last executing test programs: 3m18.669260053s ago: executing program 0 (id=1): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x8, 0x5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000003280)={0x79, 0x0, 0x0, {0x7}}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SET_GS(0x1e, r2, 0x0, 0x1001) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchmod(r3, 0x120) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x8008af83, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES32=r4, @ANYBLOB="d0a2c837762a27949efc5f70084e3b05f042437751ab5b7cdf65353a39b500d3829aaed76b1709b134fe4076eb254dbdaf7a569b622ff96db08774196012410753fdc4e27445d9653d76e366afad567eb7c4640535a297fea8159185937d58d0551545360562f57f29e253bb", @ANYBLOB="ec9171fdf36d992feb01aa93f72ab5a09542ba294e31e08868fbd2aaf63c37f71e8267c0b66d23185e785dbba91c9ffe65d5e06341e8a1111b2ce9e930bc13d0d9505e1ce071db8066bf4d8e95", @ANYRES64=r4], 0xf) openat2(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) 3m18.46745427s ago: executing program 0 (id=6): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) (async, rerun: 64) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') (rerun: 64) 3m18.452231014s ago: executing program 1 (id=2): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x400, 0x70bd2c, 0x5, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000300)={"1568f935", 0x9, 0xd3, 0x7, 0x8000, 0xa, "b6fb935054f8e2453a9a186ae79daa", "ce274061", "96b9befa", "e4e7659d", ["de114baa4e5a211d0459cfe5", "9549471aac87b9cf42f42958", "eaebb595b284a4d4a0363f8a", "582d0a6e0522d4262ada1657"]}) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0xd5f, 0x100) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x24040000) syz_ublk_setup_io_uring(0x72bd, &(0x7f00000004c0)={0x0, 0xb65, 0xc0, 0x3, 0x81}, &(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) r8 = mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x1000000, 0x30, 0xffffffffffffffff, 0x8000000) r9 = syz_ublk_setup_io_uring(0x1e95, &(0x7f0000000600)={0x0, 0x4c25, 0x1, 0x3, 0x2ac}, &(0x7f0000000680)=0x0, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x0) r13 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, r12, &(0x7f0000000780)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x1, 0x0, 0x20, 0x0, {0x0, r13}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000800)={0xc}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000840)=""/192, 0xc0}, {&(0x7f0000000900)=""/226, 0xe2}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/17, 0x11}, {&(0x7f0000001a40)=""/67, 0x43}, {&(0x7f0000001ac0)=""/56, 0x38}, {&(0x7f0000001b00)=""/218, 0xda}], 0x7) io_uring_setup(0x321f, &(0x7f0000001c80)={0x0, 0x55c0, 0x8000, 0x0, 0x29d}) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$devlink(&(0x7f0000001d40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r14, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001e80)={&(0x7f0000001d80)={0xf4, r15, 0x300, 0x70bd27, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x20004000}, 0x54) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x50, r5, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x50}}, 0x200400c0) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x34, r5, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x858) sendmsg$DEVLINK_CMD_SB_GET(r14, &(0x7f0000002280)={&(0x7f0000002140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f0000002180)={0x88, r15, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000894}, 0x8841) r16 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_FPU(r16, 0x81a0ae8c, &(0x7f00000022c0)) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000002480)={0x401, 0xa, 0x80000000, 0x4, 0x400, 0x4}) r17 = syz_io_uring_complete(r10, r11) ioctl$DVB_DEMUX_DMX_EXPBUF(r17, 0xc00c6f3e, &(0x7f00000024c0)={0x1000, 0x80000}) 3m18.190873052s ago: executing program 1 (id=10): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f00000003c0)=0x1, 0x4) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) r2 = syz_open_dev$sg(&(0x7f0000000010), 0x0, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020800000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000038000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000004000480080007006e6174"], 0xc0}}, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000050)={0x53, 0xffffffff, 0x10, 0x20, @buffer, &(0x7f0000000110)="8506200000000000000000000000e600", &(0x7f0000000140)=""/64, 0x3e8}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000210)={0x53, 0xfffffffd, 0xa, 0x20, @buffer={0x0, 0x200, &(0x7f0000000610)=""/512}, &(0x7f0000000310)="28000000000000000100", &(0x7f0000000340)=""/64, 0x3e8}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9, 0x10000000}) listen(r0, 0x1) 3m17.750590823s ago: executing program 1 (id=14): setns(0xc9, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r0 = socket(0x8, 0x5, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write$FUSE_LSEEK(r1, &(0x7f0000003280)={0x79, 0x0, 0x0, {0x7}}, 0x18) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x400261f2, &(0x7f0000000000)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$ARCH_SET_GS(0x1e, r2, 0x0, 0x1001) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') fchmod(r3, 0x120) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(r4, 0x8008af83, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYRES32=r4, @ANYBLOB="d0a2c837762a27949efc5f70084e3b05f042437751ab5b7cdf65353a39b500d3829aaed76b1709b134fe4076eb254dbdaf7a569b622ff96db08774196012410753fdc4e27445d9653d76e366afad567eb7c4640535a297fea8159185937d58d0551545360562f57f29e253bb", @ANYBLOB="ec9171fdf36d992feb01aa93f72ab5a09542ba294e31e08868fbd2aaf63c37f71e8267c0b66d23185e785dbba91c9ffe65d5e06341e8a1111b2ce9e930bc13d0d9505e1ce071db8066bf4d8e95", @ANYRES64=r4], 0xf) openat2(r3, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)={0x80042, 0x72, 0x9}, 0x18) 3m17.670236449s ago: executing program 1 (id=15): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0xac, 0x0, 0x104, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xeb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private1, 0x8002}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd537}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1004}]}, @TIPC_NLA_NET={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}, 0x4004000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000140019010000000000000002"], 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) recvmsg$can_raw(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)="a6e6908ebc78a3c615196865e21d5fc870ef54e70f747eac0155434b9346d8b1dcba4f4c5940e3045f03001bac29b2da4852bf56b09b676cbeae2edd5c8d0156afb85b610cbd89b59c6c3d6576be2af2396c153a91f8d6055899fda07fb8f7f4c7d095c456bbf9e732318c9a83f76a294cfcf2d47f78311395dc6e0c2588b18476118cdab5c78fad71cf93e364603be0e5fc167144bd96e1430f510133783b35e984c8976045e7692f535a11723cb610cd9bc6f48a2e292ed3aa85b9eb673a48a6abeeb5f40853c1d6bc335560a6f85466a8eae6d165db89bf8bc85dfc7f31703aacdc92d2de170cc7718d40cede67752758648c208f9ea7d01c93d1e5725db1213a7eb98de2be939b1fd36ee3ee7c8f57279f9fbfc7c17619d8e2d5ec52c2d3fb7a67dc2cff0886e6c95fce40142e27e5999e3cb41c103ad218dddc9e64fa8cdb4e473c668a6e1cb65a67269ccf24cd5cb4593b771ce600000000000000810a5768f4878bda351d0fa0fd2cf99fda9db77fca1c02", 0x175) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40408d4}, 0x20004800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) 3m3.447044889s ago: executing program 32 (id=6): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (async) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) read$FUSE(r0, &(0x7f00000003c0)={0x2020}, 0x2020) (async, rerun: 64) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='xfs\x00', 0x0, &(0x7f0000000180)='pquota\x00\x00\xe4\xb7\xceZpB\xe2\x93T\xe4Y\x91\x05\xe1q\xb3\x83\x83\xfe\x14\xe2\xfe\x8b\xfe\xad{$\xbb\xdf\b\x0fN6\xe6N9\x9a\xe2w\x1cW\x9fl\x0fL\x9d\xafE\xeb\x9b;?\xe0\xb4\x8am\xe9\xecv\xe6\xd9\x88\xf2\v\x94D\xb4\xdf\xb3M\xf9\xdaJ\x1e2\x9b\x00\x97\xabe\xc2H.v\x06\xce\xb1\xdd1@2\x14\x85G\xef\xafu\xff\xcdQ\x1d\b!\f\xdbI\xc3\xbd{\xb9\xd8yn\xd0T\x91\xebq\xaauw\x87O\x9e\x15\xd4\xa2\x83\xa5)\t\x96]\xefg\x8e\x16\xa7\xf6\xf5\x9c\xac\xc5\xee\xfb\xff\xff\xff\xff\xff\xff\xff\xb7\x05\xfd\x8b\x93o9:\x00\x80\xe1^\xc8\xe9\x83') (rerun: 64) 3m2.627237489s ago: executing program 33 (id=15): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000300)={0xac, 0x0, 0x104, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}]}, @TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xe}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xeb}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x17, 0x1, @l2={'eth', 0x3a, 'batadv_slave_0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x4, @private1, 0x8002}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0xd537}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1004}]}, @TIPC_NLA_NET={0x4}]}, 0xac}, 0x1, 0x0, 0x0, 0x20004094}, 0x4000000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001680)=[{0x0}], 0x1}, 0x4004000) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0xa) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="28000000140019010000000000000002"], 0x28}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0xf, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) recvmsg$can_raw(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000a80)="a6e6908ebc78a3c615196865e21d5fc870ef54e70f747eac0155434b9346d8b1dcba4f4c5940e3045f03001bac29b2da4852bf56b09b676cbeae2edd5c8d0156afb85b610cbd89b59c6c3d6576be2af2396c153a91f8d6055899fda07fb8f7f4c7d095c456bbf9e732318c9a83f76a294cfcf2d47f78311395dc6e0c2588b18476118cdab5c78fad71cf93e364603be0e5fc167144bd96e1430f510133783b35e984c8976045e7692f535a11723cb610cd9bc6f48a2e292ed3aa85b9eb673a48a6abeeb5f40853c1d6bc335560a6f85466a8eae6d165db89bf8bc85dfc7f31703aacdc92d2de170cc7718d40cede67752758648c208f9ea7d01c93d1e5725db1213a7eb98de2be939b1fd36ee3ee7c8f57279f9fbfc7c17619d8e2d5ec52c2d3fb7a67dc2cff0886e6c95fce40142e27e5999e3cb41c103ad218dddc9e64fa8cdb4e473c668a6e1cb65a67269ccf24cd5cb4593b771ce600000000000000810a5768f4878bda351d0fa0fd2cf99fda9db77fca1c02", 0x175) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r5, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95, 0x1, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x40408d4}, 0x20004800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="100a06000908010014001a8010000580"], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) socket$inet_udp(0x2, 0x2, 0x0) 3m1.541541184s ago: executing program 3 (id=150): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x5, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x4041, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, 0x0) r2 = syz_usb_connect$cdc_ecm(0x6, 0xa2, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x90, 0x1, 0x1, 0x7f, 0x7a96cfe9c9e7b23, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x0, "f6970cc9df"}, {0x5, 0x24, 0x0, 0x101}, {0xd, 0x24, 0xf, 0x1, 0x9eb, 0x4, 0x4, 0xee}, [@mdlm_detail={0x47, 0x24, 0x13, 0x1, "becb133c75f1ec490a3d16707923e6b95b680b44c43e20be41d2a36214ea812cbc6c06555660c17beba91e61acf13d8325cd0b361d52bb440c40d1f7bc4b546e056f3c"}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x83, 0x2}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x7, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x4, 0x6, 0x4}}}}}]}}]}}, &(0x7f0000000840)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x6, 0x5, 0x4, 0x0, 0x7}, 0x44, &(0x7f0000000180)={0x5, 0xf, 0x44, 0x3, [@ssp_cap={0x24, 0x10, 0xa, 0x7, 0x6, 0xd38a, 0xf, 0x3b2, [0xc0, 0xc0, 0x1f4f, 0x3f00, 0x0, 0xc0]}, @ssp_cap={0x18, 0x10, 0xa, 0x6, 0x3, 0xf707, 0xf0f, 0x8000, [0xc030, 0x0, 0xc0]}, @ptm_cap={0x3}]}, 0x8, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0xc01}}, {0x74, &(0x7f0000000240)=@string={0x74, 0x3, "f55a3c2f67cf5394d31638098621f23a97ab95540de70060cc7e60bf5d9a94ef0a02449e78d18c170860f0c3dda9a6e6cbc548017a544af28db4a164aa46dcb1405710ccb3dea445a495df0673bddd574398db03aa20ba0c6836141b697683980ec79efd807ea95ce0beff45a919b163af58"}}, {0xda, &(0x7f00000002c0)=@string={0xda, 0x3, "cb0e6103e7dbf100ebea46e602d098bf6d8516d21988a00b350048d489fd6e43642fca3b1abcd30cbce5248882c72ee033e5fcb079dfb57fe5ad3758081d7adcdf01410dce494b543695d370f07b5287266685e372e3c17a2babe5004ab198bfa9805b9bc14af1e5832941a8f03dd2453ff449c4efd7f68b2c3552e56f066d8e20e591e72ad212ed8f8774ca4d1e41ea83504738458b8e2d7f7863b6d528d88631ff8510995ed79258108d53f0a195dedfbdab20ec652e9a75b07bbc77951756b6eb7a42614df3c4795ff81c5cccb12c9b7839fe32f3e1a1"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x2401}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x438}}, {0xb8, &(0x7f0000000740)=@string={0xb8, 0x3, "87736938ed2b42e1237794f8a4a7899f3afaea52bed9ee77c3b9f7be0e9e28be1f49b164fe489a1f24b493148eeee456ff0a5c59cd48db65756954dc8ae80ec0a7fdc398ff58154d7c2636f5be654c6c49a30c6540547133373152b73d7e9d78d4faa89599d81f18abdaf9176ea3e4f805c5acd6ccf7e5412bbafc2efa90c8b0aeab34b72815bc8b27d322e4438a27add584326701774fd38821abf1e97253d5403d8e4ea69d99df39aa0a6769e309e1e352f5c9c042"}}, {0x29, &(0x7f0000000800)=@string={0x29, 0x3, "8ce74227599d0ca5ad2c89d534a9c29a6a28542e916fb94b0dfc644e626fc44b6456eefb6dd677"}}]}) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000a00)={0x14, &(0x7f00000008c0)={0x40, 0x24, 0xf5, {0xf5, 0x24, "03a46fbe56c15514f6cccf9220a4b708c5bdbea3a3dc8150394df7c041e2d52f8d93b18be4d973bcdfd5e24e688697a165f46aee0620c406aef0d54ec0895fdaf1402e3c66ccbd3afe12ec71457cdc11b9e22ba69caaa7e3520bc04b62978fac785674130b47238b0f9c352f337cdb6c69a12ef6987ef1ee61a73923ff86cbf90359e9cbfbd55e6c44510eb85bb45a0863fad89c39ab19781c57e0f7a6e4a72fa128afaf309cb2139ae674004d67d62bd697aaabde5eb86b2da7dea6ad82f55e9dffb779d25fa57cf027c7125b56720613ee0d59e7bd3d6cd50930cf6a0d8b4fac7d703a60f61e523c5898265f9c41f082234e"}}, &(0x7f00000009c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000b40)={0x1c, &(0x7f0000000a40)={0x20, 0x30, 0x4d, "3e6fed3cf2cc8d723cd18bd695af879d7b0726947e99db46f551e02b7f7b4a60d64b12944571602ff6f917ada71070a43d0f6e037af1ca72cb4f24b0b6795b1ac4ed864ad3d2f0a2272ad481b3"}, &(0x7f0000000ac0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000b00)={0x0, 0x8, 0x1, 0x9}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r3, 0x2f, 0x8, 0xffffffffffffffff, @void, @value=0x0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7}, 0x20) ioctl$vim2m_VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f00000006c0)) 3m0.663777828s ago: executing program 3 (id=160): r0 = socket(0xa, 0x3, 0xff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000)={r0}) getsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@loopback, @local, 0x0}, &(0x7f0000000200)=0xc) (async) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000880)={0xffffffffffffffff}, 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000009c0)={@map=0x1, 0x22, 0x1, 0x9, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000900)=[0x0, 0x0], &(0x7f0000000940)=[0x0, 0x0], &(0x7f0000000980)=[0x0, 0x0], 0x0}, 0x40) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000a80)=@o_path={&(0x7f0000000a40)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff, 0x15, 0x0, @val=@uprobe_multi={&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)=[0x3], &(0x7f0000000b40)=[0x3, 0x0, 0x2, 0x2, 0x0, 0x2, 0x1], 0x6, 0x1, 0x1}}, 0x40) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000bc0)={@cgroup=r0, r2, 0x32, 0xc, 0x0, @void, @value=r2, @void, @void, r3}, 0x20) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x7, 0x0, 0xfffffffe, 0x46, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x700, 0x5, 0xf}}) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000040)={0x2, 0x4e24, @private=0xa010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)="0a5132e8d28f31a93e73e49a217d86321defaff2a84b296ae866f9556e527f8df798d63e4de3afc0bac8d3cd477e700cdfe767a1cbecd27add0dc085f5f3212b2f1fbfea946ba30f48c9594e2cd153a6bad547f5b4801fc633e682f22fcdb160216991268768ce221b98de177643b34f9e1c45bb92ee98fc3b855d450eb2a7a719237b1e0d972d1c892136cb035206aa1699e16a03941075f4be412c8e7cad88c10d2812b137b24f3c850cbe131c36233863d02ead16dd045818b79f89b272766064b580af43e5e69e313f3665f8d38ae2d26cb8439020700d82595a02ff09ba05aa7f96a961d5b327e4654446b204218f", 0xf1}], 0x1, &(0x7f0000000300)=[@ip_retopts={{0x60, 0x0, 0x7, {[@timestamp_addr={0x44, 0x24, 0x32, 0x1, 0x8, [{@loopback, 0xffff0001}, {@private=0xa010102, 0x6}, {@broadcast, 0x7f}, {@rand_addr=0x64010100, 0x9}]}, @cipso={0x86, 0x11, 0x3, [{0x7, 0xb, "fb128d238711986e63"}]}, @ssrr={0x89, 0x1b, 0x53, [@private=0xa010101, @empty, @multicast2, @rand_addr=0x64010101, @private=0xa010101, @multicast1]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @dev={0xac, 0x14, 0x14, 0x2b}, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@timestamp={0x44, 0x10, 0x5b, 0x0, 0x9, [0x5, 0xb7, 0x5]}, @lsrr={0x83, 0x1b, 0x70, [@empty, @broadcast, @local, @loopback, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x8, 0xb6, 0x0, 0x0, [0x0]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x76}}], 0x118}}, {{&(0x7f0000000440)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000480)="1af309fd981efc38f5d1c240a17d828056567c3bfcd9fc87c481341b9119daa38f15f08482123df6ff30506e14edc3d78bb483", 0x33}, {&(0x7f00000004c0)="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", 0xfb}, {&(0x7f00000005c0)="4b52864e23548307d214e3dfe65ae7228934ef79bc3b525c21be461e8de563490e66437c534bc246d40184c8431d7ad99bae3b5f272878142f4605a96e1fa4227021cac74942427a2ce3", 0x4a}, {&(0x7f0000000640)="cdc132936b6ba55f256106011cb5aedef4aa340a206db61989c21e37859578cccf3db754cebb1246eb716d160bf90ee71bdc07181ec5d8625c37ac015914d02bd561ada77d72eae02ad98b3ee860d0cc40d9cff1367a999ffa09efc9f499f7d41d7fbe0d2789eb6303c055df", 0x6c}, {&(0x7f00000006c0)="659a83c9d4c01885f4a65b793961f1ec9c33d99f7269ede642f66bddeb52a2834d91a44a2ac85f150d9003bd0ea064bdc4a511f5e32773ec5ad6612c85fac4f8420a49cf99d0790b22e9a49ad01f6b771bf43b80eba6d21fcc407465", 0x5c}], 0x5, &(0x7f00000007c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe}}], 0x18}}], 0x2, 0x1) 3m0.570716776s ago: executing program 3 (id=162): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000500)={'syztnl0\x00', &(0x7f00000004c0)={'sit0\x00', 0x0, 0x20, 0x1, 0x7, 0x7, {{0x7, 0x4, 0x1, 0x0, 0x1c, 0x9, 0x0, 0x79, 0x29, 0x0, @local, @private=0xa010102, {[@cipso={0x86, 0x8, 0x2, [{0x6, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r2, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x7c, 0x0, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x16}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x240008c0}, 0x4000080) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r5}, &(0x7f00000007c0), &(0x7f0000000640)=r4}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000240), &(0x7f0000000280)='%pS \x00'}, 0x20) sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x3fa, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1, 0x1, 0x0, 0x1}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01000300000000000000330000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e0000000000"], 0x3c}}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r7) sendmsg$NLBL_CALIPSO_C_REMOVE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="01002cbd7000fbdbdf250201000008000100030000"], 0x1c}}, 0x60000010) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r8, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x810) 3m0.479983304s ago: executing program 3 (id=164): timer_create(0x2, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r0, 0x1, &(0x7f0000000140), 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) timer_settime(r0, 0x0, &(0x7f00000002c0)={{0x0, 0x3938700}, {r1, r2+10000000}}, 0x0) (async) timer_delete(r0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x11, &(0x7f0000000440)=[@cr4={0x1, 0x100200}], 0x1) (async) syz_kvm_setup_cpu$x86(r5, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum={0x2, 0x3, 0x0, 0xf, 0x4, [{0x9, 0xfffffffe}, {0xb, 0x800}, {0x2, 0x3ff}]}]}}, 0x0, 0x3e}, 0x28) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x4000) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\n'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x10) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000108321001fff0000056842bb002552d2", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r10, 0x6, 0x16, &(0x7f0000001000)=[@window={0x3, 0x4, 0x7f}], 0x1) (async) sendmmsg$alg(r10, &(0x7f0000000140), 0x4924b68, 0x0) 3m0.249964815s ago: executing program 3 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='pi3usb30532 0x59\x00', 0x10) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setresuid(0x0, 0xee00, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000080)=0x2, 0x4) r2 = socket(0x10, 0x80002, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x36) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r4, 0x36) add_key$keyring(&(0x7f0000000000), &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0, r5) (async) add_key$keyring(&(0x7f0000000000), &(0x7f0000001200)={'syz', 0x1}, 0x0, 0x0, r5) ptrace(0x10, r3) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) (async) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r3, 0x200, &(0x7f00000011c0)={&(0x7f00000001c0)=""/4096, 0x1000}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYRES16=r2], 0x1c}}, 0x0) recvmmsg$unix(r2, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) (async) recvmmsg$unix(r2, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8a042, 0x0) (async) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x8a042, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/modalias\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/platform/devices/usbip-vudc.0/modalias\x00', 0x0, 0x0) read(r7, &(0x7f0000000200)=""/256, 0x100) mmap$dsp(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x200001a, 0x8012, r6, 0x0) 3m0.130148099s ago: executing program 3 (id=166): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x6, 0x4dad, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000140)=[{0x1, 0x3, 0x2, 0x6}, {0x3, 0x3, 0x6}, {0x5, 0x5, 0xa, 0x8}, {0x0, 0x4, 0xd, 0x3}, {0x3, 0x3, 0x2}], 0x10, 0x40}, 0x94) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f97a25002a145d607a47a0509a9", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) (async, rerun: 64) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x20) (rerun: 64) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}}, 0x80c4) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6d65}, 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB='*\x00\x00\x00\x00 \x00\x00', @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="10c9466632bafef56146ae19a713653873d465be59c8991f1e8e3742d3cf9967fa233993af3deaba76de550445eed9f6191e3d564d95e3edd276d50dc2987b5c0de94641fd72782b47f5c199f7f03f4e7895e2fc7b060900d9bf66782ae071292027b0c5ae264dc7ae1bd1764d769bbfb1b175bf661587a6a80c79f53ec65c2afc28046757e61a0def601cec37137a5a2396eece0751a55123f1584e5817042624eee76a1d9e923ae464293f4ffffb7576481ae7f01b7e4a7ee0801b89", @ANYRES64=r5], 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 2m44.860372398s ago: executing program 34 (id=166): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x1d, 0xf, &(0x7f0000000000)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffe01}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x0, 0x6, 0x4dad, 0x7}, 0x10, 0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000140)=[{0x1, 0x3, 0x2, 0x6}, {0x3, 0x3, 0x6}, {0x5, 0x5, 0xa, 0x8}, {0x0, 0x4, 0xd, 0x3}, {0x3, 0x3, 0x2}], 0x10, 0x40}, 0x94) (async) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f00000003c0), 0x200000, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r2, &(0x7f00000001c0)={0x2020}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000100)={0x10, 0xffffffda, 0x3}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@fallback=r3, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r4, @ANYBLOB="2f97a25002a145d607a47a0509a9", @ANYRES32, @ANYBLOB, @ANYRES64=r5], 0x20) (async, rerun: 64) r6 = creat(&(0x7f0000000440)='./file0\x00', 0x20) (rerun: 64) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000480), 0x4) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x78, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010102}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'ftp-20000\x00'}}]}, 