last executing test programs: 5m14.817462752s ago: executing program 1 (id=299): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {r2, r3+60000000}}, 0x0) r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, &(0x7f0000000180)="5e73663bf4082f7c6cbecbf09d6dd7be5a06dfd64563f329c16f799d1836bfc45a7badc8faed24bb77c848723a43602d1fe0d236c062e105ec77ffd00fb243c3111dda42112650cc", 0x0, 0xfe2a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 5m13.927253506s ago: executing program 1 (id=302): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x82, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb1000008747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb80035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22383e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485a4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2245eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e4c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8652b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad64c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc590800", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) 5m13.507233157s ago: executing program 1 (id=307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r2, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500090000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x40010) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000001000010024bd7000fc0ddf2500000000", @ANYRES32=0x0, @ANYBLOB="1b0b04000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 5m13.281281147s ago: executing program 1 (id=310): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x24, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r4, 0x0, 0x0) 5m12.670266095s ago: executing program 32 (id=150): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, 0x1, 0x13838}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x45}, 0x40000) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="74000000100037042bbd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="080c0400040200005400128009000100626f6e64000000004400028008001c003d090000080003"], 0x74}, 0x1, 0x0, 0x0, 0x4040880}, 0x2400c050) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004880}, 0x800) 5m10.227525482s ago: executing program 1 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) 5m10.141913937s ago: executing program 1 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r0 = socket(0x1e, 0x1, 0x0) shutdown(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) read(r1, 0x0, 0x0) 4m54.985779006s ago: executing program 33 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) r0 = socket(0x1e, 0x1, 0x0) shutdown(r0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) read(r1, 0x0, 0x0) 4m21.480190527s ago: executing program 4 (id=928): socket(0x40000000015, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0xfffffffb, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x8, 0x17, 0x2, 0x1, 0x0, 0xe, {0x0, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x4c, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1aa79}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r3, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 4m21.35601283s ago: executing program 4 (id=931): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001b00)={&(0x7f0000000000)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd27, 0x25dfdbf9, {0xa, 0x18, 0x58}}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x9) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m20.979918431s ago: executing program 4 (id=938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0x0, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200593f14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 4m20.882416498s ago: executing program 4 (id=940): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r7, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x49, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1120008c}], 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4m20.542966229s ago: executing program 4 (id=946): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="14000200000001031dbd700affdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000041c0)={0x2020}, 0x2040) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x6}}, './file1\x00'}) 4m19.708962565s ago: executing program 4 (id=957): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 4m6.312623376s ago: executing program 3 (id=1093): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_THREAD_EXIT(r3, 0x40046208, 0x0) 4m6.25059108s ago: executing program 3 (id=1095): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 4m6.048718495s ago: executing program 3 (id=1099): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x44e4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x7, 0x400, 0x0, 0x5}, {0xc0, 0x2, 0x8e98, 0x2, 0x9}, 0x8, 0x3, 0x12c7}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x240080c1}, 0x24008800) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r1, {0x0, 0xe}, {0x2, 0xb}, {0xffe0, 0x484c10e0d22b6613}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xfffffffffffffdc3, 0x2, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x10006}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x12}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x6}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x6}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004061}, 0x4008000) 4m5.964472994s ago: executing program 3 (id=1100): r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x4}, {}, {0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040091}, 0x0) 4m5.885135504s ago: executing program 3 (id=1103): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/sys/net/ipv6/conf/syz_tun/disable_ipv6\x00', 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0) setresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x5, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {0x4}, {0x0, 0xf}, {0xfff3}}}, 0x24}}, 0x0) 4m5.006570812s ago: executing program 3 (id=1123): getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x899, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x882, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x882000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, 0x0) fchdir(0xffffffffffffffff) sendmsg$IPSET_CMD_HEADER(r2, 0x0, 0x8000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mount$afs(&(0x7f0000000040)=@cell={0x25, 'syz0:', 'syz0', '.backup'}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x48022, &(0x7f0000000340)={[{@flock_openafs}, {@dyn}, {@flock_write}, {@flock_openafs}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@permit_directio}, {@fsname}, {@obj_user={'obj_user', 0x3d, 'proc\x00'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'task\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f00000008c0)=@disckey={0x2, 0x1, "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"}) 4m4.640307319s ago: executing program 34 (id=957): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000009c0000000b"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000080), &(0x7f0000000280)=r1}, 0x20) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, r3, 0x25, 0x2}, 0x3a) syz_emit_ethernet(0x36, &(0x7f0000000580)=ANY=[], 0x0) 3m55.082436797s ago: executing program 5 (id=1249): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x4}, {0xffff}, {0xfff3, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x8, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x4, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f00000002c0)="05031c00d3fc14e5fd004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r6, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 3m55.020790209s ago: executing program 5 (id=1253): open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x70}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101840, 0x92) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x2, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 3m54.94870121s ago: executing program 5 (id=1254): socket$inet_mptcp(0x2, 0x1, 0x106) mmap(&(0x7f00009a2000/0x3000)=nil, 0x3000, 0x0, 0x30, 0xffffffffffffffff, 0x8e72c000) socket$rds(0x15, 0x5, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="53000300"], 0x8) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x34}}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x2000c050) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000000)={0x0, 0x9, "be5f21", 0x8, 0x80}) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000080000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8ad7ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000c0897c8f00950000"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) write$ppp(r4, &(0x7f0000000700)="b068aa", 0x3) 3m54.054701212s ago: executing program 5 (id=1258): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='environ\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r1, &(0x7f0000000300), 0xa) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) getpid() ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) syz_open_dev$dvb_dvr(0x0, 0x0, 0x13f) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0xfc5d, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0xc, 0x84, 0x2, 0x3, 0x10007f, 0x20000003, 0x53, 0x6, 0x3, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x1003, 0xfffffffb, 0x5, 0x3b, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x0, 0x7, 0xe661, 0x4, 0x7, 0x7, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0x7, 0x3, 0x1, 0x7, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x5, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x6, 0x3c6, 0x40001, 0x40], [0x10000007, 0x9, 0x80000130, 0x7, 0xffff8001, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0x6, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x7, 0xe, 0x312, 0x78, 0x1, 0x0, 0x4, 0x7, 0x7fff, 0x10000006, 0x40000400, 0x100401, 0x6, 0x1, 0xff, 0x5, 0x1af5, 0x5f31, 0xd, 0x4006e0, 0x1, 0x4, 0x9, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0x8, 0x4000f, 0x5, 0xc, 0x7, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x5, 0x9], [0x7, 0xa, 0x2, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x8002, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x8, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x3, 0x1, 0x6d03, 0x6, 0xd, 0x371, 0x81, 0x80, 0x3, 0x4, 0x2950bfb0, 0xfffffff8, 0x1a, 0x8, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x2, 0x1000000a, 0x0, 0x5, 0x21c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x24], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x6, 0x1000008, 0x0, 0xec, 0xce9, 0x1ff, 0x5, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0xc, 0x3, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x6, 0x804, 0xc8, 0x1, 0xfffff003, 0x10080, 0x4, 0x7e, 0x100, 0x6, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x4, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x927, 0xb1e, 0xffffffff, 0x200, 0xffff2441, 0x1003]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 3m54.049524486s ago: executing program 5 (id=1261): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) 3m51.761035462s ago: executing program 5 (id=1268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x140) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x0, 0x40, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xcdf, 0x0, 0xffffffff, 0x0}) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@sr0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000040)='gfs2meta\x00', 0x10000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000) close(r4) 3m49.932646505s ago: executing program 35 (id=1123): getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000100), &(0x7f0000000140)=0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) r0 = io_uring_setup(0x899, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000640), 0x882, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_clone(0x882000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(0x0, 0x0, 0x2) ioctl$FE_SET_FRONTEND(r3, 0x40246f4c, 0x0) fchdir(0xffffffffffffffff) sendmsg$IPSET_CMD_HEADER(r2, 0x0, 0x8000) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) accept4(r4, 0x0, 0x0, 0x80800) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) mount$afs(&(0x7f0000000040)=@cell={0x25, 'syz0:', 'syz0', '.backup'}, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x48022, &(0x7f0000000340)={[{@flock_openafs}, {@dyn}, {@flock_write}, {@flock_openafs}], [{@smackfstransmute={'smackfstransmute', 0x3d, '-'}}, {@permit_directio}, {@fsname}, {@obj_user={'obj_user', 0x3d, 'proc\x00'}}, {@dont_hash}, {@smackfsdef={'smackfsdef', 0x3d, 'task\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) ioctl$DVD_WRITE_STRUCT(r1, 0x5390, &(0x7f00000008c0)=@disckey={0x2, 0x1, "f1a579c45a6f6fda8991d60d6c99dfadf65508c178cac8d6e3cf8241df6ad5a42852368fe8d0f07a016fd5ef6f27c7a10ba0c6fe7e382681db775003110767859d7a7b95a1689cc266b8067ee6aff144efb0fad5c612be155bad9c8e40af9baff8e499e710a15883595b87fc17d47e7f0dedc26afaf0470e0e0880e3ab1dbaf26120298d9414493e82c1331ecc2e953bb1f5105c4b7624a063cb9e26785ed1d77cd5068fb3949212af31d55e69542262eda075e269e24cdae45b34a512e26b8fe7d483de6d70bbbfc4a955dbd5f4a00c22811cb14a34d87ac574f77a8eda74057954d73a3b47db3388eb79eaadac619eafc8fa9b9f307807c3752c986f4f26c21b8a7ecf81f244181c2e559a1c53d9b700ce9c55f2591d22da6fb18269667bfee0097fee61ec2081cf64685c4d81df5fa88b33b6d1e1aad1faaf7b4b5ab2da9454588783a466037cbdb32ec8126e3960c9e4515370b6413ce54fe3bd235436adedff0d230975ff983db7eac1dc40818c2e93c66c33b93115acfc9935f2689e6e1e3394d728641d1070aa0f15f52cb6bf0de78f2ac8531f6ce1120d43e7e58e348acac069695538fe7f28c177c940eda3f62183af8034ad960f6e8bdfd77c8629f112b35fa314951a41d51869dccaa9717034ea49a37bbd8b1e298381a6f2a9d0ff181ec87b00461bb5aa46902697fc30e68915463213d6f5929d2a208d6278ce58da706b9c97235f148e7c4a339e9850e6f12a83e1e4a1723435364f8a8a4aaa1bf433016c8270640f468455170f23d9a50f01c7476721874ca1f36fae304c6b9c16c4e4ff3281cbec2783834b9da0290ff9a96b85daec70b1043eb10124f82b0643a8acc2e090cacebc5d4f5602012d03f6c185edd14ce367bff8c92cb2e5a9de6423ae3c2334328482eb085dba0aaa0ee531120f4ee6f987c0ad201d5cb1543a897d319364158624e891f4f2d82a7ee4859f877b276b93ac1cb6022765efe5888f089451d9b807f2976ba3b455fc9317b47cae4fea23a422c2b9c38797bd0b919ac17f5decb9404d514750af3b2e5ac610746a3f9fa0a9e653d0bfeef86f7905ed18c8dbc525862767fb9474b0c4656fcebcd94ee97108bb48348e2c9e2e802469cf97f39da3661c89100c442b976c2b37a67e3644fc36d906c1132f8b159d2e7c4a3d0e239aa973c68ba01c0fcffc3497b16415783a444019bff3d2725fbcb38ec82b5ecaf3099f069f5a05dadbf9faa2989b06e0026b3a803ec7b6d200e13782e422720d531b47d01c464b0b118e35111bf58fe6f42fe2ffcd45ba374e5e029669d57813caa3acb688bf8e57bd7b388bdceee7d4a1fbd608a5b5482986177df2a8a8fd7bbfa84a97dd9243a9f11e794ffc3b4e82ee64038bcc5e0b53c41ac6ab8ba5136dfb934e32d7aeef3e56caf321c489d37d599b535a942f353e70b8258679ddc0779e20d2a8cb9affdb9c659a899c99fd885b35f4b347d310fad9b578232d60eee303b2ddd3b21159d6109fb40fb37213b128c18f9f0ab7feedfc96844a00217f7d60b2e01f97e8aa2cbcfb2643c37c51e5192c469ee6190294de27d6a4024dfb38d84ed3bc64f3926bc245addd11a90f003c273ed55629e54f85f6ee2ea4041d764511b2bed555d6daaca6f139492c8a9395a0bc3a3fcb769876aea4f9f61b2711b1e156658319e25b605e57ab02efb065847ba8ea688ae48782c3bee1389fce789f70b73458fcb84a56890d3e78957a495f2767436009442953cf839dfd385e82b573e7ef94291816fdd200f8be9bf3f9668354fb53f50ba1929053705258eee9047e83e54f87085fbc543dc40ef5042b0b4a3c88abf3ffefc124f5a21eed72b58f4dcd6056fc290c8df06af5d17d4b1287257496963aa816e1a139768f105fcdf27512d7f0baf32d48c2a6f9b53fc020274705b0de86e019a5c1e83f0c9e41766b419442325ac9c6fa4ef5937e51376c409397074b9191c1ebe7af7d750546b26659b14fe19a547cbbb02e94addb4919ad1e1873d105e1eb77da233b765750253d086747db5bda4694aa45565d0b936256f2fb1559558b411814ec1fd661b9a36f238248456d64c0817d65577c3e7fd0e4daf0f6fb0ecfb92c8d0cf261eaa3ce64a6f78489ab1556b788e19e928d1f52b19772b4344f616675ff6969ce37aebd9d133addbbe24cc81ccb1c305e3a2d90e4db86299a97b08f773a47e66d0b71c4d355e11a1aef9cf10d3b73f1de6c70611a93d99abf624fed27549cf59ae4eb47a6d5574c458578ffe0d4c3fe00628eb86945d0a70725f963e56d4920d675b75f40f9f0d14bde617c7f3f4b85d809269dac60f4db164355a37c727123f46d343a1f1e664a19a467a261a0f762ef89b76f74f5f9bc06e08750133ffb2fb52c58aacc8d3eaf5c7c319de69d1de6b8c73c695184a64d61ddf0b96d6b4f48a458446cb02aaf5f09ecc14d87c5f2fdc9e561f6caadf8d8712abce9b76fab0a5c99b5c4e19698c54cd1e97b5f1dc6551eeb7e396e20e1374f00448b045c82d7b9ba9fd13407fdf5cd17aac2c4cdab6b587e9d323946fda2679f69cf8cdbad54d02cb3cc009c0fde2653e107198579bf7be754d0ec3b9842245f18efc190d871293cef25d401826dc4d7784cc0274d5b908dde51cafad0aa4251270b8f34451556ee4b9336ed2b1f2e1085b5b823325715dba1c2a97d819bc44bcd23a174e269734bbfb6eb7ac04ad73f50e294e66843a13f7fbc5f94b5fd84c1ba49449b1686734f57a9e487cde976fa0dd013ba39b06e764d7ff2d23e1d353c95d65fcfdd2984fa3ea8abe6c6d9a82aa4ea0763ffcd99dbc584ff4831faf09badac35364268031098c74f7cfcd972c6a7789ae60358e5a6b362e3fa0a6aca2dbd605683"}) 3m33.020902353s ago: executing program 36 (id=1268): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f0000000180), 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x140) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffb, 0x0, 0x40, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0xcdf, 0x0, 0xffffffff, 0x0}) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r2) r3 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@sr0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000040)='gfs2meta\x00', 0x10000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x10000) close(r4) 34.989903439s ago: executing program 7 (id=3443): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @empty, 0x2}, 0x1c) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) getsockname(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, [{}, {}, {}, {}]}, 0x68) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, 0x0, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x0, 0x0, 0x34]}, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r2, 0x5761, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000001"]) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x0, 0x36, 0x36, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00", 0xfffffffc}, 0x48, 0xfffffffffffffffe) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='\x00', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 34.088718s ago: executing program 