last executing test programs: 4m27.229968701s ago: executing program 32 (id=70): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2c, 0x25dfdbfe, {0x1b, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 3m16.872022179s ago: executing program 3 (id=613): ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mknod(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200088c2) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r3 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r4, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) (fail_nth: 23) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 3m16.331989059s ago: executing program 0 (id=617): ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mknod(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000180)=0x14, 0x800) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f00000001c0)={0x0, 0x1001}, 0x4) accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x20044013) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4000000) r2 = fanotify_init(0x10, 0x1000) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r2, 0x1, 0x8000013, r3, 0x0) fanotify_mark(r2, 0x221, 0x103b, r3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r4, 0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) sched_setaffinity(0x0, 0x0, 0x0) mount(0x0, 0x0, &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000340)="07000000010001", 0x7) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtaction={0x130, 0x30, 0x100, 0x1070bd28, 0x25dfdbfe, {}, [{0x11c, 0x1, [@m_simple={0x9c, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xa, 0x3, 'y\x94\x9c\x9f\x96\x00'}, @TCA_DEF_DATA={0xc, 0x3, '*\x18\x00|()-\x15'}]}, {0x58, 0x6, "7d69e0d6727c27a95c34da2037cd01cf8738c7c2503db577c2d7838820a834dc7dfc5109212fba471bb7e681cd225188852b8fcb1cf61721ed36a5d1052689c39e98a0c0d98ecaea99476c40b24af2e17884a0bd"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2}}}}, @m_sample={0x7c, 0xe, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x103}]}, {0x46, 0x6, "a7890db153f3bf18373ade82c77bdbd5ead7b9146180f1c44910c2f7e00ac01ab82f8712e30d1d821bac4dbcc46b8ef621a2d7d47a6b331dbf815f5e0cf43ae8b997"}, {0xc}, {0xc}}}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4040000}, 0x4008000) write(r7, &(0x7f0000000000)='3', 0x4e) 3m16.32155176s ago: executing program 3 (id=618): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f7410262e66f36d0f330f09660f3a0cb90000a6752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x31}], 0x1, 0x4498bda7e2139f37, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000180)={0x0, &(0x7f0000000100)=[@in_dx={0x69, 0x20, {0x7828, 0x2}}, @nested_amd_clgi={0x17f, 0x10}, @wr_drn={0x68, 0x20, {0x4, 0x50c0}}, @rdmsr={0x66, 0x18, {0x942}}], 0x68}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x8, 0x7, 0x7ef, 0x5, 0x1, 0x3586, 0x8, 0x1, 0x8, 0x6, 0x800, 0x1, 0x0, 0x8, 0x8, 0xde4], 0xf000, 0x2001}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000580)={[0x0, 0x206, 0x1ff, 0x0, 0xfffffffffffffffb, 0x8000, 0x2004c7, 0x4000000000000000, 0xcb, 0x800000008, 0x8000, 0x9, 0x200, 0x2, 0x9, 0x3], 0xfec00000, 0x80100}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m15.756843549s ago: executing program 0 (id=620): ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mknod(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200088c2) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r3 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r4, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 3m15.734614159s ago: executing program 0 (id=621): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffff0c027c000008004280040008000c000180060006000806"], 0x140}, 0x1, 0x200000}, 0x0) 3m15.292809426s ago: executing program 0 (id=623): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f0000165000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f0000000680)=[{0x2, 0x5, 0xb}, {0x5, 0xff, 0x7}], 0x2, 0x1ff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) mkdir(&(0x7f0000000640)='./file0\x00', 0x4) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0xa0000, 0x48) ppoll(&(0x7f00000004c0)=[{r3, 0x6049}], 0x1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000003c00)=[{{&(0x7f0000000080)=@hci, 0x80, &(0x7f0000001880)=[{&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000540)=""/200, 0xc8}, {&(0x7f0000000680)=""/138, 0x8a}, {&(0x7f0000000740)=""/170, 0xaa}, {&(0x7f0000000800)=""/20, 0x14}, {&(0x7f0000000840)=""/4096, 0x1000}, {&(0x7f0000001840)=""/13, 0xd}], 0x7, &(0x7f0000001900)=""/50, 0x32}, 0x1}, {{&(0x7f0000001940)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000002d40)=[{&(0x7f00000019c0)=""/128, 0x80}, {&(0x7f0000001a40)=""/169, 0xa9}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/79, 0x4f}, {&(0x7f0000002b80)=""/206, 0xce}, {&(0x7f0000002c80)=""/146, 0x92}], 0x6, &(0x7f0000002dc0)=""/10, 0xa}, 0x80000000}, {{&(0x7f0000002e00)=@qipcrtr, 0x80, &(0x7f0000003040)=[{&(0x7f0000002e80)=""/17, 0x11}, {&(0x7f0000002ec0)=""/68, 0x44}, {&(0x7f0000002f40)=""/1, 0x1}, {&(0x7f0000002f80)=""/185, 0xb9}], 0x4}, 0x8}, {{&(0x7f0000003080)=@ieee802154={0x24, @short}, 0x80, &(0x7f00000032c0)=[{&(0x7f0000003100)=""/11, 0xb}, {&(0x7f0000003140)=""/150, 0x96}, {&(0x7f0000003200)=""/126, 0x7e}, {&(0x7f0000003280)=""/43, 0x2b}], 0x4, &(0x7f0000003300)=""/255, 0xff}, 0x4}, {{&(0x7f0000003400)=@nfc_llcp, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003480)=""/15, 0xf}, {&(0x7f00000034c0)=""/121, 0x79}, {&(0x7f0000003540)=""/100, 0x64}, {&(0x7f00000035c0)=""/68, 0x44}, {&(0x7f0000003640)=""/99, 0x63}], 0x5, &(0x7f0000003740)=""/8, 0x8}, 0xa1}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000003780)=""/227, 0xe3}, {&(0x7f0000003880)=""/223, 0xdf}, {&(0x7f0000003980)=""/210, 0xd2}, {&(0x7f0000003a80)=""/49, 0x31}, {&(0x7f0000003ac0)=""/48, 0x30}], 0x5, &(0x7f0000003b80)=""/101, 0x65}, 0xba6f}], 0x6, 0x0, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) getcwd(0x0, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x5c, 0x9, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x5000}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x5064}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c000180060006006558000014000280100019800c00", @ANYRES8=r5], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_emit_ethernet(0x3e, &(0x7f0000003e40)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "1d0101", 0x8, 0x0, 0x0, @local, @local, {[@routing={0x84}]}}}}}, 0x0) 3m14.353065516s ago: executing program 0 (id=628): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETLE(r0, 0x400454dc, &(0x7f0000000000)=0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x150) r2 = accept4$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x14, 0x80000) ioctl$NILFS_IOCTL_GET_VINFO(r2, 0xc0186e86, &(0x7f0000000180)={&(0x7f0000000100)=[{0x3, 0x2, 0xd2, 0x6}], 0x1, 0x20, 0x5, 0xffffffff}) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) r3 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r3, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r3, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'erspan0\x00', 0x400}) 3m13.76622073s ago: executing program 3 (id=629): ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f00000000c0)={0x1, 0x6}) mknod(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x50) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x200088c2) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x4000000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r2, 0x2) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) r3 = add_key$keyring(&(0x7f0000000940), &(0x7f0000000980)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003840)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0x10}, {0xb, 0x7}}}, 0x24}}, 0x4008000) write(r4, &(0x7f0000000000)='3', 0x4e) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r3) chdir(&(0x7f0000000240)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x101042, 0x15) 3m13.539595253s ago: executing program 3 (id=631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) syz_emit_ethernet(0x138, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000001021100fe8000000000000000000011000000bbfe8000000000000000000000000000aa4e200e22010290"], 0x0) 3m13.380595942s ago: executing program 3 (id=632): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x9e3, 0x113681) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r3, 0xc03064ca, &(0x7f0000000140)={&(0x7f00000000c0)=[r4, 0x0], 0x0, 0x6, 0x2, 0x3}) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000000c0)='hybla', 0x5) recvfrom$inet(r2, &(0x7f00000005c0)=""/8, 0x8, 0x720, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000300)={0x2, [[0x9, 0x1, 0x0, 0x5, 0xfffffffe, 0x0, 0x7, 0x9], [0x8, 0x81, 0x2, 0x80000001, 0x3, 0xfffffffc, 0x6, 0x5], [0x401, 0xc7, 0x0, 0x0, 0x1000, 0xa, 0xb, 0x5]], '\x00', [{0x6, 0x6, 0x0, 0x1, 0x0, 0x1}, {0x4, 0x96, 0x1, 0x1, 0x0, 0x1}, {0x100, 0xfffffff9, 0x0, 0x0, 0x1}, {0x1, 0x12ec, 0x0, 0x0, 0x0, 0x1}, {0xfffffff0, 0x80, 0x1, 0x0, 0x1}, {0xd6b7, 0x200, 0x0, 0x1}, {0x2000000, 0x0, 0x0, 0x0, 0x1}, {0xffff0001, 0xffffffff, 0x0, 0x0, 0x1}, {0x9, 0x80000000, 0x1, 0x0, 0x1, 0x1}, {0x9, 0x2, 0x0, 0x1, 0x1}, {0x400, 0x2, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x1}], '\x00', 0x8000}) r5 = dup(r0) write$UHID_INPUT(r5, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0xb6b) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$TIOCSCTTY(r7, 0x540e, 0xfff) sendmmsg$inet6(r6, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) sendmmsg$sock(r6, &(0x7f00000001c0)=[{{&(0x7f0000000000)=@isdn={0x22, 0x2, 0x3, 0xcb, 0x8}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=[@txtime={{0x18, 0x1, 0x3d, 0x8ad0}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x1ff}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x9}}], 0xf0}}], 0x1, 0x8001) setsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f0000000280)=@assoc_value, 0x8) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000240)={'veth0_vlan\x00', 0x3}) 3m7.329284483s ago: executing program 3 (id=634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfefc, 0x0, &(0x7f00000003c0)="04dde1152379be503e95606624f06a37", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0xe5, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa3, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 2m59.748989144s ago: executing program 0 (id=635): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb2750cde9904c104, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m55.735087534s ago: executing program 33 (id=630): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) personality(0x5d28870e52b2f29b) uname(&(0x7f0000000640)=""/4096) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1000}}, './file0/../file0/../file0\x00'}) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r2, 0x84, 0x15, &(0x7f0000000280), 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) prctl$PR_GET_TIMERSLACK(0x1e) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000040)="0f01c80f20e035200000000f22e0c4e1fa2a0d1adad9ac0f01cb660fe19a717e000066ba4200edb8000000000f23d00f21f835300000050f23f8b9800000c00f3235004000000f300f209a360f017fb2", 0x50}], 0x1, 0x49, 0x0, 0x0) r6 = socket(0x2d, 0x2, 0x0) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8001}, 0x1c) ioctl$KVM_RUN(r5, 0xae80, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) r9 = socket$inet_tcp(0x2, 0x1, 0x0) r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r12, 0x9000aea4, &(0x7f00000001c0)) ioctl$sock_SIOCBRDELBR(r9, 0x80108907, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r8], 0x80}}, 0x4044000) 2m44.308604036s ago: executing program 34 (id=633): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000800000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c0004"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 2m13.320984517s ago: executing program 35 (id=634): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x360}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xfefc, 