0x78}}, 0x80c4) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000001c0)={0x6d65}, 0x8) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r6, @ANYRES32=r0, @ANYBLOB='*\x00\x00\x00\x00 \x00\x00', @ANYRES32=r1, @ANYRES32=r7, @ANYBLOB="10c9466632bafef56146ae19a713653873d465be59c8991f1e8e3742d3cf9967fa233993af3deaba76de550445eed9f6191e3d564d95e3edd276d50dc2987b5c0de94641fd72782b47f5c199f7f03f4e7895e2fc7b060900d9bf66782ae071292027b0c5ae264dc7ae1bd1764d769bbfb1b175bf661587a6a80c79f53ec65c2afc28046757e61a0def601cec37137a5a2396eece0751a55123f1584e5817042624eee76a1d9e923ae464293f4ffffb7576481ae7f01b7e4a7ee0801b89", @ANYRES64=r5], 0x20) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x3, 0x0, 0x0, 0x1, 0x8}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m47.389627581s ago: executing program 5 (id=722): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc8, r1, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}, @pci={{0x8}, {0x11}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0xc8}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x700, 0x1, 0xfe5, 0x3, {{0x13, 0x4, 0x1, 0x8, 0x4c, 0x64, 0x0, 0x5, 0x4, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0xc, 0x47, 0x1, 0x8, [{@loopback, 0x16c}]}, @end, @ssrr={0x89, 0x1f, 0x94, [@multicast2, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010100, @private=0xa010101, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @timestamp={0x44, 0x8, 0x8e, 0x0, 0xc, [0x5c00018d]}]}}}}}) r3 = syz_open_dev$vcsn(&(0x7f00000002c0), 0x4, 0x800) r4 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000380)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x7fffffff, 0x5, 0x10004, 0xffffffffffffffff, 0xee44, '\x00', r2, r3, 0x2, 0x0, 0x5, 0xa, @void, @value, @value=r4}, 0x50) r5 = accept4$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14, 0x80800) getsockname$packet(r5, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000480)=0x14) sendmsg$kcm(r3, &(0x7f0000000780)={&(0x7f00000004c0)=@rc={0x1f, @any, 0x1}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000540)="0917230b9550dd1cf8614594dc41e4d9fa7168908a62a60b00cfca6283037c34d3b77927d98108b0c3163421996d9cc17322fc3ee4c1ab790a5e467c4d4a737f456981007618ce14715fdeba26e30ca44f1093f1d636b52dffbe980861a82f45f4be663ed99b86d8d1e1d663b2d87a0e3119a1afe920739ed154423d7f94569684837289193490af6806020319c1423c9b88364be2f0d9a0d0dc55119681ef91fbbad800f47cf77086bee7b0acb157e1a58ccfcc81c03c49dc96d00f6ac3f09cbe0ad4a32706be12123a285a9fc40a99adb4bc354c12fb4346fa6316f2e3c3e87681e8e7869c37dab9", 0xe9}, {&(0x7f0000000640)="eeef7f0260c419947253ab0bd619d82e31baae5ef52da671db0230cabe343d12283825a5cf7a668753e63b107ebf1c4d29ee37a06b438312b58d4b598375a416fbe311d9053c0ee1b513bc3cdf400ebd9a3385b3828de819ba0eaf3163be63e6b5698cbd8bc1f44332ee224072a495502073560a08d5f407d4b48b991a2c03cbced3325b165ee4295dc74ec6f2f3ce8fb2d1d3f84c6322d947e87ead187dfa29f9bc89960f7abc14ea5e3b1ef15b6646ef99cfd66f1c74bc88d6916deda956b9245569c530ebc94d518b81cfd1643fd9242cbdcc", 0xd4}], 0x2}, 0x13bfc59cadfc4f8) ioctl$DVB_DVR_DMX_SET_BUFFER_SIZE(r3, 0x6f2d, 0x6) r7 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000007c0)={0x800, r3, 0x80000}) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000800)=0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r8, 0x50009418, &(0x7f0000000840)={{r0}, r9, 0x2, @unused=[0x7fffffff, 0x10000, 0xb07, 0x101], @name="1f37700fd231ed98b555e9455555c71771c3e6df6bdb002d9c8da10d6d75e574098d9abc9beba5b6c386af245295d4afcc89940f0a1aa1b7397192044d507b70657e6a7abf8c69e48f86ce4b0706129086bdaa667811dd261567fc4e93471a48a1069af262890c5ff948746d3ccf00917a322db873ac7dd0158c29fc3e1ee7020e4bf33e03912c86b1b761549a5d84972aa3e9d86452b1a8c7f1b29e3befe673a3437c860c6444258f310851ba7500298fb17f25b9890ab5336433459d4bf072d400a527a3762d7738c9d8c1dfa7eb6afed12d7a93d5a5e2d7cc79c90b4a3a106703d65edf71ca7962c29e034432f520577ab5c639c51bb17d2746884f45962810aeec1e76b6505ff0faaaf17c69595224a5d3a8ea8b992e6da4446948b61ae1abe41792eb41f5d85ccd474f6b63a28be5e590ca86591fe3c9ecbed4ca220f3a37206fd02088dabe046360c9a5b994ff831a0cb6d343010dfb8b6ae0240d4221723bd167a25851ebe4af9b820215d502625c154a23c5476f45afb2002bc890f4d5ac204ff9e651132036007f0647f3db0ae2ff7ed81dbe2f51808a94afb1bc68c0876a379e56467f3779c386968852084deb2cfa3425e13f4e89ed92e7caefbc3e7910ba43abe570fc23fe021c0c68642f5cd63694912083305d1e41870f92b5b8505daf4a6539e4bcfbf93696dd3e946b7a71684fc1c37cee5de68f80fa388e6bec84d6caedf566238188f5f08bceb4dc5eb1926f98de82b6c24756220e673604a7c8228fe5b2b9f5dfcdea1788509df7ce7aacc694944db46e75bc3ab717f53aed0c43ab0f7ca76547a156b636fd71145a53df251c62e18432f753a10ff5b436f42adfe8c0dcb763e4d1bf36ec24b4e5591b3c42a285ee7985bd08f7e78ade90fd18b035c97c0bf5f5d30496ff785c7d69bc2a6a9a9d8b85b33b4dd082b8585a755cbf0b41014db620cb929bc24242266aede3497b7d5be734c856cdb1d1f40ee7de8e844084db88c3f72a61e75b69ef6b328467c17bfbfd251f3d21040e76af229adac8c117d23a92b2b99f0ca7bd58a128c202fb0d01d66e9a35267c51e2d7e7007dcd93e653adf7aea0048124c840eb123d60d5a229cb56c72541e1fea2b4818554099c0f174c8e8426fd0d78660732225cf834c789866fa8d8355198b8a0cd2d591e910ef70f5372b9ef30d76f70efb44609c6c1facfabd0f19c4d5e0d200078c995767b53dc2e2473bdfa621a590a9c156a82ef495ba84d197550cdd098fcec067e377be1bbc1d4286c99726fc421c89f0a55ac45f7b4ca9d27a53aaf7cec39ddb34458a2eee57de00765813b73662b30020d4ffcd82100efa0dee3b47df7d28f3b9a67610a82b6ca6ca3b4345023310154ccb0ca8a3ac322f2f2dc30160fbb2b6ab9d49c31fda5268414df1859aea172f786f16852c527616b5b746744c3d9c719487b457a99f531bd79849ece03e234a3aed335dc9b8a966af43e624250a556e945459f4cc959e331a9452dfe8bb81ae5291f40746bd00c3690c230b665e16cc2311983857fa53fb674e5033211367c1ae10dfd54f5e3f3b427be435cf4c67e34fe2de57b58a1c17c6a013b6bd192e86274f9311523854681243066c1222d2cfa1d3ce528299264a1c6edc49f12a8b39b1384304f317e0fe0838fad5dd16573ae87fc128d990b80d324174f09d0cc5ff91626ddd4e5381eeffd19b8309e4514f1dfc4b3e1aae036dbc592c80d99341532c088e1e6c78baeb2f682443168d467cbd0d7a5bf5d3f5a226a4f599ad33925c60844594f6c4b75a83d6d3a8db66eadb4f9d4a8881e58c223ad9d9bd232a6224296a3627a43f0c3e28e6d9386ac92667527895bf8d4c5ec7ec65e2dce75d50d18644042c46c077ae84020f450996581dbfdfc5ad326246f18dd4e1ad2df27e367cf32eff220b4ccbb0757bdeb328f03100135baf40396e774d9f0fe2e6e322653d728f83c427de2a27b0cb6bcf1269c85718b45c09a4a8253fa8b3898e37f2561c2a7c254d102c8b6397e8e92cc6cc644aa0a9484c2eb6d40b7f3ff9d11186e3a7081ccbd5e8aa7ce3232384f829a61d67469020cf859f619511773c2cdb4b096e028205b2ec35687a9952bc4f99fb34caea144a2bbf0f74724664666f907debc7816ce5989fb66ff5d1acc46d3b0ed6a1faa323fcc4d52db2979e1a0b9e670ba04f6adc9890ef8a007611b93a4c2e1bdaaf8aee4300d5d6696c2bdb6b8aee63225f11395bcf6b8de5af6743c89a140c6ed00724069928c8fc75979a3f20c5d08cd654e20fa8890cb8d4592ddaba6402ce215ad89e751714540a625c0ce6732b2e33612557e9901dbb23b324fd4c51c6b997675c29526af8ce7a80b41750b0cc5a4b2ffb090a68113162b419d7a5041577a462d41fa10b83c9c3db0a0c84986a851a75f8a67b5a095fefa4ff464904c6d6755fc245e1f0712cf6d9e0ae26afcd6cfa57f26913fdb1a49b8d896f0f9afced2c55149ee93651d746e353e6dac3bc6d1def17620cbd07bd6d2c318cb6cb665b98aa467650acf8a17ac239c1233aa0391fd7f1878eb3d4ff4e2a980e6cdd84f7eb7d857aabfeabd33cf6fb4c7baf5a1468bdf766fdebf53e8dbf3258a1f79b70acbb071d51619232db4904876af67480b4750de8bdf3bc9fd02e62f119fc156dc75ee6d78bdac3e682818c584cee9d7cf458ff07aab3400b2d32cd25334dc5a3b3f2fe61b6a18c739e009a725e1dd80acdc3ae2c9100eefacdcf9a4a6f6e609c1ff8526d500bf5f6130fd21c55eb8118a6a384df6c6ccc0935929e32fcc5988dd0c9c62204e297985fd29be268ae4239560913fa241c2821e852a8f317eef6e61156619711492d5a68251bc16155b7175941a234cb64a9f9c020001aa34f0e5d16663b3628e0b886ed670d53039a727e7864702f20cd802bd50fba63674091e6c930978716e048f6668a577359763b8789e13061b014693535e9468547b07a3438a2e9a676726e4b92f41ed2d69dcf1ced8253a6c3b16763df9fa64f9631987f23e861d2cddba6442dfa3a016825ac54d8a3f777b715eb3a084bbbd87658b94cf7e29c0fed711cbc36f89e4803a67014b4fd5ecddd34872bdae1d934965a8ca811e1ca47555a0d6482580ecb103feb36f101f80af66cb4ca4f40ea9c8068a9b2737f4209f680c0c66b91af74a627e3dbfef611afc212adcb5b84dfd8342f67d990a23276551cda92b2ac7a09a3d44942061c6f6c0f228a800e720cb0d576dd5b7a3d6143305f2e6dc4da2c94b31dc428c30f0ca6802230a83bdcad4657da60e7ce3aaa622fa1ea86f5b5ade10324ad9c4ebba9bb74c894e473ffe9570e465357ec9e8019a801ebb01889d02148f41d88234014f6638e2fdb77d470d5ae4cf967b73408a443cc62e2361950c97a367ab847256fe08692daf47ec60896deed2d97d25e1ea37652e91820f3983777d07d120aef4999fbe2bf9a6b7951404f9f272ccfcc0aa03f6f676264ef79342b0adb312d2fda784b01f9ed82f55928c725adb295e7e983d5ba43475bcba9277b2dd5ae0b6286ecbd368bedf938b6d2c26bcba7deed57c8515e864bdbf6072de61c3a259d4edec387440798625cf6d9681470594a6889bf77f518ad9fd09e529c569f740f0f0ccda00c586400630d296a5b9ba4e28931119927ca808ac7bf15e4aa03c6f0e234ce7e47d3d2e9aeb8b5c00a1abee2a052baf4a222fd099fc14abcc55dbca99ec35b8e41fbabe028a47360575133fe5e763dd71c050d327527846010bb61cc27533961d3e837e1e07cc80a0c2d33f8eeac86c0cf89317ec639520d1a74a78902cfceb7ef982f017778dfe7e204a5c4e495c01c5a3e429e8a4c37ee0eac04bf2362de51a6c337021b3f0f75c38a0f198ef29843f15627d7bcf6b15e638a76568d6f9099b0e44b8307942f80246acd809772746dd9f2b2e69770ba89328070a52dbb24fce88a613da52a9d8862c45c076796242d94a899f071180709535b616b4263701c3ccf67ee8a7d1ebb460902f34119034e60c2c3f5afd7b3414e278a9af439033436e316155a9ff3354c73a479236889eb48ea968f53a86c9a095c10db421c61ed7f22316f1640a6c18a20d7ea0ad203aaacbfc0861ccd5781347014430b04f65007c430d9dfbb8f5ed10889ac768982eb5c5aedfd9fd18ffca7987bff929a215f55a3fd31681d479860726146092c77c0a39fb0a8d198c1d4057a37e5d9eaf94e3c35b6270f5fea74d7665338b7c7b69ac488f94052d4a945e07bc134896f792b2ee5c4ede053d5ae7bfb5cd47520d5f372d9153f2b4f0bfffd4665bcda316e571d745e3c47d7c049a05f504cbfddea94644aef50b6d955a853a3e17be1dfd12627722b8f5999ef3cb705f15944c6392a6f741b2397b1e84c90e404757a3dd639da5ebbfcac829a2f1cf60677f2cc9a51ca82bf1c1c88861f7f7210e347f6ffddf2e15ce3762d10810a62967955019456f61cc2020d78ecfd510e2fe6e6d8820ff310c023833627a31cd952ad742c9e1e1a984f0898e5a0396297f96bd144f7dabf3f448ca645918a07668b2c525d8ec37242bd8d02b2da0cf61d2bf01954aac9cc5f7fd94d550919253968966c17b2154339782b5e83cffb3039328a9bf1299a72fc7ae9cd2adeb5732464afd1003048a450648b273250f01323746fa433e8b58ba1ea8cb7fb26ee04930b5a529a4dc8955002e8788fc5cee5a50e73bf8e2f8157ab4cfa8fb65f192262cd706e7a23c27c4f59e8860ae842b73d5c7eb8e55ffa0eab0722c7b7321cb75e64abe7ee9bb02c9d45437d670bdcaf8d9b242327c972dc3bc05436aa00f8d3cb8978796c2484768ce1ce0b7d3663dc7bddd8ecc51dc1265e0b4c8f2c34330653f1710fea26f2c2c7166ffb368775daa77456e68750d50130ada9a89c2afcad07011cd46b2040b545be983512dfaad61831cd38b43b0df5b3b1d3dda974543dddf736c21d0f57798cd58ca6a4d63d89498c739b5267c9d9841347e6edd290f3b9d5a9042eec85e550fa0abb4d17865def24074a026f95fca191dca87ecac17284798d9c1c048c454c4acc2579df3c684c88e5354bd879fe4b87023862f49d3548edc63b6628e41a50fbafdf390c4f94f39746dfe7a542b8313d3a3c6bb9644e1401d1af9ed8d2d313ea2261d3a73f531d1b4eed4645a9248ac98d2b3da0bc3c0fda4af21dbc2dcdcb8c773d8c52649cc5376b585a824bf6a21c3b67eaa9ed79cdc5129f25ef7d45318192fe6768c5170ad96baee623f1418eb3b2f28555946bd11f772370e91b57c04cca222eabaa6ecdfa4913c4391332123924b54593da0d6c9196cedd1b312ac7b5bf4cca96d5525dc4ee0f442d027839a068c2ce47e306ebf7009029708252189cbc3d87174528fd15b6ee0bf99bb529ed90405cc71efce90b8654c8c5e1d8ba3e948f728bc0de9e7482e246d5d0ebc52598113e82f475c0d2e4fcf7512bb37676d595f86e34d667c389c764f0abe0854ab8dabdfe7f73f9a37857102049a32ccc646c9d6bcc97c273a61598446474cda0922d98c1bbc26e776dd93b1eeb092763420cf10c96514a8389d921af13c91ac61c3d9ca574d75a35a5e57c2d0e8b508a9246503d611ac64c7e07ff1ffe285c64594a307410238bb6b15a3a96508e86d2212a0e5205220705429eecf3c5471824837433178f65f84673b53"}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000001840), r0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000001880)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000018c0)={0x48, 0x1, r11, 0x0, 0x0, 0xfffffffffffffd27}) r12 = accept$inet(r8, &(0x7f0000001940)={0x2, 0x0, @multicast2}, &(0x7f0000001980)=0x10) setsockopt$inet_pktinfo(r12, 0x0, 0x8, &(0x7f00000019c0)={r6, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0xa}}, 0xc) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r10, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000}, 0x40000) getpeername(r12, &(0x7f0000001b00)=@ax25={{0x3, @rose}, [@remote, @netrom, @bcast, @null, @default, @null, @rose, @netrom]}, &(0x7f0000001b80)=0x80) io_uring_register$IORING_REGISTER_FILES(r3, 0x2, &(0x7f0000001bc0)=[r12], 0x1) write(r8, &(0x7f0000001c00)="444ad639ece47743f51bc5f382f5be9233e1afdd4944b69e37310c902ac444614a802bf7dab0c17887e8d31ac20f4eea003a9e2665e610c56521fc9e463f412e28246732dbe5b218ec11a987768470a0519d8c5751155b0f1835b59cad6e4e9391753b3d49adcf40688fe1a048a84da62f824f2c497c7f713533c9", 0x7b) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001cc0), r0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000001f00)={&(0x7f0000001c80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001d00)={0x1a8, r13, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xb864}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xf3f4}]}, @TIPC_NLA_SOCK={0x8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x5c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_team\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x10, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x90, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa64}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x200}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x30, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x90}, 0x4c041) ioctl$NILFS_IOCTL_GET_BDESCS(r7, 0xc0186e87, &(0x7f0000001fc0)={&(0x7f0000001f40)=[{0x8000, 0x8001, 0x7fff, 0x8000000000000000, 0x5}, {0x5, 0x8, 0x2b, 0x1, 0x7ff}], 0x2, 0x28, 0x10, 0x6}) sendmsg$nl_generic(r3, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002180)={&(0x7f0000002040)={0x128, 0x35, 0x20, 0x70bd2b, 0x25dfdbfb, {0x1}, [@generic="e3258d1470323b18b66db54f7a3163c5fa8b01b13afd4a7c5aea82be291f51207c66199162b034f0b072bfc780e396afc95b1d54d36550ee1d25488ee9678445c78a780e9a79314494c5b41e01e26cac758302e4e5289876263b5e9c638cc9761cb53503e7003d407bfb66de2e1daf3ed6cddfb7998e9561c04f4b8699bf922994da84e15b40b61e4b322056b125d2b115162f025e9fa97ec93ead051c3ab16dc971c5a5fd36856c29f55e6862729a86be18eb884061353016", @generic="0a2e08503ebb0e1c1ee66aab9778956abae3bbda248630fdc3d1818968e84fd02c8c289bf82aac128c1507f601cde8574173fa8413677dde3e6ff360444041b6b0a6ef2a7fddab98c32aa257f7ab6b03bf969dc43cba77df"]}, 0x128}, 0x1, 0x0, 0x0, 0x1}, 0x4004110) r14 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002240), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000002300)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x20, r14, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) 1m47.301479878s ago: executing program 5 (id=723): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001680)='./sys/block/md0/md/layout\x00', &(0x7f0000001780)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/layout\x00', 0x1, 0x28) write(r2, &(0x7f0000000300)='2', 0x1) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x14, 0x23, 0x301, 0x270bda5, 0x25dfdbfa, {0x1}}, 0x14}}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x200, 0xfff, 0x1, 0x4}, 0x10) socket$netlink(0x10, 0x3, 0x5) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="520101007bd7882f5b15a87297e88c15ab0c02b381755a4d0e7b117f0c2e5f25e56631ee108ba8a69e29c074095331539c94636827d2e7c5cbe8ee730747e7c45a4f5f4562951adb65f2c6fa7b5ca44869c4057f3ca33b3b25d5795b56ece82f13426982823ce7f77c5d02eb7e15d72516de4e54b1414f33bbd01e1e6e6c8f9788563622d3918079723daf607fff80b677e547951f6eafef880cc88b1e50a5975d0d7fe0ed4a8ecc5beb2950ac36859f1b2651eeb53e72e8ce4b609ff890f545dd7d363f9c63e4e211eefff7eafaf8ff922f76abe9fec8d57061c298c2ee03f911370c8b93d6c72f91d70ac7cfdcfcc995c933ba7921956de6d7d4ac3399dd5838abc399f7e070ef81fa73d45f9cc6cfe93e084157e4ac14ef2a0a7e787040fef65ab143469d69973c8baef15b7b90c8015d3731f4b78dea3c57ba68ad26fc42f04603ff9eee122d942f9554c5219af417ad03ce38d380e21045c252bcd4c391ecc544a93f102872dc0b1cae3edfca92bf087786e6729f7cc2f2edbeeadf3d881e5e28fe1a00f37bc222d6e67dbe7951addffe1d6424334148634917ee1774cc6278f34b752aa0f532bdf94789ed38136740820aa74d2dcd431fca38706954fc6ec6d81178"], 0x4) close(r4) 1m47.234962596s ago: executing program 5 (id=725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000800) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r5, 0x400, 0x70bd2c, 0x5, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004800) ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f0000000300)={"1568f935", 0x9, 0xd3, 0x7, 0x8000, 0xa, "b6fb935054f8e2453a9a186ae79daa", "ce274061", "96b9befa", "e4e7659d", ["de114baa4e5a211d0459cfe5", "9549471aac87b9cf42f42958", "eaebb595b284a4d4a0363f8a", "582d0a6e0522d4262ada1657"]}) r6 = syz_open_dev$evdev(&(0x7f0000000380), 0xd5f, 0x100) sendmsg$IEEE802154_LLSEC_LIST_KEY(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x0, 0x20, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x24040000) syz_ublk_setup_io_uring(0x72bd, &(0x7f00000004c0)={0x0, 0xb65, 0xc0, 0x3, 0x81}, &(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) r8 = mmap$IORING_OFF_CQ_RING(0x0, 0x2, 0x1000000, 0x30, 0xffffffffffffffff, 0x8000000) r9 = syz_ublk_setup_io_uring(0x1e95, &(0x7f0000000600)={0x0, 0x4c25, 0x1, 0x3, 0x2ac}, &(0x7f0000000680), &(0x7f00000006c0), &(0x7f0000000700)=0x0) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r7, r8, r10, &(0x7f0000000780)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x3938700}, 0x1, 0x0, 0x20, 0x0, {0x0, r11}}) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000800)={0xc}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000840)=""/192, 0xc0}, {&(0x7f0000000900)=""/226, 0xe2}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/17, 0x11}, {&(0x7f0000001a40)=""/67, 0x43}, {&(0x7f0000001ac0)=""/56, 0x38}, {&(0x7f0000001b00)=""/218, 0xda}], 0x7) ioctl$EVIOCSABS20(r6, 0x401845e0, &(0x7f0000002480)={0x401, 0xa, 0x80000000, 0x4, 0x400, 0x4}) 1m47.046664053s ago: executing program 5 (id=728): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa, 0x61}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCPKT(r4, 0x5420, &(0x7f0000003940)=0x10) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f00000000c0)=0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @tick=0x68, {0x2, 0x8}, {0x5}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {0x0, 0x1}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r6 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r7, r3, 0x25, 0x1e, @void}, 0x10) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@getchain={0x44, 0x66, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x4, 0xa}, {0xffff, 0xe}, {0x6, 0xffff}}, [{0x8, 0xb, 0x10001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x8890}, 0x0) 1m46.951386891s ago: executing program 5 (id=729): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3f}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xf6}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0x90000000, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000001500)=""/19, &(0x7f0000000240)=0x13) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r5, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) ioctl$sock_netdev_private(r0, 0x8949, &(0x7f0000000000)) 1m46.780828033s ago: executing program 5 (id=732): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e62, 0x80000, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x60, 0x29, 0x37, {0x16, 0x8, '\x00', [@generic={0xc8, 0x38, "bb346826f25aab692499d66014503b11bdfab013c22d325723741510efbaaff9f6312dfb01236c00000019176809e7e2734d935d83674543"}, @jumbo, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x6c, 0xe, '\x00', [@generic={0x0, 0x6f, "5cf5c42d4e5d0eeec963eeda8a0f862063ddffa941170dff95a6d6750cb8e7199ff7503512c74521519215139d4c513ebbb452c81e3e9bca29d403418ae46697979205e5a1e96af28917153d9fd226221abd17d3c6cf3e82d033a95495c6e7a789ea73a48c1cfd999f107988f5925c"}]}}}], 0xf0}, 0x3400c8d4) syz_emit_ethernet(0x3e, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89}]}}}}}, 0x0) 1m46.749586528s ago: executing program 35 (id=732): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e62, 0x80000, @dev={0xfe, 0x80, '\x00', 0x33}, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=[@dstopts={{0x60, 0x29, 0x37, {0x16, 0x8, '\x00', [@generic={0xc8, 0x38, "bb346826f25aab692499d66014503b11bdfab013c22d325723741510efbaaff9f6312dfb01236c00000019176809e7e2734d935d83674543"}, @jumbo, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdrdstopts={{0x90, 0x29, 0x37, {0x6c, 0xe, '\x00', [@generic={0x0, 0x6f, "5cf5c42d4e5d0eeec963eeda8a0f862063ddffa941170dff95a6d6750cb8e7199ff7503512c74521519215139d4c513ebbb452c81e3e9bca29d403418ae46697979205e5a1e96af28917153d9fd226221abd17d3c6cf3e82d033a95495c6e7a789ea73a48c1cfd999f107988f5925c"}]}}}], 0xf0}, 0x3400c8d4) syz_emit_ethernet(0x3e, &(0x7f0000002880)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "7409bf", 0x8, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @local, {[@hopopts={0x89}]}}}}}, 0x0) 45.386640028s ago: executing program 2 (id=1264): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x80400, &(0x7f0000000280)) chdir(&(0x7f00000003c0)='./bus\x00') symlink(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', &(0x7f0000000080)={0x200c00, 0x4, 0x12}, 0x18) openat(r0, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x20) 45.217805922s ago: executing program 2 (id=1266): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x6, 0x40) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r1, 0x80184132, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) 44.278818749s ago: executing program 2 (id=1283): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x4) close(r0) 44.160798224s ago: executing program 2 (id=1285): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f00000000c0)={'lo\x00', @random="01320136b1ff"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000180)='./file1\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 44.090743457s ago: executing program 2 (id=1286): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001600)='/proc/timer_list\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000000)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, 0xfffffffc, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001680)={0x14, 0x3a, 0x229, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 43.598798401s ago: executing program 2 (id=1299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x130043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x150}, 0x1, 0x0, 0x0, 0x20004015}, 0x4040084) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82000000}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 43.558063769s ago: executing program 36 (id=1299): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x130043, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES64=0x0, @ANYRESDEC=r0, @ANYRESHEX=r1], 0x150}, 0x1, 0x0, 0x0, 0x20004015}, 0x4040084) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x4b, &(0x7f00000000c0)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x82000000}], 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.501385855s ago: executing program 4 (id=1611): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) fchmodat(r1, &(0x7f0000000040)='./file0\x00', 0x20) ioctl$SG_IO(r0, 0x2285, &(0x7f0000001200)={0x53, 0xffffffffffffffff, 0x506, 0x3, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001600)="4458b9378349ed526d62f40e76205d8b41b7ffcde699c93e89d6774120f608afb5722a853be560f4880e2a7052e1bdb64af7934eeb1da855e76627b16f2c6dc436837a0a53c402720f774091f182741f53717394aeed33ecba33dc1700e76e0871c1766ac446e1663ec5c27e2333d2490876ed96cb9ba005c004b796119587c6df2e6835d96784a9c022d005ce231e815c345664c8ecd3b1c138242a7a984cefb4662972d212b9c82a2ccf3b878f45b5a75bc17c96c50ed88c6c8640e0ae164f2e8f3ddc537f6dea47b7402fa3ad37606feabba8c1fb5b2190ebef5a406337403f3eeb99a7a4f9e10a586acc5b18e6d0373adb548d8cb8b8cb22422d986175d45ba31267d8d0ce92f491d2b73ee7c68d670d2993fc52c4a3c923c043080cc1f276af44a78eea3d53118b75ff12d7f8eaeee841bf719312639665ad120b0083d6b37e8bc36cdc1d36ff85f388d42a719574ae1bf3056165824732d56445b9d631a0d1cf9e2540fa36047386985a6f7c2214f7aad396dc19178d4d024b94b9a90384beb706129c8f8dd9632cc6773bcd4213d7b5eca8e5948988a78aa39075d9b6efd6439bcdc3ce7da9d89b15544cc4d7c7e96a5fcfb5f3a9c56cf79fe0c4fb98f2ae8730124628e123be1b46f6b1f653ea1fe7e5027281378c90ff2492e36256a315d61ab27ea367150d402282217c75054dcf0ef5932e333c26ab6952b7aa1f59b83a2525885d07919161e21c088de4c845b9dcaf30b9b47c3082d6cb869ab4a563a0f1a8988369cf404d3a595cce128640c69bf540b87f1bdd27c56981da0badaef4e0a97246930682715cea7ebc9fe0d3d4295dd794baba8382303ddb35b6ee2ee69f3df2b3d3e53c414b84a34418e9a09eb638ee7f830c7bb5a78e631e31943f7ce5b9f7d1a226b8be542c5170f3fb180da224bbf277f300149bf2e50003c58ee209b0ab57a300c8397b2504952c28636bf28801af89b185f09cfdc25536993d542ea5b01b316f87ea1ad3b30d040fe04552ccb34ce8e5db552ddc7d78d5825255c04c861b42595c96ce47b165bf8afa7a9e06853065a03937bbbbcf1131dc2fbfa121ae5c59600c6232f9976c527b1a35d0eb3360ea7418d142903258bc7405210c5b1c1b016cbc5f268402e60a9f600b61ed03ba1355be9a8d9e919d0d5171d96d40ef22c3d885aa83dd4f5111458803826d612a12b549af09bd5f531742f23badf92b69884b8d3bc11804689dc417c1e3f101967cf6a57f49574695bbc82e482ca07542910f827bc77e864d0c1ad5feee78cb5a6708d3cac955af27237287db797e42f1f1fce789e8c5647a75b2e181e76a152d9fd5d52d7e34fc3636fdf70191338237b3fc381d4b0b79e56a2d4311eb0abfc8a87f72d37fd37db792c2c6e657ee5c40264c11a1cd69aabf8bad373efda6e010a3e9e300264421675496ce954861d503d93d3b4f8b0780a7d91b468e8f56155821c558ac43f6f4305e01024b4817131484a98f5ec8f3878642dc5beb237edc53a7916ce1f209e7598a20757bbee0916bcf2195e11daf1a07a25b2080cf016e235eea83effc3b886fabca80ae290aca68bca3172bcc114a441b5cfbcfeaddb3e0e6b8cd640647b3b90d0064096a7c746b65bd43e0d9a626581bfb8ec93d6d59f55d6e3747e4485892fbbb0fb6a760be5e60e9792fb548114e08f747b0395012fcac757f17c6c4fb1a68a39980bfda1de913db1621b121791520d69cad3a7fb206432fb1dfacae2aab79a9aa28cbe2dc61ee603ec7ffd04371b2aacf690a13e1d3342760ac94b269ad85198f40efa8fd", &(0x7f0000001180)=""/24, 0x5, 0x32, 0x2, 0x0}) 20.41073467s ago: executing program 4 (id=1613): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000180)=0xb7, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x40040a0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0xc000000}}, 0x1c) 19.519254267s ago: executing program 4 (id=1623): capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) socket$nl_netfilter(0x10, 0x3, 0xc) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4010, &(0x7f0000000340)={[{@nfs_export_on}, {@userxattr}, {@uuid_on}, {@nfs_export_on}, {@default_permissions}, {@xino_off}], [{@subj_user={'subj_user', 0x3d, ')%\x04-$\'-%\\@'}}, {@audit}, {@smackfstransmute={'smackfstransmute', 0x3d, '!