7 (id=3454): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x0, 0x80) read$FUSE(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) 34.026056097s ago: executing program 7 (id=3456): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000004fff7ffff0000000003"], 0x0, 0x56}, 0x28) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="140001800800010000000100050006"], 0x2c}}, 0x0) 33.940197317s ago: executing program 7 (id=3458): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0/../file0\x00', &(0x7f0000000400), 0x42, 0x0) 33.886575084s ago: executing program 7 (id=3459): r0 = syz_usbip_server_init(0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x0, 0x0, 0x0, 0x5, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x1, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="11010000733336088dee1edb2361000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0000000300000001"], 0x35) 33.523738568s ago: executing program 7 (id=3463): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x200011f, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) write$nci(r0, &(0x7f00000000c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x7, {0x1, 0x3}}, 0x49) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x10) 33.470512416s ago: executing program 37 (id=3463): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x200011f, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) write$nci(r0, &(0x7f00000000c0)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x1, 0x3, 0x8, 0x7, {0x1, 0x3}}, 0x49) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x10) 28.787819883s ago: executing program 6 (id=3505): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000280)={0xbe, 0x0, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0x51}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @empty, 0xa}, 0x1c) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 28.316322258s ago: executing program 6 (id=3508): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x10000) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000280)="0044ce9074", 0x5, 0x800c815, 0x0, 0x0) 28.311280596s ago: executing program 6 (id=3509): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x137) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x3d, 0x10000000000d08, 0x4, 0x2, 0x4, 0xc, 0x7, 0x7fffffff, 0x122, 0x6000, 0x10, r2, r3, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r4, 0x929, 0x200000000005) 28.189627512s ago: executing program 6 (id=3510): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0\x00', 0x0, 0x98d046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 28.153761234s ago: executing program 6 (id=3511): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.342068649s ago: executing program 6 (id=3522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0xeeee8000, 0x8000000, 0xb, 0x0, 0x4, 0x9, 0x7d, 0x7, 0x10, 0xfe, 0x2, 0x72}, {0x42000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x84, 0x12}, {0xf000, 0x60000, 0x10, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x5, 0x7, 0x7f}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x8, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0xd}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"d28cbffc70113aa16b365924c3128c89fe8764c41caa3ec7a095ce3692ae1fe3160c3dd483cc71d285c48c8fa445272281beb44357aa96da39f0ef45a90bfac537ba4c98038e0b871c2ba811d3d568ccdddd1e0e7edef9061d12bdd0fc1c83093613293d1779955c62df6a03c3a539051393b577bb6645c4ed2ddfd06df82c7359de2082e16a4c302d18db9ce698f22b519d55adbbe4881dda46ddbbab0a1ca428e404f0640e62eb7d76c8ca94cff34f26de20c2f44c22228eee44edcbec829ed8b5f24a8259fcc97d67b96441486cf9832274eff5271d383c178cd90827052ef8e6dee13ef4f8e23b8396f5bc4b03b8ee875350ac778233a13551f55cac915ce11f145063ef5b5111272d0859d6cdb62ab72a92f24d83ef5ff87aa8f6eae3986c403add562c0a17839921dea6186d3b71b3d466070a005541677a477392f9a499322ed2f09c6e1b401ad81bb6673274e7c344152c2617edc2f667329b51bcc9d235de56d8642823643e0107339044417e2708d10e7dafefb5b2e72f696e1dc37c48f3c9266c9c8d2e771aabd4b7e4e7c2bccde0345d5d43ad7a4d98e9e1e3e152784ca29d286fe783f3579055a428ab231b9e81d77bd8ca4007607cd2ff60953a2d68353c4cc677124b7431edca5f604841f3baa90d46235ddaa03f158dd78c219be7f0c53dddd4cea58ecac6cef53e7a5b347b0842bb163bd35e19d2ed1b67e63a7e04000000000000003949884286c101417e6deeff735b8b3b9109e47725bbd5c400b24489fec1afe6771d5c8871f7cd31e7390cef6dce398b8a1dd7213229d282cb581a71c04ca04e9eb516a197583ba8470b0df0b2158a076bf257520500a7bfb42766c883231c1a2a4527dabb5037f9fa00172bc8b9327494b553735a4ebbfb8c9e7f5034b442418c7490919f81308b4a73bd46d57e1ebcc3b6cf7d1ba20e55d06e40e5796e568c206d51adc1be7186cb80962e8dfa41c354acd9ad5fbf4c59b6fa6dd83aa9aa0a23210b057328efa4239b8211b3a5f21ce22a193eb93f69c4d525f53e733b397786d808b928297748a3d54e5bb71bab6139d5e2721d237f4c99896a2e398d049df2e9c63c424606fc73cece699407f3041826cc271a3cb44cc4d76ab77ddb15ef7dda76ddfa4830c5ba28cf7dcc154e88ef9f228a8158d6ae6fdc32ef2af1642e48d5218f10ba7c222e43da4e13f59e96ab4b467283b76d8b0c36665f02d943936041c00d7dbd2a3ab101aa56277b9ec5111428c047fb8b144f260b2fae62db101aad238ee50d222202969ed5929c2f8ab41e6e342ad1b0037be7e2d887f0563a722be94364dfe62482f7862da76fd58827712a1a80f69cc85f1fa9ba92cbfc48f7e4f11b2b87c71e6733a95d8ded91da74913fcf81bb1bb9cb8f380f402abf9df0990e0100750c49f9328238eced88d16068bce90b"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x33374004, 0xf000, 0x2, 0x1, 0x7ff}) 26.205865579s ago: executing program 38 (id=3522): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x3}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0xeeee8000, 0x8000000, 0xb, 0x0, 0x4, 0x9, 0x7d, 0x7, 0x10, 0xfe, 0x2, 0x72}, {0x42000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x84, 0x12}, {0xf000, 0x60000, 0x10, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x5, 0x7, 0x7f}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x8, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0xd}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000000)={0x33374004, 0xf000, 0x2, 0x1, 0x7ff}) 3.064958258s ago: executing program 2 (id=3739): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 2.872955446s ago: executing program 2 (id=3742): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\x00', 0x2) r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0\x00', 0x2) r2 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000d00)='0\x00', 0x2) r3 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)='dummy_udc.0\n\x00', 0xc) 2.84486737s ago: executing program 2 (id=3743): openat$rtc(0xffffff9c, 0x0, 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r3) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002880)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb0, 0x7f, 0x88}, 0x9c) write$tun(r2, &(0x7f0000000840)=ANY=[], 0x11b0) 2.705447762s ago: executing program 9 (id=3745): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={'netpci0\x00', {0x2, 0x4e23, @private=0x8010100}}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0xfffe, @mcast1, 0x10000}, 0x1c) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0x9, 0xbd, 0x0, 0xffff, 0x2, 0x2, '\x00', 0x654}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.580986264s ago: executing program 2 (id=3747): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000680)="262074259d4da923918493954d31b60796bb568ffa200e18a7b34050d0fd464c54e9f4d4172f5ca7fadd6c78f634400062d37ff77c62c653de3cc2185c86c9e6ffcf9ef6ae9a3db9130140aae6d7756eb60a38f1e73b0f77019ac29a5b4dfba7b2e946e8cc4955ca63e9f6fb3bd879ef61f050ade9976477a81a2bc6577c4c49d4acd64fa8e52249c988e8d8b7d86cfc5215945294733536", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x880) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0) preadv(r1, 0x0, 0x0, 0x11, 0xe) syz_io_uring_setup(0x4862, &(0x7f0000000500)={0x0, 0x4ea6, 0x40, 0x2, 0x33b, 0x0, r1}, &(0x7f0000000580), &(0x7f00000005c0), 0x0) ioctl$CDROMREADAUDIO(0xffffffffffffffff, 0x5392, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_wakeup_irq', 0x363a80, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="6000000002060108000000000000000005000003050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c69700014000780080006400000020008000840"], 0x60}}, 0x200040c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 2.337955437s ago: executing program 9 (id=3748): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {}, 0xfd}, 0x18) openat$vicodec1(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x579e, &(0x7f0000000000)={0x0, 0xb90f, 0x400, 0x2, 0x1d6}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f0000001240), 0x1900) syz_open_procfs(0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote}, 0x14) 2.271099044s ago: executing program 9 (id=3749): ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'geneve0\x00', &(0x7f0000000180)=@ethtool_drvinfo={0x3, "088faeae71cb2c8016ce5a26dd57c8e3b85de050ad1065e1247fbdd7b48a2cad", "faa4a2190f2056f3dd98242c2765ebd4628d27b3a438bb2c3942914d8fc252bd", "56b1e81bca36bfb15636d23a08b57c399ad0be96573c8a040b6ca0ee92a61519", "f11944190968857758729f09206d229d45de48ab6da2f85bfcd59e046c65c4c3", "b81ed2ff398d4d079510c21b16f048516ac785fd228f4f85015fe9f272d7de5b", "99a40c1bddc8b91781d9bc15", 0x1ff, 0xc3e, 0x6b9, 0x3}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000641100fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e200e22"], 0x0) mkdir(&(0x7f0000000640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) r1 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) chdir(&(0x7f0000001640)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0xc0286687, 0xfffffffffffffffc) 2.092292769s ago: executing program 2 (id=3751): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) close(0x3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) inotify_init1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000080)={r3, 0x80001, 0x80000004}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={r4, 0x1, r2, 0x3, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4, 0x5, 0x4000003}) 1.374955036s ago: executing program 0 (id=3758): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='te', 0x2) close(r1) 1.341006899s ago: executing program 0 (id=3759): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0xc042) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000000002400240000ff8807c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 1.202272878s ago: executing program 0 (id=3761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b00), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x20}, 0x810) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be5547e19b635d3b468d8cb5", 0xd4}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x798) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00010000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.123131898s ago: executing program 2 (id=3763): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) syz_usb_connect(0x2, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff00000007058102400000070501024000000705840240000007050202"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./dev/ttyUSB0\x00', 0x2, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000080)={0x16, 0x17, 0x1, {0xd, './dev/ttyUSB0'}}, 0x16) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x64010100, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e21, 0x28, 0xfffc, 0x0, 0xa, 0x0, 0x0, 0x67}, {0xfffffffffffffff8, 0x400000000001, 0x100, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000}, {0x3, 0x0, 0x80, 0x2}, 0x7, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x4, 0x0, 0x0, 0xe000000}}, 0xe8) openat$adsp1(0xffffffffffffff9c, 0x0, 0x200, 0x0) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 788.081138ms ago: executing program 8 (id=3767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x44840) 667.187434ms ago: executing program 8 (id=3768): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xffff, 0x10}, {0x0, 0xfff1}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xf4, 0x0, 0x7, 0xb, 0x3}, 0x31}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r5, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005004024c10200000006125ce882cbf400930bf4533f", 0x20}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0", 0xe}], 0x2}, 0x8000) 531.507236ms ago: executing program 8 (id=3769): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_setup(0x3a0c, &(0x7f00000003c0)={0x0, 0x9055, 0x400, 0x3, 0x22b}, 0x0, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="012242000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10) 503.050326ms ago: executing program 9 (id=3770): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x8, 0x80000001, 0x7}, 0x3d}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 475.35953ms ago: executing program 8 (id=3771): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x7fffffff, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040840) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {}, {0x9, 0xb}, {0x10, 0xffe0}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x24048024}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 336.980283ms ago: executing program 9 (id=3772): r0 = socket$packet(0x11, 0x2, 0x300) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002480)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f0000002280)='./file1\x00', 0x5482, 0x7e3111f862955f54) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 268.595708ms ago: executing program 0 (id=3773): r0 = socket$inet(0x2, 0x1, 0x5) add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x8}, @hci_rp_read_page_scan_activity={{}, {0x0, 0xb, 0x4}}}}, 0x30) setregid(0x0, 0x0) write(r1, &(0x7f0000000680), 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080), 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000000)=0x8) openat$dsp1(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCL_GETKMSGREDIRECT(0xffffffffffffffff, 0x541c, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000080)={0x0, 0x0}) 267.242141ms ago: executing program 8 (id=3774): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0xffffffff}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_ECN={0x8, 0x4, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x40) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 221.890902ms ago: executing program 9 (id=3775): openat$rtc(0xffffff9c, &(0x7f0000000140), 0x101000, 0x0) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000000)={0x32, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x21, 0x4, 0x65}, 0x2c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x10}, [@ldst={0x6, 0x2, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) chdir(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002840), r4) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000002a40)={&(0x7f0000002880)={0x14, r5, 0x1, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x8000, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}}, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e23, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb0, 0x7f, 0x88}, 0x9c) write$tun(r3, &(0x7f0000000840)=ANY=[], 0x11b0) 177.883124ms ago: executing program 0 (id=3776): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newtfilter={0x74, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbba, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x5}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x84}, {0x5, 0x7, 0x2}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0xfc4, 0x1, 0x5}, {0xc, 0x0, 0x2, 0x1, 0x4, 0x0, 0x1}}}]}]}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r6, 0x3e}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000200)="81", 0x1f4}], 0x1}, 0x4) 71.536534ms ago: executing program 8 (id=3777): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) set_mempolicy(0x8006, 0x0, 0x5) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) r1 = socket$inet6(0xa, 0x80000, 0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) connect$inet6(r1, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) bind$inet(r2, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 0s ago: executing program 0 (id=3778): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) timer_create(0x3, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={0x0, 0x0}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000002a80)={0x1, 0x0, [{0x0, 0x106, &(0x7f0000002700)=""/262}]}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/92}) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x8}, 0x28) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) kernel console output (not intermixed with test programs): with result -19 [ 313.070128][ T5809] hid_parser_main: 10 callbacks suppressed [ 313.070149][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.075989][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.079336][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.082548][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.085745][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.089208][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.092465][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.095627][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.098952][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.102196][ T5809] plantronics 0003:047F:FFFF.000A: unknown main item tag 0x0 [ 313.122673][ T5809] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 313.345784][ T848] usb 11-1: USB disconnect, device number 17 [ 313.362389][ T1356] appleir 0003:05AC:8243.000B: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 313.551366][ T1356] usb 13-1: USB disconnect, device number 23 [ 313.593396][T15026] syzkaller0: entered promiscuous mode [ 313.595718][T15026] syzkaller0: entered allmulticast mode [ 313.941829][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 314.127582][T15062] syzkaller0: entered promiscuous mode [ 314.129509][T15062] syzkaller0: entered allmulticast mode [ 314.177284][ T848] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 314.305111][ T1356] usb 12-1: new low-speed USB device number 19 using dummy_hcd [ 314.339050][ T848] usb 11-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 314.344100][ T848] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.348557][ T848] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.359919][ T848] as10x_usb: device has been detected [ 314.362801][ T848] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 314.372385][ T848] usb 11-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 314.409815][ T42] audit: type=1400 audit(1787656762.342:1167): avc: denied { firmware_load } for pid=848 comm="kworker/0:2" path="/lib/firmware/as102_data1_st.hex" dev="sda1" ino=297 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 314.410668][ T848] as10x_usb: error during firmware upload part1 [ 314.422395][ T848] Registered device Abilis Systems DVB-Titan [ 314.425146][ T42] audit: type=1400 audit(1787656762.360:1168): avc: denied { read } for pid=15069 comm="syz.8.2980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 314.468135][ T1356] usb 12-1: unable to get BOS descriptor or descriptor too short [ 314.471602][ T1356] usb 12-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=d4.f4 [ 314.476931][ T1356] usb 12-1: config 100 has an invalid interface number: 173 but max is 0 [ 314.480460][ T1356] usb 12-1: config 100 has no interface number 0 [ 314.483277][ T1356] usb 12-1: config 100 interface 173 altsetting 142 endpoint 0xE is Bulk; changing to Interrupt [ 314.487924][ T1356] usb 12-1: config 100 interface 173 altsetting 142 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 314.492912][ T1356] usb 12-1: config 100 interface 173 altsetting 142 endpoint 0x83 has invalid wMaxPacketSize 0 [ 314.497205][ T1356] usb 12-1: config 100 interface 173 has no altsetting 0 [ 314.502950][ T1356] usb 12-1: string descriptor 0 read error: -22 [ 314.505759][ T1356] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.512763][T15060] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 314.519108][ T1356] metro_usb 12-1:100.173: Metrologic USB to Serial converter detected [ 314.524467][ T1356] usb 12-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 314.721899][ T6790] usb 13-1: new high-speed USB device number 24 using dummy_hcd [ 314.738095][T15060] metro-usb ttyUSB0: metrousb_open - failed submitting interrupt in urb, error code=-90 [ 314.746124][ T5873] usb 12-1: USB disconnect, device number 19 [ 314.752226][ T5873] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 314.756765][ T5873] metro_usb 12-1:100.173: device disconnected [ 314.882602][ T6790] usb 13-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 314.886310][ T6790] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 314.889454][ T6790] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 314.892510][ T6790] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.897871][ T6790] spcp8x5 13-1:1.0: SPCP8x5 converter detected [ 314.907591][ T6790] usb 13-1: SPCP8x5 converter now attached to ttyUSB0 [ 315.042592][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 315.280006][T15072] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 315.283476][T15072] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 315.286711][T15072] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 315.491543][T15071] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 315.494812][ T6790] usb 13-1: USB disconnect, device number 24 [ 315.499837][ T6790] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 315.502524][ T6790] spcp8x5 13-1:1.0: device disconnected [ 315.630183][ T8197] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 315.801097][ T8197] usb 12-1: Using ep0 maxpacket: 8 [ 315.803528][ T8197] usb 12-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a [ 315.807081][ T8197] usb 12-1: config 0 has no interfaces? [ 315.813040][ T8197] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.815601][ T8197] usb 12-1: Product: syz [ 315.816943][ T8197] usb 12-1: Manufacturer: syz [ 315.818705][ T8197] usb 12-1: SerialNumber: syz [ 315.822032][ T8197] usb 12-1: config 0 descriptor?? [ 316.040209][ T9987] usb 12-1: USB disconnect, device number 20 [ 316.153854][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 316.300158][ T6790] usb 11-1: USB disconnect, device number 18 [ 316.329879][ T6790] Unregistered device Abilis Systems DVB-Titan [ 316.336475][ T6790] as10x_usb: device has been disconnected [ 316.635616][ T9987] usb 13-1: new high-speed USB device number 25 using dummy_hcd [ 316.795911][ T9987] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 316.800898][ T9987] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 316.806539][ T9987] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 316.814565][ T9987] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 316.819646][ T9987] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 316.827446][ T9987] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.834261][ T9987] usb 13-1: config 0 descriptor?? [ 316.880402][ T8197] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 317.053006][ T8197] usb 12-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 317.061648][ T8197] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.067527][ T8197] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.072069][ T8197] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.079676][ T8197] usb 12-1: config 0 descriptor?? [ 317.147816][ T56] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 317.265134][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 317.294359][ T9987] plantronics 0003:047F:FFFF.000C: reserved main item tag 0xd [ 317.307869][ T56] usb 11-1: Using ep0 maxpacket: 16 [ 317.310838][ T56] usb 11-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 317.320262][ T56] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 317.325105][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.331629][ T9987] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 317.339492][ T56] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.343757][ T56] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 317.349075][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.355785][ T56] usb 11-1: config 0 descriptor?? [ 317.524176][ T8197] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0D8C:0022.000D/input/input25 [ 317.566479][ T5873] usb 13-1: USB disconnect, device number 25 [ 317.575986][ T8197] cm6533_jd 0003:0D8C:0022.000D: input,hiddev1,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.7-1/input0 [ 317.729438][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.733416][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.738099][ T848] usb 12-1: USB disconnect, device number 21 [ 317.810798][ T56] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5013.000E/input/input26 [ 317.886596][ T56] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:0458:5013.000E/input/input27 [ 317.962088][ T56] kye 0003:0458:5013.000E: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 318.013150][ T5873] usb 11-1: USB disconnect, device number 19 [ 318.020054][T15135] fido_id[15135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb11/11-1/report_descriptor': No such file or directory [ 318.387162][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 318.429845][ T56] usb 13-1: new high-speed USB device number 26 using dummy_hcd [ 318.525108][T15148] syzkaller0: entered promiscuous mode [ 318.527076][T15148] syzkaller0: entered allmulticast mode [ 318.590643][ T56] usb 13-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 318.595359][ T56] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.601394][ T56] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.603920][ T56] usb 13-1: Product: syz [ 318.605232][ T56] usb 13-1: Manufacturer: syz [ 318.606603][ T56] usb 13-1: SerialNumber: syz [ 318.613334][ T56] usbhid 13-1:1.0: couldn't find an input interrupt endpoint [ 318.829588][ T56] usb 13-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 318.839991][ T56] usb 13-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.844431][ T56] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 318.848002][ T56] usb 13-1: media controller created [ 318.861774][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 318.947610][T15173] syzkaller0: entered promiscuous mode [ 318.949395][T15173] syzkaller0: entered allmulticast mode [ 319.052400][ T56] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 319.243915][T15190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3028'. [ 319.306370][T15194] fuse: fd is not a fuse device [ 319.321088][ T56] usb 13-1: USB disconnect, device number 26 [ 319.488106][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 319.776352][ T56] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 319.947331][ T56] usb 11-1: Using ep0 maxpacket: 8 [ 319.950261][ T56] usb 11-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 319.954892][ T56] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 319.959518][ T56] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 319.963804][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.972521][ T56] kobil_sct 11-1:1.0: KOBIL USB smart card terminal converter detected [ 319.977618][ T56] usb 11-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 320.172398][T15215] fuse: fd is not a fuse device [ 320.521196][ T42] audit: type=1400 audit(1787656768.059:1169): avc: denied { write } for pid=15223 comm="syz.8.3042" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.528342][ T42] audit: type=1400 audit(1787656768.059:1170): avc: denied { write } for pid=15223 comm="syz.8.3042" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 320.608201][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 320.808887][ T56] usb 11-1: USB disconnect, device number 20 [ 320.816388][ T56] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 320.825214][ T56] kobil_sct 11-1:1.0: device disconnected [ 321.052357][ T42] audit: type=1400 audit(1787656768.565:1171): avc: denied { write } for pid=15242 comm="syz.8.3051" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.060783][ T42] audit: type=1400 audit(1787656768.565:1172): avc: denied { write } for pid=15242 comm="syz.8.3051" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 321.678501][ T13] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.681152][ T13] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.689460][ T13] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.697554][ T13] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.710503][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.129061][T15279] input: syz0 as /devices/virtual/input/input28 [ 322.227157][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.229441][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.325333][T15281] kvm: kvm [15280]: vcpu2, guest rIP: 0x913b Unhandled WRMSR(0x11e) = 0x0 [ 322.373017][ T8197] usb 13-1: new high-speed USB device number 27 using dummy_hcd [ 322.542678][ T42] audit: type=1400 audit(1787656769.950:1173): avc: denied { write } for pid=15286 comm="syz.7.3069" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.544080][ T8197] usb 13-1: Using ep0 maxpacket: 32 [ 322.552641][ T42] audit: type=1400 audit(1787656769.950:1174): avc: denied { write } for pid=15286 comm="syz.7.3069" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 322.554330][ T8197] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 322.577062][ T8197] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 322.582766][ T8197] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 322.587751][ T8197] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.592312][ T8197] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 322.599782][ T8197] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.602369][ T8197] usb 13-1: Product: syz [ 322.603708][ T8197] usb 13-1: Manufacturer: syz [ 322.605201][ T8197] usb 13-1: SerialNumber: syz [ 322.619318][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 322.631787][ T8197] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input29 [ 322.768493][ T56] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 322.821891][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 322.843227][ T8197] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 322.846341][ T8197] (id 0x00) [ 322.896607][ T8197] rc_core: IR keymap rc-imon-pad not found [ 322.899399][ T8197] Registered IR keymap rc-empty [ 322.901611][ T8197] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 322.905902][ T8197] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 322.928656][ T56] usb 11-1: Using ep0 maxpacket: 8 [ 322.928698][ T5822] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 322.933251][ T56] usb 11-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 322.937114][ T56] usb 11-1: config 179 has an invalid interface number: 65 but max is 0 [ 322.939880][ T56] usb 11-1: config 179 has no interface number 0 [ 322.941868][ T56] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 322.945788][ T56] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 322.949279][ T56] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 322.953008][ T56] usb 11-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 322.956577][ T56] usb 11-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 322.960734][ T56] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.965471][T15289] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 323.058364][ T8197] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 323.063766][ T8197] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input30 [ 323.070652][ T8197] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:27> initialized [ 323.101169][ T5822] usb 12-1: Using ep0 maxpacket: 8 [ 323.105256][ T5822] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 323.116800][ T5822] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.125389][ T5822] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.134639][ T5822] usb 12-1: config 0 descriptor?? [ 323.203343][ T8197] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:179.65/input/input31 [ 323.317044][T15277] imon:send_packet: packet tx failed (-71) [ 323.317482][ T8197] usb 13-1: USB disconnect, device number 27 [ 323.336479][T15277] imon:vfd_write: send packet #0 failed [ 323.369476][ T5822] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 323.411993][ T56] usb 11-1: USB disconnect, device number 21 [ 323.414020][ C3] xpad 11-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 323.414042][ C3] xpad 11-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 323.577654][ T8197] usb 12-1: USB disconnect, device number 22 [ 323.768610][T15309] netlink: 'syz.0.3078': attribute type 4 has an invalid length. [ 323.933302][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 324.143521][T15335] device-mapper: ioctl: The device has no table. [ 324.370345][ T42] audit: type=1400 audit(1787656771.662:1175): avc: denied { mount } for pid=15342 comm="syz.8.3093" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 324.387185][ T42] audit: type=1400 audit(1787656771.681:1176): avc: denied { unmount } for pid=10345 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 324.401075][T15344] pim6reg: entered allmulticast mode [ 324.410579][T15341] pim6reg: left allmulticast mode [ 324.833241][T15373] logitech-hidpp-device 0005:046D:B012.000F: received hid++ report of bad size (4096) [ 324.849558][ T8197] logitech-hidpp-device 0005:046D:B012.000F: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 325.006772][T15379] lo: entered allmulticast mode [ 325.009136][T15379] dvmrp0: left allmulticast mode [ 325.011138][T15379] lo: left allmulticast mode [ 325.044822][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 325.150714][T15383] fido_id[15383]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 325.272116][T15397] syzkaller0: entered promiscuous mode [ 325.273972][T15397] syzkaller0: entered allmulticast mode [ 325.312053][ T5809] usb 13-1: new high-speed USB device number 28 using dummy_hcd [ 325.482968][ T5809] usb 13-1: Using ep0 maxpacket: 32 [ 325.485420][ T5809] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 325.489886][ T5809] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 325.493806][ T5809] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 325.497876][ T5809] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 325.501724][ T5809] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 325.507546][ T5809] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.510144][ T5809] usb 13-1: Product: syz [ 325.511451][ T5809] usb 13-1: Manufacturer: syz [ 325.513204][ T5809] usb 13-1: SerialNumber: syz [ 325.518877][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 325.526757][ T5809] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input32 [ 325.660223][T15411] pim6reg: entered allmulticast mode [ 325.663273][T15411] pim6reg: left allmulticast mode [ 325.665422][ T5079] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 325.771148][ T5809] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 325.825537][ T5079] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 325.829355][ T5079] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 325.833687][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.837816][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.842175][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.846066][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.849730][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.854180][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.858073][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.861750][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.866155][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.870252][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.873828][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.878304][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.882081][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.885747][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.890203][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.893953][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.897601][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.902059][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.905864][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.909654][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.913895][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.917582][ T5079] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 325.922568][ T5079] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 