0x0, &(0x7f00000003c0)="04dde1152379be503e95606624f06a37", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300), 0x0, 0xe5, &(0x7f0000000200)=[{}, {}], 0x10, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0xa3, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) 1m55.187334565s ago: executing program 36 (id=635): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xb2750cde9904c104, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x6b, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 59.532402655s ago: executing program 5 (id=1077): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180800000000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1000000}, 0x2}, 0x80) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r2, 0x0, 0x8) 59.461793908s ago: executing program 5 (id=1078): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) syz_emit_ethernet(0x138, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000001021100fe8000000000000000000000000000bbfe8000000000000007000000000000aa4e200e22010290"], 0x0) 59.458260576s ago: executing program 5 (id=1079): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchmod(r0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1ff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000000280)={{0x1, 0x1, 0x18, r4}, './file0\x00'}) setsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000000)=0x21, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYRES64=r1, @ANYRESHEX=r1, @ANYRESHEX=r5], 0x58}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x4, 0xfffffffd, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10408, 0x2140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x73}, 0x1, 0x0, 0x0, 0x4000881}, 0x200400c0) 59.392334333s ago: executing program 5 (id=1081): r0 = socket$inet6(0xa, 0x80001, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) umount2(&(0x7f00000000c0)='./file0\x00', 0x6) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x101000, 0x102) getdents64(r1, &(0x7f0000001f80)=""/4108, 0x100c) userfaultfd(0x0) getsockopt$bt_hci(r0, 0x0, 0x63, 0x0, &(0x7f0000d23000)) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r2, r2) setpgid(0x0, r2) move_pages(r2, 0x5, &(0x7f0000000000)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000040)=[0x5, 0x3c9, 0x6, 0x6], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) 59.319310335s ago: executing program 5 (id=1084): request_key(0x0, 0x0, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 58.911245227s ago: executing program 5 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_print_times', 0x700, 0xc4) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6070eae400080000fc000000000000000000000000000000000000000000000000000c00ad1e0001000005000000000040dfe9e65287"], 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='gadgetfs\x00', &(0x7f00000005c0)='o\"\x92\xccZ\xa6A\x9f0\xcd\x1f\x85\xd2\xec\x96\xad[<\x8b\xeeL\x15?\x01g\xf2\x96\xf8{\r\x97gks<\x0e6\xec\t\xc9\xb7\\Fo\xe5\x18\xbf*\xa6\x9a\xe4\xdd\xb4', 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x42, 0x22) write(r2, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x3ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(0x0, 0x16) nanosleep(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='connect 22:aa:aa:aa:aa:aa 1', 0x1b) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0', 0x1e) readlink(&(0x7f0000000140)='./debug/bluetooth/6lowpan_control\x00', &(0x7f0000000400)=""/176, 0xb0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 58.861142326s ago: executing program 37 (id=1091): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_print_times', 0x700, 0xc4) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd6070eae400080000fc000000000000000000000000000000000000000000000000000c00ad1e0001000005000000000040dfe9e65287"], 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000001c0)='gadgetfs\x00', &(0x7f00000005c0)='o\"\x92\xccZ\xa6A\x9f0\xcd\x1f\x85\xd2\xec\x96\xad[<\x8b\xeeL\x15?\x01g\xf2\x96\xf8{\r\x97gks<\x0e6\xec\t\xc9\xb7\\Fo\xe5\x18\xbf*\xa6\x9a\xe4\xdd\xb4', 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x42, 0x22) write(r2, &(0x7f0000000000)='3', 0x4e) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x39, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f00006d5000/0x2000)=nil, 0x2000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x8000, 0x3ff) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_emit_vhci(0x0, 0x17) syz_emit_vhci(0x0, 0x16) nanosleep(0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='connect 22:aa:aa:aa:aa:aa 1', 0x1b) write(r3, 0x0, 0x0) write(r3, &(0x7f0000000280)='disconnect 11:aa:aa:aa:aa:aa 0', 0x1e) readlink(&(0x7f0000000140)='./debug/bluetooth/6lowpan_control\x00', &(0x7f0000000400)=""/176, 0xb0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x5, &(0x7f0000000d80)=ANY=[@ANYBLOB="18000000ff7f000000000000060000008500000018000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x320e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 57.310305011s ago: executing program 6 (id=1119): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000f40)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x5) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, 0x0) close(0xffffffffffffffff) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)=0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r5, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) read$nci(r2, 0x0, 0x0) write$nci(r2, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP={0x1, 0x0, 0x2, 0x0, 0x1}, 0x4) sendmsg$NFC_CMD_START_POLL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x14, r5, 0x2, 0x123, 0x234}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x81) read$FUSE(r1, &(0x7f0000002a80)={0x2020}, 0x2020) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0x9, 0xc, 0x8202, 0x1, 0x9, 0x7, 0x8, 0x5, 0x0}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000200)={r6, 0x7, 0x2, [0x4, 0x37c]}, &(0x7f0000000240)=0xc) 54.208388322s ago: executing program 6 (id=1126): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x2, 0x100) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xa0, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xe}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) syz_emit_ethernet(0x4e, &(0x7f0000001740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, "269fe0", 0x18, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0x3, '\x00', @local}}}}}}, 0x0) 54.121921502s ago: executing program 6 (id=1127): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) syz_emit_ethernet(0x138, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000001021100fe8000000000000000000000000000bbfe8000000000000000000000020000aa4e200e22010290"], 0x0) 54.121618026s ago: executing program 6 (id=1128): mkdir(&(0x7f0000000080)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) ppoll(&(0x7f0000000240)=[{r0}], 0x1, &(0x7f0000000340), 0x0, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, 0x0) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) sendmsg(r2, 0x0, 0x44004) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 53.25159433s ago: executing program 6 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x522f, 0x100, 0x0, 0xcf}, &(0x7f0000000300)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9322, 0x800, 0x3, 0x2e4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xeaa2, 0x4000, 0x3, 0x250}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x68a4, 0x1000, 0x3, 0x346}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2195, 0x2, 0x3, 0x2ae}}], 0x4, &(0x7f0000001a80)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x9}, 0x0, 0x0, '\x00', {0x1, 0x553, 0x0, &(0x7f0000000a80)=@buf_max_buf="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"}}, &(0x7f0000001b00)) syz_ublk_setup_queues(r3, 0x0, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffa, 0x300, 0x2100, 0x10000001}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc6db, 0x1, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb910, 0x0, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367}}], 0x1, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000040)=0x6, 0x8) unshare(0x40200) r5 = semget(0x1, 0x4, 0x39c) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) semop(r5, &(0x7f0000000180)=[{0x1, 0xbbdd, 0x1000}, {0x0, 0x9270, 0x1800}, {0x0, 0x6, 0x1800}], 0x3) brk(0x200000ffd000) semctl$SETALL(r5, 0x0, 0x11, &(0x7f0000000140)=[0x6, 0x7fff]) unshare(0x40400) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x805}, 0x0) 52.981707376s ago: executing program 6 (id=1143): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r2, &(0x7f0000001740)=[{&(0x7f00000000c0)="04920944475a", 0x6}], 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x24, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) recvfrom$inet6(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @random="bef56d84ab39", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x2}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000002c0)=[&(0x7f0000000100)='$&\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='GPL\x00', &(0x7f0000000240)='\\%.A%\x00'], 0x0, 0x1}}, 0x30) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) writev(r2, &(0x7f0000001740)=[{&(0x7f00000000c0)="04920944475a", 0x6}], 0x1) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x24, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) (async) recvfrom$inet6(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) (async) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @random="bef56d84ab39", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x2}}}}}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000002c0)=[&(0x7f0000000100)='$&\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='GPL\x00', &(0x7f0000000240)='\\%.A%\x00'], 0x0, 0x1}}, 0x30) (async) 52.925935108s ago: executing program 38 (id=1143): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) writev(r2, &(0x7f0000001740)=[{&(0x7f00000000c0)="04920944475a", 0x6}], 0x1) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x24, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) recvfrom$inet6(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @random="bef56d84ab39", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x2}}}}}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000002c0)=[&(0x7f0000000100)='$&\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='GPL\x00', &(0x7f0000000240)='\\%.A%\x00'], 0x0, 0x1}}, 0x30) syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') (async) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (async) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r1, 0x0) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) (async) writev(r2, &(0x7f0000001740)=[{&(0x7f00000000c0)="04920944475a", 0x6}], 0x1) (async) mknod(&(0x7f0000000040)='./file0\x00', 0x40, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x24, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) bind$inet6(r4, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x5}, 0x1c) (async) recvfrom$inet6(r4, 0x0, 0x50, 0x0, &(0x7f0000000100)={0xa, 0x4e21, 0x8, @mcast1, 0x8}, 0x1c) (async) syz_emit_ethernet(0x3a, &(0x7f00000005c0)={@local, @random="bef56d84ab39", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xf, 0x2}}}}}}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000002c0)=[&(0x7f0000000100)='$&\x00', &(0x7f0000000140)='\x00', &(0x7f00000001c0)='GPL\x00', &(0x7f0000000240)='\\%.A%\x00'], 0x0, 0x1}}, 0x30) (async) 32.82221875s ago: executing program 7 (id=1357): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000400), 0x2, 0xe}}, 0x20) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ppoll(&(0x7f0000000140)=[{r0, 0xa010}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd03, &(0x7f00000003c0)="04000000000000000000000038010000000000000200000000000000fffffe000000000000000fffff000000000000002e2e364e2229") r2 = socket(0x2000000015, 0x80005, 0x0) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x210000, 