*'}}]}) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000004080101529b86b56574400e00000000050003005fe43f20f780000006000a40"], 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a000100000000000c0000006b42967550e08925010000001400010000000000000000000000ffff000000002307000000000000000d1a80554a336deb"], 0x30}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r3, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x100000001, 0x141000) r5 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_PEC(r5, 0x708, 0x2) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f00000002c0)={0x7, 0x6, &(0x7f0000000280)="4f1ed42f0b17"}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) sendto$inet6(r6, &(0x7f0000000080)="e3", 0x1, 0x40000, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xffff}, 0x1c) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_LEAVE(r7, 0x10f, 0x88) sendmsg$tipc(r7, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) 18.636563077s ago: executing program 4 (id=1627): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) munlock(&(0x7f0000c27000/0x4000)=nil, 0x4000) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 18.490753313s ago: executing program 4 (id=1629): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x70}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x4002, 0x5, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x4, "96597d00c5c0577eec4f99e3a24dd89fb66655d7b05291cb", "af6af5116bf52dbb91d30ae25aab828a961858f6c338a29f34c53e0526788e16"}}}}}}, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) r4 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r4, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r5], &(0x7f0000000280)=[0x64], 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r4, 0xc02064cc, &(0x7f0000000600)={r5, r3, 0x1, 0x3, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r4, 0xc00864c0, &(0x7f0000000180)={r5}) fcntl$setlease(r0, 0x400, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/240, 0x302000, 0x1000, 0x3}, 0x20) mmap$xdp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000007, 0x13, r6, 0x180000000) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000140)=0x408, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 18.190483198s ago: executing program 4 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r1 = socket(0x1e, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r3, 0x1, 0x0, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000080)) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x6, 0x0, 0x28f, 0x101, 'syz0\x00', 0x53f}, 0x1, 0x400, 0x8, r4, 0x1, 0x3ff, 'syz0\x00', &(0x7f0000000040)=[',.{\x00'], 0x4}) setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socket$alg(0x26, 0x5, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x62}], 0xaaaaaaaaaaaaa0e, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="678d4e050000005a7125000000d40dcd63885614a04e42246db548c281c1876aed768c459853d3627e9883d0f45d846feddd3cbaabb33294ab408090d880f1000000000000000000", 0x48}, {&(0x7f00000002c0)="a364bedfc678fcebba828f3315208d1824cfd2b4d32627267e03b48269ca9a726bf9575ba7a959114960dfdce159670ea44438c4ee87f7127aced677875e95656737bded9f834f91ff28d05695d59a9defe038cd9ba5f48dc5dbf61d47ef8e157c67ff92d8a833d806c2ac4ab236afc4ef728182b42591c95488a96cfa418f77", 0x80}], 0x2) 18.19001907s ago: executing program 7 (id=1632): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000001380)=ANY=[@ANYBLOB], 0x4) close(r0) 17.251620937s ago: executing program 7 (id=1635): ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'ip6_vti0\x00', {'wg1\x00'}}) r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 17.160374166s ago: executing program 7 (id=1636): r0 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000580)='%\x8bR\xafH\xd6e\x11\'\xec\xbb\xcb\xa0/\x1f\x16\xcf\xe2\xb5\xfc\xeb1\x12\xfdC\xb8\xa0\x01\xa3~\x971W\x96\xec\xaf\x1c\x91\xeb\xa8e\xfe\x17\x02xEA\x0f\x14\r\xae\xc1\xfe\x06\x12\beSb{~R\xf0\x06\xfb\x00\x00\xf92\xce\x81p\x1fC\n\x9f(\x00\xc5\x1d\x9c\xccCq\x06\x1b-\f\xc9\xd9+\xa4\x14\xd8\xf4\xef\xf5^\xbb\x06\xc92\x01\xd92\x14\xb8=\x03\x00\xd5M\x04\xf4{H\xd0\xc8v\x10\xe1R \x9a^\xdfqpc\x00\x00\x00\x00\x00\x00&>\x94\x882\x1c_j\x15{ \xf08\xdf\x84\xe64{4\x81\xba\xfc\x93\xf4\xd8\xb5\x04\xcb\x98\xd1QF\xe5\x1b\xb30x/\x86\x02\x1ct\xc7\x88\xd2\xce\xd5\x9e1\xef`\xad\x05\x11\xc9\xd8<\xc6~\x97\xd5\xde\xe3Eh\\\x84\x14\x9e\b\xe1\x9b\x00\'\xe8!\x8c\xc3\x97\x8a\xcf\xfc\x8fe\xa6\x0f\x8b\x912c\x1b>8\xa3=\xab\xf1\xf5\r\xb6\f\xfcS9\xae.\x8b\xf3\xbc,?\xb2\x9aBDPY=r\xfa8I\x16\xa2\x18\xd4\xa5\x8b\xaf\xd1\x8a\xbb\x0e\x15O\xc9p@\xadaw\x84\xc9\xdd\x87a[\xdf\xc2\xa4\xf9@T/', 0x0) (async) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x10040) r2 = socket(0x28, 0x5, 0x0) (async) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000080)="0000000000000002ff690000000000010000001300000006000200861fa72e5b01504104bfeacdd5a9007d167c71e3b8a93aa64d957a684161c833020a6da8881fb79e110483bfadf224a22c76ecc7a56843a85f7df51293f0eb84ef8f0f07342db3b0e5a5647b7bed1fbf069ca713670adf7d9fb6d2600fd9c1981fe9f095cfe9d2fe1e1e34f6096bf02543747b2c792890f07c0da0fa25e6101062e6c9176a70e41698814a213711764f88495994cfd8a57c1e13f6b5298e7ab3a2bfb58dde34d58536633c27882e51ced17d67999b00094461", 0xd4, 0xffffffffffffffff) (async) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040), 0x10) (async) listen(r3, 0x4) (async) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r2, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) (async) r4 = accept4$unix(r3, 0x0, 0x0, 0x800) recvfrom$unix(r4, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) (async) dup(r1) 17.099857395s ago: executing program 7 (id=1639): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x408102, 0x0) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffffff, 0xfffffffffffff619) (async) sendfile(r0, 0xffffffffffffffff, &(0x7f00000001c0)=0xffffffffffffffff, 0xfffffffffffff619) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') (async) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 17.099081263s ago: executing program 7 (id=1640): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x30, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x400030}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) 16.965139272s ago: executing program 7 (id=1642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) unshare(0x6a040000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x48042, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x97c5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) process_madvise(0xffffffffffffffff, &(0x7f0000002800), 0x0, 0xf, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r2], 0x84}}, 0x20008040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x30, r1, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000100), 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) syz_emit_vhci(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 16.88142336s ago: executing program 37 (id=1642): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0/console\x00', 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x4, 0x0, 0x106, 0x5}}, 0x20) unshare(0x6a040000) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x48042, 0x0) ioctl$BSG_IO(r1, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x97c5, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) process_madvise(0xffffffffffffffff, &(0x7f0000002800), 0x0, 0xf, 0x0) prctl$PR_SET_IO_FLUSHER(0x34, 0x2) setns(0xc9, 0x0) socket(0x8, 0x5, 0x5) socket$inet6_sctp(0xa, 0x5, 0x84) syz_ublk_setup_io_uring(0x1b1d, &(0x7f0000000080)={0x0, 0x1c3f, 0x2, 0x2, 0xf1}, 0x0, 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r2], 0x84}}, 0x20008040) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x30, r1, 0x1000) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r4, 0x65, 0x4, &(0x7f0000000100), 0x4) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000140)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x4}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x14, &(0x7f0000000140)=0x4, 0x4) syz_emit_vhci(0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 3.203391587s ago: executing program 38 (id=1631): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r1 = socket(0x1e, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)={0x34, r3, 0x1, 0x0, 0x8000, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, &(0x7f0000000080)) r4 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000003c0)={{0x6, 0x0, 0x28f, 0x101, 'syz0\x00', 0x53f}, 0x1, 0x400, 0x8, r4, 0x1, 0x3ff, 'syz0\x00', &(0x7f0000000040)=[',.{\x00'], 0x4}) setxattr$incfs_id(&(0x7f0000000340)='./file0\x00', &(0x7f0000000500), &(0x7f0000000540)={'0000000000000000000000000000000', 0x30}, 0x20, 0x1) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) socket$alg(0x26, 0x5, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x41) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f00000001c0)={0x10000000, 0xf, 0xffffffffffffff85}) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0x62}], 0xaaaaaaaaaaaaa0e, 0x14, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_merged\x00', 0x0, 0x0) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000100)="678d4e050000005a7125000000d40dcd63885614a04e42246db548c281c1876aed768c459853d3627e9883d0f45d846feddd3cbaabb33294ab408090d880f1000000000000000000", 0x48}, {&(0x7f00000002c0)="a364bedfc678fcebba828f3315208d1824cfd2b4d32627267e03b48269ca9a726bf9575ba7a959114960dfdce159670ea44438c4ee87f7127aced677875e95656737bded9f834f91ff28d05695d59a9defe038cd9ba5f48dc5dbf61d47ef8e157c67ff92d8a833d806c2ac4ab236afc4ef728182b42591c95488a96cfa418f77", 0x80}], 0x2) 2.417283118s ago: executing program 8 (id=1762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0x9) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'pimreg0\x00', 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4c010000", @ANYRES16=r3, @ANYBLOB="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"/326], 0x14c}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/cgroups\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004800)={0x2020}, 0x2020) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000040)={0x5, 0xb5315258, 0x2, 0x80000001, 0x1, @discrete={0x1, 0x5}}) 1.9477282s ago: executing program 8 (id=1764): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x3) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r3, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x14985, 0x3, 0x3}, 0x18, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000003000)=@file={0x0, './file0\x00'}, 0x6e) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x80000) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r9, 0xc008561c, &(0x7f0000000100)={0xf0f018, 0x1}) splice(r7, 0x0, r8, 0x0, 0x6, 0xc) landlock_restrict_self(r4, 0x1) connect$unix(r5, &(0x7f00000002c0)=@file={0x1, './file0\x00'}, 0x6e) 1.091793906s ago: executing program 6 (id=1770): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x5, 0x5, 0x2}) fgetxattr(r0, &(0x7f00000000c0)=@random={'security.', '&%#(:!-{-@\x8c\x00'}, &(0x7f0000000100)=""/39, 0x27) ioctl$KVM_TDX_GET_CPUID(0xffffffffffffffff, 0xc008aeba, &(0x7f00000001c0)={0x5, 0x0, &(0x7f0000000140)={0x2, 0x0, [{0x80000000, 0xb, 0x1, 0x1, 0x53e, 0xff}, {0x80000008, 0x7, 0x2, 0x8d9, 0x80000000, 0x24506e0b, 0xfff}]}}) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000200)={{0x0, 0xf2}, 'port1\x00', 0x8, 0xc040c, 0x962, 0x72, 0xf13, 0x8, 0x4, 0x0, 0x2, 0xbd}) sync_file_range(r0, 0xa53eeef, 0x3, 0x4) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000300)={0x2020}, 0x2020) r2 = syz_open_dev$dvb_demux(&(0x7f0000002340), 0x5, 0x1) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r2, 0x6f2d, 0x6) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002380)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000023c0), &(0x7f0000002400)={0x0, 0xfb, 0x112, 0x2, 0x0, "95e2a8b7ae17613f04dbd0c7b00bd9d1", "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"}, 0x112, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000002540), &(0x7f0000002580)=0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000003740)={&(0x7f00000025c0)="a6f42eae00269b4aa91b87d0", &(0x7f0000002600)=""/97, &(0x7f0000002680)="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", &(0x7f0000003680)="226adf82e6e20a3fa07999dc04532ccdaf7316bec98aceffc979fe5b0488e0bab6563394fbfc986ea838b0381e51de92937d66b250098925c428cd47773bbb4b0c6a62d4262a2cc1d4780097bcd3b9a56b2c749a00b69a9fd21958c3de7e6f2f34ac5e1da2d2818e3bdb494aafef50b9d6ba7c5e5d6461a7ed23021b572f21a06a41bab5", 0xfff, r3, 0x4}, 0x38) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000003780)={0x1, 'bridge_slave_0\x00', 0x4}, 0x18) pread64$ublk_bdev(r3, &(0x7f00000037c0)=""/74, 0x4a, 0x1) write$nci(r3, &(0x7f0000003840)=@NCI_OP_CORE_INTF_ERROR_NTF={0x0, 0x0, 0x3, 0x8, 0x81, {0x0, 0x4}}, 0x5) io_uring_register$IORING_REGISTER_NAPI(r3, 0x1b, &(0x7f0000003880)={0xfffffffd, 0xb9, 0x0, '\x00', 0x8d0}, 0x1) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r1, 0x80047210, &(0x7f00000038c0)) sendmsg$IPSET_CMD_SAVE(r3, &(0x7f00000039c0)={&(0x7f0000003900)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000003980)={&(0x7f0000003940)={0x40, 0x8, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000004}, 0x20050080) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000003a00)=0x3) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000003a40)={0x7ff, 0x1, 0x7f, 0x4, 0x72, 0x7, 0x2}, 0xc) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000003a80)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000003c80)={0x0, "2647a97893159ac07a1b32b62b2a41aa"}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000004c80)={{r0}, r4, 0x4, @unused=[0x6, 0x7e133947, 0x1, 0x2], @devid=r5}) ioctl$FS_IOC_SETFSLABEL(r2, 0x41009432, &(0x7f0000005c80)="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") r6 = syz_open_dev$vcsu(&(0x7f0000005d80), 0x8000, 0x240001) read$FUSE(0xffffffffffffffff, &(0x7f0000005dc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_GETXATTR(r1, &(0x7f0000007e00)={0x18, 0xfffffffffffffff5, r7, {0x5}}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000007ec0)={r6, &(0x7f0000007e40)="171b39c81a09aab030fef26ab9c0f5c48e8e39f11c20dd6043ac3b3506d45419fb4c78df018ad80456b3f0bb0399abbf2406431675a43e06aceea14f9f423ec218a5a98bb3cb4822ca6c975b60ce244456bb21263d9a60f12f01d77e0b"}, 0x20) 1.040952177s ago: executing program 8 (id=1771): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="66b87a000f00d80f20d835080000000f22d83e46dbdb48b81e8c0000000000000f23d80f21f835800000900f23f8b95b030000b8ee000000ba000000000f300fc7adea5900000f005d51c74424003a000000c74424020d000000ff1c24f20f205f0f2066"}], 0x1, 0x51, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) 979.918306ms ago: executing program 6 (id=1772): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) ioctl$EVIOCGREP(r0, 0x80084523, &(0x7f0000001f40)=""/231) 979.245322ms ago: executing program 6 (id=1773): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000004c0), 0x40000, 0x0) ioctl$PTP_SYS_OFFSET_EXTENDED(r2, 0xc4c03d09, &(0x7f0000000500)={0x19}) syz_emit_ethernet(0x346, &(0x7f0000000280)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "00fb0f", 0x310, 0x3a, 0xff, @loopback, @mcast2, {[@srh={0x8, 0x8, 0x4, 0x4, 0xe7, 0x20, 0x7, [@private2, @mcast2, @mcast2, @loopback]}, @dstopts={0x1d, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x17}}]}, @dstopts={0x87, 0x16, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x8, 0xf0, [0x2, 0x8, 0x10, 0x9, 0x0, 0x10000, 0x4da, 0x25]}}, @pad1, @pad1, @generic={0x0, 0x61, "f90216b540b4d85315b8ee68cebaedec9a2df25166fbb3ced79ddb22baccf24b5be4f9522d9a858f3a4af22c018b5b53e61560e1fb6e42dd5cae8af36d6b45e905925b06cb4e58ae1315d521ec4e2c62a22c2ffc540289817d6c0d152e0f1203f0"}]}, @srh={0x2b, 0x12, 0x4, 0x9, 0xf0, 0x40, 0xfff3, [@empty, @mcast1, @empty, @ipv4={'\x00', '\xff\xff', @broadcast}, @mcast1, @private2, @loopback, @ipv4={'\x00', '\xff\xff', @empty}, @loopback]}, @routing={0x6c, 0x8, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x41}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00']}, @hopopts={0x1, 0xe, '\x00', [@ra={0x5, 0x2, 0x2}, @enc_lim, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @remote}}, @calipso={0x7, 0x40, {0x0, 0xe, 0x9, 0x6, [0x3, 0x2, 0x6, 0x3, 0x8, 0x4800000000000000, 0xffffffffffffffa0]}}, @pad1]}, @srh={0x2f, 0x10, 0x4, 0x8, 0x9, 0x48, 0x9, [@mcast2, @private2, @private1, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x19}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}], @echo_reply={0x81, 0x0, 0x0, 0x82, 0x4}}}}}}, 0x0) clock_getres(0x7, &(0x7f0000000000)) 927.013993ms ago: executing program 6 (id=1775): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000210c0), 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r0, 0x4008af25, &(0x7f0000000040)) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=""/78, 0x4e}], 0x1, 0xc00, 0x0) 886.001333ms ago: executing program 9 (id=1776): r0 = socket(0x10, 0x3, 0x0) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) (async) r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r1, 0xdd) keyctl$clear(0x7, r2) (async) sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000204be04020506050e0204094300080004000000040010000d0068d0bf46d32345653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a32000400160005000a0000000000e000e218d1ddf66ed538f25232500000", 0x78, 0x0, 0x0, 0x0) 820.375778ms ago: executing program 6 (id=1777): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000004) 817.960864ms ago: executing program 6 (id=1778): ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000140)={0x8, 0xbc1, 0x81, 0x140000}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x44, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f00000006c0)=ANY=[@ANYBLOB="50000002110000010802110000000802110000000000000000000000b17368afe2bdf83d6b620000640001000006020202020202010882848b960c121824"], 0x36) nanosleep(&(0x7f0000000480)={0x0, 0x1dcd6500}, &(0x7f00000004c0)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=ANY=[@ANYBLOB="b00000ff000211000000080211000000080a110000001000000001000000"], 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x1dcd6500}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=ANY=[@ANYBLOB="100000000802110000010802110b00003ee0c1a6d1452000828000000100010882848b960c121824"], 0x28) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x4c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0xc, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}]}]}, 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01e82abd7002fcdbdf251b0000000e0001de6d657464657673696d000002006e08000b00000400"/51], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/make-it-fail\x00', 0x1, 0x0) r5 = memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) fallocate(r5, 0x0, 0x1, 0x400001) fcntl$addseals(r5, 0x409, 0x8) r6 = syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000700)={{0x0, 0x6, 0x71, 0x3, 'syz0\x00', 0x10001}, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0, 0x20}) r7 = syz_usbip_server_init(0x4) write$usbip_server(r7, &(0x7f0000000680)=ANY=[@ANYBLOB="0000000300000001000000010000000400000fff000000"], 0x60) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x88100, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'team0\x00', 0x20}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x946, 0x66, 0x0, 0xb, 0x29, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) 770.664093ms ago: executing program 9 (id=1779): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140), 0x208000, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000240)={{0x0, 0x0, 0x2, 0x4, 0x9, 0x9, 0x100000001, 0xe970000, 0x40, 0x0, 0x278, 0xf65, 0xd6, 0x2, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0103:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='bdc\x00', 0x4) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) (async) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0xfffffffffffffffc, 0x0) recvmmsg(r2, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) close(r1) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/bdc/bind\x00', 0x1, 0x0) (async) close(0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0xd, 0x5, &(0x7f0000000340)=@framed={{}, [@cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x94) (async, rerun: 32) sendmsg$nl_generic(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x14, 0x27, 0x800, 0x870bd25, 0x25dfdbfe, {0x2d}}, 0x14}, 0x1, 0x0, 0x0, 0x4008}, 0x4044810) (async, rerun: 32) close(r3) 770.321866ms ago: executing program 8 (id=1780): unshare(0x2040400) r0 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x2000400) r1 = fsmount(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0xc1}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000048) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x40, &(0x7f0000000100)=0xbdda, 0x4) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, 0x0, &(0x7f0000000000)=0x1c) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x9000000, 0x61, 0x11, 0x44}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 769.998421ms ago: executing program 9 (id=1781): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @dev={0xfe, 0x80, '\x00', 0x3a}, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) setsockopt$inet_int(r1, 0x0, 0x17, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0x24, &(0x7f0000001c40), 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x3, [@typedef={0x6, 0x0, 0x0, 0x8, 0x2}, @enum64={0xc, 0x6, 0x0, 0x13, 0x1, 0x1, [{0x8, 0x7}, {0x10, 0x5, 0x1}, {0xf, 0x7, 0x2}, {0x4, 0x7e4, 0x2}, {0xe, 0x7fffffff, 0x2}, {0x6, 0xf, 0x79}]}]}, {0x0, [0x2e]}}, &(0x7f00000005c0)=""/4096, 0x7b, 0x1000, 0x1, 0x862e}, 0x28) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x7f, 0x8, 