325.927083][ T5079] usb 12-1: config 0 interface 0 has no altsetting 0 [ 325.932181][ T5079] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 325.935569][ T5079] usb 12-1: Product: syz [ 325.937130][ T5079] usb 12-1: Manufacturer: syz [ 325.938923][ T5079] usb 12-1: SerialNumber: syz [ 325.946674][ T5079] usb 12-1: config 0 descriptor?? [ 325.955960][ T5079] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 326.166569][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 326.175979][ T5079] usb 12-1: USB disconnect, device number 23 [ 326.188098][ T5079] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 326.572694][ T5809] (id 0x00) [ 326.626079][ T5809] rc_core: IR keymap rc-imon-pad not found [ 326.628618][ T5809] Registered IR keymap rc-empty [ 326.630422][ T5809] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 326.634369][ T5809] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 326.640835][ T5809] imon:send_packet: packet tx failed (-71) [ 326.650625][T15420] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3120'. [ 326.658159][ T5809] imon 13-1:155.0: remote input dev register failed [ 326.661030][ T5809] imon 13-1:155.0: imon_init_intf0: rc device setup failed [ 326.682715][ T5809] imon 13-1:155.0: unable to initialize intf0, err 0 [ 326.685556][ T5809] imon:imon_probe: failed to initialize context! [ 326.688592][ T5809] imon 13-1:155.0: unable to register, err -19 [ 326.693111][ T5809] usb 13-1: USB disconnect, device number 28 [ 326.935923][ T848] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 326.965422][ T42] audit: type=1800 audit(1787656774.086:1177): pid=15425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3122" name="idVendor" dev="configfs" ino=75787 res=0 errno=0 [ 326.974725][ T42] audit: type=1800 audit(1787656774.086:1178): pid=15425 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3122" name="manufacturer" dev="configfs" ino=75788 res=0 errno=0 [ 327.049793][T15427] smpboot: CPU 1 is now offline [ 327.097876][ T848] usb 11-1: Using ep0 maxpacket: 32 [ 327.101159][ T848] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 327.106014][ T848] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 327.112449][ T848] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 327.115882][ T848] usb 11-1: Product: syz [ 327.117896][ T848] usb 11-1: Manufacturer: syz [ 327.120352][ T848] usb 11-1: SerialNumber: syz [ 327.133503][ T848] usb 11-1: config 0 descriptor?? [ 327.136489][T15422] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 327.139636][T15428] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 327.238764][T15433] input: syz1 as /devices/virtual/input/input34 [ 327.247812][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 327.424711][ T5809] usb 11-1: USB disconnect, device number 22 [ 327.598687][ T56] usb 13-1: new high-speed USB device number 29 using dummy_hcd [ 327.644232][T15446] pim6reg: entered allmulticast mode [ 327.652617][T15445] pim6reg: left allmulticast mode [ 327.772438][ T56] usb 13-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 327.779709][ T56] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.790391][ T56] usb 13-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.799818][ T56] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.803818][ T56] usb 13-1: Product: syz [ 327.805666][ T56] usb 13-1: Manufacturer: syz [ 327.807631][ T56] usb 13-1: SerialNumber: syz [ 327.812951][T15448] overlayfs: missing 'lowerdir' [ 327.819924][ T56] ti_usb_3410_5052 13-1:2.0: TI USB 5052 2 port adapter converter detected [ 327.826751][ T56] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 327.836444][ T56] usb 13-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 328.011112][ T42] audit: type=1400 audit(1787656775.069:1179): avc: denied { write } for pid=15449 comm="syz.6.3130" name="functions" dev="configfs" ino=11595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 328.356207][T15457] jffs2: notice: (15457) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (2 unchecked, 1 orphan) and 4 of xref (0 dead, 1 orphan) found. [ 328.378706][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 328.854177][T15471] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3138'. [ 328.858199][T15471] netlink: 'syz.6.3138': attribute type 23 has an invalid length. [ 329.490232][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.690464][ T42] audit: type=1400 audit(1787656776.641:1180): avc: denied { write } for pid=15487 comm="syz.7.3145" name="/" dev="9p" ino=78396191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.697635][T15490] 9pnet_virtio: no channels available for device syz [ 330.120444][ T5809] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 330.291389][ T5809] usb 12-1: Using ep0 maxpacket: 16 [ 330.293576][ T5809] usb 12-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 330.297743][ T5809] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.301381][ T5809] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.305423][ T5809] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 330.310275][ T5809] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.313940][ T5809] usb 12-1: config 0 descriptor?? [ 330.565023][ T848] usb 13-1: USB disconnect, device number 29 [ 330.583570][ T848] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 330.591141][ T848] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 330.596546][ T848] ti_usb_3410_5052 13-1:2.0: device disconnected [ 330.602227][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 330.761193][ T5809] hid_parser_main: 8 callbacks suppressed [ 330.761205][ T5809] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 330.773910][ T5809] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 330.778444][ T5809] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 330.781234][ T5809] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 330.784487][ T5809] shield 0003:0955:7214.0010: unknown main item tag 0x0 [ 330.793207][ T5809] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 330.853837][ T5809] shield 0003:0955:7214.0010: Registered Thunderstrike controller [ 330.857074][ T5809] shield 0003:0955:7214.0010: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0 [ 330.970147][T15501] netlink: 504 bytes leftover after parsing attributes in process `syz.7.3147'. [ 330.985941][ T6790] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 330.988676][ T56] usb 12-1: USB disconnect, device number 24 [ 330.993377][ T6790] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 330.997651][ T6790] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 331.005503][ T6790] shield 0003:0955:7214.0010: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 331.201758][ T42] audit: type=1400 audit(1787656778.063:1181): avc: denied { link } for pid=15533 comm="syz.6.3162" name="file1" dev="9p" ino=78396195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 331.712801][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 332.427603][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3176'. [ 332.429476][T15573] overlayfs: missing 'workdir' [ 332.433714][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3176'. [ 332.456271][T15572] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3176'. [ 332.460048][T15572] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3176'. [ 332.471417][ T13] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.475670][ T13] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.479231][ T13] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.508423][ T13] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 332.824049][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 333.048499][ T6790] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 333.169112][ T65] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 333.230535][ T6790] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.234860][ T6790] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.238462][ T6790] usb 11-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.242521][ T6790] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.245827][ T6790] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 333.249874][ T6790] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 333.255771][ T6790] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.259119][ T6790] usb 11-1: Product: syz [ 333.260897][ T6790] usb 11-1: Manufacturer: syz [ 333.268794][ T6790] cdc_wdm 11-1:1.0: skipping garbage [ 333.272937][ T6790] cdc_wdm 11-1:1.0: skipping garbage [ 333.277360][ T6790] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 333.279932][ T6790] cdc_wdm 11-1:1.0: Unknown control protocol [ 333.355867][T15602] MTD: Couldn't look up './dev/mtdblock0': -2 [ 333.483383][ T42] audit: type=1400 audit(1787656780.187:1182): avc: denied { read write } for pid=15593 comm="syz.6.3186" name="cdc-wdm0" dev="devtmpfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 333.493539][ T42] audit: type=1400 audit(1787656780.187:1183): avc: denied { open } for pid=15593 comm="syz.6.3186" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 333.758910][ C3] cdc_wdm 11-1:1.0: Unexpected error -71 [ 333.759054][ T5822] usb 11-1: USB disconnect, device number 24 [ 333.764234][ C3] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 333.767133][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 333.769658][ C3] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 333.935367][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 334.026261][ T42] audit: type=1400 audit(1787656780.702:1184): avc: denied { create } for pid=15615 comm="syz.7.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 334.036150][ T42] audit: type=1400 audit(1787656780.711:1185): avc: denied { setopt } for pid=15615 comm="syz.7.3194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 334.096118][ T5514] usb 13-1: new high-speed USB device number 30 using dummy_hcd [ 334.256032][ T5514] usb 13-1: Using ep0 maxpacket: 8 [ 334.258754][ T5514] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 334.262581][ T5514] usb 13-1: config index 0 descriptor too short (expected 74, got 45) [ 334.265328][ T5514] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 334.268910][ T5514] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 334.271905][ T5514] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 334.275365][ T5514] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 334.278605][ T5514] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.282513][ T5514] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.352919][ T5822] usb 12-1: new full-speed USB device number 25 using dummy_hcd [ 334.468875][T15625] overlayfs: missing 'workdir' [ 334.507330][ T5514] usb 13-1: GET_CAPABILITIES returned 0 [ 334.509151][ T5514] usbtmc 13-1:16.0: can't read capabilities [ 334.566055][ T5822] usb 12-1: unable to get BOS descriptor or descriptor too short [ 334.570134][ T5822] usb 12-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 334.573917][ T5822] usb 12-1: no configurations [ 334.575890][ T5822] usb 12-1: can't read configurations, error -22 [ 334.727166][ C0] usbtmc 13-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 334.733874][T15611] usbtmc 13-1:16.0: Unable to send data, error -71 [ 334.755163][ T5514] usb 13-1: USB disconnect, device number 30 [ 335.057470][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 335.794730][ T6790] usb 13-1: new high-speed USB device number 31 using dummy_hcd [ 335.965818][ T6790] usb 13-1: Using ep0 maxpacket: 8 [ 335.971119][ T6790] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 335.976960][ T6790] usb 13-1: config index 0 descriptor too short (expected 301, got 45) [ 335.980621][ T6790] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 335.984937][ T6790] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 335.990639][ T6790] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 335.995910][ T6790] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 336.001775][ T6790] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.168812][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 336.177639][T15721] fuse: fd is not a fuse device [ 336.180421][ T42] audit: type=1400 audit(1787656782.723:1186): avc: denied { connect } for pid=15719 comm="syz.7.3220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.188922][ T42] audit: type=1400 audit(1787656782.723:1187): avc: denied { read } for pid=15719 comm="syz.7.3220" laddr=172.20.20.10 lport=34658 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 336.227982][ T6790] usb 13-1: usb_control_msg returned -32 [ 336.230491][ T6790] usbtmc 13-1:16.0: can't read capabilities [ 336.232051][T15728] overlayfs: missing 'workdir' [ 337.229760][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3229'. [ 337.233729][T15749] netlink: 'syz.7.3229': attribute type 20 has an invalid length. [ 337.237277][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3229'. [ 337.251519][T15749] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3229'. [ 337.255017][T15749] netlink: 'syz.7.3229': attribute type 20 has an invalid length. [ 337.257963][T15749] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3229'. [ 337.270014][ T5822] usb 13-1: USB disconnect, device number 31 [ 337.280511][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 337.284349][ T5774] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.288009][ T5774] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.292211][ T5774] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.295991][ T5774] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 337.440361][ T5079] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 337.590455][ T41] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 337.622609][ T5079] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 337.626427][ T5079] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.772666][ T41] usb 12-1: Using ep0 maxpacket: 32 [ 337.775888][ T41] usb 12-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 337.781431][ T41] usb 12-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 337.787108][ T41] usb 12-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 337.792165][ T41] usb 12-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.797754][ T41] usb 12-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 337.807846][ T41] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.811434][ T41] usb 12-1: Product: syz [ 337.813343][ T41] usb 12-1: Manufacturer: syz [ 337.815505][ T41] usb 12-1: SerialNumber: syz [ 337.843088][ C1] imon 12-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 337.849469][ T5079] cdc_acm 11-1:1.0: ttyACM0: USB ACM device [ 337.868865][ T41] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/input/input36 [ 338.060242][ T41] imon 12-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 338.063684][ T41] (id 0x00) [ 338.124355][ T41] rc_core: IR keymap rc-imon-pad not found [ 338.126649][ T41] Registered IR keymap rc-empty [ 338.129606][ T41] imon 12-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 338.133610][ T41] imon 12-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 338.287856][ T41] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0 [ 338.291958][ T41] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:155.0/rc/rc0/input37 [ 338.308671][ T41] imon 12-1:155.0: iMON device (15c2:ffdc, intf0) on usb<12:27> initialized [ 338.382258][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 338.576041][T15755] imon:send_packet: task interrupted [ 338.578227][T15755] imon:send_packet: packet tx failed (-512) [ 338.581507][T15755] imon:vfd_write: send packet #0 failed [ 338.585045][T15755] imon:send_packet: packet tx failed (-32) [ 338.605219][T15755] imon:vfd_write: send packet #0 failed [ 338.611374][ T5809] usb 12-1: USB disconnect, device number 27 [ 338.941539][ T42] audit: type=1400 audit(1787656785.297:1188): avc: denied { read } for pid=15796 comm="syz.8.3246" path="socket:[76078]" dev="sockfs" ino=76078 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 339.062902][ T42] audit: type=1400 audit(1787656785.409:1189): avc: denied { write } for pid=15798 comm="syz.8.3247" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 339.073146][ T42] audit: type=1400 audit(1787656785.409:1190): avc: denied { create } for pid=15798 comm="syz.8.3247" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 339.081799][ T42] audit: type=1400 audit(1787656785.409:1191): avc: denied { write } for pid=15798 comm="syz.8.3247" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 339.283373][ T42] audit: type=1400 audit(1787656785.624:1192): avc: denied { read } for pid=15801 comm="syz.7.3248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 339.492086][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 340.614221][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 341.716513][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 342.407456][T15802] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 342.535536][ T42] audit: type=1400 audit(1787656788.656:1193): avc: denied { read write } for pid=15819 comm="syz.7.3254" name="vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 342.546074][ T42] audit: type=1400 audit(1787656788.656:1194): avc: denied { open } for pid=15819 comm="syz.7.3254" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 342.559181][ T42] audit: type=1400 audit(1787656788.656:1195): avc: denied { ioctl } for pid=15819 comm="syz.7.3254" path="/dev/vhost-vsock" dev="devtmpfs" ino=1298 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 342.608997][T15825] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 342.654817][T15823] pim6reg: entered allmulticast mode [ 342.660814][T15823] pim6reg: left allmulticast mode [ 342.825543][T15833] overlayfs: missing 'lowerdir' [ 342.827359][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.755570][T15843] tipc: Enabling of bearer rejected, failed to enable media [ 343.772576][ T8197] usb 11-1: USB disconnect, device number 25 [ 343.839622][T15847] faux_driver vgem: [drm] Unknown color mode 6; guessing buffer size. [ 343.927564][ T42] audit: type=1400 audit(1787656789.957:1196): avc: denied { create } for pid=15851 comm="syz.0.