0x91) io_uring_enter(r3, 0x528, 0xd3e0, 0x4, &(0x7f0000000040)={[0x9]}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r2, &(0x7f00000028c0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x20, 0x0) 31.315910652s ago: executing program 7 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r4, r3, 0x25, 0x0, @val=@tcx}, 0x1c) (async) syz_emit_ethernet(0x1149, &(0x7f0000000780)=ANY=[], 0x0) (async) write(0xffffffffffffffff, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r5, 0x0, 0xa00) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r6}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r7, 0x8922, &(0x7f0000000080)={'dummy0\x00', 0x6000000}) (async) r8 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0xd1, 0x5, 0x10000000, 0x0, @dev={0xfe, 0x80, '\x00', 0xfc}, @empty, 0x10, 0x0, 0x100009, 0x45}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r9, 0x2f, 0xff, 0x2, 0x4, 0x40, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0x5}}) (async) r10 = socket$netlink(0x10, 0x3, 0x0) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) (async, rerun: 32) r12 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x40000) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_REWIND(r12, 0xc0844123, &(0x7f0000000000)=0x400000000008002) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000002900)=r11, 0x4) bind$netlink(r10, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r14 = syz_open_dev$tty1(0xc, 0x4, 0x2) (rerun: 32) ioctl$VT_SETMODE(r14, 0x5602, &(0x7f0000000000)={0x1, 0x1, 0x2, 0x9, 0x3}) ioctl$VT_RELDISP(r14, 0x5605) (async, rerun: 64) sendmsg$sock(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000340)="3400000010000104000000000000000000000000000000000000000000000000140012000c00010062617265756470000400ff8c", 0x34}], 0x1}, 0x0) (rerun: 64) 31.002253742s ago: executing program 7 (id=1381): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a010400000000000000000200000a0900010073797a300000000034000000030a010400000000000000000200000a0900010073797a30000000000900030073797a300000000008000a40000000046c000000060a010400000000000000000200000a0900010073797a30000000000900020273797a3000000000aa092e701cb1ddb077e2f7f39d0b4000048020000180070001006374000014000280080001400000000108000240000000001c0001800ab57fd9c3756575650000000c0002800600014000000000140000001100010000000000000000000200000a"], 0xe8}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 30.919434377s ago: executing program 7 (id=1385): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000009200)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x40086607, 0x0) 30.851365829s ago: executing program 7 (id=1387): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000160001ea"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="12010102d1a05e20cd0c02010e89010203010902120001085440010904"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r2 = syz_open_dev$I2C(&(0x7f0000000140), 0x2, 0x48842) r3 = fsopen(&(0x7f0000000000)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='osdkeepalive\x00', &(0x7f0000000080)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='osd_idle_ttl\x00', &(0x7f0000000080)='1\x00', 0x0) ioctl$I2C_PEC(r2, 0x708, 0x4) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000000)={0x1, 0xf6, 0x7, &(0x7f0000000040)={0x19, "51748c5aa07be8803dcab87f591729bf017ef92ed18344d8d5c9b2b1d0fe4d04e2"}}) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x40806685, &(0x7f0000000580)={0x1, 0x1, 0x1000, 0xc9, &(0x7f0000000440)="6fb422a335433237f9ed247aa26e1f39d1c28eec70d5179a2527cc1bd9b2b69e1b209126bfe94725e929d9909ffcbcb95dec82db58296e4b464ad338bcd195dc47b4b5d30a3611127a9140dc6470e0d412e2a88b6f703a39d0393670d452235280818c61f9939f65743e8794b1382231c838ce784f4aab90e943c11e80cbb4c495d8c51a59b71844b9f7b6a2512c7cc21e0f13d798cff2efab84b5a1517344a75038865da5bafb913f1f1f888c7af3e838fff8ebce03c3e1cd1e2abc74ba4cf539a0e851c9fb34415d", 0x2b, 0x0, &(0x7f0000000540)="66c1af30ed76bb380c5b9b0b9238bb4240d17df750f3798a37b587e50d333f7fcdfcd1660b1e670143b562"}) write(r1, &(0x7f0000000300)='p:_est/_vent1 ./file0:0x0 _rg2=', 0x1f) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000001c0)={0x0, 0xc3, 0x4, &(0x7f0000000100)={0x14, "103f5e9dbdab9da9332427c5696d25ecebd0796b925613600c6af633e162b47d34"}}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 30.500978189s ago: executing program 7 (id=1389): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004044064780000101020301090d000001010080fa090403000001010000"], 0x0) 30.449368772s ago: executing program 39 (id=1389): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004044064780000101020301090d000001010080fa090403000001010000"], 0x0) 28.534240479s ago: executing program 1 (id=1416): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) close(r1) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007d00), r2) sendmsg$IEEE802154_SCAN_REQ(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x4}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x1}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x10000000) (async) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c9420343758864450000280022000000069078ac"], 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 28.361330083s ago: executing program 1 (id=1419): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r0, 0x4b72, &(0x7f0000000fc0)={0x1, 0x0, 0xc, 0x11, 0x135, &(0x7f0000000bc0)}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0', 0x1) write(r4, &(0x7f0000000100)='-b', 0x2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x68, r3, 0x5, 0x0, 0x0, {0x1, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x54, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x68}}, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) r7 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r7, 0x80106f53, &(0x7f0000000580)={0x9, &(0x7f0000000000)=[{0x1e, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @svalue=0x4}, {0x1, @uvalue=0x1}, {0x3, @uvalue=0x64}]}, 0x6}]}) pread64(r6, &(0x7f0000000180)=""/118, 0x76, 0x59) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000a00)={0x48, r3, 0x5, 0x0, 0x25dfdbfc, {0x5, 0x1}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x50}]}, @IPVS_CMD_ATTR_DEST={0x4}]}, 0x48}}, 0x0) syz_emit_ethernet(0x11d2, &(0x7f0000000a80)={@local, @remote, @void, {@ipv6={0x86dd, @tipc_packet={0x0, 0x6, "f47cbe", 0x119c, 0x6, 0x1, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, {[@fragment={0x2e, 0x0, 0xf3, 0x0, 0x0, 0x1d, 0x67}, @srh={0x3b, 0x2, 0x4, 0x1, 0x0, 0x48, 0x7, [@private2={0xfc, 0x2, '\x00', 0x1}]}, @hopopts={0xa5, 0x20e, '\x00', [@pad1, @hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @calipso={0x7, 0x38, {0x0, 0xc, 0x9, 0xe, [0x6, 0x7fffffffffffffff, 0xd083, 0xffffffffffffffff, 0x5f, 0xfe2]}}, @ra={0x5, 0x2, 0xfff}, @generic={0x35, 0x1000, "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"}, @jumbo, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x5, [0x5]}}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @srh={0xc, 0x20000000000001c6, 0x4, 0x8, 0x5, 0x8, 0x10, [@private0, @mcast1, @remote, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x87, 0x0, 0x7f, 0x1, 0x0, 0xd, 0x68}, @dstopts={0x1d, 0x3, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x30}}, @pad1, @jumbo={0xc2, 0x4, 0x40}, @enc_lim={0x4, 0x1, 0x21}]}], @name_distributor={{0x44, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x3, 0x0, 0x1, 0x1, 0x4794, 0x2, 0x4e23, 0x4e1d}, [{0x4, 0x25df, 0x8, 0x12, 0xe97, 0x1000, 0xc, 0x3}]}}}}}}, 0x0) 28.189875334s ago: executing program 1 (id=1422): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000480)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x6, 0x4, 0x1, 0x0, r0}, 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r3}, &(0x7f0000000840), &(0x7f0000000880)=r0}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r3, &(0x7f0000000900)}, 0x20) r5 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000180)={[0x4, 0x2e, 0x4, 0x8, 0x100000001, 0xffffffff7fffffff, 0xe, 0x2, 0x7, 0x4, 0x1, 0x2, 0x28000000000, 0x2, 0xd, 0xfffffffffffffffd], 0x10000, 0x346100}) 28.07129897s ago: executing program 1 (id=1423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {}, 0x20}, 0x18) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xee}, 0xff}, 0x18) getpeername(r1, 0x0, &(0x7f0000000180)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan1\x00', 0x0}) r5 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) connect$rds(r5, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r7, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r4], 0x54}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) bind$can_j1939(r1, &(0x7f0000000140)={0x1d, r2, 0x102030405060708, {}, 0x20}, 0x18) (async) connect$can_j1939(r1, &(0x7f0000000180)={0x1d, r2, 0x0, {0x0, 0xee}, 0xff}, 0x18) (async) getpeername(r1, 0x0, &(0x7f0000000180)) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'ipvlan1\x00'}) (async) socket(0x2, 0x2, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) connect$rds(r5, &(0x7f0000000100)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r6, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r7, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001000050428bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4000000004000000240012800b0001006970766c616e0000140002800600010000000000060001000200000008000500", @ANYRES32=r4], 0x54}}, 0x0) (async) 27.829842005s ago: executing program 1 (id=1427): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff00000007058102400000070502024000000705830308"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x0, 0x4004084, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x2, 0x0) unshare(0x44040000) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) renameat(r0, &(0x7f0000000040)='mnt/ttyUSB0\x00', r0, &(0x7f0000000080)='mnt/ttyUSB0\x00') r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000005340)={'dummy0\x00', {0x2, 0x0, @private}}) socket$nl_generic(0x10, 0x3, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0xa, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000180)={0x9, 0xc25, 0x1, 0x695, 0xe, "502ca1ecab9861e4d8029df7b84e979ab09a04", 0xe9, 0xe29}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x2) pipe(&(0x7f00000007c0)) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000340)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x4, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e24, @local}}}, 0xa0) 26.302242133s ago: executing program 1 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'batadv_slave_1\x00', 0x20}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x13050, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x20040011) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x27, &(0x7f00000003c0)=ANY=[@ANYBLOB="2801100009aa193385940100001b46ae44c6b22bcb47a8b5a26a26b4740b23e8ea351400619cbd496ee09936b04ce4ed9dd724e65317f65f892f59f80962178f24321257ba2cd113c1e2bb4a52c443b34fe117897b009c2704876bae05a11a4339e9d45bd5c6395acd9c3702955c0272aff8769328373403a52c71e53b6f8c03e6d5a2855c87aa3181d0835426359a8c4848dbbe7452617be8507efe66e823616658298234e10000000000000000"], 0x128}, 0x44004) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1100100e}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="00032dbd7000fedbdf25e90000000500330000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x805) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7ce6433cb5165ceff991abbdd62156a09df4d272030d", @ANYRES32=r9, @ANYRES8=r1, @ANYRES32=r5, @ANYRES64=r1, @ANYRESOCT=r4], 0x50) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0xc8}, 0x1, 0x0, 0x0, 0x34000000}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0xa, 0x3, 0x0) r13 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) 10.977208655s ago: executing program 40 (id=1442): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'batadv_slave_1\x00', 0x20}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0x13050, 0x1, 0x2}, 0x30, 