0x2}, 0x50) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r5, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r3}, 0x20) sendmmsg$inet(r3, &(0x7f0000007380)=[{{0x0, 0x0, &(0x7f0000005e00)=[{&(0x7f0000003d00)='\'', 0x1}], 0x1}}], 0x1, 0x880) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) ioctl$CDROMREADTOCHDR(r8, 0x5305, &(0x7f00000002c0)={0x97, 0xf9}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}, 0x1, 0x4801000000000000}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) syz_emit_ethernet(0xbe, &(0x7f0000000300)={@random="e90c630faca2", @local, @void, {@ipv4={0x6000, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "61c03d2d2548741ff5015767096e1cd263026dd8f0703d2e22e3916500fdb8ec", "615eee2cb3c51e06deb424010178396b2afe4378c81f63a9eefc66ef338492fd3b688b2b06e6f206e4e6b8d1174296cd", "d8dbed9defbb6502c2888b524721c5807f3b4eedba8966f8774437de", {"c5f2fb530587df89cc9aa18e60d1a66b", "0c9ec23f1b56eba488bfededb3c997ae"}}}}}}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r11, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000a000000140004"], 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsopen(&(0x7f0000000040)='nfsd\x00', 0x0) 680.496541ms ago: executing program 8 (id=1782): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0xfd1, 0x5, 0x0, 0x5}, {0x8, 0xd, 0x0, 0x5}, {0x6606, 0x7, 0x8, 0x6}, {0x200, 0x0, 0x7f, 0x3}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001800)=0x0) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000001840)={0xacbb, 0xf2f8, {}, {0xee00}, 0x6, 0xdc}) statx(0xffffffffffffff9c, &(0x7f0000001880)='./file0\x00', 0x6000, 0x20, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) close(r9) socket(0x10, 0x3, 0x0) ioctl$TUNSETLINK(r8, 0x400454cd, 0x118) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r8, &(0x7f0000000200)=ANY=[@ANYBLOB="1b23000d"], 0xffdd) connect$pppl2tp(r6, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) sendmsg$unix(r2, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="93c995201f5f5b10463e48714a44617881705f1f32e4cff5545fd22fbd2cb564241fa3aa", 0x24}, {&(0x7f0000001580)="9e58cc8613fa75a8bd85b74fba6b8958de865f97b1a9542a0698850f8f12f1308b38fa9c4a6e1fc950d76ebe17234f1a313884ee3031787783c8beb2dfbb50affbf295f1670ba130945b4698e2b4064f65e0f4fbde2b717e6ac58983a80c70ca5a91844d47678713589d0105cda939e2d835c58c5fba48026ed4b3908c2aacd981cc0b02917fcb6499913e733784f5b4c30d619e04449ec6eb057b36845365cefe751d793fc8ab15773dc4b118ba5be96588a9ab1e024cf5a62732982171b24fedbe91493737e28f318caf65d1892f2fbf01a6b49a6d1d", 0xd7}, {&(0x7f0000001680)="135b93f81b112edd048949052a7b6f2a3089014e363214704c6b122a3a8a60f9a0c21bb9c002759dff97baf8aed72b1177944d4a12f9c971df4853927ee6d5aee99eb71a6bad0c77c9ebff341a150d3b03b4d59efcc66dcdf3dd256b", 0x5c}, {&(0x7f0000001700)="bf09528aaaa1e5aea97c9a7992afd1c1b5d401d6c2b508e8e09fc1ce03760ea0449cc00be9723e64c064ef1ef897c76aa2d329bb3598d09e1d13ea2197a952645eda1ec53ee0c60cc1f29acc9e35aab6a0dce07bc745bdd7f0346e2a2fd78ab96be372ca550f1197d5ed3525aa861b030c0f", 0x72}], 0x5, &(0x7f00000019c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x20, 0x1, 0x1, [r1, r0, 0xffffffffffffffff, r0]}}, @rights={{0x14, 0x1, 0x1, [r6]}}], 0x58, 0x20048000}, 0x80) r10 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x3) ioctl$KVM_SET_IRQCHIP(r10, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @pic={0x2f, 0x70, 0x5, 0x3, 0x0, 0x28, 0x4, 0x0, 0x41, 0x4, 0x3c, 0x9, 0x6, 0x0, 0x8, 0x29}}) ioctl$KVM_RUN(r11, 0xae80, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r12, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) listen(r12, 0xc) getpeername$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x1c) 619.025632ms ago: executing program 9 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8, 0x14, 0x81}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1ff}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write(r1, &(0x7f0000000a40)="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", 0xffe) pwrite64(r1, &(0x7f0000000500)="f05331a4", 0xfef7, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x400400, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000001a40)={0x0, 0xd, 0x0, [0x9, 0x9, 0x81, 0x1200000, 0x7], [0x479, 0x10000, 0x10001, 0x1, 0x401, 0x4, 0xb7, 0x7, 0x3, 0x6, 0x3, 0x40, 0x3ff, 0x0, 0xfff, 0x2, 0x93, 0x10d9, 0xb, 0x10, 0x3, 0x910e, 0x7, 0x7d, 0x4, 0x7, 0x3, 0x4, 0xfffffffffffff800, 0x1, 0x8, 0x0, 0x58, 0x5, 0x40, 0x0, 0x5d65, 0x5, 0x0, 0x7, 0x101, 0x1, 0x7, 0xd, 0xfd, 0x3, 0x40, 0x1, 0x7, 0x4, 0x0, 0xd, 0x948, 0x9, 0x8, 0x7fff, 0x7, 0xffffffffffff8001, 0xf, 0x1021aec8, 0x9, 0x1, 0x68de5c5, 0x4, 0x3, 0xffffffff, 0xe7e5, 0x580, 0x100, 0xfffffffffffff801, 0x579b50e3, 0x2, 0x9, 0x1, 0x7, 0x5, 0x0, 0x7, 0x7fffffff, 0x5, 0x5, 0xfffffffffffffff7, 0x6f7f61de, 0x4, 0x3f942782, 0x6, 0x4, 0x1, 0x281, 0x7f, 0x0, 0x3, 0x9, 0x4, 0x3, 0x10000, 0x1, 0x2, 0x3, 0x8, 0x6, 0x3, 0x7, 0x40, 0x86, 0x3, 0x1, 0x1, 0x3, 0x5, 0x5, 0x4, 0xfffffffffffffff8, 0xff, 0x9, 0xffffffffffffffff, 0x23f, 0x3, 0x4, 0x3, 0x10]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001e80)={r3, 0xfff, 0x1, [0x7, 0x9, 0x7fffffffffffffff, 0xd6f, 0x3], [0x6, 0xd, 0xffffffff, 0xec1d, 0x3, 0x2, 0xb, 0x7, 0x1, 0xfff, 0xb, 0x6, 0x100000001, 0x1, 0xb, 0x9, 0x0, 0xfffffffffffffff8, 0x400, 0x80000001, 0x3, 0xa, 0x5, 0x6, 0x8000000000000000, 0x5, 0xffffffffffffffff, 0x100, 0x5, 0xf, 0x2, 0x2, 0x7, 0x59f, 0x12, 0x8, 0x6, 0x0, 0x9, 0xfff, 0x4, 0x4, 0x3, 0xb, 0x5, 0x6, 0x100000001, 0xffffffff, 0x80, 0xda, 0x2, 0x101, 0x5, 0xd, 0x10, 0x6, 0x4, 0xfff, 0x4, 0x8, 0x7, 0x0, 0xa58a, 0x3, 0x6, 0x0, 0xe028, 0x2, 0x6, 0x8000000000000000, 0x6, 0xf, 0x5, 0x81, 0x80000001, 0x7fff, 0x425622f0, 0x7fff, 0xe72a, 0x10001, 0x4, 0x1, 0x9, 0x9, 0x2, 0x4, 0x2, 0x1, 0x5, 0x1, 0x6, 0x7, 0x3, 0xff, 0x6, 0xffffffffffffffff, 0x7a, 0x9, 0x3, 0x1800, 0xf8, 0x6, 0x7, 0x7f, 0x400, 0x8000000000000000, 0x0, 0x0, 0x3, 0x55, 0x9, 0x5, 0x50e, 0x1, 0x7, 0x2, 0x10000000000000, 0xffffffffffffffff, 0xd, 0xa5c9, 0x6]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./my_sys/bus/pci/rescan\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='1', 0x1) 587.998458ms ago: executing program 9 (id=1784): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) (async) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x70, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbf, {0x0, 0x0, 0x0, r6, {0x5, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x0, 0x7, 0x5}, {{0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1}}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x5, 0x1, 0x1}, {0x8, 0x1, 0x7, 0x2, 0x5, 0x1, 0x1}}}]}]}]}}]}, 0xfffffffffffffe03}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) (async) socket$alg(0x26, 0x5, 0x0) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x7, r3, 0x41}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000300)="74949ebb27e184548454f16a8d898482", 0x10}], 0x1}, 0x0) 378.642µs ago: executing program 9 (id=1785): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000001fc0), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20000004) 0s ago: executing program 8 (id=1786): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='dummy_udc.0', 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000e80)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) getsockopt$TIPC_DEST_DROPPABLE(0xffffffffffffffff, 0x10f, 0x81, &(0x7f0000001040), &(0x7f0000001080)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000001140012800c0001006d6163766c616e00dbff028008000500", @ANYRES32=r1, @ANYBLOB="080004"], 0x50}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="74010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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"], 0x174}}, 0x0) kernel console output (not intermixed with test programs): alNumber: syz [ 190.028751][ T2338] viperboard 7-1:1.0: version 0.00 found at bus 007 address 019 [ 190.069518][ T2338] viperboard-i2c viperboard-i2c.3.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 190.073841][ T2338] viperboard-i2c viperboard-i2c.3.auto: probe with driver viperboard-i2c failed with error -5 [ 190.401534][T10412] netlink: 'syz.7.1092': attribute type 11 has an invalid length. [ 190.527874][T10418] netlink: 'syz.7.1095': attribute type 1 has an invalid length. [ 190.535164][T10418] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1095'. [ 190.710572][T10425] bond0: (slave syz_tun): Releasing backup interface [ 190.714187][T10425] syz_tun: left allmulticast mode [ 190.717675][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.723291][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.724303][T10425] bridge_slave_0: left allmulticast mode [ 190.728952][T10425] bridge_slave_0: left promiscuous mode [ 190.731750][T10425] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.746047][T10425] bridge_slave_1: left allmulticast mode [ 190.748673][T10425] bridge_slave_1: left promiscuous mode [ 190.753081][T10425] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.762154][T10425] bond0: (slave bond_slave_0): Releasing backup interface [ 190.765899][T10425] bond_slave_0: left allmulticast mode [ 190.773289][T10425] bond0: (slave bond_slave_1): Releasing backup interface [ 190.777866][T10425] bond_slave_1: left allmulticast mode [ 190.789657][T10425] team0: Port device team_slave_0 removed [ 190.796557][T10425] team0: Port device team_slave_1 removed [ 190.799783][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.802247][T10425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.805863][T10425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.808714][T10425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.115192][ T6549] usb 7-1: USB disconnect, device number 19 [ 191.508148][ T5548] net_ratelimit: 59 callbacks suppressed [ 191.508194][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 191.512833][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 191.532495][ T42] audit: type=1400 audit(1785521122.043:881): avc: denied { mount } for pid=10444 comm="syz.7.1103" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.543154][ T42] audit: type=1400 audit(1785521122.043:882): avc: denied { mounton } for pid=10444 comm="syz.7.1103" path="/112/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 191.577456][ T42] audit: type=1400 audit(1785521122.083:883): avc: denied { ioctl } for pid=10444 comm="syz.7.1103" path="socket:[36238]" dev="sockfs" ino=36238 ioctlcmd=0x587e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 191.599225][ T42] audit: type=1400 audit(1785521122.113:884): avc: denied { unmount } for pid=8969 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 191.618173][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 191.620761][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 191.628118][ T5891] usb 11-1: USB disconnect, device number 10 [ 191.648374][T10450] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1104'. [ 191.728097][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 191.731197][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 191.833214][T10459] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1107'. [ 191.836119][T10459] netlink: 'syz.7.1107': attribute type 10 has an invalid length. [ 191.838825][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 191.841158][T10459] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1107'. [ 191.841925][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 191.854192][T10459] geneve2: entered promiscuous mode [ 191.856442][T10459] geneve2: entered allmulticast mode [ 191.958785][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 191.961337][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 192.011404][T10464] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1108'. [ 192.064053][T10464] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10464 comm=syz.7.1108 [ 192.204714][T10473] bond4: Removing last ns target with arp_interval on [ 192.659915][ T5942] nvmet: connect request for invalid subsystem n! [ 192.671444][T10483] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "n" [ 192.881861][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.884321][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.091868][T10494] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=769 sclass=netlink_route_socket pid=10494 comm=syz.6.1116 [ 193.127680][T10499] netlink: 'syz.7.1117': attribute type 9 has an invalid length. [ 193.369624][ T42] audit: type=1400 audit(1785521123.883:885): avc: denied { write } for pid=10508 comm="syz.6.1121" path="socket:[34699]" dev="sockfs" ino=34699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 193.475239][T10520] pimreg: tun_chr_ioctl cmd 1074025672 [ 193.476946][T10520] pimreg: ignored: set checksum enabled [ 193.547602][T10523] overlayfs: regular lower layers cannot follow data lower layers [ 194.115393][T10557] tmpfs: Bad value for 'mpol' [ 194.119129][T10557] rdma_op ffff8880281d49f0 conn xmit_rdma 0000000000000000 [ 194.174230][T10561] trusted_key: encrypted_key: master key parameter 'þSPKï&¤¼' is invalid [ 194.356014][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 194.356054][ T42] audit: type=1400 audit(1785521124.863:890): avc: denied { ioctl } for pid=10565 comm="syz.2.1137" path="/371/file0/file0" dev="fuse" ino=64 ioctlcmd=0x4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 194.542617][ T42] audit: type=1400 audit(1785521125.053:891): avc: denied { create } for pid=10585 comm="syz.7.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 194.624572][ T42] audit: type=1400 audit(1785521125.133:892): avc: denied { read append } for pid=10593 comm="syz.6.1146" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.638829][ T42] audit: type=1400 audit(1785521125.133:893): avc: denied { open } for pid=10593 comm="syz.6.1146" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 194.675996][T10592] gfs2: gfs2 mount does not exist [ 194.736980][ T6549] IPVS: starting estimator thread 0... [ 194.744905][ T42] audit: type=1400 audit(1785521125.253:894): avc: denied { watch } for pid=10593 comm="syz.6.1146" path="/187/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 194.753094][ T42] audit: type=1400 audit(1785521125.253:895): avc: denied { write } for pid=10593 comm="syz.6.1146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 194.828963][T10600] IPVS: using max 45 ests per chain, 108000 per kthread [ 194.832695][T10604] syzkaller1: entered promiscuous mode [ 194.834513][T10604] syzkaller1: entered allmulticast mode [ 194.877365][T10602] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 195.236468][ T42] audit: type=1400 audit(1785521125.743:896): avc: denied { validate_trans } for pid=10626 comm="syz.7.1157" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 195.262565][T10631] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1158'. [ 195.266069][T10630] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10630 comm=syz.7.1159 [ 195.392276][T10641] Process accounting resumed [ 195.491197][T10650] FAULT_INJECTION: forcing a failure. [ 195.491197][T10650] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 195.500485][T10650] CPU: 1 UID: 0 PID: 10650 Comm: syz.2.1163 Tainted: G L syzkaller #0 PREEMPT(full) [ 195.500518][T10650] Tainted: [L]=SOFTLOCKUP [ 195.500526][T10650] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 195.500551][T10650] Call Trace: [ 195.500577][T10650] [ 195.500585][T10650] dump_stack_lvl+0x100/0x190 [ 195.500733][T10650] should_fail_ex.cold+0x5/0xa [ 195.500779][T10650] _copy_from_user+0x2e/0xd0 [ 195.500856][T10650] kstrtouint_from_user+0xd6/0x1d0 [ 195.500875][T10650] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 195.500893][T10650] ? __lock_acquire+0x49f/0x1a40 [ 195.500955][T10650] proc_fail_nth_write+0x83/0x220 [ 195.500999][T10650] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.501033][T10650] vfs_write+0x2aa/0x1050 [ 195.501071][T10650] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 195.501100][T10650] ? __pfx_vfs_write+0x10/0x10 [ 195.501127][T10650] ? __fget_files+0x215/0x3d0 [ 195.501162][T10650] ? __fget_files+0x21f/0x3d0 [ 195.501195][T10650] ksys_write+0x12a/0x250 [ 195.501224][T10650] ? __pfx_ksys_write+0x10/0x10 [ 195.501257][T10650] do_syscall_64+0x115/0x870 [ 195.501308][T10650] ? clear_bhb_loop+0x40/0x90 [ 195.501323][T10650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.501334][T10650] RIP: 0033:0x7f75d375e84e [ 195.501345][T10650] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 195.501356][T10650] RSP: 002b:00007f75d19f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 195.501383][T10650] RAX: ffffffffffffffda RBX: 00007f75d19f66c0 RCX: 00007f75d375e84e [ 195.501389][T10650] RDX: 0000000000000001 RSI: 00007f75d19f60a0 RDI: 0000000000000005 [ 195.501396][T10650] RBP: 00007f75d19f6090 R08: 0000000000000000 R09: 0000000000000000 [ 195.501402][T10650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.501408][T10650] R13: 00007f75d3a26128 R14: 00007f75d3a26090 R15: 00007ffc0c035268 [ 195.501423][T10650] [ 195.679984][T10654] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.718901][ T6677] usb 11-1: new high-speed USB device number 11 using dummy_hcd [ 195.724093][ T60] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 195.804936][T10659] ntfs3(sr0): Primary boot signature is not NTFS. [ 195.809286][T10659] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 195.847847][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1169'. [ 195.851563][T10662] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1169'. [ 195.868160][ T6677] usb 11-1: Using ep0 maxpacket: 8 [ 195.882202][ T6677] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 195.888365][ T6677] usb 11-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.892102][ T6677] usb 11-1: config 0 interface 0 has no altsetting 0 [ 195.894295][ T6677] usb 11-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 195.897136][ T6677] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.906910][ T60] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 195.914270][ T60] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 195.922763][ T6677] usb 11-1: config 0 descriptor?? [ 195.927063][ T60] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 195.936295][ T60] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.953393][T10643] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 195.967930][ T60] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 195.995442][T10673] binder: 10669:10673 ioctl c0306201 200000000640 returned -22 [ 195.999367][T10673] binder: 10669:10673 ioctl c0306201 200000000640 returned -22 [ 196.181494][ T6677] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 196.185008][ T6677] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 196.187601][ T60] usb 12-1: USB disconnect, device number 5 [ 196.192354][ T6677] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 196.202992][ T6677] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 196.209113][ T6677] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 196.214345][ T6677] mcp2221 0003:04D8:00DD.0004: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 196.316377][T10689] dlm: no locking on control device [ 196.330544][ T42] audit: type=1400 audit(1785521126.843:897): avc: denied { connect } for pid=10688 comm="syz.6.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 196.332360][ T6677] usb 11-1: USB disconnect, device number 11 [ 196.416456][T10691] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 196.568071][ T13] net_ratelimit: 83 callbacks suppressed [ 196.568096][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 196.598935][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 196.708141][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 196.712916][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 196.830059][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 196.833142][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 196.938297][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 196.940598][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 197.048080][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 197.052416][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 197.139056][ T42] audit: type=1400 audit(1785521127.653:898): avc: denied { mount } for pid=10705 comm="syz.4.1182" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 197.152046][ T42] audit: type=1400 audit(1785521127.653:899): avc: denied { search } for pid=10705 comm="syz.4.1182" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 197.689734][T10740] netlink: 'syz.7.1193': attribute type 17 has an invalid length. [ 197.692604][T10740] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1193'. [ 197.696235][T10740] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1193'. [ 197.704725][T10740] erspan0: entered promiscuous mode [ 197.708236][T10740] gretap0: entered promiscuous mode [ 197.978066][T10748] xt_recent: hitcount (134217728) is larger than allowed maximum (65535) [ 198.070508][T10755] IPv6: NLM_F_CREATE should be specified when creating new route [ 198.073011][T10755] netlink: 'syz.6.1199': attribute type 1 has an invalid length. [ 198.258040][ T6549] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 198.410565][ T6549] usb 12-1: Using ep0 maxpacket: 8 [ 198.421119][ T6549] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 198.430771][ T6549] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 198.437358][ T6549] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 198.442284][ T6549] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 198.455035][ T6549] usb 12-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice= 0.40 [ 198.459191][ T6549] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.462694][ T6549] usb 12-1: Product: 踈䉺㺷蒔컆懮㺩俹⅑箤燩漗讶í§åœªá˜¿ï“·éœ·î‡•æ½›é†Šà¢¦ç‰¯ï™˜êŠ¿ë…¸æžŸáœ³â½‡î¹¶îœ’ꯔ◿Ｒ጖ꚞຒ夦닆ﷴ᳊䱎痆蕀è©áŽæ¼œì¹ë³¹á‡žé«æ⢙鱲é†å‚…檨⦦æ¬î¯ŠæŽ¹î…†â‰î®Œå”⭵忖á봢焟诋ẓÒè [ 198.472904][ T6549] usb 12-1: Manufacturer: 溵䞴᧳팕ѹ㌗㹻賬孱䎺ãŽè’µê—怭⫘롹å‹ÅŸì¬šá˜€åˆê€¡î„ éŸ™ã§„ã¢å¬ƒî–ﺊî å¸µâ‰†ë’‘螵飄Ó踕鋅웭鈂ꪯ዇㞋땔哃꺔῱⟢෠匬釦ç银㩵콖觇쎹罵î¢ëƒ£ç¹‡ëŽƒã•¨ß¬ë“’螄ਟĦԇ烜å¾ã¥¸ì˜’ߟ๿ͽꀤꊾê·à¶·ì¿¶æ¼ç¼Žá·çƒ­è¾±æž°èŠ™ä˜î—·ì¡¥è‰¯æ›•ê±ƒæ«–ᱪ䭉஋ [ 198.504369][ T6549] usb 12-1: SerialNumber: а [ 198.566002][T10776] i2c i2c-0: new_device: Extra parameters [ 198.622433][T10778] xhci_hcd 0000:00:1f.0: init 0000:00:1f.0 fail, -16 [ 198.627129][T10778] xhci_hcd 0000:00:1f.0: probe with driver xhci_hcd failed with error -16 [ 198.651566][T10776] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.721730][ T6549] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.725427][ T6549] usb 12-1: invalid MIDI in EP 0 [ 198.771849][T10776] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.790663][ T6549] snd-usb-audio 12-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 198.798529][ T6549] usb 12-1: USB disconnect, device number 6 [ 198.817874][ T9443] udevd[9443]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb12/12-1/12-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.862215][T10776] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.930854][T10776] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.009456][T10786] can0: slcan on ptm0. [ 199.130376][ T13] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.138117][ T13] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.140734][ T13] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.143401][ T13] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.297844][T10803] syzkaller0: entered promiscuous mode [ 199.300103][T10803] syzkaller0: entered allmulticast mode [ 199.466065][T10814] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1216'. [ 199.535765][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 199.535781][ T42] audit: type=1400 audit(1785521130.043:912): avc: denied { write } for pid=10815 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.565079][T10819] comedi: valid board names for 8255 driver are: [ 199.568371][T10819] 8255 [ 199.569293][T10819] comedi: valid board names for vmk80xx driver are: [ 199.573184][T10819] vmk80xx [ 199.574184][T10819] comedi: valid board names for usbduxsigma driver are: [ 199.576348][T10819] usbduxsigma [ 199.577536][T10819] comedi: valid board names for