26315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.506460][T26315] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 559.618724][T26322] netlink: 280 bytes leftover after parsing attributes in process `syz.9.6462'. [ 559.630351][T26324] netlink: 'syz.5.6464': attribute type 7 has an invalid length. [ 559.633303][T26324] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6464'. [ 559.636600][T26324] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6464'. [ 559.693751][T26326] gadgetfs: bound to dummy_udc driver [ 559.813948][ T42] audit: type=1326 audit(559.732:52397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26325 comm="syz.5.6465" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6745f9e0d9 code=0x0 [ 559.937298][T12743] usb 6-1: new full-speed USB device number 38 using dummy_hcd [ 559.940045][ C2] gadgetfs: connected [ 559.944265][T12743] gadgetfs: disconnected [ 560.087295][ C2] gadgetfs: connected [ 560.089771][T12743] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 560.092498][T12743] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 560.095232][T12743] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.100074][ C2] gadgetfs: configuration #1 [ 560.428809][T26331] [ 560.429683][T26331] ====================================================== [ 560.431852][T26331] WARNING: possible circular locking dependency detected [ 560.434052][T26331] syzkaller #0 Tainted: G L [ 560.436165][T26331] ------------------------------------------------------ [ 560.438389][T26331] syz.9.6466/26331 is trying to acquire lock: [ 560.440298][T26331] ffff8880301ca450 (sb_writers#6){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 560.443137][T26331] [ 560.443137][T26331] but task is already holding lock: [ 560.445444][T26331] ffff888060714920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 560.448380][T26331] [ 560.448380][T26331] which lock already depends on the new lock. [ 560.448380][T26331] [ 560.451753][T26331] [ 560.451753][T26331] the existing dependency chain (in reverse order) is: [ 560.454566][T26331] [ 560.454566][T26331] -> #5 (&common->filesem){+.+.}-{4:4}: [ 560.457013][T26331] lock_acquire+0x1b9/0x370 [ 560.458764][T26331] down_write+0x8b/0x1f0 [ 560.460349][T26331] fsg_store_file+0x193/0x450 [ 560.462027][T26331] configfs_write_iter+0x302/0x4e0 [ 560.463818][T26331] vfs_write+0x6ac/0x1050 [ 560.465367][T26331] ksys_write+0x12a/0x250 [ 560.466868][T26331] do_syscall_64+0x115/0x870 [ 560.468488][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.470562][T26331] [ 560.470562][T26331] -> #4 (&p->frag_sem){++++}-{4:4}: [ 560.472785][T26331] lock_acquire+0x1b9/0x370 [ 560.474325][T26331] down_read+0x99/0x4c0 [ 560.475747][T26331] __configfs_open_file+0xe8/0x9c0 [ 560.477503][T26331] do_dentry_open+0x6ab/0x14d0 [ 560.479213][T26331] vfs_open+0x82/0x3f0 [ 560.480684][T26331] dentry_open+0x71/0xd0 [ 560.482217][T26331] ima_calc_file_hash+0xe1/0x380 [ 560.483959][T26331] ima_collect_measurement+0x94f/0xb30 [ 560.485864][T26331] process_measurement+0xdfe/0x2350 [ 560.487822][T26331] ima_file_check+0xc3/0x110 [ 560.489851][T26331] security_file_post_open+0xc4/0x210 [ 560.492085][T26331] path_openat+0x985/0x4280 [ 560.493702][T26331] do_file_open+0x20e/0x430 [ 560.495289][T26331] do_sys_openat2+0x10f/0x1e0 [ 560.496918][T26331] __x64_sys_openat+0x12d/0x210 [ 560.498633][T26331] do_syscall_64+0x115/0x870 [ 560.500244][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.502251][T26331] [ 560.502251][T26331] -> #3 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 560.504900][T26331] lock_acquire+0x1b9/0x370 [ 560.506485][T26331] __mutex_lock+0x1a4/0x1bd0 [ 560.508098][T26331] process_measurement+0x5ab/0x2350 [ 560.509892][T26331] ima_file_check+0xc3/0x110 [ 560.511495][T26331] security_file_post_open+0xc4/0x210 [ 560.513363][T26331] path_openat+0x985/0x4280 [ 560.514946][T26331] do_file_open_root+0x2f6/0x5a0 [ 560.516065][T26325] gadgetfs: suspended from state 3 [ 560.516663][T26331] file_open_root+0x1c6/0x3f0 [ 560.518668][T26325] gadgetfs: disconnected [ 560.519973][T26331] kernel_read_file_from_path_initns+0x189/0x260 [ 560.521499][T12743] usb 6-1: can't set config #1, error -71 [ 560.523477][T26331] _request_firmware+0x733/0x13c0 [ 560.526901][T26331] request_firmware+0x35/0x50 [ 560.528459][T26331] reg_reload_regdb+0x85/0x460 [ 560.530085][T26331] genl_family_rcv_msg_doit+0x214/0x300 [ 560.531201][T12743] usb 6-1: USB disconnect, device number 38 [ 560.531982][T26331] genl_rcv_msg+0x560/0x800 [ 560.535472][T26331] netlink_rcv_skb+0x159/0x420 [ 560.537120][T26331] genl_rcv+0x28/0x40 [ 560.538555][T26331] netlink_unicast+0x585/0x850 [ 560.540215][T26331] netlink_sendmsg+0x8b0/0xda0 [ 560.541880][T26331] ____sys_sendmsg+0xa4d/0xbe0 [ 560.543537][T26331] ___sys_sendmsg+0x190/0x1e0 [ 560.545163][T26331] __sys_sendmsg+0x160/0x210 [ 560.546773][T26331] do_syscall_64+0x115/0x870 [ 560.548360][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.550378][T26331] [ 560.550378][T26331] -> #2 (cb_lock){++++}-{4:4}: [ 560.552519][T26331] lock_acquire+0x1b9/0x370 [ 560.554113][T26331] down_read+0x99/0x4c0 [ 560.555610][T26331] genl_rcv+0x19/0x40 [ 560.557015][T26331] netlink_unicast+0x585/0x850 [ 560.558685][T26331] netlink_sendmsg+0x8b0/0xda0 [ 560.560393][T26331] sock_sendmsg+0x394/0x410 [ 560.562020][T26331] splice_to_socket+0xb3c/0x11a0 [ 560.563743][T26331] do_splice+0x109c/0x1f90 [ 560.565311][T26331] __do_splice+0x33b/0x370 [ 560.566889][T26331] __x64_sys_splice+0x187/0x250 [ 560.568574][T26331] do_syscall_64+0x115/0x870 [ 560.570226][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.572243][T26331] [ 560.572243][T26331] -> #1 (&pipe->mutex){+.+.}-{4:4}: [ 560.574498][T26331] lock_acquire+0x1b9/0x370 [ 560.576120][T26331] __mutex_lock+0x1a4/0x1bd0 [ 560.577795][T26331] pipe_lock+0x69/0x80 [ 560.579279][T26331] iter_file_splice_write+0x1fd/0x10b0 [ 560.581186][T26331] do_splice+0x109c/0x1f90 [ 560.582756][T26331] __do_splice+0x33b/0x370 [ 560.584323][T26331] __x64_sys_splice+0x187/0x250 [ 560.586036][T26331] do_syscall_64+0x115/0x870 [ 560.587635][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.589672][T26331] [ 560.589672][T26331] -> #0 (sb_writers#6){.+.+}-{0:0}: [ 560.591990][T26331] check_prev_add+0xeb/0xe60 [ 560.593628][T26331] __lock_acquire+0x136c/0x1a40 [ 560.595341][T26331] lock_acquire+0x1b9/0x370 [ 560.596938][T26331] mnt_want_write+0x6f/0x410 [ 560.598569][T26331] path_openat+0xad9/0x4280 [ 560.600179][T26331] do_file_open+0x20e/0x430 [ 560.601896][T26331] file_open_name+0x1c3/0x3e0 [ 560.603537][T26331] filp_open+0x2e/0x50 [ 560.605027][T26331] fsg_lun_open+0x6b/0x7b0 [ 560.606606][T26331] fsg_store_file+0x1e7/0x450 [ 560.608253][T26331] configfs_write_iter+0x302/0x4e0 [ 560.610041][T26331] vfs_write+0x6ac/0x1050 [ 560.611525][T26331] ksys_write+0x12a/0x250 [ 560.613187][T26331] do_syscall_64+0x115/0x870 [ 560.614875][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.616961][T26331] [ 560.616961][T26331] other info that might help us debug this: [ 560.616961][T26331] [ 560.620356][T26331] Chain exists of: [ 560.620356][T26331] sb_writers#6 --> &p->frag_sem --> &common->filesem [ 560.620356][T26331] [ 560.624601][T26331] Possible unsafe locking scenario: [ 560.624601][T26331] [ 560.626904][T26331] CPU0 CPU1 [ 560.628473][T26331] ---- ---- [ 560.630021][T26331] lock(&common->filesem); [ 560.631705][T26331] lock(&p->frag_sem); [ 560.633651][T26331] lock(&common->filesem); [ 560.635876][T26331] rlock(sb_writers#6); [ 560.637299][T26331] [ 560.637299][T26331] *** DEADLOCK *** [ 560.637299][T26331] [ 560.639991][T26331] 5 locks held by syz.9.6466/26331: [ 560.641714][T26331] #0: ffff88802648b270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 560.644577][T26331] #1: ffff888023700450 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 560.647493][T26331] #2: ffff888035fc8080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 560.651005][T26331] #3: ffff8880275d5170 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 560.654629][T26331] #4: ffff888060714920 (&common->filesem){+.