0x0) landlock_restrict_self(r3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = getpgrp(0x0) fcntl$setownex(r5, 0xf, &(0x7f0000000100)={0x2, r6}) sendmsg$unix(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="b5", 0x1}], 0x1}, 0x240408c1) r7 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x20040011) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r8, 0x5b03, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x27, &(0x7f00000003c0)=ANY=[@ANYBLOB="2801100009aa193385940100001b46ae44c6b22bcb47a8b5a26a26b4740b23e8ea351400619cbd496ee09936b04ce4ed9dd724e65317f65f892f59f80962178f24321257ba2cd113c1e2bb4a52c443b34fe117897b009c2704876bae05a11a4339e9d45bd5c6395acd9c3702955c0272aff8769328373403a52c71e53b6f8c03e6d5a2855c87aa3181d0835426359a8c4848dbbe7452617be8507efe66e823616658298234e10000000000000000"], 0x128}, 0x44004) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x108}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r1) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1100100e}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYRESHEX=r0, @ANYBLOB="00032dbd7000fedbdf25e90000000500330000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000014}, 0x805) r11 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7ce6433cb5165ceff991abbdd62156a09df4d272030d", @ANYRES32=r9, @ANYRES8=r1, @ANYRES32=r5, @ANYRES64=r1, @ANYRESOCT=r4], 0x50) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c80000002100090002000000ffdbdf250200000083f8e3e5282077558cfaceed18864a9b4c3c2bd34539440432b0e171f75586f29a5080ecd4c3bb07bf3a31cd430d3587dd43e42d44d1102886be9ba17e16f5f6004747166d2b8f154d140600000007730f94ab923efdf128c8478b2780699f65e9790dcbefb00f05136eb285732307e6d09133cf08ea8fc1a95d67981f567e69f2758f06f3d47985542e7a26836929a7c90d58c3eae124110000000000000000000000000000000000006814d7e3fa3ee7736fd54641c7a1f7b18b35a27437bf902cafff3c2f40dd9f4cab0edc9be647c61d0f8fee8c1130cd3e2120f636c55036a4645e5caa9ba38db8b8595b6683a18cc1ab7c844d7a45e4a90068c4695353f397008c2fe3877ec0435b03c789"], 0xc8}, 0x1, 0x0, 0x0, 0x34000000}, 0x44080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0x7}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0xa, 0x3, 0x0) r13 = fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r13, 0x1, &(0x7f0000000340)='name', &(0x7f00000000c0)='ccnA\xf6gr\xe7lo_', 0x0) 2.87162965s ago: executing program 4 (id=1777): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x25, &(0x7f00000001c0)=0xfffffff, 0x4) bind$802154_dgram(r1, &(0x7f0000000000)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000080)={0x24, @none={0x0, 0x2}}, 0x14) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r6], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x8000) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r4, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xf71}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x7f00}, 0x1, 0x0, 0x0, 0x4000}, 0x800) listen(r0, 0x0) r9 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r9, &(0x7f0000000380)={0xa, 0x4e22, 0x6, @private2, 0x2f59dde8}, 0x1c) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r10, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x40000150, 0x0, 0x0) sendmsg$802154_dgram(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x24, @short={0x2, 0x3, 0xaaa0}}, 0x14, &(0x7f0000000300)={&(0x7f0000000280)="c318741a991c0fad2c6c9c7529e5ec007e36ea35778b890a56f6a4fb3ea05627c907ea31c11364bcc831b0aff6ad983df45c74352fc9e9f391fada562b44fc875667a0512f960e392a0b197c2a21abb06b2974ee62d9e85302d82be4c53f02b30d37ec5fea90eb4e8e143015002570106e", 0x71}, 0x1, 0x0, 0x0, 0x40010}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 2.44170343s ago: executing program 4 (id=1782): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{0x0, 0xe0}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="20004552c3ad0000000000008400000002d0bcbaa300040028000800", @ANYRES32=r2], 0x20, 0x2400e044}, 0x20001080) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000000)={0x0, 0x1, "020240", 0x4e, 0xfe}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xfd, 0x7fff0000}]}) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8982, &(0x7f0000000380)={0x6, 'ip6gretap0\x00', {0x8981}, 0xfffa}) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]}, 0x34}}, 0x20004800) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000300)={0x0, 0x0, r7, r11, 0x9, 0x10, 0x80, 0xfffffff9, {0x4, 0x3, 0x7, 0x800, 0x1000, 0xf1af, 0x0, 0xffff, 0x4d, 0x89, 0x6, 0x400, 0x6, 0xe, "4a370679aa1bb4c14e4ee7795bc54006545bbd8b738e9c3957876535f35cdf6d"}}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x101201, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000003f000500010000000000000001010000000000000f0001006f76732d73797374656d0000080002000000000008000900"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtaction={0x130, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x11c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_mirred={0xd0, 0x6, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x5, 0x6, 0x4d27}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x80000005, 0xf5f6, 0x8, 0x5, 0x55de5cb1}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x0, 0x5, 0x6}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x8, 0x1, 0x8, 0x1}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x77, 0x5, 0x9, 0xc}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x130}}, 0x4048884) syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x40000) 2.041620442s ago: executing program 9 (id=1786): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600030008000000100007007f0000017f000001910040001400020010000c0004"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 1.930806969s ago: executing program 9 (id=1788): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) open(&(0x7f00000001c0)='./file0\x00', 0x60840, 0x5a) read$FUSE(r0, &(0x7f0000004280)={0x2020}, 0x2020) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8003}]}) close_range(r1, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) write(0xca, &(0x7f0000000040)="040e", 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESOCT=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r6, 0x800, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x26}}}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x30}}, 0x0) 1.820022615s ago: executing program 9 (id=1789): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000200), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140), 0x2) 1.818565682s ago: executing program 8 (id=1790): syz_emit_ethernet(0x0, 0x0, 0x0) (async) r0 = getpgrp(0x0) kcmp(r0, r0, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='mtd0\x00', 0x178) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="28000000020301000000000000d7933dd2a8ce7fb804013b3b36eb4b000000000000000800010001"], 0x28}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000000000080040fe8000000000000000000000000000aafe"], 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00'}) (async) gettid() (async) r4 = socket(0x10, 0x803, 0x0) (async) setns(0xc9, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r5, 0x0, 0x0, 0x4, {0x481}, 0x1}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=0x0, @ANYRES8=r7, @ANYRESOCT=r2, @ANYBLOB="557e5655ae1dc9a40af5e59c6c2ca2c1d57e2b62a3aee5dc1d82e363acc924bff668e173f62f9ffa2382cbb34f9a2d325dd0653a3d0fe7321878cb4b66e68cedee10fa4db5d3ba4a69a90df79dde078e3c9e5ab41af564a0551dcd401e6bbf81f47d653810798db9e9fdfa903b8210d09d3aa110639043be98b348323d7410", @ANYRESOCT=r1], 0x44}}, 0x4000010) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000007040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYRES64=r6, @ANYRES32], 0xbc}}, 0xc0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800040, 0x0) (async) chdir(&(0x7f0000000240)='mtd0\x00') (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r8, 0x1f) 1.711487621s ago: executing program 8 (id=1791): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000280), 0x2040, 0x0) write(r1, &(0x7f00000004c0)="d6f86b4683ff9e6c2bdaa338ff000200375c98cec0a81dd0c897abf34414c744eda048f2b713658231954ee9657b65531b0e7dcbbc65e08ba7496062358b9679cffd10a9f6ca6a8d3cb279e5bc5a000000003b9a1c1e00efcfc4f7d16a477cf0520627627f42bc49ae36c2a861d3e6baddef6b06fd91dce9c520d0a983050d265981922f62ad460b5b000000000000", 0x8f) ioctl$KVM_GET_PIT2(r2, 0x8070ae9f, &(0x7f0000000180)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) (async) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000440)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x40000001, 0x0, 0x0, 0x31237648, 0x0, 0x9}]}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000000300)={0xa3, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x2d, &(0x7f0000000000)=[@cr4={0x1, 0x9a0}], 0x1) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000073, 0x0, 0x1001}]}) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000000700)=@vmx={0x4, 0x0, 0x2080, {0x1000, 0xffffffffffffffff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001200050104000000fbdbdf2528001a00ac1414aa0000000000000000000000000a01010000000000000000000000000002"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000400)=ANY=[@ANYBLOB="400000001200050104000000fbdbdf2528001a00ac1414aa0000000000000000000000000a01010000000000000000000000000002"], 0x40}, 0x13, 0x0, 0x0, 0x880}, 0x20040840) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r4, 0xc080aebe, &(0x7f0000002780)=@svm={0x10e, 0x1, 0x1080, {0x2, 0xfff}, {"bb2d0eef32cb2c0f65a48bcf188fefd6fd77ef1661ab547d6b6ac6a8eb4ab88820b9681e3448e597764d48292819a3f04ae222241a1b0d75854087ab31076aec7a34c037dd76544263b3cadbfd43f8f20e48220f2ca2369dd1fd64740f3dbc2e7106a1d6abc8780fa89dead10bc5d6bbf4d2daabbb7d7d34c33bd5f15176390f66f72f0e859b6faa5983d04866b5dd09d5032d23a4ef6dd02dadf295313384eb8222079730829b0e40ea925f57ddb710787ddf9e448bc2dcd595563ec4fe68a7842469934644d77667dea620083ef06b5a354f60a5a2367a87b63cbe1c4197db1b486dce4dbe3c61896860c11f3982f7d1b459c71899b222ba14fa1cf02db9acfba9332686ab431bf6029f405249fb906134732ccefc06e301102e3cc35869feaa9c0016eecaeecbfbbccb6c5d4b1b0d8e7963b7ebb3f31685846aec8343a12e17fbd4c739b9719fa6e9294a5363ca930c9d3ef5fe0a46a2b89a68e5141a8115f51e217c2220a4f720ba13c8f13134ad5bedb2008945c3faccf1f9514795021374a08e57efa2c0e0f376838054b5c7218616797cdcd15aca265591752245fbddead969831c7b4de26065327ad7a0e5c0bc6b4d552bc9e9a604a9a98112db59d245f892614506e2cd834ab4d6a0886d3dd4103c1076d4e5f4e2634140ac1ca14d00b530e06b9cc35bf5e22ee5ef1d60d315f1b6bba973de9a57943fa8dccd86b0a276a0c207b2164919ddbc211a6caf163b5bf787385019acadeb9b82c488e991d150830e8e205b90f499d88221fdf1b5c93717ba23d9ea349a9a49c1219015e5ca401cd4e199c4b865180ac387910f600ce17e789f0296f5f049398417372f86c01a8d70c12a1aac46446a807503f07e8ce5348327769d0f62e662fe13aab95566c30ce7496edc3947151b226bea854cf697c4a872fc1846217b22b588bfa24155464d57f23113bd7df0318eb81b3709260de9952652191ee0c5d942b894cf57c75e42f91ea4d89244ef7bb547e8964da51fa44ddfc33ba509593c064cd998d335031ec1ace67e3e77b2aca8f58a2677502dd8d4cfd86cf008e77860187309e2f51c89e63e45821e84eaf3978593defe2d8115e54eca8febdf6f1b811f8314343aa5ee3ecc10c7818a540ca3c0b5f444c620b029b0c49be3463057f4c3b9d90cfd37056479603a749cfb5b69faa387e7992407356d94bc7ecd6035fbf1403d0b093f080524e31e8cf78f898bce13c791bb34475c6dc80e1bbd74802dd8df029b1a8cfb234d154299cb2d53bf4a2eb748ceca7bf79a3c8561beb2029f650d199d48cb5efe62e49cbe2f4ac576185352aedf943c4b6139d3cc57e5d645a839302d2747890cb6ca4a39d9f38dcb73ec412a44795fcb3ee19ea5833d41c24a49fc0bee337693f0a0a32e1c8cda90bb14fa1feaae7ffa9306b0a4930828cfeef1671051bab0f44f1cbbcd553b624f01fe33c54e4372b4b028eb87c72e6c0672df6623f7bfe25aeb309812359346bc098dc0e84477b66512b104a9e5cc94b9c06202f4f9f7011cc5741f90c575154712238ceefeb4f2afd857fa9209dca338368053295e3ae60fe783ddd55b8a814f67a057796600c740553d8fcb7892114e14b7a499e13e43d57cc95802b495f7a22bca94cbd231471ffc3849dd3315ee745060138289eb9e5c905ef5eb7ac9758930756d257ec744fe01f8d98c0769ceddae48d913c86d05fe767be61911c1664b4999b8bc125ccab08353d9ac203bf2a0752d42a7ee5060a83a1b1be6bb9f5facadd096f2a2b3dce99008e6c4aa3f4162505d5550653705722ca6