usbduxfast driver are: [ 199.580316][T10819] usbduxfast [ 199.581379][T10819] comedi: valid board names for usbdux driver are: [ 199.583418][T10819] usbdux [ 199.584341][T10819] comedi: valid board names for ni6501 driver are: [ 199.586287][T10819] ni6501 [ 199.587247][T10819] comedi: valid board names for dt9812 driver are: [ 199.592795][T10784] can0 (unregistered): slcan off ptm0. [ 199.593436][T10819] dt9812 [ 199.595725][T10819] comedi: valid board names for ni_labpc_cs driver are: [ 199.599211][T10819] ni_labpc_cs [ 199.600319][T10819] comedi: valid board names for ni_daq_700 driver are: [ 199.603265][T10819] ni_daq_700 [ 199.605028][T10819] comedi: valid board names for labpc_pci driver are: [ 199.607297][T10819] labpc_pci [ 199.610082][T10819] comedi: valid board names for adl_pci9118 driver are: [ 199.616090][T10819] pci9118dg [ 199.617264][ T42] audit: type=1400 audit(1785521130.123:913): avc: denied { write } for pid=10824 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.625897][T10819] pci9118hg [ 199.631694][T10819] pci9118hr [ 199.632755][T10819] comedi: valid board names for 8255_pci driver are: [ 199.635000][T10819] 8255_pci [ 199.635994][T10819] comedi: valid board names for s526 driver are: [ 199.638136][T10819] s526 [ 199.639031][T10819] comedi: valid board names for multiq3 driver are: [ 199.641130][T10819] multiq3 [ 199.642228][T10819] comedi: valid board names for pcmuio driver are: [ 199.644230][T10819] pcmuio48 [ 199.645248][T10819] pcmuio96 [ 199.646310][T10819] comedi: valid board names for pcmmio driver are: [ 199.648423][T10819] pcmmio [ 199.649489][T10819] comedi: valid board names for pcmda12 driver are: [ 199.651624][T10819] pcmda12 [ 199.652749][T10819] comedi: valid board names for pcmad driver are: [ 199.654819][T10819] pcmad12 [ 199.663755][T10819] pcmad16 [ 199.664766][T10819] comedi: valid board names for ni_labpc driver are: [ 199.667652][T10819] lab-pc-1200 [ 199.669559][T10819] lab-pc-1200ai [ 199.670714][T10819] lab-pc+ [ 199.671767][T10819] comedi: valid board names for atmio16 driver are: [ 199.679416][T10819] atmio16 [ 199.680475][T10819] atmio16d [ 199.682960][T10819] comedi: valid board names for ni_at_ao driver are: [ 199.690107][T10819] at-ao-6 [ 199.691232][T10819] at-ao-10 [ 199.692249][T10819] comedi: valid board names for ni_at_a2150 driver are: [ 199.695887][T10819] ni_at_a2150 [ 199.697091][T10819] comedi: valid board names for adq12b driver are: [ 199.700277][T10819] adq12b [ 199.701244][T10819] comedi: valid board names for mpc624 driver are: [ 199.703494][T10819] mpc624 [ 199.705490][T10819] comedi: valid board names for c6xdigio driver are: [ 199.712384][T10819] c6xdigio [ 199.713579][T10819] comedi: valid board names for aio_iiro_16 driver are: [ 199.716004][T10819] aio_iiro_16 [ 199.717525][T10819] comedi: valid board names for aio_aio12_8 driver are: [ 199.724285][T10819] aio_aio12_8 [ 199.725686][T10819] aio_ai12_8 [ 199.726982][T10819] aio_ao12_4 [ 199.728451][ T42] audit: type=1400 audit(1785521130.233:914): avc: denied { write } for pid=10834 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.738493][T10819] comedi: valid board names for fl512 driver are: [ 199.740529][T10819] fl512 [ 199.742173][T10819] comedi: valid board names for dmm32at driver are: [ 199.744287][T10819] dmm32at [ 199.746316][T10819] comedi: valid board names for dt282x driver are: [ 199.750712][T10819] dt2821 [ 199.751701][T10819] dt2821-f [ 199.752729][T10819] dt2821-g [ 199.757094][T10819] dt2823 [ 199.762760][T10819] dt2824-pgh [ 199.764282][T10819] dt2824-pgl [ 199.765717][T10819] dt2825 [ 199.766885][T10819] dt2827 [ 199.768748][T10819] dt2828 [ 199.770072][T10819] dt2829 [ 199.772858][T10819] dt21-ez [ 199.773849][T10819] dt23-ez [ 199.774832][T10819] dt24-ez [ 199.776811][T10819] dt24-ez-pgl [ 199.778217][T10819] comedi: valid board names for dt2817 driver are: [ 199.780971][T10819] dt2817 [ 199.781927][T10819] comedi: valid board names for dt2815 driver are: [ 199.783952][T10819] dt2815 [ 199.784860][T10819] comedi: valid board names for dt2814 driver are: [ 199.786794][T10819] dt2814 [ 199.787687][T10819] comedi: valid board names for dt2811 driver are: [ 199.790729][T10819] dt2811-pgh [ 199.791750][T10819] dt2811-pgl [ 199.792809][T10819] comedi: valid board names for dt2801 driver are: [ 199.794830][T10819] dt2801 [ 199.795806][T10819] comedi: valid board names for das6402 driver are: [ 199.797866][T10819] das6402-12 [ 199.800169][T10819] das6402-16 [ 199.801210][T10819] comedi: valid board names for das1800 driver are: [ 199.803201][T10819] das-1701st [ 199.804250][T10819] das-1701st-da [ 199.805482][T10819] das-1702st [ 199.806545][T10819] das-1702st-da [ 199.807715][T10819] das-1702hr [ 199.811717][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 199.812170][T10819] das-1702hr-da [ 199.815246][ T42] audit: type=1400 audit(1785521130.323:915): avc: denied { write } for pid=10844 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 199.815332][ T24] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 199.822275][T10819] das-1701ao [ 199.825839][T10819] das-1702ao [ 199.826867][T10819] das-1801st [ 199.827927][T10819] das-1801st-da [ 199.829516][T10819] das-1802st [ 199.830566][T10819] das-1802st-da [ 199.832726][T10819] das-1802hr [ 199.833797][T10819] das-1802hr-da [ 199.835000][T10819] das-1801hc [ 199.836083][T10819] das-1802hc [ 199.837142][T10819] das-1801ao [ 199.838754][T10819] das-1802ao [ 199.840082][T10819] comedi: valid board names for das800 driver are: [ 199.842304][T10819] das-800 [ 199.843342][T10819] cio-das800 [ 199.844360][T10819] das-801 [ 199.845348][T10819] cio-das801 [ 199.846387][T10819] das-802 [ 199.847317][T10819] cio-das802 [ 199.849330][T10819] cio-das802/16 [ 199.850476][T10819] comedi: valid board names for isa-das08 driver are: [ 199.855566][T10819] isa-das08 [ 199.856605][T10819] das08-pgm [ 199.857651][ T24] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 199.863176][T10819] das08-pgh [ 199.864261][T10819] das08-pgl [ 199.865275][T10819] das08-aoh [ 199.866390][T10819] das08-aol [ 199.867387][T10819] das08-aom [ 199.868932][T10819] das08/jr-ao [ 199.870043][T10819] das08jr-16-ao [ 199.871241][T10819] pc104-das08 [ 199.872343][T10819] das08jr/16 [ 199.873402][T10819] comedi: valid board names for das16m1 driver are: [ 199.875411][T10819] das16m1 [ 199.876346][T10819] comedi: valid board names for dac02 driver are: [ 199.879635][T10819] dac02 [ 199.880577][T10819] comedi: valid board names for rti802 driver are: [ 199.882577][T10819] rti802 [ 199.883454][T10819] comedi: valid board names for rti800 driver are: [ 199.885401][T10819] rti800 [ 199.886366][T10819] rti815 [ 199.887299][T10819] comedi: valid board names for pcm3724 driver are: [ 199.890731][T10819] pcm3724 [ 199.891812][T10819] comedi: valid board names for pcl818 driver are: [ 199.893879][T10819] pcl818l [ 199.894894][T10819] pcl818h [ 199.895873][T10819] pcl818hd [ 199.896859][T10819] pcl818hg [ 199.897829][T10819] pcl818 [ 199.899536][T10819] pcl718 [ 199.900492][T10819] pcm3718 [ 199.901585][T10819] comedi: valid board names for pcl816 driver are: [ 199.903770][T10819] pcl816 [ 199.904747][T10819] pcl814b [ 199.905752][T10819] comedi: valid board names for pcl812 driver are: [ 199.907805][T10819] pcl812 [ 199.909295][T10819] pcl812pg [ 199.910321][T10819] acl8112pg [ 199.911402][T10819] acl8112dg [ 199.912510][T10819] acl8112hg [ 199.915775][T10819] a821pgl [ 199.916796][T10819] a821pglnda [ 199.917893][T10819] a821pgh [ 199.919279][T10819] a822pgl [ 199.920287][T10819] a822pgh [ 199.923079][T10819] a823pgl [ 199.924126][T10819] a823pgh [ 199.925146][T10819] pcl813 [ 199.927011][T10819] pcl813b [ 199.928552][T10819] acl8113 [ 199.929614][T10819] iso813 [ 199.930573][T10819] acl8216 [ 199.931560][T10819] a826pg [ 199.932598][ T42] audit: type=1400 audit(1785521130.443:916): avc: denied { write } for pid=10847 comm="syz.6.1223" name="file0" dev="fuse" ino=67 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 199.939633][T10819] comedi: valid board names for pcl730 driver are: [ 199.942252][T10819] pcl730 [ 199.943213][T10819] iso730 [ 199.944143][T10819] acl7130 [ 199.945580][T10819] pcm3730 [ 199.946571][T10819] pcl725 [ 199.947542][T10819] p8r8dio [ 199.949340][T10819] acl7225b [ 199.950452][T10819] p16r16dio [ 199.951520][T10819] pcl733 [ 199.952495][T10819] pcl734 [ 199.953477][T10819] opmm-1616-xt [ 199.954750][T10819] pearl-mm-p [ 199.955875][T10819] ir104-pbf [ 199.956918][T10819] comedi: valid board names for pcl726 driver are: [ 199.959240][T10819] pcl726 [ 199.960238][T10819] pcl727 [ 199.961341][T10819] pcl728 [ 199.962357][T10819] acl6126 [ 199.964116][T10819] acl6128 [ 199.965269][T10819] comedi: valid board names for pcl724 driver are: [ 199.966808][ T42] audit: type=1400 audit(1785521130.473:917): avc: denied { getopt } for pid=10845 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.967487][T10819] pcl724 [ 199.976071][T10819] pcl722 [ 199.976988][T10819] pcl731 [ 199.978002][T10819] acl7122 [ 199.986144][T10819] acl7124 [ 199.987162][T10819] pet48dio [ 199.988973][T10819] pcmio48 [ 199.989962][T10819] onyx-mm-dio [ 199.991075][T10819] comedi: valid board names for pcl711 driver are: [ 199.996268][T10819] pcl711 [ 199.997214][T10819] pcl711b [ 199.998229][T10819] acl8112hg [ 200.002872][T10819] acl8112dg [ 200.003948][T10819] comedi: valid board names for amplc_pc263 driver are: [ 200.007731][T10819] pc263 [ 200.010085][T10819] comedi: valid board names for amplc_pc236 driver are: [ 200.014432][T10819] pc36at [ 200.015394][T10819] comedi: valid board names for amplc_dio200 driver are: [ 200.020323][T10819] pc212e [ 200.021290][T10819] pc214e [ 200.022231][T10819] pc215e [ 200.023141][T10819] pc218e [ 200.024036][T10819] pc272e [ 200.024973][T10819] comedi: valid board names for comedi_parport driver are: [ 200.027063][T10819] comedi_parport [ 200.028481][T10819] comedi: valid board names for comedi_test driver are: [ 200.031004][T10819] comedi_test [ 200.032042][T10819] comedi: valid board names for comedi_bond driver are: [ 200.033619][ T42] audit: type=1400 audit(1785521130.543:918): avc: denied { read } for pid=10845 comm="syz.2.1222" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 200.034130][T10819] comedi_bond [ 200.202772][ T42] audit: type=1400 audit(1785521130.713:919): avc: denied { getopt } for pid=10863 comm="syz.7.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 200.439434][ T42] audit: type=1400 audit(1785521130.953:920): avc: denied { map } for pid=10880 comm="syz.7.1231" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.455752][ T42] audit: type=1400 audit(1785521130.953:921): avc: denied { execute } for pid=10880 comm="syz.7.1231" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 200.589891][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1233'. [ 200.595640][T10886] tracefs: Unknown parameter '…bkÃÄÌÔ&Ç(mode' [ 200.774595][T10900] sit0: entered promiscuous mode [ 200.781930][T10900] netlink: 'syz.6.1236': attribute type 1 has an invalid length. [ 200.781953][T10900] netlink: 1 bytes leftover after parsing attributes in process `syz.6.1236'. [ 200.789546][T10901] netlink: 'syz.2.1238': attribute type 20 has an invalid length. [ 200.930801][T10907] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1241'. [ 200.970103][T10907] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1241'. [ 200.973930][T10907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1241'. [ 200.977567][T10907] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1241'. [ 200.986983][T10911] kvm: user requested TSC rate below hardware speed [ 201.401004][T10935] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1250'. [ 201.405104][T10935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1250'. [ 201.608127][ T13] net_ratelimit: 76 callbacks suppressed [ 201.608158][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 201.620835][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 201.728155][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 201.731505][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 201.848108][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 201.851793][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 201.909268][ T1350] usb 11-1: new high-speed USB device number 12 using dummy_hcd [ 201.942440][T10971] bond1: ARP target 9.0.0.0 is already present [ 201.944368][T10971] bond1: option arp_ip_target: invalid value (9) [ 201.947517][T10971] bond1 (unregistering): Released all slaves [ 201.988116][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 201.990957][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 202.086666][ T1350] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.098214][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 202.104740][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 202.144370][ T1350] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 202.149024][ T1350] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.152693][ T1350] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.155057][T10978] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 202.167901][ T1350] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.171351][T10978] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 202.174518][T10978] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 202.177373][ T1350] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.183791][ T1350] usb 11-1: Product: syz [ 202.185336][ T1350] usb 11-1: Manufacturer: syz [ 202.243882][T10985] netlink: 'syz.4.1269': attribute type 14 has an invalid length. [ 202.260145][ T1350] cdc_wdm 11-1:1.0: skipping garbage [ 202.264174][ T1350] cdc_wdm 11-1:1.0: skipping garbage [ 202.285933][ T1350] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 202.291145][ T1350] cdc_wdm 11-1:1.0: Unknown control protocol [ 202.450700][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.453425][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.456191][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.458997][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.461790][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.464474][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.467181][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.469951][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.472692][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.475408][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.478181][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.480474][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.482690][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.484804][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.486948][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.489343][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.492031][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.494750][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.497284][T10991] bridge4: entered promiscuous mode [ 202.497441][ C1] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 202.500550][T10991] bridge4: entered allmulticast mode [ 202.501494][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 202.503029][ T6677] usb 11-1: USB disconnect, device number 12 [ 202.503725][ C1] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 202.739456][T10947] loop5: detected capacity change from 0 to 6 [ 202.742434][T10947] Dev loop5: unable to read RDB block 6 [ 202.744259][T10947] loop5: unable to read partition table [ 202.746323][T10947] loop5: partition table beyond EOD, truncated [ 202.751423][T10947] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 203.130592][T11034] ip6t_srh: unknown srh match flags 4000 [ 203.136761][T11032] CUSE: unknown device info "" [ 203.138122][T11037] ±ÿ: renamed from lo (while UP) [ 203.139377][T11032] CUSE: unknown device info "" [ 203.142029][T11032] CUSE: unknown device info "" [ 203.143852][T11032] CUSE: unknown device info "" [ 203.145550][T11032] CUSE: DEVNAME unspecified [ 203.149978][T11032] nfs: Bad value for 'source' [ 203.485675][T11049] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1291'. [ 203.527719][T11049] netlink: 'syz.7.1291': attribute type 38 has an invalid length. [ 203.534602][T11059] syzkaller0: entered promiscuous mode [ 203.536811][T11059] syzkaller0: entered allmulticast mode [ 203.661847][T11068] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 203.752532][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1298'. [ 203.848104][ T2338] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 203.877890][ T5747] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 203.882780][ T5747] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 203.891646][T11079] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1301'. [ 203.891729][ T5747] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 203.905801][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 203.909716][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 204.031902][ T2338] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.039241][ T2338] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 204.048093][ T2338] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 49408, setting to 1024 [ 204.052398][ T2338] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 204.056113][ T2338] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 14 [ 204.063502][ T2338] usb 11-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 204.067189][ T2338] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.070611][ T2338] usb 11-1: Product: syz [ 204.072266][ T2338] usb 11-1: Manufacturer: syz [ 204.074463][ T2338] usb 11-1: SerialNumber: syz [ 204.093944][T11064] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 204.096855][T11064] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 204.102518][ T2338] keyspan 11-1:1.0: Keyspan 2 port adapter converter detected [ 204.106108][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 87 [ 204.111607][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 7 [ 204.115888][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 1 [ 204.119291][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 2 [ 204.122248][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 85 [ 204.125186][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 5 [ 204.129391][T11091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=11091 comm=syz.4.1304 [ 204.130457][ T2338] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 204.140807][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 83 [ 204.143758][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 84 [ 204.146653][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 3 [ 204.150298][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 4 [ 204.153217][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 86 [ 204.156534][ T2338] keyspan 11-1:1.0: found no endpoint descriptor for endpoint 6 [ 204.161779][ T2338] usb 11-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 204.226701][T11077] vcan0 speed is unknown, defaulting to 1000 [ 204.543192][ T6549] usb 11-1: USB disconnect, device number 13 [ 204.565399][ T6549] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 204.569844][ T6549] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 204.581340][ T6549] keyspan 11-1:1.0: device disconnected [ 204.612463][T11077] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.614918][T11077] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.617285][T11077] bridge_slave_0: entered allmulticast mode [ 204.620127][T11077] bridge_slave_0: entered promiscuous mode [ 204.623531][T11077] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.625930][T11077] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.628402][T11077] bridge_slave_1: entered allmulticast mode [ 204.631234][T11077] bridge_slave_1: entered promiscuous mode [ 204.653298][T11077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.657791][T11077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.673892][T11077] team0: Port device team_slave_0 added [ 204.677479][T11077] team0: Port device team_slave_1 added [ 204.691129][T11077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.693266][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.701355][T11077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.705676][T11077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.707855][T11077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 204.716267][T11077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.744962][ T5820] IPVS: starting estimator thread 0... [ 204.745786][T11077] hsr_slave_0: entered promiscuous mode [ 204.752084][T11077] hsr_slave_1: entered promiscuous mode [ 204.759502][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 204.759530][ T42] audit: type=1400 audit(1785521135.273:942): avc: denied { getopt } for pid=11105 comm="syz.7.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.771487][ T42] audit: type=1400 audit(1785521135.273:943): avc: denied { write } for pid=11105 comm="syz.7.1305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.848812][T11107] IPVS: using max 42 ests per chain, 100800 per kthread [ 204.941310][T11077] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 204.951340][T11077] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 204.954437][T11077] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 204.958600][T11077] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 204.961611][T11077] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 204.966500][T11077] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.966686][T11113] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1308'. [ 204.969475][T11077] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 204.975480][T11113] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=11113 comm=syz.4.1308 [ 204.985525][T11077] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 205.042241][T11125] tipc: Enabling of bearer rejected, failed to enable media [ 205.094469][T11077] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.120938][T11077] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.127763][ T7080] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.130056][ T7080] bridge0: port 1(bridge_slave_0) entered forwarding state [ 205.142615][ T5953] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.144973][ T5953] bridge0: port 2(bridge_slave_1) entered forwarding state [ 205.211266][T11132] 9pnet_fd: p9_fd_create_unix (11132): problem connecting socket: ./file0: -111 [ 205.303456][T11142] netlink: 'syz.4.1313': attribute type 5 has an invalid length. [ 205.313844][T11142] ip6erspan0: entered promiscuous mode [ 205.340819][T11149] intel_xhci_usb_sw pcspkr: probe with driver intel_xhci_usb_sw failed with error -22 [ 205.580962][T11077] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.759713][T11192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11192 comm=syz.7.1324 [ 205.773197][T11077] veth0_vlan: entered promiscuous mode [ 205.781362][T11077] veth1_vlan: entered promiscuous mode [ 205.799430][T11077] veth0_macvtap: entered promiscuous mode [ 205.812379][T11077] veth1_macvtap: entered promiscuous mode [ 205.829171][T11077] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.837796][T11077] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.890033][ T13] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.899724][ T13] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.906279][ T13] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.933263][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.941394][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.942573][ T5548] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.973079][ T7080] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.977337][ T7080] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.989068][ T5744] Bluetooth: hci1: command tx timeout [ 205.997379][ T42] audit: type=1400 audit(1785521136.503:944): avc: denied { mounton } for pid=11077 comm="syz-executor" path="/syzkaller.95jxG9/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=41348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 206.006629][ T42] audit: type=1400 audit(1785521136.513:945): avc: denied { read } for pid=11205 comm="syz.4.1329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 206.013117][T11208] __nla_validate_parse: 1 callbacks suppressed [ 206.013128][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1328'. [ 206.019257][T11208] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1328'. [ 206.030615][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1328'. [ 206.033321][T11209] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1328'. [ 206.087076][T11214] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1331'. [ 206.092884][ T42] audit: type=1400 audit(1785521136.603:946): avc: denied { create } for pid=11215 comm="syz.7.1330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 206.126489][T11211] nd_pmem pfn0.0: namespace0.0 unable to satisfy requested alignment [ 206.147204][T11211] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 206.155625][T11214] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11214 comm=syz.6.1331 [ 206.185869][T11214] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1331'. [ 206.193309][T11214] netlink: 180 bytes leftover after parsing attributes in process `syz.6.1331'. [ 206.311212][ T42] audit: type=1400 audit(1785521136.823:947): avc: denied { write } for pid=11230 comm="syz.8.1336" name="/" dev="9p" ino=78395253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 206.318520][T11234] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 206.530216][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1341'. [ 206.535859][T11243] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1341'. [ 206.560652][ T42] audit: type=1326 audit(1785521137.073:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.8.