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.941574][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 343.957011][ T42] audit: type=1400 audit(1787656789.966:1197): avc: denied { write } for pid=15851 comm="syz.0.3268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 343.966115][ T5822] usb 12-1: new high-speed USB device number 28 using dummy_hcd [ 344.173269][ T5822] usb 12-1: Using ep0 maxpacket: 32 [ 344.200880][ T5822] usb 12-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 344.214964][ T5822] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.220714][ T5822] usb 12-1: config 0 descriptor?? [ 344.229454][ T5822] as10x_usb: device has been detected [ 344.232514][ T5822] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 344.258824][ T5822] usb 12-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 344.283433][ T5822] as10x_usb: error during firmware upload part1 [ 344.286526][ T5822] Registered device nBox DVB-T Dongle [ 344.304799][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 344.304812][ T42] audit: type=1400 audit(1787656790.322:1201): avc: denied { write } for pid=15885 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.441475][ T5873] usb 12-1: USB disconnect, device number 28 [ 344.472284][ T41] usb 13-1: new high-speed USB device number 32 using dummy_hcd [ 344.632537][ T41] usb 13-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 344.637067][ T41] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.640386][ T41] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 344.644067][ T41] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.649836][ T41] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 344.652617][ T41] usb 13-1: Product: syz [ 344.654274][ T41] usb 13-1: Manufacturer: syz [ 344.659913][T15878] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 344.665602][ T41] garmin_gps 13-1:1.0: Garmin GPS usb/tty converter detected [ 344.673294][ T5873] Unregistered device nBox DVB-T Dongle [ 344.676888][ T5873] as10x_usb: device has been disconnected [ 344.680922][ T41] usb 13-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 344.761013][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3276'. [ 344.765677][T15888] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3276'. [ 344.886282][ T42] audit: type=1326 audit(1787656790.856:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15874 comm="syz.8.3273" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb30039e0d9 code=0x0 [ 344.996269][ T6790] usb 13-1: USB disconnect, device number 32 [ 345.003569][ T6790] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 345.008449][ T6790] garmin_gps 13-1:1.0: device disconnected [ 345.048952][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.160434][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 346.385392][T15919] netlink: 40 bytes leftover after parsing attributes in process `syz.7.3286'. [ 346.505087][ T6789] nci: nci_ntf_packet: unknown ntf opcode 0x13a [ 347.271702][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 347.317788][T15921] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 347.377866][T15934] syzkaller1: entered promiscuous mode [ 347.380264][T15934] syzkaller1: entered allmulticast mode [ 347.736620][T15957] kvm: kvm [15953]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 347.740050][T15957] kvm: kvm [15953]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 347.922656][T15966] netlink: 'syz.6.3303': attribute type 12 has an invalid length. [ 348.049655][T15970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3304'. [ 348.145864][T15974] kvm: MWAIT instruction emulated as NOP! [ 348.361647][ T5873] usb 13-1: new high-speed USB device number 33 using dummy_hcd [ 348.383174][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 348.543954][ T5873] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 348.549041][ T5873] usb 13-1: config index 0 descriptor too short (expected 45, got 36) [ 348.552623][ T5873] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.557366][ T5873] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.561878][ T5873] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 348.568339][ T5873] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.574773][ T5873] usb 13-1: config 0 descriptor?? [ 349.020702][ T5873] plantronics 0003:047F:FFFF.0011: reserved main item tag 0xd [ 349.028853][ T5873] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 349.191508][T16012] pim6reg: entered allmulticast mode [ 349.206374][T16010] pim6reg: left allmulticast mode [ 349.301091][ T5809] usb 13-1: USB disconnect, device number 33 [ 349.418504][T16023] pim6reg: entered allmulticast mode [ 349.494535][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 349.664521][T16037] pim6reg: left allmulticast mode [ 350.540610][T16053] binder: BINDER_SET_CONTEXT_MGR bad uid 3327 != 0 [ 350.545369][T16053] binder: 16052:16053 ioctl 4018620d 200000001000 returned -1 [ 350.605891][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 350.693800][ T42] audit: type=1400 audit(1787656796.302:1203): avc: denied { shutdown } for pid=16058 comm="syz.8.3339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 350.840290][T16064] pim6reg: entered allmulticast mode [ 350.845603][T16064] pim6reg: left allmulticast mode [ 350.904767][ T8197] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 350.906513][ T42] audit: type=1400 audit(1787656796.498:1204): avc: denied { write } for pid=16066 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.960013][ T42] audit: type=1400 audit(1787656796.555:1205): avc: denied { write } for pid=16070 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.087226][ T8197] usb 11-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 351.092835][T16080] overlayfs: failed to clone upperpath [ 351.097746][ T8197] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 351.102389][ T8197] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.106920][ T8197] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 351.112540][ T8197] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.119819][ T42] audit: type=1400 audit(1787656796.686:1206): avc: denied { write } for pid=16078 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.137161][T16057] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 351.145834][ T8197] cyberjack 11-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 351.157132][ T8197] usb 11-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 351.179956][ T42] audit: type=1400 audit(1787656796.751:1207): avc: denied { write } for pid=16085 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.191082][T16087] fuse: fd is not a fuse device [ 351.282311][ T42] audit: type=1400 audit(1787656796.854:1208): avc: denied { write } for pid=16091 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.343735][ T42] audit: type=1400 audit(1787656796.910:1209): avc: denied { write } for pid=16095 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.412023][ T42] audit: type=1400 audit(1787656796.966:1210): avc: denied { write } for pid=16101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.484535][ T42] audit: type=1400 audit(1787656797.041:1211): avc: denied { write } for pid=16107 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.727726][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 351.744762][T16120] cyberjack ttyUSB0: cyberjack_write - failed submitting write urb, error -90 [ 352.069817][ T56] usb 12-1: new high-speed USB device number 29 using dummy_hcd [ 352.240645][ T56] usb 12-1: Using ep0 maxpacket: 32 [ 352.245308][ T56] usb 12-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 352.252797][ T56] usb 12-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.256404][ T56] usb 12-1: config 0 has no interface number 0 [ 352.259194][ T56] usb 12-1: config 0 interface 1 has no altsetting 0 [ 352.265491][ T56] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.269168][ T56] usb 12-1: Product: syz [ 352.271004][ T56] usb 12-1: Manufacturer: syz [ 352.273396][ T56] usb 12-1: SerialNumber: syz [ 352.280047][ T56] usb 12-1: config 0 descriptor?? [ 352.301515][ T56] usb 12-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 352.309990][ T56] usb 12-1: selecting invalid altsetting 1 [ 352.315439][ T56] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 352.327273][ T56] usb 12-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 352.334565][ T56] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 352.345148][ T56] usb 12-1: media controller created [ 352.393357][ T56] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 352.428467][T16130] overlayfs: failed to clone upperpath [ 352.510434][ T56] usb 12-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 352.514836][ T56] zl10353_read_register: readreg error (reg=127, ret==-32) [ 352.520336][T16133] netlink: 'syz.0.3358': attribute type 5 has an invalid length. [ 352.525448][ T56] usb 12-1: selecting invalid altsetting 0 [ 352.528082][ T56] usb 12-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 352.686292][T16141] pim6reg: entered allmulticast mode [ 352.690669][T16141] pim6reg: left allmulticast mode [ 352.801877][ T56] usb 12-1: USB disconnect, device number 29 [ 352.811595][ T42] audit: type=1400 audit(1787656798.276:1212): avc: denied { bind } for pid=16144 comm="syz.8.3362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 352.828595][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 352.888729][T16147] fuse: fd is not a fuse device [ 352.950521][T16151] FAULT_INJECTION: forcing a failure. [ 352.950521][T16151] name fail_futex, interval 1, probability 0, space 0, times 1 [ 352.955068][T16151] CPU: 2 UID: 0 PID: 16151 Comm: syz.8.3364 Tainted: G L syzkaller #0 PREEMPT(full) [ 352.955094][T16151] Tainted: [L]=SOFTLOCKUP [ 352.955100][T16151] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 352.955110][T16151] Call Trace: [ 352.955124][T16151] [ 352.955131][T16151] dump_stack_lvl+0x100/0x190 [ 352.955171][T16151] should_fail_ex.cold+0x5/0xa [ 352.955192][T16151] get_futex_key+0x1d0/0x14f0 [ 352.955213][T16151] ? __pfx_get_futex_key+0x10/0x10 [ 352.955237][T16151] futex_wait_setup+0x91/0x540 [ 352.955265][T16151] __futex_wait+0x19f/0x300 [ 352.955293][T16151] ? __pfx___futex_wait+0x10/0x10 [ 352.955312][T16151] ? __pfx_try_to_wake_up+0x10/0x10 [ 352.955329][T16151] ? futex_hash+0x311/0x400 [ 352.955347][T16151] ? __pfx_futex_wake_mark+0x10/0x10 [ 352.955373][T16151] ? find_held_lock+0x2b/0x80 [ 352.955392][T16151] ? futex_wake+0x4ea/0x5e0 [ 352.955418][T16151] futex_wait+0xe6/0x370 [ 352.955440][T16151] ? __pfx_futex_wait+0x10/0x10 [ 352.955466][T16151] ? rcu_read_lock_any_held+0x6a/0x90 [ 352.955487][T16151] ? find_held_lock+0x2b/0x80 [ 352.955504][T16151] ? ksys_write+0x190/0x250 [ 352.955530][T16151] ? ksys_write+0x190/0x250 [ 352.955576][T16151] do_futex+0x265/0x440 [ 352.955596][T16151] ? __pfx_do_futex+0x10/0x10 [ 352.955616][T16151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 352.955645][T16151] __x64_sys_futex+0x34f/0x4d0 [ 352.955665][T16151] ? fput+0x7c/0x100 [ 352.955690][T16151] ? __pfx___x64_sys_futex+0x10/0x10 [ 352.955708][T16151] ? ksys_write+0x1ac/0x250 [ 352.955728][T16151] ? __pfx_ksys_write+0x10/0x10 [ 352.955755][T16151] do_syscall_64+0x123/0x790 [ 352.955774][T16151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.955792][T16151] RIP: 0033:0x7fb30039e0d9 [ 352.955807][T16151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.955822][T16151] RSP: 002b:00007fb3012100e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 352.955845][T16151] RAX: ffffffffffffffda RBX: 00007fb300625fa8 RCX: 00007fb30039e0d9 [ 352.955857][T16151] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb300625fa8 [ 352.955867][T16151] RBP: 00007fb300625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 352.955878][T16151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 352.955888][T16151] R13: 00007fb300626038 R14: 00007ffc3cfc68c0 R15: 00007ffc3cfc69a8 [ 352.955911][T16151] [ 353.362654][ T6790] usb 13-1: new low-speed USB device number 34 using dummy_hcd [ 353.524124][ T6790] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 353.529442][ T6790] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 353.532813][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 353.537527][ T6790] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.542562][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 353.547498][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 353.553098][ T6790] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 353.556438][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 353.561099][ T6790] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.566203][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 353.570877][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 353.576975][ T6790] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 353.581514][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 353.586156][ T6790] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 353.592453][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 353.597409][ T6790] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 353.605934][ T6790] usb 13-1: string descriptor 0 read error: -22 [ 353.608961][ T6790] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.620837][ T6790] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 353.648615][T16159] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3368'. [ 353.703590][T16159] bond1: entered promiscuous mode [ 353.721085][T16159] 8021q: adding VLAN 0 to HW filter on device bond1 [ 353.731648][T16161] bond1: (slave ipip0): refused to change device type [ 353.830835][ T56] usb 11-1: USB disconnect, device number 26 [ 353.844127][ T5809] usb 13-1: USB disconnect, device number 34 [ 353.849376][ T56] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 353.872099][ T56] cyberjack 11-1:1.0: device disconnected [ 353.939854][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 354.049911][T16173] pim6reg: entered allmulticast mode [ 354.061863][T16153] adutux: No device or device unplugged -19 [ 354.064211][T16173] pim6reg: left allmulticast mode [ 355.061904][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 355.178807][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3390'. [ 355.179474][T16237] xt_hashlimit: size too large, truncated to 1048576 [ 355.470203][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3398'. [ 355.542586][ T5809] usb 13-1: new high-speed USB device number 35 using dummy_hcd [ 355.735580][ T5809] usb 13-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 355.739790][ T5809] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.743083][ T5809] usb 13-1: config 0 has no interfaces? [ 355.744968][ T5809] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.748967][ T5809] usb 13-1: config 0 descriptor?? [ 356.032114][ T5873] usb 13-1: USB disconnect, device number 35 [ 356.091142][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 356.091154][ T42] audit: type=1800 audit(1787656801.346:1219): pid=16269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.3403" name="mode" dev="configfs" ino=78477 res=0 errno=0 [ 356.162463][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 356.180429][T16272] o2hb: Heartbeat mode set to global [ 356.252091][ T42] audit: type=1400 audit(1787656801.496:1220): avc: denied { connect } for pid=16275 comm="syz.7.3406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 356.252252][T16276] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3406'. [ 356.664690][ T5514] usb 12-1: new high-speed USB device number 30 using dummy_hcd [ 356.674911][T16288] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(2533573837.3150051086.1744008454), cmd(3) [ 356.825302][ T5514] usb 12-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 356.829363][ T5514] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.833875][ T5514] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.839213][ T5514] usb 12-1: config 0 descriptor?? [ 356.917733][ T42] audit: type=1326 audit(1787656802.123:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16292 comm="syz.8.3414" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb30039e0d9 code=0x0 [ 357.065433][ T5514] usbhid 12-1:0.0: can't add hid device: -71 [ 357.068265][ T5514] usbhid 12-1:0.0: probe with driver usbhid failed with error -71 [ 357.076794][ T5514] usb 12-1: USB disconnect, device number 30 [ 357.248562][ T42] audit: type=1400 audit(1787656802.431:1222): avc: denied { write } for pid=16297 comm="syz.6.3416" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 357.259550][ T42] audit: type=1400 audit(1787656802.431:1223): avc: denied { write } for pid=16297 comm="syz.6.3416" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 357.284455][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 357.541516][ T6791] usb 12-1: new high-speed USB device number 31 using dummy_hcd [ 357.702125][ T6791] usb 12-1: Using ep0 maxpacket: 16 [ 357.704804][ T6791] usb 12-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 357.709852][ T6791] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.714531][ T6791] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.724328][ T6791] usb 12-1: config 0 descriptor?? [ 358.168668][ T6791] kye 0003:0458:5016.0012: control desc unexpectedly large [ 358.171457][ T6791] kye 0003:0458:5016.0012: control desc unexpectedly large [ 358.176159][ T6791] input: HID 0458:5016 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/0003:0458:5016.0012/input/input39 [ 358.217205][ T6791] kye 0003:0458:5016.0012: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.7-1/input0 [ 358.282743][T16307] ceph: No mds server is up or the cluster is laggy [ 358.385840][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 358.688417][ T5873] usb 12-1: USB disconnect, device number 31 [ 359.496500][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 360.279463][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3426'. [ 360.483286][T16336] pim6reg: entered allmulticast mode [ 360.486718][T16336] pim6reg: left allmulticast mode [ 360.607927][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.009870][T16313] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 361.138659][ T42] audit: type=1800 audit(1787656806.072:1224): pid=16355 