c32e95c597e0ea26fa8d1d3a50d647683b9b922f7d1ae3d055fb24903d915889ba2f7643e3b3ee082d0b429b0dc21d26d6a16c72999395a261f5eb6239624b91f07c5c91758a43e7d95321d2cbd0f4316427783dd52eba1b06820b889a30f45a757f7cfc7329cc147f81aa731f34da766ebc45770ba1d27cd4921e553f94511cbf1a208436d20308fc6bb99267f49917ac9e330c8abb5b04d79202d896c17f37ade6d88f7fe918d847ada691210bf04cdcc24bafc466ca6e80766586cc68e11f85d01b90f49cf075d9944810c972c68597a38e91ef3f2a4b34d2490d7f18c6c5eca5d974fb3ccf2d7511716947fbe5bf7dda98bd3ec5b9c76ddfbd00b23fcd2dc7160f70b55ab6a20c35e4a28367abff731b146b0a401a1a5322d5a64706a091a2148f20faf00725fa9974835b7c72f72f3e6cb7062efdeb131b3fb92efd62c055f32e460355a790c14ba46b5dcc68fb3584858461637babf72a0ed2c61becb0feb963da8dd62ceee154c57e3c4b59e0e13dade802e608333876418dcd0a657289a4508b33152e93641809d4bb514556c6a4e6b43ef73406fcf662baaf2c68b8a8711449539cdfe7f3d546f5876e187ac9b6c27bc8b66a6c01a5e78da0098fce22374ccdfe2c0722e7e7772cc721a671ebfd632ddf0854950fbbd38be5453c1e884c3885341b09bf160604912c7c5010a220bbc8e84b9ce2affffd10c6d859daaaf7a30e476f3a26ececa602ffb337a6b9ce7fdd4d64a390b5d5a2e9a0fae2911884dd7ab654d9d2d7657ea057ca5a7a3dc35081c0701e49cce8ead52b96978eddeaddcc63b3fe94deb6cf1ca2bf064885ff3270a953b3fde02783a9dd8a732c29ca491d654b89763815655fa80e83284b91e8e0f471a681e905e5030f95d4130f5881919cf1ef353f7b114f4fea313c14f616ea1fc8b78f884f7b423606e236d222355b3f81de0e5a1ec82e8ba45ecce020afe9770eb8e56aff5ee1257cc98ef945b336a594cbe9eeac1807c27a7ffd8a67af586ed0a8dbb4063db6c1193e658b0b829affe2115101c84e3a7f7e5de8bdbb58c341901fe05119df9a52acb3fdf67ab03ab10123e48f56901e1cb624369df6a6687512ddbb9d5272726ae0d3bd77d55f737a3ed97d24fde56c5c667f7a34a716cdbae19f0ea52072feb81d8f472017374bbe909d935a3e5232d01055156876a81c921d7a6b739cb6815b6feccd5e946fe8cb60f5bf32c4c906108889e6483d36545d7f66dc980ebcac66499f263ddbb1e3d1fc96a11b5e88417f828c03517c0f87c099dd03517e34404db2ab862f433d193fc65979da2cbad90f9f0118ba58a797bfbb2cd63968f08f4978545d8643fa3cc0a4fd993a307d9a2c7e5cabcca72eb61caec7035f2f3ae51227ed09a2dbf3e26d9d630df4bddaf8080770040971c0c19234e80d486383fd67e737055ad105ac60207812b6980e67096b267db4b9f678f01b6e258977e33027ab85466eeac3a4947c34c5a3147f3a941051bebbda033e7ccfd4e839f888cab2988508c66d2d4ae8c3a0b615a9b29f7b092d3267dbdf20965b724c93574e180a2aea000c0c85f08bcd436757199eb5359316a69bdd72bc4d6ef0ab94d5ae6a01f31aa26a25b8eca837513d4117ae1476c0c4dce98d5c7253ef45628a0534b3d7171169ee2f49733abe2dbbb9209bd70053fa308562b3e76df2c339a05ed6986382cb2be303750ce3483165ec9ec8999dcca0a0ee6f24efad6725e79e20338d2f01926c034d39caa80be3067e707f8ad043640200b8c512ab252dec5d6f0011ffea3d43273fcdff427043432c11910fa1c6b4172609bb7dbb1806e212157934e3d2fa20c367ef9b0cbb045cd2a27ea5aba7a910ae1d4232753d58e8cbe1cb4054d375ddca3e7502218e21d5b1883208490f8143c31f316eda08a4f2d0f444044b2f0724ac17169022ba3f02a323756acf2e6088f6b374fa026988e1b9ca8c089608508d7cfb51edfb26ec15a97a410ad1816d4f4981f372ce4845f75eb41667320607e4f321d81b02f183a0a1dc3804c42d2c79e0974bdb91b52aa1576fa2f647ec2059c5f44b7e4762b2f6fd6a64e720ec6813691957d28b4924ca74a94b2ee33df2dd7b9f52f5ec440941452761b30fbc05e4e913d4f964850e3585b3b1cc3c7bca94453dd204d9049e081918490fb00103f79bcfd68cba6f477cac1da0da87f6233a5a20457c21b8b241128fafa6b3407dc6c7f11e0c49d4be648c0d8891cd99b04beba1ffafcfd94b4ca6a6dad347c4d77f4e8aff07370a9b693935869aef8015db15c9cc918f521b5b8ade5b4d7072acbbdda39006ac90e0c97a86549d155475ce72b9580977372f2cf538052019e8c70c687f3acebdcf0f260d3244f3a3568933bd77cbdc366ffe5aa11053927060386fc0d3416f76753e16f8eff4422eae2d39866587d6a8d41d82baf525d7895d93bc3737b198ed370e47cbacd466da3b8fd33921060009dd8766e222bdc2eea819dc6bd811a6e532a6934779db39ca2026f41332870fb79240c756208ab11f37ac4ff7f8243ff79c3d3f66efb0ac917b2ce6fa10dbb9d4ecd5341b74b63ea7289611a97f10f3e3469f5161451cdfa845ad811300bcc6172ddb3dd50b9758d4319bb004b0b4abd4fdc5a8bca6b7d9bd8407ffbe1c8942787a4dc87acb452860a3973be5d04687aa95352d7004133f1f6a927023cd3e9dc2b1ecb26bf92b0044bf6423ebb4ebcd47d020fa0dc0795af38fc5914add825b5cdea4c1ae403a8d03259a4d53eee6a6e4db61ce4fe5159fc17884e586d663632ab678e1396e59c4708e3724ecfa608a4031b5d74d47febbe0daeb0fb88825acbfd94cb7c10db6a5e7488ad9542c94d4484fd4e51af98aefc8f68c0dfd43f3139768d2486f7f7e9f66f79a068b5e0d18c5e2339737f816d19e4090714442776ba2aa923ba9cbd7d199fa8f96ff52e36703f9b649dd66a29a7b9a0611b0fc74fc37ed88e578c3f82c9cad2a9694e8f9204b266361f086d7d4d39ec6e0eed7b58daf7305dfc005b668dac07ba3ce95a843b1c0f7f9e51ba6cc1e83def25c2a4d67405cd647bd20aac6809d30596142d98871811579bff38af999f50b50c5eb63bba7921cc6a1e893c01ecb0e141c49e5b965f848def734da2a0d1900af161f8075f9ff36ebadab3385116e34628916dd10f30a80f2678e0b6f18e65da9dd4403d7c16f5dab0f536817a4a8e6548ef257e27bcf0059e906015afc707c48502008ca4347aa75f66e8bfb5001654de03fb36a88d57fcb3764c1ad4e9430206c1235b5ede265ee8d5cd0a02f31fcc7a9f5db64a3b0f15ee77d31b20c28cec8b80553ed458a60996c9b299142957771eac2a25a2ede80cf5f53fdc34dc2a13dc81bf8b1b38bedb9817b38f70b80eebdd91217ad2aedb26ccf70b148e407a776b3aa4e7d3087f4126d9c5a4df5b49587716d1e30aee0ae388dd900520c2e1e445a1e08f0b64dbeea84574c5f2b35a60f00799638b96c3ad86d59c1514526cbcc30a58b5d33b3c0c3a93c5c3bcda554e57f5ca72a0a2e2da7efc0ea53efa4de582fc7b39fc1e0bdebeb938e502e7d09485dc9124ba8e16a6b6c89ad5ba6693a3032104db3c02091ae9a2493047f96bdcf3636c7eca6a515f95b0b0d4c73d5e7eb2444a2dd2100b6b93a9129323b85b81d1bcc9c76e6a3b9b2358b18b17a1b40b450cfa19b3ef068b26b9e2318fa970222f44cda9b3c196f7b92f68bf187cfa374b5ddd53ac30126f04fddf263bae8c92d9cd534bd94e62325b2984dd6379bf23200507eb957bd295b37a6414b42739da6c997115177e6d0d2791036d6e8fbc64684e669551e36c527fb85069c0037c4b32d533f531719aeaf715c2b20fef11694e7b60746abbe4cfade23c19c12c1c99a62d9e93d1d2baca6df4f097bbfab98b010ccc3e787e176eac89a876bf020fd409a08502520d6597cdf76"}}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0xfff, 0x519043) (async) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0xfff, 0x519043) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44800}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newtclass={0x60, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x1, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x1000, 0x1000}}]}}]}, 0x60}}, 0x0) quotactl$Q_SETINFO(0x0, &(0x7f0000004240)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c00)=@newtclass={0x24, 0x2a, 0x1, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x1, 0xfff1}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000000) 1.707165886s ago: executing program 8 (id=1792): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) futex_waitv(&(0x7f0000001b00)=[{0xffb, &(0x7f0000000240)=0x200000006, 0xa}], 0x1, 0x0, 0x0, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070002000000000000000000060005000d101000", 0x24) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff}, 0x6) io_setup(0x7f, &(0x7f0000000140)=0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, 0x0) lseek(r4, 0x851, 0x1) io_submit(r3, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff", 0x4, 0x0, 0x0, 0x2}]) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r5 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r5}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480ff7f0905811765"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r6) read$eventfd(r5, &(0x7f00000000c0), 0x8) chdir(&(0x7f0000000280)='./cgroup\x00') creat(&(0x7f00000000c0)='./bus\x00', 0x24) 1.551932398s ago: executing program 4 (id=1794): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='io\x00') lseek(r2, 0x1000000, 0x0) (async) lseek(r2, 0x1000000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a40)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 1.491829879s ago: executing program 9 (id=1796): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x103, 0x100, 0x551}}) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x107, 0x4fc, 0x2, 0x1, 0x4000}}) 1.491474706s ago: executing program 4 (id=1797): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) (async) r2 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000003080)={0x1, 0x0, 0x6, &(0x7f0000003040)={0x0, "f4e1a230be8f46463fb1a5f1b44f44eaa65e485b747aa95df8c01eaf07677d18bc"}}) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0x1, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) (async, rerun: 32) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0) (rerun: 32) close(r4) (async, rerun: 32) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async, rerun: 64) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) (rerun: 64) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000300), &(0x7f0000000840)=r3}, 0x20) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.491365588s ago: executing program 9 (id=1798): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) sync_file_range(r0, 0x100, 0x4, 0x7) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x59e, 0x7, 0x3, 0x5f}, {0xfff0, 0x2, 0x7, 0x2}, {0x4, 0xc, 0x2, 0x80}, {0x4, 0x5, 0x0, 0x80}, {0x6, 0x4, 0x3, 0x6}, {0xff80, 0x3, 0x80, 0x6}, {0x3806, 0x7, 0x2, 0xffff}, {0x8, 0xb, 0x3, 0x2}]}, 0x10) getrusage(0xffffffffffffffff, &(0x7f0000000240)) 1.409380421s ago: executing program 9 (id=1799): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000000c0), 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) socket(0xa, 0x1, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407c2c25010000000000010902270001010080fa0904000003ffffff0007058102000200070502020002000705830340"], 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x70, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x38, 0x3, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x28, 0xb, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x17}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf4}}, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) (async) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000140)={0x1, 0x9, 0x5, &(0x7f0000000040)={0x13, "ab288cc1161e5f1808b5b605a8afaa3c93af43ccf743ce08192c5e7bd7fd00fb94"}}) r7 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r7, 0x100) (async) listen(r7, 0x100) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) (async) sendmsg$inet_sctp(r7, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x40}, 0x20048844) recvmsg$can_raw(r7, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x40000000) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) (async) syz_usb_control_io(r4, 0x0, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r2, r8, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000080), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000080), 0x4) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/hardlockup_count', 0x40002, 0x0) 1.221794271s ago: executing program 4 (id=1801): syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x2d85, 0x40000, 0x3, 0x800000c3}, &(0x7f0000000580), &(0x7f0000000540), &(0x7f0000000f40)) syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06350100010000000109023c0001010080320904000006ff000000070581024000000705010240"], 0x0) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='mnt\x00', &(0x7f0000000400)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='mnt/ttyUSB0\x00', 0x181102, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x2, 0x0) r4 = dup3(r3, r2, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000040)={0x3, 0x5, 0xfffffffe, 0x800, 0x9, "020000006800006dce8d052b7ff20000f5ff00", 0x10007, 0x8}) 1.011425287s ago: executing program 8 (id=1805): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600180008000000100007007f0000017f000001910040001400020010000c0004"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 960.155385ms ago: executing program 8 (id=1807): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'gretap0\x00', &(0x7f0000000240)={'gre0\x00', 0x0, 0x40, 0x8000, 0xfffe, 0x7, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x65, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @private=0xa010100, {[@cipso={0x86, 0x17, 0x3, [{0x7, 0x5, "19cbf6"}, {0x7, 0x7, "94a49ffebe"}, {0x2, 0x5, '?uF'}]}, @timestamp_prespec={0x44, 0x24, 0x3e, 0x3, 0x6, [{@local, 0xe}, {@multicast1, 0x6}, {@empty, 