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c16d9e019 code=0x7ffc0000 [ 206.569378][ T42] audit: type=1326 audit(1785521137.073:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.8.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c16d9e019 code=0x7ffc0000 [ 206.591070][ T42] audit: type=1326 audit(1785521137.073:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.8.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c16d9e019 code=0x7ffc0000 [ 206.601589][ T42] audit: type=1326 audit(1785521137.073:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11246 comm="syz.8.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c16d9e019 code=0x7ffc0000 [ 206.706335][T11260] net_ratelimit: 69 callbacks suppressed [ 206.706349][T11260] openvswitch: netlink: Key type 30 is not supported [ 206.718617][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 206.722552][T11261] openvswitch: netlink: Key type 30 is not supported [ 206.722992][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 206.848225][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 206.853511][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 206.887894][T11286] netlink: 164 bytes leftover after parsing attributes in process `syz.8.1351'. [ 206.893657][T11286] block nbd0: Unsupported socket: should be TCP or UNIX. [ 206.904127][T11287] block nbd0: Unsupported socket: should be TCP or UNIX. [ 206.970512][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 206.973655][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 207.078730][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 207.081694][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 207.206197][T11310] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 207.248182][ T2338] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 207.284086][T11315] netlink: 'syz.7.1360': attribute type 1 has an invalid length. [ 207.309732][T11315] 8021q: adding VLAN 0 to HW filter on device bond5 [ 207.327456][T11315] bond5: (slave gretap2): making interface the new active one [ 207.335115][T11315] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 207.395434][T11319] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11319 comm=syz.7.1360 [ 207.401129][T11315] netlink: 'syz.7.1360': attribute type 1 has an invalid length. [ 207.419816][ T2338] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 207.422534][ T2338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.426274][ T2338] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.429745][ T2338] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.434094][ T2338] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.436883][ T2338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.442052][ T2338] usb 9-1: config 0 descriptor?? [ 207.859287][ T2338] plantronics 0003:047F:FFFF.0006: reserved main item tag 0xd [ 207.893828][ T2338] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 207.932283][T11349] NILFS (nbd7): device size too small [ 207.966641][T11351] input: syz0 as /devices/virtual/input/input28 [ 208.008627][ T60] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 208.060237][ T5744] Bluetooth: hci1: command tx timeout [ 208.133783][T11298] bridge5: port 1(macvlan3) entered blocking state [ 208.135974][T11298] bridge5: port 1(macvlan3) entered disabled state [ 208.139462][T11298] macvlan3: entered allmulticast mode [ 208.148173][ T60] usb 11-1: device descriptor read/64, error -71 [ 208.398503][ T60] usb 11-1: new full-speed USB device number 15 using dummy_hcd [ 208.528066][ T60] usb 11-1: device descriptor read/64, error -71 [ 208.649171][ T60] usb usb11-port1: attempt power cycle [ 208.726412][T11390] netlink: 'syz.7.1383': attribute type 2 has an invalid length. [ 208.813573][T11396] xt_TCPMSS: Only works on TCP SYN packets [ 208.998569][ T60] usb 11-1: new full-speed USB device number 16 using dummy_hcd [ 209.019150][ T60] usb 11-1: device descriptor read/8, error -71 [ 209.278161][ T60] usb 11-1: new full-speed USB device number 17 using dummy_hcd [ 209.309881][ T60] usb 11-1: device descriptor read/8, error -71 [ 209.326110][ T1350] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 209.420627][ T60] usb usb11-port1: unable to enumerate USB device [ 210.138097][ T5744] Bluetooth: hci1: command tx timeout [ 210.155778][T11439] IPv6: NLM_F_CREATE should be specified when creating new route [ 210.163443][T11439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.166082][T11439] IPv6: NLM_F_CREATE should be set when creating new route [ 210.177418][T11439] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.180114][T11439] IPv6: NLM_F_CREATE should be set when creating new route [ 210.220693][ T42] kauditd_printk_skb: 32 callbacks suppressed [ 210.220719][ T42] audit: type=1400 audit(1785521140.733:984): avc: denied { getopt } for pid=11441 comm="syz.4.1398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 210.580875][ T42] audit: type=1400 audit(1785521141.093:985): avc: denied { listen } for pid=11453 comm="syz.7.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 210.745141][ T8426] usb 9-1: USB disconnect, device number 7 [ 210.786636][T11466] ipvlan0: entered promiscuous mode [ 210.788510][T11466] ipvlan0: entered allmulticast mode [ 210.796667][T11466] veth0_vlan: entered allmulticast mode [ 210.890031][T11482] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 210.996352][T11494] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 211.406275][T11535] vlan2: entered promiscuous mode [ 211.408034][T11535] bridge0: entered promiscuous mode [ 211.410349][T11535] vlan2: entered allmulticast mode [ 211.412201][T11535] bridge0: entered allmulticast mode [ 211.510587][T11542] (syz.7.1424,11542,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 211.515514][T11542] (syz.7.1424,11542,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 211.718356][ T42] audit: type=1400 audit(1785521142.223:986): avc: denied { map } for pid=11572 comm="syz.7.1432" path="socket:[40703]" dev="sockfs" ino=40703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.741775][ T42] audit: type=1400 audit(1785521142.223:987): avc: denied { accept } for pid=11572 comm="syz.7.1432" path="socket:[40703]" dev="sockfs" ino=40703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 211.758061][ T13] net_ratelimit: 79 callbacks suppressed [ 211.758083][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 211.762204][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 211.868061][ T42] audit: type=1800 audit(1785521142.373:988): pid=11582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.1434" name="/newroot/240/bus/#1318//deleted" dev="tmpfs" ino=1318 res=0 errno=0 [ 211.883247][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 211.887039][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 211.972337][ T42] audit: type=1400 audit(1785521142.483:989): avc: denied { connect } for pid=11604 comm="syz.4.1442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 211.998627][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 212.010889][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 212.128119][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 212.131185][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 212.219488][ T5744] Bluetooth: hci1: command tx timeout [ 212.239535][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 212.250146][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 212.416192][T11640] binder: 11639:11640 ioctl c0306201 200000000040 returned -14 [ 212.425732][T11643] __nla_validate_parse: 16 callbacks suppressed [ 212.425749][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'. [ 212.439364][T11641] pim6reg: entered allmulticast mode [ 212.442230][T11639] cgroup: fork rejected by pids controller in /syz6 [ 212.506221][T11640] pim6reg: left allmulticast mode [ 212.926641][T11267] bond0: (slave syz_tun): Releasing backup interface [ 212.962564][T11766] netlink: 830 bytes leftover after parsing attributes in process `syz.4.1463'. [ 212.992106][T11768] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1464'. [ 212.998022][T11768] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1464'. [ 213.005444][T11768] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1464'. [ 213.078473][ T5891] usb 12-1: new low-speed USB device number 7 using dummy_hcd [ 213.084768][ T5844] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.197878][T11774] overlayfs: overlapping lowerdir path [ 213.200334][ T5844] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.240870][ T5891] usb 12-1: No LPM exit latency info found, disabling LPM. [ 213.257181][ T5891] usb 12-1: config 128 has an invalid interface number: 48 but max is 3 [ 213.278042][ T5891] usb 12-1: config 128 has an invalid interface number: 15 but max is 3 [ 213.280788][ T5891] usb 12-1: config 128 has an invalid interface number: 197 but max is 3 [ 213.283581][ T5891] usb 12-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 213.286453][T11776] ohci-pci 0000:00:02.0: OHCI PCI host controller [ 213.287045][ T5891] usb 12-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 213.287057][ T5891] usb 12-1: config 128 has an invalid interface number: 125 but max is 3 [ 213.297700][ T5891] usb 12-1: config 128 has no interface number 0 [ 213.300146][ T5891] usb 12-1: config 128 has no interface number 1 [ 213.302203][ T5891] usb 12-1: config 128 has no interface number 2 [ 213.302548][ T5844] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.304270][ T5891] usb 12-1: config 128 has no interface number 3 [ 213.304309][ T5891] usb 12-1: config 128 interface 48 altsetting 247 endpoint 0x6 has invalid maxpacket 512, setting to 8 [ 213.313341][ T5891] usb 12-1: config 128 interface 48 altsetting 247 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 213.316911][ T5891] usb 12-1: config 128 interface 15 altsetting 207 endpoint 0x8 has invalid maxpacket 32, setting to 8 [ 213.322781][ T5891] usb 12-1: config 128 interface 197 altsetting 9 endpoint 0x2 has invalid maxpacket 1024, setting to 8 [ 213.328135][ T5891] usb 12-1: config 128 interface 197 altsetting 9 endpoint 0xB has invalid maxpacket 16, setting to 8 [ 213.331494][ T5891] usb 12-1: config 128 interface 197 altsetting 9 endpoint 0xF has invalid maxpacket 64, setting to 8 [ 213.338148][ T5891] usb 12-1: config 128 interface 197 altsetting 9 endpoint 0xC has invalid maxpacket 1024, setting to 8 [ 213.341614][ T5891] usb 12-1: config 128 interface 125 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 213.345121][ T5891] usb 12-1: config 128 interface 125 altsetting 49 has a duplicate endpoint with address 0xF, skipping [ 213.347727][ T5747] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 213.349087][T11776] ohci-pci 0000:00:02.0: new USB bus registered, assigned bus number 63 [ 213.353478][T11776] ohci-pci 0000:00:02.0: irq 30, io mem 0xfea80000 [ 213.355450][ T5891] usb 12-1: config 128 interface 125 altsetting 49 endpoint 0x7 has invalid maxpacket 16, setting to 8 [ 213.360088][ T5747] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 213.360706][ T5891] usb 12-1: config 128 interface 125 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 213.363612][ T5747] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 213.366039][ T5891] usb 12-1: config 128 interface 125 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 213.366053][ T5891] usb 12-1: config 128 interface 125 altsetting 49 has a duplicate endpoint with address 0xF, skipping [ 213.369654][ T5747] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 213.372204][ T5891] usb 12-1: config 128 interface 125 altsetting 49 endpoint 0x9 has invalid maxpacket 1032, setting to 8 [ 213.375950][ T5747] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.377509][ T5891] usb 12-1: config 128 interface 125 altsetting 49 has an invalid descriptor for endpoint zero, skipping [ 213.377522][ T5891] usb 12-1: config 128 interface 48 has no altsetting 0 [ 213.377531][ T5891] usb 12-1: config 128 interface 15 has no altsetting 0 [ 213.377541][ T5891] usb 12-1: config 128 interface 197 has no altsetting 0 [ 213.377550][ T5891] usb 12-1: config 128 interface 125 has no altsetting 0 [ 213.415719][ T5844] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.420340][T11776] ohci-pci 0000:00:02.0: USB HC reset timed out! [ 213.429769][T11776] ohci-pci 0000:00:02.0: can't start [ 213.448886][T11776] ohci-pci 0000:00:02.0: startup error -1 [ 213.450885][T11776] ohci-pci 0000:00:02.0: USB bus 63 deregistered [ 213.503948][T11776] ohci-pci 0000:00:02.0: init 0000:00:02.0 fail, -1 [ 213.506564][T11776] ohci-pci 0000:00:02.0: probe with driver ohci-pci failed with error -1 [ 213.601599][T11777] ohci-pci 0000:00:02.0: OHCI PCI host controller [ 213.609591][T11777] ohci-pci 0000:00:02.0: new USB bus registered, assigned bus number 63 [ 213.619962][T11777] ohci-pci 0000:00:02.0: irq 30, io mem 0xfea80000 [ 213.627322][ T5844] bridge_slave_1: left allmulticast mode [ 213.630041][ T5844] bridge_slave_1: left promiscuous mode [ 213.632899][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.639038][ T5844] bridge_slave_0: left allmulticast mode [ 213.641384][ T5844] bridge_slave_0: left promiscuous mode [ 213.644158][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.660095][ T42] audit: type=1400 audit(1785521144.173:990): avc: denied { write } for pid=11794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.689280][T11777] ohci-pci 0000:00:02.0: USB HC reset timed out! [ 213.691841][T11777] ohci-pci 0000:00:02.0: can't start [ 213.695597][T11777] ohci-pci 0000:00:02.0: startup error -1 [ 213.697731][T11777] ohci-pci 0000:00:02.0: USB bus 63 deregistered [ 213.744978][ T42] audit: type=1400 audit(1785521144.253:991): avc: denied { write } for pid=11797 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 213.815614][T11777] ohci-pci 0000:00:02.0: init 0000:00:02.0 fail, -1 [ 213.819670][T11777] ohci-pci 0000:00:02.0: probe with driver ohci-pci failed with error -1 [ 213.885586][ T5844] bond0 (unregistering): left promiscuous mode [ 213.888453][ T5844] bond_slave_0: left promiscuous mode [ 213.891137][ T5844] bond_slave_1: left promiscuous mode [ 213.895112][ T5844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.900025][ T5844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.908689][ T5844] bond0 (unregistering): Released all slaves [ 213.915175][ T5844] bond1 (unregistering): Released all slaves [ 213.927573][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 213.932858][T11783] vcan0 speed is unknown, defaulting to 1000 [ 214.027264][ T42] audit: type=1400 audit(1785521144.533:992): avc: denied { write } for pid=11807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.121127][ T42] audit: type=1400 audit(1785521144.633:993): avc: denied { write } for pid=11813 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.194096][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 214.221319][T11818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1474'. [ 214.239021][T11818] hsr_slave_1 (unregistering): left promiscuous mode [ 214.419032][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 214.464326][T11783] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.466743][T11783] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.469145][T11783] bridge_slave_0: entered allmulticast mode [ 214.471888][T11783] bridge_slave_0: entered promiscuous mode [ 214.475239][T11783] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.477557][T11783] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.480060][T11783] bridge_slave_1: entered allmulticast mode [ 214.483564][T11783] bridge_slave_1: entered promiscuous mode [ 214.545914][T11783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.555285][T11783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 214.598730][T11783] team0: Port device team_slave_0 added [ 214.603794][T11783] team0: Port device team_slave_1 added [ 214.654334][ T5844] veth0_to_batadv: left promiscuous mode [ 214.665721][ T5844] hsr_slave_0: left promiscuous mode [ 214.669606][ T5844] hsr_slave_1: left promiscuous mode [ 214.672978][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.676190][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.686761][ T5844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.690247][ T5844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.715086][ T5844] veth1_macvtap: left allmulticast mode [ 214.717070][ T5844] veth1_macvtap: left promiscuous mode [ 214.719120][ T5844] veth0_macvtap: left promiscuous mode [ 214.721638][ T5844] veth1_vlan: left promiscuous mode [ 214.723633][ T5844] veth0_vlan: left promiscuous mode [ 214.738265][ T5820] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 214.900129][ T5820] usb 9-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 214.903663][ T5820] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.911386][ T5820] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 214.929772][ T5820] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.938611][ T5820] usb 9-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 214.942532][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 214.945783][ T5820] usb 9-1: Product: syz [ 214.947520][ T5820] usb 9-1: Manufacturer: syz [ 214.972392][ T5820] cdc_wdm 9-1:1.0: skipping garbage [ 214.974517][ T5820] cdc_wdm 9-1:1.0: skipping garbage [ 214.978892][ T5820] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 214.980840][ T5820] cdc_wdm 9-1:1.0: Unknown control protocol [ 215.024321][ T5844] team0 (unregistering): Port device team_slave_1 removed [ 215.103347][T11851] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 215.190867][T11783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.193206][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.205963][T11783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.212787][T11783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.217679][T11783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.229142][T11783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.289918][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 215.300469][T11860] xt_hashlimit: size too large, truncated to 1048576 [ 215.307642][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 215.307655][ T42] audit: type=1800 audit(1785521145.813:998): pid=11858 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1478" name="file1" dev="overlay" ino=1695 res=0 errno=0 [ 215.365168][T11783] hsr_slave_0: entered promiscuous mode [ 215.367703][T11783] hsr_slave_1: entered promiscuous mode [ 215.370200][T11783] debugfs: 'hsr0' already exists in 'hsr' [ 215.372086][T11783] Cannot create hsr debugfs directory [ 215.438679][ T5747] Bluetooth: hci0: command tx timeout [ 215.601786][ T5844] IPVS: stop unused estimator thread 0... [ 215.637221][ T42] audit: type=1400 audit(1785521146.143:999): avc: denied { write } for pid=11869 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.693135][ T42] audit: type=1400 audit(1785521146.203:1000): avc: denied { write } for pid=11872 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.770408][ T42] audit: type=1400 audit(1785521146.283:1001): avc: denied { write } for pid=11874 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.814601][ T5891] usb 12-1: string descriptor 0 read error: -71 [ 215.816737][ T5891] usb 12-1: New USB device found, idVendor=12d1, idProduct=1004, bcdDevice= 0.00 [ 215.819898][ T5891] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.825340][ T5891] usb 12-1: can't set config #128, error -71 [ 215.829512][ T5891] usb 12-1: USB disconnect, device number 7 [ 215.860123][ T42] audit: type=1400 audit(1785521146.373:1002): avc: denied { write } for pid=11877 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.959244][ T42] audit: type=1400 audit(1785521146.463:1003): avc: denied { write } for pid=11881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.005528][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1484'. [ 216.008762][T11886] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1484'. [ 216.017641][T11886] IPv6: NLM_F_CREATE should be specified when creating new route [ 216.024470][ T42] audit: type=1400 audit(1785521146.533:1004): avc: denied { write } for pid=11884 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.033379][ T42] audit: type=1400 audit(1785521146.543:1005): avc: denied { bind } for pid=11885 comm="syz.7.