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.3435" name="addr_traddr" dev="configfs" ino=78677 res=0 errno=0 [ 361.493097][T16375] netlink: 'syz.0.3442': attribute type 4 has an invalid length. [ 361.612179][ T5873] usb 11-1: new high-speed USB device number 27 using dummy_hcd [ 361.719112][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 361.772454][ T5873] usb 11-1: Using ep0 maxpacket: 16 [ 361.779893][ T5873] usb 11-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 361.784601][ T5873] usb 11-1: config 0 has no interfaces? [ 361.787820][ T5873] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.790579][ T5873] usb 11-1: Product: syz [ 361.792017][ T5873] usb 11-1: Manufacturer: syz [ 361.793540][ T5873] usb 11-1: SerialNumber: syz [ 361.797345][ T5873] usb 11-1: config 0 descriptor?? [ 361.938966][T16391] ehci-pci 0000:00:1d.7: EHCI Host Controller [ 361.950262][T16391] ehci-pci 0000:00:1d.7: new USB bus registered, assigned bus number 1 [ 361.955955][T16391] ehci-pci 0000:00:1d.7: irq 19, io mem 0xfeaf7000 [ 361.975709][T16391] ehci-pci 0000:00:1d.7: USB 2.0 started, EHCI 1.00 [ 361.984991][T16391] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 361.990582][T16391] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 361.995261][T16391] usb usb1: Product: EHCI Host Controller [ 361.997344][T16391] usb usb1: Manufacturer: Linux syzkaller ehci_hcd [ 361.999430][T16391] usb usb1: SerialNumber: 0000:00:1d.7 [ 362.019113][T16391] hub 1-0:1.0: USB hub found [ 362.026219][T16391] hub 1-0:1.0: 6 ports detected [ 362.080628][ T1356] usb 11-1: USB disconnect, device number 27 [ 362.098788][T16391] hub 3-0:1.0: USB hub found [ 362.105355][T16391] hub 3-0:1.0: 2 ports detected [ 362.157556][T16391] hub 4-0:1.0: USB hub found [ 362.163685][T16391] hub 4-0:1.0: 2 ports detected [ 362.318307][ T5873] usb 1-1: new high-speed USB device number 2 using ehci-pci [ 362.365997][T16410] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3455'. [ 362.368707][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3455'. [ 362.384234][ T42] audit: type=1800 audit(1787656807.241:1225): pid=16412 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.3454" name="addr_traddr" dev="configfs" ino=79319 res=0 errno=0 [ 362.392851][ T6789] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.396331][ T6789] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.400718][ T6789] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.405055][ T6789] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 362.499729][ T5873] usb 1-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 362.502802][ T42] audit: type=1400 audit(1787656807.354:1226): avc: denied { unmount } for pid=10000 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 362.520822][ T5873] usb 1-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 362.526349][ T5873] usb 1-1: Product: QEMU USB Tablet [ 362.530495][ T5873] usb 1-1: Manufacturer: QEMU [ 362.532990][ T5873] usb 1-1: SerialNumber: 28754-0000:00:1d.7-1 [ 362.607436][ T5873] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.7/usb1/1-1/1-1:1.0/0003:0627:0001.0013/input/input40 [ 362.710377][ T5873] hid-generic 0003:0627:0001.0013: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.7-1/input0 [ 362.713919][T16424] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 362.716186][T16424] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 362.718758][T16424] vhci_hcd vhci_hcd.0: Device attached [ 362.841153][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 362.980039][ T8197] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 362.984802][T16426] vhci_hcd: sendmsg failed!, ret=-107 for 48 [ 362.986835][T16425] vhci_hcd: xmit failed -4 [ 362.988580][ T6789] vhci_hcd vhci_hcd.0: stop threads [ 362.990324][ T6789] vhci_hcd vhci_hcd.0: release socket [ 362.992274][ T6789] vhci_hcd vhci_hcd.0: disconnect device [ 363.001822][ T5873] usb 13-1: new high-speed USB device number 36 using dummy_hcd [ 363.038334][ T5736] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 363.042341][ T5736] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 363.047583][ T5736] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 363.050963][ T5736] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 363.053887][ T5736] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 363.172658][ T5873] usb 13-1: Using ep0 maxpacket: 32 [ 363.176532][ T5873] usb 13-1: unable to get BOS descriptor or descriptor too short [ 363.179606][ T5873] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 363.186309][ T5873] usb 13-1: string descriptor 0 read error: -22 [ 363.188878][ T5873] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.194509][ T5873] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 363.197304][ T5873] dw2102: su3000_power_ctrl: 1, initialized 0 [ 363.199180][ T5873] dvb-usb: bulk message failed: -22 (2/0) [ 363.208812][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.211999][ T5873] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 363.214718][ T5873] usb 13-1: media controller created [ 363.216830][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 363.219242][ T5873] dw2102: i2c transfer failed. [ 363.221190][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 363.223497][ T5873] dw2102: i2c transfer failed. [ 363.225475][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 363.227920][ T5873] dw2102: i2c transfer failed. [ 363.229940][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 363.232391][ T5873] dw2102: i2c transfer failed. [ 363.234362][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 363.236810][ T5873] dw2102: i2c transfer failed. [ 363.238813][ T5873] dvb-usb: bulk message failed: -22 (6/0) [ 363.241105][ T5873] dw2102: i2c transfer failed. [ 363.243055][ T5873] dvb-usb: MAC address: 02:02:02:02:02:02 [ 363.254139][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.266895][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 363.269454][ T5873] dw2102: command 0x0e transfer failed. [ 363.271641][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 363.273873][ T5873] dw2102: command 0x0e transfer failed. [ 363.330076][T16447] fuse: fd is not a fuse device [ 363.408332][T16431] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.410655][T16431] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.412858][T16431] bridge_slave_0: entered allmulticast mode [ 363.415413][T16431] bridge_slave_0: entered promiscuous mode [ 363.418471][T16431] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.420746][T16431] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.422914][T16431] bridge_slave_1: entered allmulticast mode [ 363.425458][T16431] bridge_slave_1: entered promiscuous mode [ 363.440164][T16431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.444253][T16431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.460376][T16431] team0: Port device team_slave_0 added [ 363.463365][T16431] team0: Port device team_slave_1 added [ 363.475927][T16431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.478024][T16431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.485789][T16431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.489992][T16431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.492093][T16431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 363.499532][T16431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.539784][T16431] hsr_slave_0: entered promiscuous mode [ 363.542627][T16431] hsr_slave_1: entered promiscuous mode [ 363.545431][T16431] debugfs: 'hsr0' already exists in 'hsr' [ 363.547822][T16431] Cannot create hsr debugfs directory [ 363.600227][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 363.622449][ T42] audit: type=1400 audit(1787656808.402:1227): avc: denied { write } for pid=16457 comm="syz.8.3468" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 363.638870][ T42] audit: type=1400 audit(1787656808.402:1228): avc: denied { write } for pid=16457 comm="syz.8.3468" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 363.732146][T16431] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 363.736687][T16431] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.741339][T16431] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 363.746335][T16431] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.751548][T16431] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 363.767122][T16431] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.774566][T16431] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 363.782503][T16431] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.852359][T16431] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.874797][T16431] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.885605][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.888820][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.903169][ T1162] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.906269][ T1162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.941991][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 364.253807][T16431] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 364.413142][T16490] overlayfs: failed to clone upperpath [ 364.429910][T16431] veth0_vlan: entered promiscuous mode [ 364.439407][T16431] veth1_vlan: entered promiscuous mode [ 364.458983][T16431] veth0_macvtap: entered promiscuous mode [ 364.464485][T16431] veth1_macvtap: entered promiscuous mode [ 364.470275][ T5873] dw2102: command 0x0e transfer failed. [ 364.472591][ T5873] dvb-usb: bulk message failed: -22 (3/0) [ 364.474928][ T5873] dw2102: command 0x0e transfer failed. [ 364.476145][T16431] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.477363][ T5873] dvb-usb: bulk message failed: -22 (1/0) [ 364.485187][T16431] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.486484][ T5873] dw2102: command 0x51 transfer failed. [ 364.504304][ T5799] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.511147][ T5799] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.517257][T16497] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3476'. [ 364.528728][ T5873] DVB: Unable to find symbol ds3000_attach() [ 364.531206][ T5873] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 364.558352][T16497] bond10: (slave sit3): The slave device specified does not support setting the MAC address [ 364.562412][T16497] bond10: (slave sit3): Error -95 calling set_mac_address [ 364.603983][ T5873] rc_core: IR keymap rc-su3000 not found [ 364.616164][ T5873] Registered IR keymap rc-empty [ 364.618850][ T5873] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 364.629770][ T5873] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input41 [ 364.645184][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.647110][ T6789] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.647913][ T5873] dvb-usb: schedule remote query interval to 150 msecs. [ 364.648480][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.650358][ T6789] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.653260][ T5873] dw2102: su3000_power_ctrl: 0, initialized 1 [ 364.660656][ T5873] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 364.666747][ T5873] usb 13-1: USB disconnect, device number 36 [ 364.705083][ T191] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.708256][ T191] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.710967][ T5873] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 364.719188][ T42] audit: type=1400 audit(1787656809.422:1229): avc: denied { mounton } for pid=16431 comm="syz-executor" path="/syzkaller.SEy0ZE/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 364.764736][ T6790] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 364.805334][T16509] fuse: fd is not a fuse device [ 364.889236][ T42] audit: type=1400 audit(1787656809.581:1230): avc: denied { read } for pid=16512 comm="syz.0.3481" path="socket:[79490]" dev="sockfs" ino=79490 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 364.936229][ T6790] usb 11-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 364.942255][ T6790] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.945035][ T6790] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 364.950038][ T6790] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.960726][ T6790] spcp8x5 11-1:1.0: SPCP8x5 converter detected [ 364.972101][ T6790] usb 11-1: SPCP8x5 converter now attached to ttyUSB0 [ 364.990654][T16517] gadgetfs: bound to dummy_udc driver [ 365.021095][ T5873] usb 13-1: new high-speed USB device number 37 using dummy_hcd [ 365.053517][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 365.181327][ T5873] usb 13-1: Using ep0 maxpacket: 8 [ 365.184034][ T5873] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 365.188685][ T5873] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.192889][ T5873] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 365.196458][ T5873] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 365.200910][ T5873] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 365.205520][ T5873] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.215746][ T5873] hub 13-1:1.0: bad descriptor, ignoring hub [ 365.218285][ T5873] hub 13-1:1.0: probe with driver hub failed with error -5 [ 365.221733][ T5873] cdc_wdm 13-1:1.0: skipping garbage [ 365.224088][ T5873] cdc_wdm 13-1:1.0: skipping garbage [ 365.227595][ T5873] cdc_wdm 13-1:1.0: cdc-wdm0: USB WDM device [ 365.230052][ T5873] cdc_wdm 13-1:1.0: Unknown control protocol [ 365.262805][ T56] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 365.310433][ T65] Bluetooth: hci1: command tx timeout [ 365.342019][T16494] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 365.346800][T16494] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 365.350193][T16494] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 365.444523][ T56] usb 14-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 365.450363][T16494] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 365.457552][T16494] SPCP8x5 ttyUSB0: Set UART format 0x1700 failed (error = -32) [ 365.458187][ T56] usb 14-1: config 0 has no interfaces? [ 365.461393][T16494] SPCP8x5 ttyUSB0: failed to set work mode: -32 [ 365.472321][ T56] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.475667][ T56] usb 14-1: Product: syz [ 365.477583][ T56] usb 14-1: Manufacturer: syz [ 365.479622][ T56] usb 14-1: SerialNumber: syz [ 365.485438][ T56] usb 14-1: config 0 descriptor?? [ 365.579303][T16493] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 365.584455][ T56] usb 11-1: USB disconnect, device number 28 [ 365.594359][ T56] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 365.599054][ T56] spcp8x5 11-1:1.0: device disconnected [ 365.672188][ T42] audit: type=1400 audit(1787656810.311:1231): avc: denied { write } for pid=16521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.708842][ T5514] usb 14-1: USB disconnect, device number 2 [ 365.724152][ T42] audit: type=1400 audit(1787656810.367:1232): avc: denied { write } for pid=16524 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 365.972967][T16500] usb 13-1: reset high-speed USB device number 37 using dummy_hcd [ 366.157528][T16500] usb 13-1: device firmware changed [ 366.161522][T16520] usb 13-1: USB disconnect, device number 37 [ 366.164796][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 366.314177][T16520] usb 13-1: new high-speed USB device number 38 using dummy_hcd [ 366.451351][ T42] audit: type=1400 audit(1787656811.041:1233): avc: denied { unmount } for pid=9466 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 366.485140][T16520] usb 13-1: Using ep0 maxpacket: 8 [ 366.488877][T16520] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 366.495354][T16520] usb 13-1: config index 0 descriptor too short (expected 92, got 18) [ 366.500877][T16520] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 366.504611][T16520] usb 13-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 366.509804][T16520] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.518908][T16520] hub 13-1:1.0: bad descriptor, ignoring hub [ 366.521481][T16520] hub 13-1:1.0: probe with driver hub failed with error -5 [ 366.525503][T16520] cdc_wdm 13-1:1.0: probe with driver cdc_wdm failed with error -22 [ 366.958182][T16564] overlayfs: failed to clone upperpath [ 366.976054][T16560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.001695][T16560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.275853][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 367.525886][ T42] audit: type=1400 audit(1787656812.051:1234): avc: denied { write } for pid=16568 comm="syz.8.3500" name="subsystems" dev="configfs" ino=5956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 367.536381][T16569] nvmet: adding nsid 1 to subsystem subsys1 [ 367.543269][ T65] Bluetooth: hci1: command tx timeout [ 367.610776][T16520] usb 13-1: USB disconnect, device number 38 [ 367.623189][T16576] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3504'. [ 367.628930][T16576] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3504'. [ 367.874526][ T56] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 368.067009][ T56] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.070810][ T56] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.073623][ T56] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.076901][ T56] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.079907][ T56] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.085362][ T56] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.088274][ T56] usb 14-1: Product: syz [ 368.089648][ T56] usb 14-1: Manufacturer: syz [ 368.096474][ T56] cdc_wdm 14-1:1.0: skipping garbage [ 368.098121][ T56] cdc_wdm 14-1:1.0: skipping garbage [ 368.101316][ T56] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 368.103221][ T56] cdc_wdm 14-1:1.0: Unknown control protocol [ 368.323525][ T5873] usb 14-1: USB disconnect, device number 3 [ 368.387342][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 368.465965][ T8197] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 368.814638][ T5873] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 368.916822][T16597] netlink: 'syz.0.3514': attribute type 19 has an invalid length. [ 368.975418][ T5873] usb 14-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.980497][ T5873] usb 14-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.984312][ T5873] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.989812][ T5873] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.994106][ T5873] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.000137][ T5873] usb 14-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 369.003616][ T5873] usb 14-1: Product: syz [ 369.005470][ T5873] usb 14-1: Manufacturer: syz [ 369.017308][ T5873] cdc_wdm 14-1:1.0: skipping garbage [ 369.021415][ T5873] cdc_wdm 14-1:1.0: skipping garbage [ 369.025664][ T5873] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 369.029383][ T5873] cdc_wdm 14-1:1.0: Unknown control protocol [ 369.501824][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 369.766077][ T65] Bluetooth: hci1: command tx timeout [ 369.992983][T16609] fuse: fd is not a fuse device [ 370.034767][T16613] netlink: 'syz.8.3520': attribute type 1 has an invalid length. [ 370.065972][T16613] 8021q: adding VLAN 0 to HW filter on device bond1 [ 370.093834][T16613] bond1: (slave syz_tun): unknown ethtool speed (1024) for port 1 (set it to 0) [ 370.098582][T16613] bond1: (slave syz_tun): speed changed to 0 on port 1 [ 370.102777][T16613] bond1: (slave syz_tun): Enslaving as a backup interface with an up link [ 370.354802][T16630] fuse: fd is not a fuse device [ 370.375060][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 370.387962][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 370.392883][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.400306][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.414480][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 370.430410][ T1356] usb 14-1: USB disconnect, device number 4 [ 370.523319][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 370.523330][ T42] audit: type=1400 audit(1787656814.849:1236): avc: denied { map } for pid=16640 comm="syz.8.3531" path="socket:[77732]" dev="sockfs" ino=77732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 370.534633][ T42] audit: type=1400 audit(1787656814.859:1237): avc: denied { read write } for pid=16640 comm="syz.8.3531" path="socket:[77732]" dev="sockfs" ino=77732 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 370.610023][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 370.800986][ T42] audit: type=1400 audit(1787656815.111:1238): avc: denied { write } for pid=16659 comm="syz.8.3537" name="functions" dev="configfs" ino=11595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 371.016470][T16631] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.019604][T16631] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.022737][T16631] bridge_slave_0: entered allmulticast mode [ 371.027241][T16631] bridge_slave_0: entered promiscuous mode [ 371.032251][T16631] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.035523][T16631] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.041539][T16631] bridge_slave_1: entered allmulticast mode [ 371.051874][T16631] bridge_slave_1: entered promiscuous mode [ 371.096707][T16631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.103594][T16631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.132298][T16631] team0: Port device team_slave_0 added [ 371.138292][T16631] team0: Port device team_slave_1 added [ 371.177299][T16631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.180499][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.191746][T16631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.203024][T16631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.209420][T16631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 371.222228][T16631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 371.273866][T16631] hsr_slave_0: entered promiscuous mode [ 371.277223][T16631] hsr_slave_1: entered promiscuous mode [ 371.280289][T16631] debugfs: 'hsr0' already exists in 'hsr' [ 371.282809][T16631] Cannot create hsr debugfs directory [ 371.659194][ T42] audit: type=1400 audit(1787656815.916:1239): avc: denied { write } for pid=16694 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.732175][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 371.744779][ T42] audit: type=1400 audit(1787656816.000:1240): avc: denied { write } for pid=16703 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.858735][ T42] audit: type=1400 audit(1787656816.103:1241): avc: denied { write } for pid=16710 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.868181][T16715] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3551'. [ 371.912420][T16715] macvlan2: entered promiscuous mode [ 371.914245][T16715] macvlan2: entered allmulticast mode [ 371.962064][ T42] audit: type=1400 audit(1787656816.197:1242): avc: denied { write } for pid=16716 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 371.980009][ T5736] Bluetooth: hci1: command tx timeout [ 372.065794][ T42] audit: type=1400 audit(1787656816.300:1243): avc: denied { write } for pid=16720 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.166670][ T42] audit: type=1400 audit(1787656816.393:1244): avc: denied { write } for pid=16726 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.234249][ T42] audit: type=1400 audit(1787656816.450:1245): avc: denied { write } for pid=16729 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 372.312351][T16738] netlink: 'syz.8.3556': attribute type 13 has an invalid length. [ 372.532876][T16631] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 372.541791][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.546833][T16631] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 372.559458][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.562743][T16631] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 372.571706][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.574490][T16631] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.582583][T16631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.661804][ T5736] Bluetooth: hci0: command tx timeout [ 372.724811][T16631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.739344][T16631] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.753266][ T171] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.756090][ T171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.768995][ T171] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.771669][ T171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.832729][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 373.364956][T16631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.414222][T16631] veth0_vlan: entered promiscuous mode [ 373.419995][T16631] veth1_vlan: entered promiscuous mode [ 373.434380][T16631] veth0_macvtap: entered promiscuous mode [ 373.451076][T16631] veth1_macvtap: entered promiscuous mode [ 373.486196][T16631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.497184][T16631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.557363][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.618015][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.667533][ T6789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.671428][ T6789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.692400][ T9605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.695817][ T9605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.733841][ T9605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.736393][ T9605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 373.948233][ T13] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x35 [ 373.955184][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 374.511745][T16896] netlink: 'syz.8.3587': attribute type 1 has an invalid length. [ 374.585829][T16896] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.589396][ T5437] veth0_vlan: left promiscuous mode [ 374.634411][ T5810] veth0_vlan: entered promiscuous mode [ 374.667105][T16896] bond2: (slave geneve2): making interface the new active one [ 374.674703][T16896] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 374.895190][ T5736] Bluetooth: hci0: command tx timeout [ 375.055349][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 375.112406][T16928] netlink: 'syz.9.3595': attribute type 1 has an invalid length. [ 375.417253][T16940] syzkaller1: entered promiscuous mode [ 375.420061][T16940] syzkaller1: entered allmulticast mode [ 375.632314][ T29] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 375.793693][ T29] usb 14-1: Using ep0 maxpacket: 16 [ 375.798532][ T29] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 375.804033][ T29] usb 14-1: config 0 has no interfaces? [ 375.806228][ T29] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.814730][ T29] usb 14-1: config 0 descriptor?? [ 375.962487][T16967] ¾x9ÿ: left allmulticast mode [ 375.964373][T16967] ¾x9ÿ: left promiscuous mode [ 375.966088][T16967] bridge0: port 1(1¾x9ÿ) entered disabled state [ 375.977878][T16967] bridge_slave_1: left allmulticast mode [ 375.979800][T16967] bridge_slave_1: left promiscuous mode [ 375.981559][T16967] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.988436][T16967] bond2: (slave veth0_to_bond): Releasing backup interface [ 375.992217][T16967] bond0: (slave bond_slave_0): Releasing backup interface [ 375.998665][T16967] bond0: (slave bond_slave_1): Releasing backup interface [ 376.005216][T16967] team0: Port device team_slave_1 removed [ 376.007750][T16967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.011836][T16967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.014640][T16967] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 376.166758][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 377.065125][T16991] fuse: fd is not a fuse device [ 377.107335][ T5736] Bluetooth: hci0: command tx timeout [ 377.159894][T16995] lo: entered allmulticast mode [ 377.166397][T16994] lo: left allmulticast mode [ 377.278316][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.389399][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 378.419936][T17021] fuse: fd is not a fuse device [ 378.456669][T17023] fuse: fd is not a fuse device [ 378.526440][ T29] usb 14-1: USB disconnect, device number 5 [ 378.639185][T17038] syz_tun: entered allmulticast mode [ 378.651879][T17037] syz_tun: left allmulticast mode [ 378.865056][T17054] bridge1: entered promiscuous mode [ 378.866717][T17054] bridge1: entered allmulticast mode [ 378.869904][T17054] team0: Port device bridge1 added [ 378.882901][T17054] bridge0: port 3(team0) entered blocking state [ 378.890239][T17054] bridge0: port 3(team0) entered disabled state [ 378.893086][T17054] team0: entered allmulticast mode [ 378.894779][T17054] team_slave_0: entered allmulticast mode [ 378.896652][T17054] team_slave_1: entered allmulticast mode [ 378.907633][T17054] team0: entered promiscuous mode [ 378.909339][T17054] team_slave_0: entered promiscuous mode [ 378.911329][T17054] team_slave_1: entered promiscuous mode [ 378.915908][T17054] bridge0: port 3(team0) entered blocking state [ 378.918230][T17054] bridge0: port 3(team0) entered forwarding state [ 379.329886][ T65] Bluetooth: hci0: command tx timeout [ 379.500774][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 379.868004][T16978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 380.093230][ T65] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 380.184888][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 380.184899][ T42] audit: type=1400 audit(1787656823.889:1270): avc: denied { bind } for pid=17076 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.196306][ T8197] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 380.199741][ T42] audit: type=1400 audit(1787656823.908:1271): avc: denied { listen } for pid=17076 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.214386][ T42] audit: type=1400 audit(1787656823.908:1272): avc: denied { connect } for pid=17076 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.223868][ T42] audit: type=1400 audit(1787656823.908:1273): avc: denied { read } for pid=17076 comm="syz.2.3648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 380.377548][ T8197] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.382066][ T8197] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.385938][ T8197] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.391112][ T8197] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.397165][ T8197] usb 14-1: config 0 descriptor?? [ 380.401561][ T8197] usbhid 14-1:0.0: couldn't find an input interrupt endpoint [ 380.612178][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 381.723547][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 382.845481][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 383.123045][ T5809] usb 14-1: USB disconnect, device number 6 [ 383.956864][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 384.457830][ T42] audit: type=1400 audit(1787656827.894:1274): avc: denied { write } for pid=17119 comm="syz.9.3663" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.473598][ T42] audit: type=1400 audit(1787656827.894:1275): avc: denied { write } for pid=17119 comm="syz.9.3663" name="c.1" dev="configfs" ino=11600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 384.546171][T17134] overlayfs: failed to clone upperpath [ 385.057544][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.168915][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 386.172577][T17156] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 386.174633][T17156] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 386.177157][T17156] vhci_hcd vhci_hcd.0: Device attached [ 386.183043][T17157] vhci_hcd: connection closed [ 386.183247][ T5871] vhci_hcd vhci_hcd.9: stop threads [ 386.186946][ T5871] vhci_hcd vhci_hcd.9: release socket [ 386.188563][ T5871] vhci_hcd vhci_hcd.9: disconnect device [ 386.660271][ T5514] usb 13-1: new high-speed USB device number 39 using dummy_hcd [ 386.842698][ T5514] usb 13-1: Using ep0 maxpacket: 32 [ 386.846982][ T5514] usb 13-1: unable to get BOS descriptor or descriptor too short [ 386.850359][ T5514] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 386.856647][ T5514] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.859827][ T5514] usb 13-1: Product: syz [ 386.861236][ T5514] usb 13-1: Manufacturer: syz [ 386.863166][ T5514] usb 13-1: SerialNumber: syz [ 387.023945][ T5809] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 387.089498][ T42] audit: type=1400 audit(1787656830.356:1276): avc: denied { write } for pid=17181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.144620][ T42] audit: type=1400 audit(1787656830.412:1277): avc: denied { write } for pid=17187 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 387.208836][ T5809] usb 14-1: Using ep0 maxpacket: 8 [ 387.212302][ T5809] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 387.220823][ T5809] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.224288][ T5809] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 387.227336][ T5809] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 387.230966][ T5809] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 387.234471][ T5809] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.242539][ T5809] hub 14-1:1.0: bad descriptor, ignoring hub [ 387.244657][ T5809] hub 14-1:1.0: probe with driver hub failed with error -5 [ 387.258313][ T5809] cdc_wdm 14-1:1.0: skipping garbage [ 387.260474][ T5809] cdc_wdm 14-1:1.0: skipping garbage [ 387.263878][ T5809] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 387.265855][ T5809] cdc_wdm 14-1:1.0: Unknown control protocol [ 387.280218][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 387.326853][T17192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3685'. [ 387.497759][ T5514] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 387.505369][ T5514] dw2102: su3000_power_ctrl: 1, initialized 0 [ 387.508062][ T5514] dvb-usb: bulk message failed: -22 (2/0) [ 387.511856][ T5514] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 387.520280][ T5514] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 387.523682][ T5514] usb 13-1: media controller created [ 387.525879][ T5514] dvb-usb: bulk message failed: -22 (6/0) [ 387.528139][ T5514] dw2102: i2c transfer failed. [ 387.530036][ T5514] dvb-usb: bulk message failed: -22 (6/0) [ 387.532328][ T5514] dw2102: i2c transfer failed. [ 387.534257][ T5514] dvb-usb: bulk message failed: -22 (6/0) [ 387.537219][ T5514] dw2102: i2c transfer failed. [ 387.539196][ T5514] dvb-usb: bulk message failed: -22 (6/0) [ 387.541530][ T5514] dw2102: i2c transfer failed. [ 387.543578][ T5514] dvb-usb: bulk message failed: -22 (6/0) [ 387.545892][ T5514] dw2102: i2c transfer failed. [ 387.547814][ T5514] dvb-usb: bulk message failed: -22 (6/0) [ 387.549821][ T5514] dw2102: i2c transfer failed. [ 387.551755][ T5514] dvb-usb: MAC address: 02:02:02:02:02:02 [ 387.566078][ T5514] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 387.580031][ T5514] dvb-usb: bulk message failed: -22 (3/0) [ 387.582395][ T5514] dw2102: command 0x0e transfer failed. [ 387.584618][ T5514] dvb-usb: bulk message failed: -22 (3/0) [ 387.586970][ T5514] dw2102: command 0x0e transfer failed. [ 387.910429][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 387.910659][ T5514] dvb-usb: bulk message failed: -22 (3/0) [ 387.914367][ T5514] dw2102: command 0x0e transfer failed. [ 387.916083][ T5514] dvb-usb: bulk message failed: -22 (3/0) [ 387.917870][ T5514] dw2102: command 0x0e transfer failed. [ 387.919589][ T5514] dvb-usb: bulk message failed: -22 (1/0) [ 387.921759][ T5514] dw2102: command 0x51 transfer failed. [ 387.924811][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.948871][ T5514] DVB: Unable to find symbol ds3000_attach() [ 387.950868][ T5514] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 387.974372][ T8197] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 387.990802][T17173] usb 14-1: reset high-speed USB device number 7 using dummy_hcd [ 387.999708][T17173] usb 14-1: device reset changed ep0 maxpacket size! [ 388.008250][ T5514] rc_core: IR keymap rc-su3000 not found [ 388.010063][ T5514] Registered IR keymap rc-empty [ 388.013349][ T5809] usb 14-1: USB disconnect, device number 7 [ 388.027113][ T5514] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 388.035639][ T42] audit: type=1400 audit(1787656831.245:1278): avc: denied { write } for pid=17198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.041718][ T5514] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input42 [ 388.052430][ T5514] dvb-usb: schedule remote query interval to 150 msecs. [ 388.054934][ T5514] dw2102: su3000_power_ctrl: 0, initialized 1 [ 388.064945][ T5514] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 388.089105][ T5514] usb 13-1: USB disconnect, device number 39 [ 388.127547][ T42] audit: type=1400 audit(1787656831.329:1279): avc: denied { write } for pid=17205 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 388.138889][ T8197] usb 7-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 388.146348][ T8197] usb 7-1: config 0 has no interfaces? [ 388.150098][ T8197] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.162663][ T8197] usb 7-1: config 0 descriptor?? [ 388.189291][ T5514] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 388.209773][ T5809] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 388.402728][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 388.413460][ T1356] usb 7-1: USB disconnect, device number 3 [ 388.450421][T17213] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3689'. [ 388.868002][T17223] Bluetooth: (null): Invalid header checksum [ 388.942731][ T5809] usb 14-1: unable to get BOS descriptor or descriptor too short [ 388.947357][ T5809] usb 14-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 388.954762][ T5809] usb 14-1: no configurations [ 388.956252][ T5809] usb 14-1: can't read configurations, error -22 [ 389.071315][T17230] TC_ACT_REPEAT abuse ? [ 389.140800][T17238] netlink: 'syz.0.3699': attribute type 1 has an invalid length. [ 389.160321][T17238] 8021q: adding VLAN 0 to HW filter on device bond11 [ 389.231589][T17238] bond11: (slave veth11): Enslaving as an active interface with a down link [ 389.246205][T17243] syzkaller0: entered promiscuous mode [ 389.249576][T17243] syzkaller0: entered allmulticast mode [ 389.265971][T17238] netlink: 'syz.0.3699': attribute type 10 has an invalid length. [ 389.269185][T17238] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3699'. [ 389.504165][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.272495][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 390.368502][ T5810] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 390.433444][ T29] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 390.437237][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 390.440808][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 390.445320][ T29] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 390.448832][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.459739][ T29] usb 7-1: config 0 descriptor?? [ 390.529532][ T5810] usb 14-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 390.535671][ T5810] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.544778][ T5810] i2c-tiny-usb 14-1:1.0: version 1.00 found at bus 014 address 010 [ 390.614311][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 390.913850][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.917432][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.924194][ T29] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.926484][ T29] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0 [ 390.931939][ T29] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw1: USB HID v0.00 Joystick [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 390.978644][ T5810] (null): failure reading functionality [ 390.988263][ T5810] i2c i2c-2: failure reading functionality [ 391.005190][ T5810] i2c i2c-2: connected i2c-tiny-usb device [ 391.016544][ T42] audit: type=1400 audit(1787656834.033:1280): avc: denied { write } for pid=17289 comm="syz.8.3714" name="functions" dev="configfs" ino=11595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 391.478268][T17276] i2c i2c-2: failure reading data [ 391.482972][T17276] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 391.486008][T17276] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 391.489892][T17276] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 391.498598][ T5822] usb 14-1: USB disconnect, device number 10 [ 391.725684][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 391.816438][T17307] syzkaller0: entered promiscuous mode [ 391.818813][T17307] syzkaller0: entered allmulticast mode [ 392.105570][ T42] audit: type=1400 audit(1787656835.053:1281): avc: denied { write } for pid=17311 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.174572][ T42] audit: type=1400 audit(1787656835.109:1282): avc: denied { write } for pid=17319 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.319072][ T42] audit: type=1400 audit(1787656835.240:1283): avc: denied { write } for pid=17331 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.380563][ T42] audit: type=1400 audit(1787656835.306:1284): avc: denied { write } for pid=17337 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.476753][ T42] audit: type=1400 audit(1787656835.400:1285): avc: denied { write } for pid=17340 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.489408][ T6790] usb 7-1: reset high-speed USB device number 4 using dummy_hcd [ 392.512005][T17342] netlink: 14 bytes leftover after parsing attributes in process `syz.9.3727'. [ 392.539176][ T42] audit: type=1400 audit(1787656835.456:1286): avc: denied { write } for pid=17346 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.638653][ T42] audit: type=1400 audit(1787656835.540:1287): avc: denied { write } for pid=17349 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.665520][T17353] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 392.685495][T17353] i2c i2c-0: new_device: Instantiated device hd3ss3220 at 0x67 [ 392.693565][ T42] audit: type=1400 audit(1787656835.596:1288): avc: denied { write } for pid=17354 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.773241][T17358] syz_tun: entered allmulticast mode [ 392.833270][T17362] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3730'. [ 392.847690][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 393.316228][T17382] kAFS: unable to lookup cell 'syz0' [ 393.400021][T17386] syzkaller0: entered promiscuous mode [ 393.401748][T17386] syzkaller0: entered allmulticast mode [ 393.465768][T17390] syzkaller0: entered promiscuous mode [ 393.468461][T17390] syzkaller0: entered allmulticast mode [ 393.652620][T17398] Bluetooth: MGMT ver 1.23 [ 393.784625][ T5809] usb 7-1: USB disconnect, device number 4 [ 393.876141][ T42] audit: type=1400 audit(1787656836.710:1289): avc: denied { append } for pid=17406 comm="syz.2.3747" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 393.959056][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 394.364427][ T42] audit: type=1400 audit(1787656837.159:1290): avc: denied { write } for pid=17420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.414604][T17427] syzkaller0: entered promiscuous mode [ 394.416474][T17427] syzkaller0: entered allmulticast mode [ 394.416722][ T42] audit: type=1400 audit(1787656837.206:1291): avc: denied { write } for pid=17425 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.432906][T17429] fuse: fd is not a fuse device [ 394.461377][ T41] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 394.480885][T17435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3754'. [ 394.496983][ T42] audit: type=1400 audit(1787656837.290:1292): avc: denied { write } for pid=17433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.551821][ T42] audit: type=1400 audit(1787656837.337:1293): avc: denied { write } for pid=17441 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.570782][ T42] audit: type=1326 audit(1787656837.365:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17423 comm="syz.2.3751" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfff99e0d9 code=0x7fc00000 [ 394.642766][ T41] usb 14-1: Using ep0 maxpacket: 8 [ 394.659405][ T41] usb 14-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 394.671003][ T41] usb 14-1: config index 0 descriptor too short (expected 5924, got 36) [ 394.678468][ T41] usb 14-1: config 250 has an invalid interface number: 228 but max is -1 [ 394.684501][ T41] usb 14-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 394.694790][ T41] usb 14-1: config 250 has no interface number 0 [ 394.699895][ T41] usb 14-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 394.710736][ T41] usb 14-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 394.728472][ T41] usb 14-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.732637][ T41] usb 14-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 394.736900][ T41] usb 14-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 394.739272][T17442] kvm: pic: non byte write [ 394.749639][ T41] usb 14-1: config 250 interface 228 has no altsetting 0 [ 394.754207][ T41] usb 14-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 394.761265][ T41] usb 14-1: Product: syz [ 394.763111][ T41] usb 14-1: SerialNumber: syz [ 394.783270][ T41] hub 14-1:250.228: bad descriptor, ignoring hub [ 394.790202][ T41] hub 14-1:250.228: probe with driver hub failed with error -5 [ 395.004271][ T41] usblp 14-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 395.070346][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 395.362620][ T41] usb 14-1: USB disconnect, device number 11 [ 395.368007][ T41] usblp0: removed [ 395.436657][T17488] syzkaller0: entered promiscuous mode [ 395.438356][T17488] syzkaller0: entered allmulticast mode [ 395.537370][T17491] netlink: 'syz.8.3766': attribute type 1 has an invalid length. [ 395.604770][ T5817] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 395.768154][ T5817] usb 7-1: not running at top speed; connect to a high speed hub [ 395.774300][T17495] syzkaller0: entered promiscuous mode [ 395.774322][T17495] syzkaller0: entered allmulticast mode [ 395.782410][ T5817] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 395.787625][ T5817] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.791850][ T5817] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 395.795787][ T5817] usb 7-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 395.801333][ T5817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.814234][ T5817] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 395.824730][ T5817] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 395.831407][ T5817] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 395.834850][ T5817] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 395.842083][ T5817] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 395.923699][T17499] syzkaller0: entered promiscuous mode [ 395.926888][T17499] syzkaller0: entered allmulticast mode [ 396.003171][T17501] syzkaller0: entered promiscuous mode [ 396.004944][T17501] syzkaller0: entered allmulticast mode [ 396.013074][T17501] tipc: Started in network mode [ 396.014611][T17501] tipc: Node identity a60e7f03423f, cluster identity 4711 [ 396.016962][T17501] tipc: Enabled bearer , priority 0 [ 396.020412][T17500] tipc: Resetting bearer [ 396.034468][T17500] tipc: Disabling bearer [ 396.158815][ T5817] usb 7-1: USB disconnect, device number 5 [ 396.179232][ T5817] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 396.181706][ C2] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 396.191179][ T5817] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 396.194705][ T5817] keyspan 7-1:1.0: device disconnected [ 396.222331][T17509] syzkaller0: entered promiscuous mode [ 396.224151][T17509] syzkaller0: entered allmulticast mode [ 396.431435][T17525] bond1: (slave syz_tun): Removing an active aggregator [ 396.437146][T17525] bond1: (slave syz_tun): Releasing backup interface [ 396.453841][T17525] bridge_slave_0: left allmulticast mode [ 396.455617][T17525] bridge_slave_0: left promiscuous mode [ 396.457411][T17525] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.460552][T17525] Oops: general protection fault, probably for non-canonical address 0xfbd59c0000000024: 0000 [#1] SMP KASAN NOPTI [ 396.464612][T17525] KASAN: maybe wild-memory-access in range [0xdead000000000120-0xdead000000000127] [ 396.468125][T17525] CPU: 1 UID: 0 PID: 17525 Comm: syz.8.3777 Tainted: G L syzkaller #0 PREEMPT(full) [ 396.472661][T17525] Tainted: [L]=SOFTLOCKUP [ 396.474045][T17525] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 396.477526][T17525] RIP: 0010:br_del_frame+0x106/0x1a0 [ 396.479195][T17525] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 c6 45 72 f7 48 8d [ 396.485123][T17525] RSP: 0018:ffffc9000732eef0 EFLAGS: 00010a06 [ 396.486996][T17525] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9003238e000 [ 396.489454][T17525] RDX: 1bd5a00000000024 RSI: ffffffff8a98bb9f RDI: ffffffff91453338 [ 396.491922][T17525] RBP: ffffffff91453320 R08: 0000000000000001 R09: 000000000000002c [ 396.494351][T17525] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122 [ 396.496906][T17525] R13: ffff8880488ca800 R14: 000000000000001c R15: ffff8880488ca800 [ 396.499337][T17525] FS: 00007fb3011ef6c0(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 396.502826][T17525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.505379][T17525] CR2: 00007fb3011ecf60 CR3: 000000003572d000 CR4: 0000000000352ef0 [ 396.508571][T17525] Call Trace: [ 396.509760][T17525] [ 396.510688][T17525] mep_delete_implementation+0x292/0x340 [ 396.512497][T17525] br_cfm_port_del+0x14f/0x1e0 [ 396.514009][T17525] ? __pfx_br_del_slave+0x10/0x10 [ 396.515586][T17525] del_nbp+0x168/0xd50 [ 396.516851][T17525] ? __pfx_br_del_slave+0x10/0x10 [ 396.518444][T17525] br_del_if+0xe0/0x260 [ 396.519718][T17525] do_set_master+0x172/0x730 [ 396.521126][T17525] do_setlink.isra.0+0xb2b/0x3e60 [ 396.522603][T17525] ? stack_trace_save+0x8e/0xc0 [ 396.524136][T17525] ? __pfx_do_setlink.isra.0+0x10/0x10 [ 396.525764][T17525] ? __lock_acquire+0x4c5/0x1ec0 [ 396.527261][T17525] ? lock_acquire+0x1b9/0x370 [ 396.528724][T17525] ? rcu_is_watching+0x13/0xc0 [ 396.530203][T17525] ? trace_contention_end+0x126/0x160 [ 396.531868][T17525] ? __mutex_lock+0x26c/0x1bc0 [ 396.533358][T17525] ? rtnl_newlink+0xac3/0x2620 [ 396.534810][T17525] ? __pfx___mutex_lock+0x10/0x10 [ 396.536383][T17525] ? rcu_is_watching+0x13/0xc0 [ 396.537955][T17525] ? cap_capable+0x107/0x430 [ 396.539441][T17525] rtnl_newlink+0x1dc4/0x2620 [ 396.540912][T17525] ? __pfx_rtnl_newlink+0x10/0x10 [ 396.542408][T17525] ? find_held_lock+0x2b/0x80 [ 396.543848][T17525] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 396.545526][T17525] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 396.547194][T17525] ? __lock_acquire+0x4c5/0x1ec0 [ 396.548780][T17525] ? find_held_lock+0x2b/0x80 [ 396.550245][T17525] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 396.551843][T17525] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 396.553412][T17525] ? __pfx_rtnl_newlink+0x10/0x10 [ 396.554975][T17525] rtnetlink_rcv_msg+0x95e/0xe90 [ 396.556512][T17525] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 396.558191][T17525] ? ref_tracker_free+0x37e/0x6c0 [ 396.559746][T17525] netlink_rcv_skb+0x159/0x420 [ 396.561228][T17525] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 396.562922][T17525] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 396.564529][T17525] ? netlink_deliver_tap+0x1ae/0xcc0 [ 396.566128][T17525] netlink_unicast+0x585/0x850 [ 396.567621][T17525] ? __pfx_netlink_unicast+0x10/0x10 [ 396.569282][T17525] netlink_sendmsg+0x8b0/0xda0 [ 396.570771][T17525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.572383][T17525] ? selinux_socket_sendmsg+0x198/0x2f0 [ 396.574019][T17525] ____sys_sendmsg+0xa4d/0xbe0 [ 396.575478][T17525] ? __pfx_netlink_sendmsg+0x10/0x10 [ 396.576999][T17525] ? __pfx_____sys_sendmsg+0x10/0x10 [ 396.578545][T17525] ___sys_sendmsg+0x190/0x1e0 [ 396.579944][T17525] ? __pfx____sys_sendmsg+0x10/0x10 [ 396.581584][T17525] ? futex_wait+0x11e/0x370 [ 396.583001][T17525] ? find_held_lock+0x2b/0x80 [ 396.584485][T17525] __sys_sendmsg+0x160/0x210 [ 396.585921][T17525] ? __pfx___sys_sendmsg+0x10/0x10 [ 396.587494][T17525] do_syscall_64+0x123/0x790 [ 396.588889][T17525] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.590762][T17525] RIP: 0033:0x7fb30039e0d9 [ 396.592214][T17525] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.598010][T17525] RSP: 002b:00007fb3011ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 396.601043][T17525] RAX: ffffffffffffffda RBX: 00007fb300626090 RCX: 00007fb30039e0d9 [ 396.604303][T17525] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000005 [ 396.607532][T17525] RBP: 00007fb300435024 R08: 0000000000000000 R09: 0000000000000000 [ 396.610804][T17525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.614149][T17525] R13: 00007fb300626128 R14: 00007fb300626090 R15: 00007ffc3cfc69a8 [ 396.617383][T17525] [ 396.618687][T17525] Modules linked in: [ 396.621098][T17525] ---[ end trace 0000000000000000 ]--- [ 396.629483][T17525] RIP: 0010:br_del_frame+0x106/0x1a0 [ 396.631743][T17525] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 87 00 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 65 18 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 75 76 49 89 1c 24 48 85 db 74 24 e8 c6 45 72 f7 48 8d [ 396.637747][T17525] RSP: 0018:ffffc9000732eef0 EFLAGS: 00010a06 [ 396.639644][T17525] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc9003238e000 [ 396.642451][T17525] RDX: 1bd5a00000000024 RSI: ffffffff8a98bb9f RDI: ffffffff91453338 [ 396.644938][T17525] RBP: ffffffff91453320 R08: 0000000000000001 R09: 000000000000002c [ 396.647272][T17525] R10: 0000000000000200 R11: 0000000000000001 R12: dead000000000122 [ 396.649824][T17525] R13: ffff8880488ca800 R14: 000000000000001c R15: ffff8880488ca800 [ 396.652494][T17525] FS: 00007fb3011ef6c0(0000) GS:ffff8880d5ca2000(0000) knlGS:0000000000000000 [ 396.655489][T17525] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 396.657580][T17525] CR2: 0000001b2fe1dff8 CR3: 000000003572d000 CR4: 0000000000352ef0 [ 396.660793][T17525] Kernel panic - not syncing: Fatal exception [ 396.664093][T17525] Kernel Offset: disabled [ 396.665876][T17525] Rebooting in 86400 seconds..