0x5b9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @lsrr={0x83, 0x13, 0xd, [@dev={0xac, 0x14, 0x14, 0xe}, @loopback, @remote, @loopback]}, @end]}}}}}) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x14}}, 0x80) (async, rerun: 32) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (rerun: 32) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aa5d0eb358aa080045000028006400000402907800000000e000000211009078e0000002000100010000000000000000"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x20, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000ea8f0000000000000500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000100b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r3, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) (async) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast1, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) writev(r0, &(0x7f0000002a00)=[{&(0x7f0000001880)="fd", 0x1}], 0x1) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_PREPARE(0xffffffffffffffff, 0x4140, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x200440c1) (async) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x840) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="0ba1"], 0x62) (async, rerun: 32) dup(r4) (rerun: 32) 691.522399ms ago: executing program 8 (id=1809): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040)=0x80, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x20400, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f00000000c0)={0x10}) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r5, 0x3, r4, 0x5}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000480)=@nat={'nat\x00', 0x670, 0x5, 0x408, 0x2b8, 0x2b8, 0xfeffffff, 0x200, 0xf0, 0x370, 0x370, 0xffffffff, 0x370, 0x370, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {0xff}, 0x6, 0x2, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcpmss={{0x28}, {0x1e6, 0x1e6}}, @common=@addrtype={{0x30}, {0x8, 0x68a, 0x0, 0x1}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x0, 0xf, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000003]}}}, @common=@ttl={{0x28}, {0x1, 0xa2}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id=0x68, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x6a}, @dev={0xac, 0x14, 0x14, 0x14}, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @port=0x4e20, @icmp_id=0x68}}}, {{@ip={@remote, @private=0xa010101, 0x0, 0x0, 'pim6reg0\x00', 'netpci0\x00', {0xff}, {}, 0x0, 0x3}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@remote, @ipv4=@broadcast, @port, @gre_key=0x4}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x468) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="a7", 0x1}], 0x1}}], 0x2, 0x0) 251.405674ms ago: executing program 2 (id=1813): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f00000000c0)={0x8, 0x2}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000000ac0)={0x48, 0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}) ioctl(r0, 0x3b8f, &(0x7f00000000c0)='(') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000002d74abce68c3c69e009db62227d5bb36855c1ebbaa0fd555ae7b1ce0931691e285728e1581f27c2203c57027069308407907"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 202.218356ms ago: executing program 2 (id=1814): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) (async) r2 = syz_open_procfs(0x0, &(0x7f0000002340)='fdinfo\x00') getdents(r2, &(0x7f0000000140)=""/40, 0x28) (async) getdents64(r2, &(0x7f0000000840)=""/217, 0xd9) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000029179892904947a96492000000dbef0faceb83545da96eaff56f00000000", @ANYRES32=0x0, @ANYBLOB="01100000000000001c0012800b0001006d616373656300000c000280050008000000000008000500", @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 200.858154ms ago: executing program 2 (id=1815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600200008000000100007007f0000017f000001910040001400020010000c0004"], 0x48}, 0x1, 0x0, 0x0, 0x2c048040}, 0xe800) 111.838147ms ago: executing program 2 (id=1816): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x149100, 0x0) ioctl$SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000040)=0x49) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) r2 = dup3(r1, r0, 0xb1f27c7d5b25a9d0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x84000, 0x84) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x60, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x427}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "fbb6ebe64d207ada6eaad834ca2c9c39"}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x9}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x20}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x25}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x480c0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x88, r5, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x74, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x40}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg1\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20}, 0x4000010) sendto(r2, &(0x7f0000000440)="24bb822e7abb554b9b8119e9cb0724ec56fee16e28bd059c0efde10dfefe7aa0e25ce1d035ed471b04ba4499cd3de4aec373a3c4053ea45f833a983fceb4609eee4e9a794b49ec7779443b52cfd37a7dd7957de59f46a82b19e052a120b5e93ebc1319e2dcae915b0cefbd51", 0x6c, 0x40000, &(0x7f00000004c0)=@llc={0x1a, 0x337, 0x50, 0x1f, 0x9, 0x40, @local}, 0x80) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000540)={0x8, 0x4, 0xf, 0x0, 0x8, 0x0, [{0x40, 0x9, 0x4, '\x00', 0x2001}, {0x9, 0xe9, 0x2, '\x00', 0x3}, {0x7, 0x3, 0x7fffffffffffffff, '\x00', 0x404}, {0x1, 0x4, 0x4, '\x00', 0x1280}, {0x3ff, 0x0, 0x5, '\x00', 0x1400}, {0x6, 0x4, 0x81, '\x00', 0x310e}, {0x9, 0x400, 0x1, '\x00', 0x880}, {0x0, 0x1, 0x7, '\x00', 0x8}]}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000a00)={&(0x7f0000000740), 0xc, &(0x7f00000009c0)={&(0x7f00000007c0)={0x1d4, r4, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x9, 0x71}}}}, [@NL80211_ATTR_IE={0x6d, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x6a}, 0xa, 0xd, @broadcast, 0x401, 0x62, 0xff}}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0xff, 0x21}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @supported_rates={0x1, 0x6, [{0x48, 0x1}, {0x37}, {0x12, 0x1}, {0x45, 0x1}, {0x18}, {0xb}]}, @perr={0x84, 0x3c, {0x3, 0x4, [{{}, @device_a, 0x6, @void, 0x25}, {{0x0, 0x1}, @device_a, 0x94c3, @value=@device_b, 0x15}, {{}, @device_b, 0x6, @void, 0x16}, {{}, @device_b, 0x35a2, @void, 0x31}]}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_IE={0x119, 0x2a, [@mesh_config={0x71, 0x7, {0xffffffffffffffff, 0x1, 0x1, 0x0, 0x2, 0x1}}, @measure_req={0x26, 0xae, {0x7, 0x68, 0x2, "e5265b568d9ec9601d1fc8339f9896c7f3c134aa7217ea83814491956fb948924d781fd37e5dcc1e6a0d9b7dd6726c63d66d1f7719c2afb5dfe76a42b823174cd8eb6833e91b7dbf6ea856419956039f28dac5d343601b9650ddd876009429bbd5c7e70b81074488f0a7114fda10a187ec1593eebee12ff35992dac1648807a0023bbb3ce6d39d6d908c31d6fe6f5541708af3850c6b01012df15b13d8086904df4dac5cd26a066b4d7331"}}, @cf={0x4, 0x6, {0x5, 0x0, 0x2, 0x8}}, @preq={0x82, 0x25, {{}, 0x5, 0x9, 0x6, @broadcast, 0x23b, @void, 0x3, 0x10000, 0x1, [{{0x1, 0x0, 0x1}, @device_a, 0x7f}]}}, @random={0x1}, @preq={0x82, 0x25, {{}, 0x81, 0x3, 0x9, @device_b, 0x3, @void, 0x8, 0x8, 0x1, [{{0x0, 0x0, 0x1}, @device_b, 0x7}]}}, @ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}, @NL80211_ATTR_MAC={0xa}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x4040014}, 0x24048804) r7 = syz_open_dev$admmidi(&(0x7f0000000a40), 0x1, 0x60040) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x21, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x5, 0x13, &(0x7f0000000c40)=""/19, 0x41100, 0x58, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000000c80)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000cc0)={0x0, 0x8, 0x5, 0x80000000}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[0x1, r2, r2, r2, r2, r2, r2, r2], &(0x7f0000000d40)=[{0x4, 0x2, 0xa, 0x7}, {0x1, 0x1, 0x6, 0xb}], 0x10, 0xe}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000e40)=@o_path={&(0x7f0000000a80)='./file1\x00', r8, 0x4000, r0}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000e80)={0x40000002}) ioctl$XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000fc0)={r0, &(0x7f0000000ec0)='\x00', 0x400800, &(0x7f0000000f00)={@align=0x9, {0x1a6f, 0x6b, 0x7, 0xd}}, 0x7, &(0x7f0000000f40), &(0x7f0000000f80)=0x7}) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000001000)={0x6, 0x5}) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000001180)={&(0x7f0000001040), 0xc, &(0x7f0000001140)={&(0x7f0000001080)={0xb0, 0x0, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x56315487}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4}, 0x4000) fanotify_mark(r2, 0x40, 0x8000002, r3, &(0x7f00000011c0)='./file1\x00') sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f00000012c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001280)={&(0x7f0000001240)={0x28, r4, 0x11, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x4f}, @void, @val={0xc, 0x99, {0x3, 0x24}}}}, ["", ""]}, 0x28}}, 0x4000004) setsockopt$sock_int(r1, 0x1, 0xc, &(0x7f0000001300)=0x6, 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000001380)=@o_path={&(0x7f0000001340)='./file0\x00', 0xffffffffffffffff, 0x4000, r7}, 0x18) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f00000013c0)={0x5, 0x0, [{0xb, 0x4, 0x9, 0x3, 0xbfeb, 0x7, 0x6}, {0x40000001, 0x9, 0x1, 0x0, 0x3, 0x0, 0x10}, {0x1, 0x8, 0x6, 0x2, 0x3, 0x80000001, 0xfff}, {0x1, 0x3, 0x3, 0x6, 0xef6, 0x0, 0x9}, {0xb, 0x6, 0x0, 0x200, 0xe, 0x7, 0x7}]}) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000014c0)={'\x00', 0x40, 0x9, 0x9, 0x1, 0x7fffffff, 0x0}) prlimit64(r9, 0x6, &(0x7f0000001540)={0x100000000, 0x7fff}, &(0x7f0000001580)) syz_emit_ethernet(0x3a, &(0x7f00000015c0)={@random="6122fc8b2b40", @broadcast, @void, {@x25={0x805, {0x1, 0xfb, 0xf1, "9f428f899f75e49adfb62dd29761c4b2fc6a3a92ce11b44d4d5fa287935f0f90cb377f40384d51587f"}}}}, &(0x7f0000001600)={0x0, 0x3, [0xc16, 0x244, 0xa72, 0x861]}) write$FUSE_STATX(r2, &(0x7f0000001700)={0x130, 0x0, 0x0, {0xc, 0x5, 0x0, '\x00', {0x10, 0x4, 0x4, 0x8, 0xffffffffffffffff, 0x0, 0x2000, '\x00', 0x40d, 0x4, 0x6, 0xd61a, {0x2, 0x200}, {0x5, 0x6}, {0x77, 0x1}, {0x80000001, 0x6de0}, 0xefec, 0x7ff, 0x3, 0x7}}}, 0x130) 111.00145ms ago: executing program 2 (id=1817): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="02000000b6346ebb6100", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000380), &(0x7f0000000580)=r2}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000110)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r3, &(0x7f0000000250)='/dev/zram0,65536G', 0x11) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x702, 0xe, 0x51, &(0x7f0000000340)="eb001400002620b8cac856000210", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.284433ms ago: executing program 2 (id=1818): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) clock_gettime(0x0, &(0x7f0000001c80)={0x0, 0x0}) r3 = socket(0x15, 0x5, 0x0) r4 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r4, &(0x7f0000000100)={0x1, 0x1}, 0x2) r5 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') syz_emit_ethernet(0x34, &(0x7f0000000a40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@generic={0x8906, "ed9e681963b59679626ced9af0b1af9db4b9ba44905bd8bb232ea0f04bdbf0904bc60fb5f75f"}}}, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$USERIO_CMD_REGISTER(r4, &(0x7f0000000200), 0x2) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001d80)={0x6, 0x3, &(0x7f0000000bc0)=@framed, &(0x7f0000001e40)='syzkaller\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r7, 0x0, 0x10c6, 0x2d, &(0x7f0000002d40)="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", &(0x7f0000000040), 0x3, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x14f8d, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000180)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r6, 0x84, 0x66, &(0x7f00000002c0)={r8, 