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 216.093472][ T42] audit: type=1400 audit(1785521146.603:1006): avc: denied { write } for pid=11890 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.156863][ T42] audit: type=1400 audit(1785521146.663:1007): avc: denied { write } for pid=11895 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 216.329766][T11783] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 216.337079][T11783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 216.342598][T11783] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 216.355665][T11783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 216.360050][T11783] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 216.367390][T11783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 216.375158][T11783] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 216.382695][T11783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 216.482142][T11783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.493834][T11783] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.503594][ T7728] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.506451][ T7728] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.522080][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.524425][ T7073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.758462][T11783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.798838][ T5548] net_ratelimit: 40 callbacks suppressed [ 216.798858][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 216.803436][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 216.918900][T11783] veth0_vlan: entered promiscuous mode [ 216.926994][T11783] veth1_vlan: entered promiscuous mode [ 216.955536][T11783] veth0_macvtap: entered promiscuous mode [ 216.960334][T11783] veth1_macvtap: entered promiscuous mode [ 216.970494][T11783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.978892][T11783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.049718][ T5844] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.055690][ T5844] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.078502][ T7073] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.087842][ T7073] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.131432][ T5548] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.138701][ T5548] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.151750][ T6909] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.154861][ T6909] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.178550][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 217.181441][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 217.234722][T11952] openvswitch: netlink: Key type 30 is not supported [ 217.240070][T11952] digital: digital_start_poll: Unknown protocol [ 217.285438][T11955] netlink: 'syz.6.1494': attribute type 10 has an invalid length. [ 217.295065][T11955] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 217.303157][T11955] xt_hashlimit: size too large, truncated to 1048576 [ 217.308219][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 217.311431][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 217.356308][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.367257][T11957] bridge_slave_0 (unregistering): left allmulticast mode [ 217.370698][T11957] bridge_slave_0 (unregistering): left promiscuous mode [ 217.373844][T11957] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.418435][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 217.421042][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 217.498129][ T5747] Bluetooth: hci0: command tx timeout [ 217.500272][ T5887] usb 9-1: USB disconnect, device number 8 [ 217.538991][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 217.653147][T11965] program syz.4.1497 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 218.308486][ T1350] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 218.458698][ T1350] usb 12-1: Using ep0 maxpacket: 8 [ 218.465368][ T1350] usb 12-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 218.469532][ T1350] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.473001][ T1350] usb 12-1: Product: syz [ 218.474851][ T1350] usb 12-1: Manufacturer: syz [ 218.476861][ T1350] usb 12-1: SerialNumber: syz [ 218.481929][ T1350] usb 12-1: config 0 descriptor?? [ 218.523946][T11969] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 218.762847][ T1350] dvb_usb_rtl28xxu 12-1:0.0: chip type detection failed -71 [ 218.765220][ T1350] dvb_usb_rtl28xxu 12-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 218.769686][ T1350] usb 12-1: USB disconnect, device number 8 [ 218.781142][T12003] digital: digital_start_poll: Unknown protocol [ 218.802040][T12005] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 218.866041][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1511'. [ 218.943574][T12019] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 218.982206][T12022] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(5) [ 218.985515][T12022] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 218.994247][T12022] vhci_hcd vhci_hcd.0: Device attached [ 219.025155][T12025] vhci_hcd: connection closed [ 219.030366][ T13] vhci_hcd vhci_hcd.8: stop threads [ 219.034673][ T13] vhci_hcd vhci_hcd.8: release socket [ 219.036399][ T13] vhci_hcd vhci_hcd.8: disconnect device [ 219.104977][T12033] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.124652][T12039] netlink: 6032 bytes leftover after parsing attributes in process `syz.8.1517'. [ 219.579980][ T5747] Bluetooth: hci0: command tx timeout [ 219.649247][T12007] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 219.652659][T12038] netlink: 'syz.8.1517': attribute type 1 has an invalid length. [ 219.722946][T12079] digital: digital_start_poll: Unknown protocol [ 219.795379][T12096] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 219.797480][T12096] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 219.805678][T12096] vhci_hcd vhci_hcd.0: Device attached [ 219.819655][T12097] vhci_hcd: connection closed [ 219.822927][ T13] vhci_hcd vhci_hcd.4: stop threads [ 219.827886][ T13] vhci_hcd vhci_hcd.4: release socket [ 219.853088][ T13] vhci_hcd vhci_hcd.4: disconnect device [ 219.959358][T12124] libceph: resolve '4' (ret=-3): failed [ 219.963568][ T5449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.465049][T12157] ./bus: Can't lookup blockdev [ 220.472024][T12158] tls_set_device_offload: netdev not found [ 220.819296][T12171] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1539'. [ 220.820445][T12131] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 220.878883][T12177] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1543'. [ 220.901263][T12177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.903868][T12177] batadv_slave_0: entered promiscuous mode [ 220.905803][T12177] batadv_slave_0: entered allmulticast mode [ 220.916942][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 220.916962][ T42] audit: type=1400 audit(1785521151.423:1025): avc: denied { write } for pid=12179 comm="syz.7.1542" name="/" dev="9p" ino=78395253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.079279][T12181] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1538 sclass=netlink_xfrm_socket pid=12181 comm=syz.7.1542 [ 221.133974][T12198] netlink: 'syz.4.1546': attribute type 2 has an invalid length. [ 221.136683][T12198] netlink: 46 bytes leftover after parsing attributes in process `syz.4.1546'. [ 221.140950][T12198] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12198 comm=syz.4.1546 [ 221.237320][T12204] xt_hashlimit: size too large, truncated to 1048576 [ 221.397744][T12223] Bluetooth: MGMT ver 1.23 [ 221.450381][T12226] loop6: detected capacity change from 0 to 8 [ 221.658317][ T5747] Bluetooth: hci0: command tx timeout [ 221.708047][ T6677] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 221.858020][ T6677] usb 9-1: Using ep0 maxpacket: 8 [ 221.861905][ T6677] usb 9-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 221.864865][ T6677] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.883172][ T6677] kobil_sct 9-1:1.0: KOBIL USB smart card terminal converter detected [ 221.887526][ T6677] usb 9-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 221.900244][ T13] net_ratelimit: 141 callbacks suppressed [ 221.900273][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 221.913051][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 222.018312][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 222.021062][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 222.108732][T12209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.142310][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 222.155123][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 222.258148][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 222.262843][ T42] audit: type=1400 audit(1785521152.763:1026): avc: denied { audit_write } for pid=12241 comm="syz.7.1562" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 222.271346][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 222.314084][ T1350] IPVS: starting estimator thread 0... [ 222.388157][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 222.390465][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 222.398271][T12249] IPVS: using max 45 ests per chain, 108000 per kthread [ 222.574681][ T60] usb 9-1: USB disconnect, device number 9 [ 222.583514][ T60] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 222.586852][ T60] kobil_sct 9-1:1.0: device disconnected [ 223.128068][T12264] cgroup2: Unknown parameter 'mÖ' [ 223.322304][T12253] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 223.504838][ T42] audit: type=1800 audit(1785521154.013:1027): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.1573" name="file0" dev="tmpfs" ino=1448 res=0 errno=0 [ 223.511744][ T42] audit: type=1804 audit(1785521154.013:1028): pid=12281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.7.1573" name="/newroot/264/file0" dev="tmpfs" ino=1448 res=1 errno=0 [ 223.611544][T12287] syzkaller1: entered promiscuous mode [ 223.613878][T12287] syzkaller1: entered allmulticast mode [ 224.231214][ T42] audit: type=1400 audit(1785521154.743:1029): avc: denied { create } for pid=12332 comm="syz.7.1582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.240023][ T42] audit: type=1400 audit(1785521154.743:1030): avc: denied { ioctl } for pid=12332 comm="syz.7.1582" path="socket:[46647]" dev="sockfs" ino=46647 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 224.368053][ T5886] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 224.520112][ T5886] usb 13-1: Using ep0 maxpacket: 16 [ 224.523094][ T5886] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 26616, setting to 1024 [ 224.532253][ T5886] usb 13-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 224.537225][ T5886] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 224.540517][ T5886] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.543131][ T5886] usb 13-1: Product: syz [ 224.544488][ T5886] usb 13-1: Manufacturer: syz [ 224.546036][ T5886] usb 13-1: SerialNumber: syz [ 224.549531][ T5886] usb 13-1: config 0 descriptor?? [ 224.551841][T12324] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 224.556001][ T5886] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 224.560263][ T5886] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 224.592961][T12350] isp1760 0000:00:03.0: PCI INT A: failed to register GSI [ 224.636550][T12350] isp1760 0000:00:03.0: PCI INT A: failed to register GSI [ 224.718401][ T8426] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 224.868053][ T8426] usb 12-1: Using ep0 maxpacket: 8 [ 224.871374][ T8426] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 224.875305][ T8426] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 224.879252][ T8426] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 224.882455][ T8426] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.886711][ T8426] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 224.890043][ T8426] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.920230][T12321] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.006900][T12366] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 225.097641][ T8426] usb 12-1: GET_CAPABILITIES returned 0 [ 225.100321][ T8426] usbtmc 12-1:16.0: can't read capabilities [ 225.161664][ T5886] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 225.309719][ T6549] usb 12-1: USB disconnect, device number 9 [ 225.573763][ T42] audit: type=1400 audit(1785521156.083:1031): avc: denied { write } for pid=12322 comm="syz.8.1579" name="core" dev="configfs" ino=227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.580935][ T42] audit: type=1400 audit(1785521156.093:1032): avc: denied { write } for pid=12322 comm="syz.8.1579" name="rd_mcp_0" dev="configfs" ino=47610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 225.594921][ T42] audit: type=1800 audit(1785521156.103:1033): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1579" name="enable" dev="configfs" ino=46741 res=0 errno=0 [ 225.599190][T12324] program syz.8.1579 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 225.609449][ T5886] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 225.613799][ T5886] em28xx 13-1:0.0: board has no eeprom [ 225.700233][ T5886] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 225.704942][ T5886] em28xx 13-1:0.0: dvb set to bulk mode. [ 225.707389][ T34] em28xx 13-1:0.0: Binding DVB extension [ 225.720359][ T5886] usb 13-1: USB disconnect, device number 2 [ 225.750422][ T5886] em28xx 13-1:0.0: Disconnecting em28xx [ 225.765428][ T34] em28xx 13-1:0.0: Registering input extension [ 225.770143][ T5886] em28xx 13-1:0.0: Closing input extension [ 225.814988][ T5886] em28xx 13-1:0.0: Freeing device [ 225.861176][T12392] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1596'. [ 225.869860][T12398] tipc: Started in network mode [ 225.871554][T12398] tipc: Node identity ac14140f, cluster identity 4711 [ 225.890428][T12398] tipc: Enabled bearer , priority 10 [ 226.477452][T12427] netlink: 'syz.8.1606': attribute type 32 has an invalid length. [ 226.502445][T12427] bond1: Setting coupled_control to off (0) [ 226.505035][T12427] bond1: entered promiscuous mode [ 226.687583][T12437] tmpfs: Group quota block hardlimit too large. [ 226.692492][T12437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.695273][T12437] batadv_slave_1: entered promiscuous mode [ 226.765987][T12402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.913061][ T60] tipc: Node number set to 2886997007 [ 226.920965][T12444] syzkaller0: entered promiscuous mode [ 226.923499][T12444] syzkaller0: entered allmulticast mode [ 227.038131][ T5548] net_ratelimit: 80 callbacks suppressed [ 227.038145][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 227.039627][T12448] netlink: 'syz.6.1615': attribute type 1 has an invalid length. [ 227.039938][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 227.049173][T12448] netlink: 'syz.6.1615': attribute type 2 has an invalid length. [ 227.148250][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 227.152879][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 227.258136][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 227.263525][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 227.388166][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 227.390508][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 227.498809][ T5844] bond3: (slave gretap1): failed to get link speed/duplex [ 227.501659][ T5844] bond3: (slave dummy0): failed to get link speed/duplex [ 227.567984][ T42] audit: type=1400 audit(1785521158.073:1034): avc: denied { read write } for pid=12471 comm="syz.8.1621" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 227.573760][T12472] vcan0: tx drop: invalid sa for name 0xffffffffffffffff [ 227.580128][ T42] audit: type=1400 audit(1785521158.083:1035): avc: denied { open } for pid=12471 comm="syz.8.1621" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 227.585338][T12472] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1621'. [ 227.602355][ T42] audit: type=1400 audit(1785521158.103:1036): avc: denied { read } for pid=12471 comm="syz.8.1621" path="socket:[46815]" dev="sockfs" ino=46815 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 227.661053][T12474] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1622'. [ 228.098575][T12466] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 228.200113][T12481] program syz.7.1624 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.662095][T12493] dummy_hcd dummy_hcd.0: remove, state 4 [ 228.664566][T12493] usb usb5: USB disconnect, device number 1 [ 228.738103][T12493] dummy_hcd dummy_hcd.0: stopped [ 228.739830][T12493] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 230.011218][T12505] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 230.139869][T12524] CIFS: iocharset name too long [ 230.174898][T12529] bridge0: port 2(bridge_slave_1) entered listening state [ 230.182024][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.520988][ T42] audit: type=1400 audit(1785521161.033:1037): avc: denied { write } for pid=12545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.563342][ T5744] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 230.575660][ T42] audit: type=1400 audit(1785521161.083:1038): avc: denied { write } for pid=12549 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.590184][ T5744] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 230.596283][ T5744] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 230.601834][ T5744] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 230.606547][ T5744] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 230.672953][ T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.774262][ T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 230.845356][T12548] vcan0 speed is unknown, defaulting to 1000 [ 230.903745][ T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.245623][ T13] erspan0 (unregistering): left promiscuous mode [ 231.270306][ T13] gretap0 (unregistering): left promiscuous mode [ 231.290593][ T13] bond3 (unregistering): (slave gretap1): Releasing active interface [ 231.301570][T12541] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 231.316507][ T13] bond5 (unregistering): (slave gretap2): Releasing active interface [ 231.362764][T12562] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1645'. [ 231.390751][ T13] bond0 (unregistering): Released all slaves [ 231.396912][ T13] bond1 (unregistering): Released all slaves [ 231.407776][ T13] bond2 (unregistering): Released all slaves [ 231.423085][ T13] bond3 (unregistering): Released all slaves [ 231.434032][ T13] bond4 (unregistering): Released all slaves [ 231.446185][ T13] bond5 (unregistering): Released all slaves [ 231.581612][ T42] audit: type=1400 audit(1785521162.093:1039): avc: denied { write } for pid=12571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.607167][ T13] tipc: Disabling bearer [ 231.614283][ T13] tipc: Left network mode [ 231.662367][ T42] audit: type=1400 audit(1785521162.163:1040): avc: denied { write } for pid=12576 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.706875][ T5449] 8021q: adding VLAN 0 to HW filter on device eth17 [ 231.758043][T12585] program syz.6.1649 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 231.790545][ T42] audit: type=1400 audit(1785521162.293:1041): avc: denied { write } for pid=12583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.818902][ T5747] Bluetooth: hci0: Zero size dump init pkt [ 231.852175][ T42] audit: type=1400 audit(1785521162.353:1042): avc: denied { write } for pid=12591 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.876900][ T5449] 8021q: adding VLAN 0 to HW filter on device eth18 [ 231.906970][T12548] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.913129][T12548] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.916482][T12548] bridge_slave_0: entered allmulticast mode [ 231.921685][T12548] bridge_slave_0: entered promiscuous mode [ 231.931362][T12548] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.933755][T12548] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.936192][T12548] bridge_slave_1: entered allmulticast mode [ 231.939716][T12548] bridge_slave_1: entered promiscuous mode [ 231.981302][T12548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.988691][T12548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.013293][T12601] syz.6.1651 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 232.013292][T12602] program syz.6.1651 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 232.025555][T12548] team0: Port device team_slave_0 added [ 232.055254][T12548] team0: Port device team_slave_1 added [ 232.103510][T12548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.106658][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.124662][T12548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.131085][T12548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.133891][T12548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.143005][T12548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.153652][ T42] audit: type=1400 audit(1785521162.663:1043): avc: denied { write } for pid=12604 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 232.272891][T12548] hsr_slave_0: entered promiscuous mode [ 232.288805][T12548] hsr_slave_1: entered promiscuous mode [ 232.292217][T12548] debugfs: 'hsr0' already exists in 'hsr' [ 232.294479][T12548] Cannot create hsr debugfs directory [ 232.297174][ T5449] 8021q: adding VLAN 0 to HW filter on device eth19 [ 232.334754][ T13] hsr_slave_0: left promiscuous mode [ 232.342353][ T13] hsr_slave_1: left promiscuous mode [ 232.349989][ T13] veth1_macvtap: left promiscuous mode [ 232.351861][ T13] veth0_macvtap: left promiscuous mode [ 232.353730][ T13] veth1_vlan: left promiscuous mode [ 232.355978][ T13] veth0_vlan: left promiscuous mode [ 232.708168][ T5747] Bluetooth: hci2: command tx timeout [ 232.824058][T12619] binder: 12618:12619 ioctl c0306201 2000000003c0 returned -14 [ 232.843173][T12619] input: syz0 as /devices/virtual/input/input30 [ 232.985219][T12607] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 233.051286][ T5814] net_ratelimit: 60 callbacks suppressed [ 233.051305][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 233.065196][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 233.098895][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 233.098908][ T42] audit: type=1400 audit(1785521163.603:1045): avc: denied { write } for pid=12626 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.181359][ T42] audit: type=1400 audit(1785521163.683:1046): avc: denied { write } for pid=12633 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 233.238511][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 233.241367][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 233.262462][ T5449] 8021q: adding VLAN 0 to HW filter on device eth20 [ 233.322322][ T13] IPVS: stop unused estimator thread 0... [ 233.335668][T12548] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 233.342171][T12548] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 233.345068][T12548] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 233.349544][T12548] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 233.352417][T12548] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 233.358800][T12548] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 233.362480][T12548] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 233.372749][T12548] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 233.428732][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 233.431878][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 233.464162][T12548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.480625][T12548] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.495644][ T7073] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.498664][ T7073] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.525254][ T7073] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.528353][ T7073] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.589291][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 233.593053][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 233.698172][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 233.700638][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 233.806740][T12548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.969146][T12548] veth0_vlan: entered promiscuous mode [ 233.981217][T12548] veth1_vlan: entered promiscuous mode [ 234.011394][T12548] veth0_macvtap: entered promiscuous mode [ 234.018502][T12548] veth1_macvtap: entered promiscuous mode [ 234.034933][T12548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.045653][T12548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 234.134662][ T7728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.153467][ T7728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.188174][ T5548] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.192061][ T5548] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.197319][ T7728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.200350][ T5548] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.204011][ T7728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.228627][ T5548] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.281762][T12675] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1667'. [ 234.295686][ T42] audit: type=1400 audit(1785521164.803:1047): avc: denied { create } for pid=12676 comm="syz.9.1643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 234.425036][T12685] tmpfs: Group quota inode hardlimit too large. [ 234.608505][ T34] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 234.758070][ T34] usb 14-1: Using ep0 maxpacket: 32 [ 234.761508][ T34] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 234.765182][ T34] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 234.770302][ T34] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 234.774603][ T34] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 234.781677][ T34] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 234.785126][ T34] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.788148][ T34] usb 14-1: Product: syz [ 234.788940][ T5744] Bluetooth: hci2: command tx timeout [ 234.789690][ T34] usb 14-1: Manufacturer: syz [ 234.789700][ T34] usb 14-1: SerialNumber: syz [ 234.794957][ C3] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 234.810594][ T34] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input31 [ 235.008125][ T34] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 235.011100][ T34] (id 0x00) [ 235.018342][ T5744] Bluetooth: hci3: command 0x1003 tx timeout [ 235.024976][ T5747] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 235.078031][ T34] rc_core: IR keymap rc-imon-pad not found [ 235.079972][ T34] Registered IR keymap rc-empty [ 235.082718][ T34] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 235.089249][ T34] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 235.221700][ T34] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 235.227817][ T34] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input32 [ 235.244152][ T34] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:2> initialized [ 235.283520][T12687] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 235.715746][ T42] audit: type=1400 audit(1785521166.223:1048): avc: denied { bind } for pid=12710 comm="syz.8.1670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 235.905471][T12716] vcan0 speed is unknown, defaulting to 1000 [ 236.459211][T12730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.469447][T12730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.858139][ T5747] Bluetooth: hci2: command tx timeout [ 237.122722][T12725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 237.341458][ T1350] usb 14-1: USB disconnect, device number 2 [ 237.741029][T12757] fuse: root generation should be zero [ 237.966140][T12767] ±ÿ: renamed from lo (while UP) [ 238.158234][ T13] net_ratelimit: 72 callbacks suppressed [ 238.158254][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 238.163328][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 238.269187][ T13] bond3: (slave gretap1): failed to get link speed/duplex [ 238.272990][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 238.378338][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 238.383267][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 238.488544][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 238.492003][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 238.598242][ T5814] bond3: (slave gretap1): failed to get link speed/duplex [ 238.600774][ T5814] bond3: (slave dummy0): failed to get link speed/duplex [ 238.609624][T12759] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 238.779773][T12787] ±ÿ: renamed from lo (while UP) [ 239.501514][T12803] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1695'. [ 239.553858][T12807] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 239.556741][T12807] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 239.618149][ T5886] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 239.681794][T12820] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1700'. [ 239.704041][T12820] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 239.768083][ T5886] usb 13-1: Using ep0 maxpacket: 32 [ 239.772243][ T5886] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 239.776470][ T5886] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 239.781965][ T5886] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 239.786439][ T5886] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 239.794058][ T5886] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 239.797817][ T5886] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.802348][ T5886] usb 13-1: Product: syz [ 239.804134][ T5886] usb 13-1: Manufacturer: syz [ 239.806083][ T5886] usb 13-1: SerialNumber: syz [ 239.819963][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 239.824345][ T5886] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input33 [ 239.843131][T12822] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 240.038062][ T5886] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 240.043783][ T5886] (id 0x00) [ 240.098297][ T5886] rc_core: IR keymap rc-imon-pad not found [ 240.100211][ T5886] Registered IR keymap rc-empty [ 240.101909][ T5886] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 240.105198][ T5886] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 240.238876][ T5886] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 240.244973][ T5886] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input34 [ 240.250887][ T5886] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:3> initialized [ 240.429319][T12812] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 240.508660][T12829] fuse: Bad value for 'fd' [ 240.593481][T12840] imon:send_packet: task interrupted [ 240.598209][T12840] imon:send_packet: packet tx failed (-512) [ 240.600986][T12840] imon:vfd_write: send packet #1 failed [ 240.696975][T12850] netlink: 'syz.9.1711': attribute type 5 has an invalid length. [ 240.708702][T12850] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1711'. [ 241.473558][T12867] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.477419][T12867] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.575389][T12854] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.061529][T12901] gretap1: entered promiscuous mode [ 242.665596][T12890] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 242.723066][T12917] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 4, id = 0 [ 242.729658][ T42] audit: type=1400 audit(1785521173.233:1049): avc: denied { ioctl } for pid=12915 comm="syz.6.1731" path="socket:[48995]" dev="sockfs" ino=48995 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 242.730976][T12916] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1731'. [ 242.743800][T12916] IPVS: stopping backup sync thread 12917 ... [ 243.078218][ T6677] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 243.178189][ T5548] net_ratelimit: 79 callbacks suppressed [ 243.178204][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 243.182926][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 243.231632][ T6677] usb 11-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 243.235696][ T6677] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.239307][ T6677] usb 11-1: Product: syz [ 243.241086][ T6677] usb 11-1: Manufacturer: syz [ 243.243070][ T6677] usb 11-1: SerialNumber: syz [ 243.288455][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 243.291350][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 243.321210][T12894] imon:send_packet: task interrupted [ 243.322958][T12894] imon:send_packet: packet tx failed (-512) [ 243.324995][T12894] imon:vfd_write: send packet #5 failed [ 243.337666][ T5823] usb 13-1: USB disconnect, device number 3 [ 243.408078][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 243.410468][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 243.488890][ T6677] rtl8150 11-1:1.0: couldn't reset the device [ 243.499016][ T6677] rtl8150 11-1:1.0: probe with driver rtl8150 failed with error -5 [ 243.520681][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 243.521418][ T6677] usb 11-1: USB disconnect, device number 18 [ 243.523850][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 243.639213][ T5548] bond3: (slave gretap1): failed to get link speed/duplex [ 243.645940][ T5548] bond3: (slave dummy0): failed to get link speed/duplex [ 243.667328][ T42] audit: type=1400 audit(1785521174.173:1050): avc: denied { write } for pid=12936 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.723295][ T42] audit: type=1400 audit(1785521174.233:1051): avc: denied { write } for pid=12943 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.814073][ T42] audit: type=1400 audit(1785521174.323:1052): avc: denied { write } for pid=12946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.851929][ T42] audit: type=1400 audit(1785521174.363:1053): avc: denied { write } for pid=12949 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.881321][T12952] netlink: 132 bytes leftover after parsing attributes in process `syz.9.1739'. [ 243.931653][ T42] audit: type=1400 audit(1785521174.443:1054): avc: denied { write } for pid=12954 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 243.994039][ T42] audit: type=1400 audit(1785521174.503:1055): avc: denied { write } for pid=12964 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.042372][T12969] syzkaller1: entered promiscuous mode [ 244.044111][T12969] syzkaller1: entered allmulticast mode [ 244.046439][T12969] syzkaller1: left promiscuous mode [ 244.048416][T12969] syzkaller1: left allmulticast mode [ 244.092723][ T42] audit: type=1400 audit(1785521174.603:1056): avc: denied { write } for pid=12971 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.111880][T12974] netlink: 'syz.9.1743': attribute type 39 has an invalid length. [ 244.157659][ T42] audit: type=1400 audit(1785521174.663:1057): avc: denied { write } for pid=12977 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 244.235538][ T5744] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 244.245402][ T5744] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 244.252150][ T5744] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 244.297667][ T5744] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 244.306262][ T5744] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 244.424770][ T7274] syz_tun (unregistering): left allmulticast mode [ 244.434179][ T7274] syz_tun (unregistering): left promiscuous mode [ 244.436284][ T7274] bridge0: port 1(syz_tun) entered disabled state [ 244.565444][T13023] netlink: 428 bytes leftover after parsing attributes in process `syz.8.1754'. [ 244.660819][T12983] vcan0 speed is unknown, defaulting to 1000 [ 244.689382][T13024] netlink: 'syz.9.1753': attribute type 30 has an invalid length. [ 244.740180][T13018] netlink: 'syz.9.1753': attribute type 30 has an invalid length. [ 244.905277][ T42] audit: type=1400 audit(1785521175.413:1058): avc: denied { bind } for pid=13049 comm="syz.6.1761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 244.916740][ T5747] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 244.922290][ T5747] CPU: 3 UID: 0 PID: 5747 Comm: kworker/u34:5 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.922333][ T5747] Tainted: [L]=SOFTLOCKUP [ 244.922342][ T5747] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.922380][ T5747] Workqueue: hci0 hci_rx_work [ 244.922450][ T5747] Call Trace: [ 244.922472][ T5747] [ 244.922483][ T5747] dump_stack_lvl+0x100/0x190 [ 244.922564][ T5747] sysfs_warn_dup.cold+0x1c/0x28 [ 244.922616][ T5747] sysfs_create_dir_ns+0x24b/0x2b0 [ 244.922683][ T5747] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 244.922721][ T5747] ? find_held_lock+0x2b/0x80 [ 244.922764][ T5747] ? kobject_add_internal+0x25f/0x930 [ 244.922811][ T5747] ? kobject_add_internal+0x25f/0x930 [ 244.922842][ T5747] ? do_raw_spin_unlock+0x145/0x1e0 [ 244.922882][ T5747] kobject_add_internal+0x2c8/0x930 [ 244.922922][ T5747] kobject_add+0x16a/0x1e0 [ 244.922951][ T5747] ? __pfx_kobject_add+0x10/0x10 [ 244.922984][ T5747] ? class_to_subsys+0x10f/0x150 [ 244.923058][ T5747] ? kobject_put+0xb9/0x640 [ 244.923086][ T5747] ? _raw_spin_unlock+0x28/0x50 [ 244.923127][ T5747] device_add+0x294/0x1970 [ 244.923165][ T5747] ? __pfx_dev_set_name+0x10/0x10 [ 244.923206][ T5747] ? __pfx_device_add+0x10/0x10 [ 244.923241][ T5747] ? mgmt_send_event_skb+0x2fb/0x460 [ 244.923274][ T5747] hci_conn_add_sysfs+0x1a3/0x260 [ 244.923318][ T5747] le_conn_complete_evt+0x11eb/0x1f60 [ 244.923351][ T5747] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 244.923381][ T5747] ? hci_event_packet+0x186/0xcd0 [ 244.923412][ T5747] hci_le_conn_complete_evt+0x23c/0x3a0 [ 244.923436][ T5747] ? skb_pull_data+0x15f/0x1e0 [ 244.923481][ T5747] hci_le_meta_evt+0x34a/0x5f0 [ 244.923517][ T5747] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 244.923546][ T5747] hci_event_packet+0x51c/0xcd0 [ 244.923576][ T5747] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 244.923603][ T5747] ? __pfx_hci_event_packet+0x10/0x10 [ 244.923628][ T5747] ? kcov_remote_start+0x384/0x670 [ 244.923665][ T5747] ? lockdep_hardirqs_on+0x78/0x100 [ 244.923699][ T5747] hci_rx_work+0x451/0xfc0 [ 244.923734][ T5747] process_one_work+0xa23/0x1940 [ 244.923779][ T5747] ? __pfx_process_one_work+0x10/0x10 [ 244.923819][ T5747] ? __pfx_hci_rx_work+0x10/0x10 [ 244.923844][ T5747] worker_thread+0x5ef/0xe50 [ 244.923881][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 244.923906][ T5747] ? kthread+0x13a/0x450 [ 244.923940][ T5747] ? __pfx_worker_thread+0x10/0x10 [ 244.923962][ T5747] kthread+0x370/0x450 [ 244.923983][ T5747] ? __pfx_kthread+0x10/0x10 [ 244.924032][ T5747] ret_from_fork+0x72b/0xd50 [ 244.924074][ T5747] ? __pfx_ret_from_fork+0x10/0x10 [ 244.924114][ T5747] ? __switch_to+0x800/0x10f0 [ 244.924140][ T5747] ? __pfx_kthread+0x10/0x10 [ 244.924168][ T5747] ret_from_fork_asm+0x1a/0x30 [ 244.924218][ T5747] [ 244.924471][ T5747] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 244.975504][T13056] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1762'. [ 244.983031][ T5747] Bluetooth: hci0: failed to register connection device [ 245.160521][ T150] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 245.189059][T12983] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.192176][T12983] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.195338][T12983] bridge_slave_0: entered allmulticast mode [ 245.199345][T12983] bridge_slave_0: entered promiscuous mode [ 245.203271][T12983] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.205693][T12983] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.208806][T12983] bridge_slave_1: entered allmulticast mode [ 245.211564][T12983] bridge_slave_1: entered promiscuous mode [ 245.230103][T12983] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.236931][T12983] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.245955][T13058] bridge_slave_0: left allmulticast mode [ 245.247794][T13058] bridge_slave_0: left promiscuous mode [ 245.250682][T13058] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.256587][T13058] bridge_slave_1: left allmulticast mode [ 245.258908][T13058] bridge_slave_1: left promiscuous mode [ 245.260807][T13058] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.266026][T13058] bond0: (slave bond_slave_0): Releasing backup interface [ 245.273434][T13058] bond0: (slave bond_slave_1): Releasing backup interface [ 245.284568][T13058] team0: Port device team_slave_0 removed [ 245.290955][T13063] netlink: 76 bytes leftover after parsing attributes in process `syz.9.1763'. [ 245.294762][T13058] team0: Port device team_slave_1 removed [ 245.297119][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.300342][T13058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.305949][T13058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.309189][T13058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.328933][ T150] usb 11-1: Using ep0 maxpacket: 8 [ 245.332769][ T150] usb 11-1: config 0 has no interfaces? [ 245.336562][ T150] usb 11-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 245.340327][ T150] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.343442][ T150] usb 11-1: Product: syz [ 245.345128][ T150] usb 11-1: Manufacturer: syz [ 245.346822][ T150] usb 11-1: SerialNumber: syz [ 245.357226][ T150] usb 11-1: config 0 descriptor?? [ 245.381980][T13058] fuse: blksize only supported for fuseblk [ 245.389800][T13058] vcan0: tx drop: invalid da for name 0xffffffffffffffff [ 245.424852][T12983] team0: Port device team_slave_0 added [ 245.431760][T12983] team0: Port device team_slave_1 added [ 245.473085][T12983] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.476014][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.486164][T12983] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.491346][T12983] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.493878][T12983] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.504671][T12983] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.570183][ T1482] usb 11-1: USB disconnect, device number 19 [ 245.627598][T12983] hsr_slave_0: entered promiscuous mode [ 245.633994][T12983] hsr_slave_1: entered promiscuous mode [ 245.639772][T12983] debugfs: 'hsr0' already exists in 'hsr' [ 245.645804][T12983] Cannot create hsr debugfs directory [ 245.660832][ T13] bridge_slave_1: left promiscuous mode [ 245.662764][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.673353][ T13] macvlan3: left allmulticast mode [ 245.675081][ T13] bridge5: port 1(macvlan3) entered disabled state [ 245.875653][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.897920][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.902603][ T13] bond0 (unregistering): Released all slaves [ 245.995041][T13075] xt_hashlimit: max too large, truncated to 1048576 [ 246.063533][T13075] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 246.395537][ T5744] Bluetooth: hci3: command tx timeout [ 246.395756][ T5449] 8021q: adding VLAN 0 to HW filter on device eth21 [ 246.453414][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1776'. [ 246.601802][T13121] netlink: 'syz.9.1781': attribute type 11 has an invalid length. [ 246.604107][T13113] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.677124][T13125] syzkaller0: entered promiscuous mode [ 246.677277][T13123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.679925][T13125] syzkaller0: entered allmulticast mode [ 246.687925][ T5449] 8021q: adding VLAN 0 to HW filter on device eth22 [ 246.702541][T13125] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 246.751613][T13129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.824189][ T13] hsr_slave_0: left promiscuous mode [ 246.826700][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.831153][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.867174][T13129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1778'. [ 246.885067][T13129] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 246.887771][T13129] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 246.892224][T13129] vhci_hcd vhci_hcd.0: Device attached [ 246.895064][T13143] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 246.904937][ T5548] vhci_hcd vhci_hcd.6: stop threads [ 246.906690][ T5548] vhci_hcd vhci_hcd.6: release socket [ 246.908778][ T5548] vhci_hcd vhci_hcd.6: disconnect device [ 247.055340][ T7728] smc: removing ib device syz1 [ 247.156429][ T7728] smbdirect: ib_dev[syz1] removed [ 247.194990][ T5449] 8021q: adding VLAN 0 to HW filter on device eth23 [ 247.330375][T13154] Mass Storage Function, version: 2009/09/11 [ 247.339708][T13154] LUN: removable file: (no medium) [ 247.347181][T13154] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 247.351542][T13154] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 247.354411][T13154] CPU: 0 UID: 0 PID: 13154 Comm: syz.8.1786 Tainted: G L syzkaller #0 PREEMPT(full) [ 247.358277][T13154] Tainted: [L]=SOFTLOCKUP [ 247.359837][T13154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 247.363425][T13154] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 247.365515][T13154] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 7d 95 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 247.372324][T13154] RSP: 0018:ffffc90003f7f8e0 EFLAGS: 00010246 [ 247.374561][T13154] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90008ffe000 [ 247.377061][T13154] RDX: 0000000000000000 RSI: ffffffff87d0cc63 RDI: ffff88802bb31290 [ 247.379770][T13154] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 247.382606][T13154] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 247.385274][T13154] R13: ffff88802bb30068 R14: ffff88802bb30c58 R15: ffff8880655a0810 [ 247.388033][T13154] FS: 00007f0c17bf86c0(0000) GS:ffff8880d5dda000(0000) knlGS:0000000000000000 [ 247.391234][T13154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.393610][T13154] CR2: 000000110c42a94c CR3: 000000005ce70000 CR4: 0000000000352ef0 [ 247.396339][T13154] Call Trace: [ 247.397579][T13154] [ 247.398726][T13154] ? __pfx_dummy_set_selfpowered+0x10/0x10 [ 247.400672][T13154] usb_gadget_set_selfpowered+0x73/0x2b0 [ 247.402716][T13154] composite_dev_prepare+0x254/0x420 [ 247.404467][T13154] configfs_composite_bind+0xd2/0x1960 [ 247.406303][T13154] ? kernfs_create_link+0x1bd/0x240 [ 247.408099][T13154] gadget_bind_driver+0x28c/0xbf0 [ 247.409813][T13154] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 247.411750][T13154] ? __pfx_gadget_bind_driver+0x10/0x10 [ 247.413711][T13154] really_probe+0x241/0xa60 [ 247.415303][T13154] __driver_probe_device+0x20e/0x450 [ 247.417206][T13154] driver_probe_device+0x4a/0x140 [ 247.419070][T13154] __driver_attach+0x21f/0x5b0 [ 247.420797][T13154] ? __pfx___driver_attach+0x10/0x10 [ 247.422730][T13154] bus_for_each_dev+0x13e/0x1d0 [ 247.424498][T13154] ? __pfx_bus_for_each_dev+0x10/0x10 [ 247.426468][T13154] ? bus_add_driver+0x2b5/0x5b0 [ 247.428285][T13154] bus_add_driver+0x305/0x5b0 [ 247.430003][T13154] driver_register+0x1e2/0x360 [ 247.431761][T13154] usb_gadget_register_driver_owner+0x132/0x210 [ 247.434013][T13154] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 247.436053][T13154] configfs_write_iter+0x302/0x4e0 [ 247.437889][T13154] vfs_write+0x6ac/0x1050 [ 247.439490][T13154] ? __pfx_configfs_write_iter+0x10/0x10 [ 247.441477][T13154] ? __pfx_vfs_write+0x10/0x10 [ 247.443195][T13154] ksys_write+0x12a/0x250 [ 247.444722][T13154] ? __pfx_ksys_write+0x10/0x10 [ 247.446368][T13154] do_syscall_64+0x115/0x870 [ 247.448070][T13154] ? clear_bhb_loop+0x40/0x90 [ 247.449817][T13154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.451987][T13154] RIP: 0033:0x7f0c16d9e019 [ 247.453616][T13154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.460471][T13154] RSP: 002b:00007f0c17bf8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 247.463449][T13154] RAX: ffffffffffffffda RBX: 00007f0c17025fa0 RCX: 00007f0c16d9e019 [ 247.466266][T13154] RDX: 000000000000000b RSI: 0000200000000d00 RDI: 0000000000000003 [ 247.469123][T13154] RBP: 00007f0c16e3500c R08: 0000000000000000 R09: 0000000000000000 [ 247.471940][T13154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.474780][T13154] R13: 00007f0c17026038 R14: 00007f0c17025fa0 R15: 00007fff145d4808 [ 247.477531][T13154] [ 247.478681][T13154] Modules linked in: [ 247.480843][T13154] ---[ end trace 0000000000000000 ]--- [ 247.490103][T13163] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1786'. [ 247.493805][T13163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1786'. [ 247.498233][T13154] RIP: 0010:dummy_set_selfpowered+0xe4/0x1c0 [ 247.500612][T13154] Code: c1 ea 03 80 3c 02 00 0f 85 e6 00 00 00 48 8b 9b 90 06 00 00 e8 7d 95 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 b2 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8b [ 247.508282][T13154] RSP: 0018:ffffc90003f7f8e0 EFLAGS: 00010246 [ 247.510414][T13154] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90008ffe000 [ 247.513143][T13154] RDX: 0000000000000000 RSI: ffffffff87d0cc63 RDI: ffff88802bb31290 [ 247.516106][T13154] RBP: 0000000000000001 R08: 0000000000000005 R09: 0000000000000005 [ 247.519330][T13154] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000003 [ 247.539292][T13154] R13: ffff88802bb30068 R14: ffff88802bb30c58 R15: ffff8880655a0810 [ 247.542826][T13154] FS: 00007f0c17bf86c0(0000) GS:ffff8880d5eda000(0000) knlGS:0000000000000000 [ 247.550115][T13154] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 247.552429][T13154] CR2: 00007f6b6cbca1d4 CR3: 000000005ce70000 CR4: 0000000000352ef0 [ 247.555151][T13154] Kernel panic - not syncing: Fatal exception [ 247.558885][T13154] Kernel Offset: disabled [ 247.560322][T13154] Rebooting in 86400 seconds..