+.}-{4:4}, at: fsg_store_file+0x193/0x450 [ 560.658491][T26331] [ 560.658491][T26331] stack backtrace: [ 560.660897][T26331] CPU: 3 UID: 0 PID: 26331 Comm: syz.9.6466 Tainted: G L syzkaller #0 PREEMPT(full) [ 560.660924][T26331] Tainted: [L]=SOFTLOCKUP [ 560.660930][T26331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 560.660951][T26331] Call Trace: [ 560.660968][T26331] [ 560.660976][T26331] dump_stack_lvl+0x100/0x190 [ 560.661027][T26331] print_circular_bug.cold+0x178/0x1c7 [ 560.661063][T26331] check_noncircular+0x146/0x160 [ 560.661082][T26331] ? __lock_acquire+0x49f/0x1a40 [ 560.661104][T26331] check_prev_add+0xeb/0xe60 [ 560.661125][T26331] __lock_acquire+0x136c/0x1a40 [ 560.661145][T26331] ? try_to_unlazy+0x296/0x910 [ 560.661175][T26331] lock_acquire+0x1b9/0x370 [ 560.661193][T26331] ? path_openat+0xad9/0x4280 [ 560.661209][T26331] ? __pfx___might_resched+0x10/0x10 [ 560.661232][T26331] mnt_want_write+0x6f/0x410 [ 560.661248][T26331] ? path_openat+0xad9/0x4280 [ 560.661265][T26331] path_openat+0xad9/0x4280 [ 560.661285][T26331] ? arch_stack_walk+0xa6/0xf0 [ 560.661314][T26331] ? __pfx_path_openat+0x10/0x10 [ 560.661330][T26331] ? kasan_save_stack+0x30/0x50 [ 560.661376][T26331] ? kasan_save_track+0x14/0x30 [ 560.661395][T26331] ? __kasan_slab_alloc+0x89/0x90 [ 560.661416][T26331] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 560.661436][T26331] ? do_getname_kernel+0x5d/0x250 [ 560.661455][T26331] ? filp_open+0x1d/0x50 [ 560.661475][T26331] ? fsg_lun_open+0x6b/0x7b0 [ 560.661495][T26331] ? fsg_store_file+0x1e7/0x450 [ 560.661516][T26331] do_file_open+0x20e/0x430 [ 560.661535][T26331] ? __pfx_do_file_open+0x10/0x10 [ 560.661561][T26331] ? rcu_is_watching+0x12/0xc0 [ 560.661590][T26331] file_open_name+0x1c3/0x3e0 [ 560.661610][T26331] ? __pfx_file_open_name+0x10/0x10 [ 560.661630][T26331] ? do_getname_kernel+0x5d/0x250 [ 560.661650][T26331] ? __asan_memcpy+0x3c/0x60 [ 560.661667][T26331] ? do_getname_kernel+0x1be/0x250 [ 560.661687][T26331] filp_open+0x2e/0x50 [ 560.661706][T26331] fsg_lun_open+0x6b/0x7b0 [ 560.661725][T26331] ? __pfx_down_read+0x10/0x10 [ 560.661751][T26331] fsg_store_file+0x1e7/0x450 [ 560.661771][T26331] configfs_write_iter+0x302/0x4e0 [ 560.661794][T26331] vfs_write+0x6ac/0x1050 [ 560.661810][T26331] ? __pfx_configfs_write_iter+0x10/0x10 [ 560.661831][T26331] ? __pfx_vfs_write+0x10/0x10 [ 560.661851][T26331] ksys_write+0x12a/0x250 [ 560.661866][T26331] ? __pfx_ksys_write+0x10/0x10 [ 560.661883][T26331] do_syscall_64+0x115/0x870 [ 560.661905][T26331] ? clear_bhb_loop+0x70/0xc0 [ 560.661925][T26331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.661939][T26331] RIP: 0033:0x7f807bd9e0d9 [ 560.661951][T26331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 560.661963][T26331] RSP: 002b:00007f807ccd1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 560.661974][T26331] RAX: ffffffffffffffda RBX: 00007f807c025fa0 RCX: 00007f807bd9e0d9 [ 560.661981][T26331] RDX: 0000000000000005 RSI: 0000200000000f00 RDI: 0000000000000009 [ 560.661988][T26331] RBP: 00007f807be35024 R08: 0000000000000000 R09: 0000000000000000 [ 560.661994][T26331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 560.662001][T26331] R13: 00007f807c026038 R14: 00007f807c025fa0 R15: 00007ffcb42ade88 [ 560.662011][T26331] [ 560.777981][T26331] mass_storage.usb0/lun.0: unable to open backing file: file0 [ 560.803100][T26331] SELinux: invalid class [ 560.804560][T26331] SELinux: failed to load policy [ 562.848124][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.850726][ T1437] ieee802154 phy1 wpan1: encryption failed: -22