0xa9ac}, &(0x7f0000000300)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x2df31ab3}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r4, &(0x7f0000000140), 0x2) getsockopt(r3, 0x200000000114, 0x271d, 0x0, &(0x7f0000000000)) recvmmsg$unix(r3, &(0x7f0000001bc0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/153, 0x99}, {&(0x7f0000000140)=""/91, 0x5b}, {&(0x7f00000001c0)=""/110, 0x6e}, {&(0x7f0000000240)=""/218, 0xda}, {&(0x7f0000000340)=""/10, 0xa}, {&(0x7f0000000380)=""/172, 0xac}], 0x6, &(0x7f0000000540)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000600)=@abs, 0x6e, &(0x7f0000001900)=[{&(0x7f0000000680)=""/92, 0x5c}, {&(0x7f0000000700)=""/100, 0x64}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/91, 0x5b}], 0x4, &(0x7f0000001940)=[@rights={{0x10}}], 0x10}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001ac0)=[{&(0x7f0000001a00)=""/158, 0x9e}], 0x1, &(0x7f0000001b00)}}], 0x3, 0x140, &(0x7f0000001cc0)={r1, r2+60000000}) r10 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r10, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0xf7, 0x4000000, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) syz_emit_vhci(&(0x7f0000000140)=@HCI_EVENT_PKT={0x4, @hci_ev_pin_code_req={{0x16, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b00)={0x11, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000700000000ab2e00000000a03e10971cce5327de000000000000000000"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) 0s ago: executing program 4 (id=1819): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='rd_pages=64\n', 0xc) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f00000000c0)) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/lun/lun_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) r3 = fsopen(&(0x7f0000000280)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r5, 0xc02864c3, &(0x7f0000000280)={&(0x7f0000000200)=[r6], 0x7fffffffffffffff, 0x1}) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r7) kernel console output (not intermixed with test programs): ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 272.639669][T10763] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 272.639679][T10763] RAX: 0000000000000000 RBX: 00007f0dbee25fa0 RCX: 00007f0dbeb9e159 [ 272.639686][T10763] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 272.639693][T10763] RBP: 00007f0dbec3506b R08: 0000000000000000 R09: 0000000000000000 [ 272.639700][T10763] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.639707][T10763] R13: 00007f0dbee26038 R14: 00007f0dbee25fa0 R15: 00007ffdbf7c4998 [ 272.639722][T10763] [ 272.665807][T10763] memory: usage 307200kB, limit 307200kB, failcnt 29674 [ 272.665823][T10763] memory+swap: usage 431376kB, limit 9007199254740988kB, failcnt 0 [ 272.665833][T10763] kmem: usage 9948kB, limit 9007199254740988kB, failcnt 0 [ 272.665843][T10763] Memory cgroup stats for /syz8: [ 272.665928][T10763] cache 304164864 [ 272.665934][T10763] rss 163840 [ 272.665938][T10763] rss_huge 0 [ 272.665942][T10763] shmem 304164864 [ 272.665946][T10763] mapped_file 1576960 [ 272.665950][T10763] dirty 0 [ 272.665954][T10763] writeback 0 [ 272.665958][T10763] workingset_refault_anon 11 [ 272.665963][T10763] workingset_refault_file 0 [ 272.665967][T10763] swap 127156224 [ 272.665971][T10763] swapcached 179167232 [ 272.665976][T10763] pgpgin 240007 [ 272.665980][T10763] pgpgout 165694 [ 272.665984][T10763] pgfault 52300 [ 272.665988][T10763] pgmajfault 20 [ 272.665992][T10763] inactive_anon 99516416 [ 272.665996][T10763] active_anon 204869632 [ 272.666001][T10763] inactive_file 0 [ 272.666005][T10763] active_file 0 [ 272.666008][T10763] unevictable 0 [ 272.666013][T10763] hierarchical_memory_limit 314572800 [ 272.666017][T10763] hierarchical_memsw_limit 9223372036854771712 [ 272.666022][T10763] total_cache 304164864 [ 272.666027][T10763] total_rss 163840 [ 272.666031][T10763] total_rss_huge 0 [ 272.666035][T10763] total_shmem 304164864 [ 272.666039][T10763] total_mapped_file 1576960 [ 272.666043][T10763] total_dirty 0 [ 272.666048][T10763] total_writeback 0 [ 272.666052][T10763] total_workingset_refault_anon 11 [ 272.666057][T10763] total_workingset_refault_file 0 [ 272.666061][T10763] total_swap 127156224 [ 272.666065][T10763] total_swapcached 179167232 [ 272.666070][T10763] total_pgpgin 240007 [ 272.666074][T10763] total_pgpgout 165694 [ 272.666079][T10763] total_pgfault 52300 [ 272.666083][T10763] total_pgmajfault 20 [ 272.666087][T10763] total_inactive_anon 99516416 [ 272.666091][T10763] total_active_anon 204869632 [ 272.666096][T10763] total_inactive_file 0 [ 272.666100][T10763] total_active_file 0 [ 272.666105][T10763] total_unevictable 0 [ 272.666109][T10763] anon_cost 0 [ 272.666113][T10763] file_cost 0 [ 272.666117][T10763] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1219,pid=10757,uid=0 [ 272.666171][T10763] Memory cgroup out of memory: Killed process 10757 (syz.8.1219) total-vm:100216kB, anon-rss:1312kB, file-rss:57096kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 272.698094][T10772] syz.8.1219 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 272.698117][T10772] CPU: 3 UID: 0 PID: 10772 Comm: syz.8.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.698133][T10772] Tainted: [L]=SOFTLOCKUP [ 272.698137][T10772] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.698144][T10772] Call Trace: [ 272.698148][T10772] [ 272.698153][T10772] dump_stack_lvl+0x100/0x190 [ 272.698174][T10772] dump_header+0xfb/0x606 [ 272.698188][T10772] oom_kill_process.cold+0xd/0x380 [ 272.698203][T10772] out_of_memory+0x340/0x14f0 [ 272.698222][T10772] ? __pfx_out_of_memory+0x10/0x10 [ 272.698241][T10772] mem_cgroup_out_of_memory+0xc6/0x130 [ 272.698256][T10772] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 272.698268][T10772] ? find_held_lock+0x2b/0x80 [ 272.698288][T10772] ? do_raw_spin_unlock+0x145/0x1e0 [ 272.698303][T10772] ? _raw_spin_unlock+0x28/0x50 [ 272.698320][T10772] try_charge_memcg+0x783/0xf60 [ 272.698345][T10772] ? __pfx_try_charge_memcg+0x10/0x10 [ 272.698361][T10772] ? find_held_lock+0x2b/0x80 [ 272.698377][T10772] ? rcu_read_unlock+0x17/0x60 [ 272.698394][T10772] ? rcu_read_unlock+0x17/0x60 [ 272.698412][T10772] ? find_held_lock+0x2b/0x80 [ 272.698428][T10772] ? rcu_read_unlock+0x17/0x60 [ 272.698449][T10772] charge_memcg+0x1ae/0x210 [ 272.698466][T10772] __mem_cgroup_charge+0x2b/0x1c0 [ 272.698479][T10772] shmem_alloc_and_add_folio+0x451/0xd40 [ 272.698500][T10772] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 272.698518][T10772] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 272.698539][T10772] shmem_get_folio_gfp+0x75b/0x1980 [ 272.698560][T10772] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 272.698579][T10772] ? vm_normal_page+0x1d1/0x380 [ 272.698592][T10772] ? __pfx_vm_normal_page+0x10/0x10 [ 272.698607][T10772] shmem_write_begin+0x1a4/0x420 [ 272.698626][T10772] ? __pfx_shmem_write_begin+0x10/0x10 [ 272.698645][T10772] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 272.698666][T10772] generic_perform_write+0x292/0xa40 [ 272.698681][T10772] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 272.698697][T10772] ? __pfx_generic_perform_write+0x10/0x10 [ 272.698713][T10772] ? file_update_time_flags+0x38c/0x520 [ 272.698732][T10772] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 272.698744][T10772] shmem_file_write_iter+0x10e/0x140 [ 272.698757][T10772] __kernel_write_iter+0x2ac/0x930 [ 272.698770][T10772] ? __pfx___kernel_write_iter+0x10/0x10 [ 272.698782][T10772] ? __up_read+0x333/0x980 [ 272.698798][T10772] ? dump_user_range+0x65e/0xad0 [ 272.698810][T10772] ? copy_mc_enhanced_fast_string+0x6/0xf [ 272.698826][T10772] dump_user_range+0x3f9/0xad0 [ 272.698841][T10772] ? __pfx_dump_user_range+0x10/0x10 [ 272.698858][T10772] ? __pfx_writenote+0x10/0x10 [ 272.698871][T10772] ? elf_core_dump+0x1f25/0x3d20 [ 272.698886][T10772] elf_core_dump+0x2d68/0x3d20 [ 272.698907][T10772] ? __pfx_elf_core_dump+0x10/0x10 [ 272.698919][T10772] ? kasan_save_stack+0x3f/0x50 [ 272.698931][T10772] ? kasan_save_stack+0x30/0x50 [ 272.698944][T10772] ? kasan_save_track+0x14/0x30 [ 272.698956][T10772] ? __kasan_kmalloc+0xaa/0xb0 [ 272.698969][T10772] ? vfs_coredump+0x21f6/0x54a0 [ 272.698979][T10772] ? get_signal+0x1f2a/0x21e0 [ 272.698991][T10772] ? arch_do_signal_or_restart+0x91/0x7e0 [ 272.699011][T10772] ? 0xffffffffff600000 [ 272.699037][T10772] ? lock_acquire+0x1d1/0x380 [ 272.699049][T10772] ? get_signal+0x1f2a/0x21e0 [ 272.699066][T10772] ? vfs_coredump+0x281a/0x54a0 [ 272.699077][T10772] vfs_coredump+0x281a/0x54a0 [ 272.699094][T10772] ? __pfx_vfs_coredump+0x10/0x10 [ 272.699106][T10772] ? __lock_acquire+0x5c0/0x1f40 [ 272.699121][T10772] ? __lock_acquire+0x5c0/0x1f40 [ 272.699135][T10772] ? lock_acquire+0x1d1/0x380 [ 272.699146][T10772] ? unwind_next_frame+0xbd/0x2090 [ 272.699165][T10772] ? lock_acquire+0x1d1/0x380 [ 272.699180][T10772] ? bpf_ksym_find+0x128/0x1c0 [ 272.699198][T10772] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 272.699213][T10772] ? arch_stack_walk+0xa6/0xf0 [ 272.699233][T10772] ? __sigqueue_free+0xbe/0x2a0 [ 272.699248][T10772] ? stack_trace_save+0x8e/0xc0 [ 272.699258][T10772] ? __pfx_stack_trace_save+0x10/0x10 [ 272.699270][T10772] ? stack_depot_save_flags+0x27/0x9f0 [ 272.699285][T10772] ? __lock_acquire+0x5c0/0x1f40 [ 272.699324][T10772] ? proc_coredump_connector+0x2d3/0x4f0 [ 272.699336][T10772] ? __pfx_proc_coredump_connector+0x10/0x10 [ 272.699351][T10772] ? rcu_is_watching+0x13/0xc0 [ 272.699369][T10772] get_signal+0x1f2a/0x21e0 [ 272.699387][T10772] ? __pfx_get_signal+0x10/0x10 [ 272.699404][T10772] arch_do_signal_or_restart+0x91/0x7e0 [ 272.699423][T10772] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 272.699448][T10772] irqentry_exit+0x402/0xa10 [ 272.699467][T10772] asm_exc_page_fault+0x26/0x30 [ 272.699479][T10772] RIP: 0033:0x7f0dbeb9e161 [ 272.699489][T10772] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 272.699500][T10772] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 272.699510][T10772] RAX: 0000000000000000 RBX: 00007f0dbee25fa0 RCX: 00007f0dbeb9e159 [ 272.699517][T10772] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 272.699524][T10772] RBP: 00007f0dbec3506b R08: 0000000000000000 R09: 0000000000000000 [ 272.699531][T10772] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.699537][T10772] R13: 00007f0dbee26038 R14: 00007f0dbee25fa0 R15: 00007ffdbf7c4998 [ 272.699555][T10772] [ 272.699560][T10772] memory: usage 307200kB, limit 307200kB, failcnt 29826 [ 272.699567][T10772] memory+swap: usage 431360kB, limit 9007199254740988kB, failcnt 0 [ 272.699574][T10772] kmem: usage 9940kB, limit 9007199254740988kB, failcnt 0 [ 272.699581][T10772] Memory cgroup stats for /syz8: [ 272.699644][T10772] cache 304164864 [ 272.699649][T10772] rss 163840 [ 272.699653][T10772] rss_huge 0 [ 272.699657][T10772] shmem 304164864 [ 272.699661][T10772] mapped_file 1576960 [ 272.699665][T10772] dirty 0 [ 272.699669][T10772] writeback 0 [ 272.699673][T10772] workingset_refault_anon 11 [ 272.699677][T10772] workingset_refault_file 0 [ 272.699681][T10772] swap 127156224 [ 272.699685][T10772] swapcached 179167232 [ 272.699689][T10772] pgpgin 240007 [ 272.699694][T10772] pgpgout 165694 [ 272.699697][T10772] pgfault 52300 [ 272.699701][T10772] pgmajfault 20 [ 272.699705][T10772] inactive_anon 99516416 [ 272.699710][T10772] active_anon 204869632 [ 272.699714][T10772] inactive_file 0 [ 272.699718][T10772] active_file 0 [ 272.699722][T10772] unevictable 0 [ 272.699726][T10772] hierarchical_memory_limit 314572800 [ 272.699730][T10772] hierarchical_memsw_limit 9223372036854771712 [ 272.699735][T10772] total_cache 304164864 [ 272.699739][T10772] total_rss 163840 [ 272.699743][T10772] total_rss_huge 0 [ 272.699748][T10772] total_shmem 304164864 [ 272.699752][T10772] total_mapped_file 1576960 [ 272.699756][T10772] total_dirty 0 [ 272.699760][T10772] total_writeback 0 [ 272.699764][T10772] total_workingset_refault_anon 11 [ 272.699769][T10772] total_workingset_refault_file 0 [ 272.699773][T10772] total_swap 127156224 [ 272.699777][T10772] total_swapcached 179167232 [ 272.699782][T10772] total_pgpgin 240007 [ 272.699786][T10772] total_pgpgout 165694 [ 272.699790][T10772] total_pgfault 52300 [ 272.699794][T10772] total_pgmajfault 20 [ 272.699798][T10772] total_inactive_anon 99516416 [ 272.699803][T10772] total_active_anon 204869632 [ 272.699807][T10772] total_inactive_file 0 [ 272.699811][T10772] total_active_file 0 [ 272.699816][T10772] total_unevictable 0 [ 272.699820][T10772] anon_cost 0 [ 272.699824][T10772] file_cost 0 [ 272.699828][T10772] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1219,pid=10747,uid=0 [ 272.701348][T10772] Memory cgroup out of memory: Killed process 10747 (syz.8.1219) total-vm:100216kB, anon-rss:1308kB, file-rss:56072kB, shmem-rss:0kB, UID:0 pgtables:204kB oom_score_adj:0 [ 272.722016][ T8162] syz-executor invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=0, oom_score_adj=0 [ 272.722038][ T8162] CPU: 0 UID: 0 PID: 8162 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 272.722053][ T8162] Tainted: [L]=SOFTLOCKUP [ 272.722058][ T8162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.722078][ T8162] Call Trace: [ 272.722083][ T8162] [ 272.722088][ T8162] dump_stack_lvl+0x100/0x190 [ 272.722109][ T8162] dump_header+0xfb/0x606 [ 272.722123][ T8162] oom_kill_process.cold+0xd/0x380 [ 272.722137][ T8162] out_of_memory+0x340/0x14f0 [ 272.722156][ T8162] ? __pfx_out_of_memory+0x10/0x10 [ 272.722175][ T8162] mem_cgroup_out_of_memory+0xc6/0x130 [ 272.722189][ T8162] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 272.722201][ T8162] ? find_held_lock+0x2b/0x80 [ 272.722220][ T8162] ? do_raw_spin_unlock+0x145/0x1e0 [ 272.722236][ T8162] ? _raw_spin_unlock+0x28/0x50 [ 272.722252][ T8162] try_charge_memcg+0x783/0xf60 [ 272.722273][ T8162] ? __pfx_try_charge_memcg+0x10/0x10 [ 272.722290][ T8162] ? find_held_lock+0x2b/0x80 [ 272.722306][ T8162] ? rcu_read_unlock+0x17/0x60 [ 272.722323][ T8162] ? rcu_read_unlock+0x17/0x60 [ 272.722345][ T8162] obj_cgroup_charge_pages+0x2b/0x1f0 [ 272.722363][ T8162] __memcg_slab_post_alloc_hook+0x47f/0x10c0 [ 272.722386][ T8162] ? kasan_unpoison+0x27/0x60 [ 272.722399][ T8162] __kvmalloc_node_noprof+0x750/0x9b0 [ 272.722412][ T8162] ? __might_fault+0x91/0x140 [ 272.722430][ T8162] ? xt_alloc_table_info+0x44/0xa0 [ 272.722456][ T8162] xt_alloc_table_info+0x44/0xa0 [ 272.722472][ T8162] do_ipt_set_ctl+0x611/0xcf0 [ 272.722483][ T8162] ? nf_sockopt_find.isra.0+0x222/0x290 [ 272.722499][ T8162] ? nf_sockopt_find.isra.0+0x222/0x290 [ 272.722516][ T8162] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 272.722527][ T8162] ? __mutex_unlock_slowpath+0x35d/0x930 [ 272.722546][ T8162] ? sockopt_release_sock+0x5c/0x70 [ 272.722562][ T8162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.722585][ T8162] ? nf_sockopt_find.isra.0+0x222/0x290 [ 272.722602][ T8162] nf_setsockopt+0x8d/0xf0 [ 272.722619][ T8162] ip_setsockopt+0xcb/0xf0 [ 272.722632][ T8162] tcp_setsockopt+0xa7/0x100 [ 272.722645][ T8162] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 272.722664][ T8162] do_sock_setsockopt+0xf3/0x1d0 [ 272.722682][ T8162] __sys_setsockopt+0x195/0x220 [ 272.722699][ T8162] __x64_sys_setsockopt+0xbd/0x160 [ 272.722712][ T8162] ? do_syscall_64+0xae/0x790 [ 272.722729][ T8162] ? lockdep_hardirqs_on+0x7d/0x110 [ 272.722746][ T8162] do_syscall_64+0x123/0x790 [ 272.722764][ T8162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.722776][ T8162] RIP: 0033:0x7f0dbeb9f99a [ 272.722786][ T8162] Code: 48 83 ec 10 48 63 c9 48 63 ff 45 89 c9 6a 2c e8 6c 99 fb ff 48 83 c4 18 c3 0f 1f 80 00 00 00 00 49 89 ca b8 36 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 [ 272.722797][ T8162] RSP: 002b:00007ffdbf7c4608 EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 272.722809][ T8162] RAX: ffffffffffffffda RBX: 00007ffdbf7c4690 RCX: 00007f0dbeb9f99a [ 272.722816][ T8162] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 272.722823][ T8162] RBP: 0000000000000003 R08: 00000000000002d8 R09: 0000000000000000 [ 272.722829][ T8162] R10: 00007f0dbedf1b20 R11: 0000000000000206 R12: 00007f0dbedf1ac0 [ 272.722836][ T8162] R13: 00007ffdbf7c462c R14: 0000000000000000 R15: 00007f0dbedf2180 [ 272.722851][ T8162] [ 272.722896][ T8162] memory: usage 307200kB, limit 307200kB, failcnt 29887 [ 272.722905][ T8162] memory+swap: usage 431152kB, limit 9007199254740988kB, failcnt 0 [ 272.722912][ T8162] kmem: usage 9928kB, limit 9007199254740988kB, failcnt 0 [ 272.722919][ T8162] Memory cgroup stats for /syz8: [ 272.722989][ T8162] cache 304164864 [ 272.722995][ T8162] rss 163840 [ 272.722999][ T8162] rss_huge 0 [ 272.723003][ T8162] shmem 304164864 [ 272.723007][ T8162] mapped_file 1576960 [ 272.723062][ T8162] dirty 0 [ 272.723067][ T8162] writeback 0 [ 272.723071][ T8162] workingset_refault_anon 11 [ 272.723076][ T8162] workingset_refault_file 0 [ 272.723080][ T8162] swap 127156224 [ 272.723084][ T8162] swapcached 179167232 [ 272.723088][ T8162] pgpgin 240007 [ 272.723092][ T8162] pgpgout 165694 [ 272.723096][ T8162] pgfault 52300 [ 272.723100][ T8162] pgmajfault 20 [ 272.723104][ T8162] inactive_anon 99516416 [ 272.723108][ T8162] active_anon 204869632 [ 272.723113][ T8162] inactive_file 0 [ 272.723117][ T8162] active_file 0 [ 272.723121][ T8162] unevictable 0 [ 272.723125][ T8162] hierarchical_memory_limit 314572800 [ 272.723129][ T8162] hierarchical_memsw_limit 9223372036854771712 [ 272.723134][ T8162] total_cache 304164864 [ 272.723138][ T8162] total_rss 163840 [ 272.723142][ T8162] total_rss_huge 0 [ 272.723146][ T8162] total_shmem 304164864 [ 272.723150][ T8162] total_mapped_file 1576960 [ 272.723154][ T8162] total_dirty 0 [ 272.723158][ T8162] total_writeback 0 [ 272.723163][ T8162] total_workingset_refault_anon 11 [ 272.723167][ T8162] total_workingset_refault_file 0 [ 272.723171][ T8162] total_swap 127156224 [ 272.723217][ T8162] total_swapcached 179167232 [ 272.723223][ T8162] total_pgpgin 240007 [ 272.723227][ T8162] total_pgpgout 165694 [ 272.723231][ T8162] total_pgfault 52300 [ 272.723235][ T8162] total_pgmajfault 20 [ 272.723239][ T8162] total_inactive_anon 99516416 [ 272.725591][ T8162] total_active_anon 204869632 [ 272.725598][ T8162] total_inactive_file 0 [ 272.725602][ T8162] total_active_file 0 [ 272.725606][ T8162] total_unevictable 0 [ 272.725610][ T8162] anon_cost 0 [ 272.725614][ T8162] file_cost 0 [ 272.725618][ T8162] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1219,pid=10746,uid=0 [ 272.725882][ T8162] Memory cgroup out of memory: Killed process 10746 (syz.8.1219) total-vm:100216kB, anon-rss:1308kB, file-rss:54728kB, shmem-rss:0kB, UID:0 pgtables:192kB oom_score_adj:0 [ 272.961736][T10993] Bluetooth: MGMT ver 1.23 [ 272.961786][T10993] Bluetooth: hci1: expected 87 bytes, got 2 bytes [ 272.974849][T10994] FAULT_INJECTION: forcing a failure. [ 272.974849][T10994] name failslab, interval 1, probability 0, space 0, times 0 [ 272.974883][T10994] CPU: 0 UID: 0 PID: 10994 Comm: syz.1.1254 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.974902][T10994] Tainted: [L]=SOFTLOCKUP [ 272.974906][T10994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.974913][T10994] Call Trace: [ 272.974918][T10994] [ 272.974923][T10994] dump_stack_lvl+0x100/0x190 [ 272.974943][T10994] should_fail_ex.cold+0x5/0xa [ 272.974962][T10994] should_failslab+0xc2/0x120 [ 272.974978][T10994] __kmalloc_node_track_caller_noprof+0xfa/0x870 [ 272.974993][T10994] ? kasprintf+0xc7/0x100 [ 272.975008][T10994] kvasprintf+0xbc/0x150 [ 272.975021][T10994] ? __pfx_kvasprintf+0x10/0x10 [ 272.975035][T10994] ? up_write+0x2dc/0x5b0 [ 272.975051][T10994] kasprintf+0xc7/0x100 [ 272.975063][T10994] ? __pfx_kasprintf+0x10/0x10 [ 272.975077][T10994] ? kernfs_create_link+0x1bd/0x240 [ 272.975091][T10994] ? kernfs_put+0x3f/0x60 [ 272.975108][T10994] ? sysfs_do_create_link_sd+0xbb/0x140 [ 272.975127][T10994] module_add_driver+0x10c/0x420 [ 272.975146][T10994] bus_add_driver+0x34a/0x5b0 [ 272.975160][T10994] driver_register+0x1e2/0x360 [ 272.975174][T10994] ? rcu_is_watching+0x13/0xc0 [ 272.975191][T10994] usb_gadget_register_driver_owner+0x132/0x210 [ 272.975207][T10994] raw_ioctl+0x1a85/0x2b80 [ 272.975223][T10994] ? __pfx_raw_ioctl+0x10/0x10 [ 272.975234][T10994] ? selinux_file_ioctl+0x13b/0x290 [ 272.975247][T10994] ? selinux_file_ioctl+0xb6/0x290 [ 272.975261][T10994] ? __pfx_raw_ioctl+0x10/0x10 [ 272.975272][T10994] __x64_sys_ioctl+0x18e/0x210 [ 272.975285][T10994] do_syscall_64+0x123/0x790 [ 272.975304][T10994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.975316][T10994] RIP: 0033:0x7fa465f9ddeb [ 272.975342][T10994] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 272.975354][T10994] RSP: 002b:00007fa466df9f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.975367][T10994] RAX: ffffffffffffffda RBX: 000000000000000e RCX: 00007fa465f9ddeb [ 272.975377][T10994] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 000000000000000e [ 272.975386][T10994] RBP: 00007fa466dfafd0 R08: 0000000000000001 R09: 00000000ffffffff [ 272.975394][T10994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.975402][T10994] R13: 0000200000000000 R14: 0000000000000000 R15: 0000000000000868 [ 272.975416][T10994] [ 272.975499][T10994] bus_add_driver: failed to create module links for raw-gadget.2 [ 272.975586][T10994] UDC core: USB Raw Gadget: driver registration failed: -12 [ 272.975609][T10994] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 272.991053][ T10] usb 6-1: USB disconnect, device number 3 [ 273.197582][ T63] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 273.348106][ T63] usb 14-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 273.351025][ T63] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.351046][ T63] usb 14-1: config 0 has no interfaces? [ 273.355689][ T63] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=249 [ 273.355711][ T63] usb 14-1: SerialNumber: syz [ 273.358948][ T63] usb 14-1: config 0 descriptor?? [ 273.528629][T11004] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1264'. [ 273.529090][T10747] syz.8.1219 (10747) used greatest stack depth: 18448 bytes left [ 273.568322][T10754] syz.8.1219 (10754) used greatest stack depth: 18408 bytes left [ 273.611446][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.611815][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.666442][ T1042] usb 14-1: USB disconnect, device number 3 [ 273.689316][T11005] wlan0 speed is unknown, defaulting to 1000 [ 273.824732][T11023] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 274.124414][T11035] fuse: fd is not a fuse device [ 274.137700][T11035] fuse: fd is not a fuse device [ 274.161390][T11035] fuse: Unknown parameter '0x00000000000000000x0000000000000008' [ 274.193916][T11037] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 274.448125][T11054] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1 out of range (51000000..2150000000) [ 274.448187][T11055] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 1 out of range (51000000..2150000000) [ 274.776774][T10770] syz.8.1219 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=0 [ 274.776797][T10770] CPU: 1 UID: 0 PID: 10770 Comm: syz.8.1219 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.776813][T10770] Tainted: [L]=SOFTLOCKUP [ 274.776817][T10770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 274.776824][T10770] Call Trace: [ 274.776828][T10770] [ 274.776833][T10770] dump_stack_lvl+0x100/0x190 [ 274.776854][T10770] dump_header+0xfb/0x606 [ 274.776868][T10770] oom_kill_process.cold+0xd/0x380 [ 274.776883][T10770] out_of_memory+0x340/0x14f0 [ 274.776901][T10770] ? __pfx_out_of_memory+0x10/0x10 [ 274.776920][T10770] mem_cgroup_out_of_memory+0xc6/0x130 [ 274.776934][T10770] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 274.776947][T10770] ? find_held_lock+0x2b/0x80 [ 274.776966][T10770] ? do_raw_spin_unlock+0x145/0x1e0 [ 274.776981][T10770] ? _raw_spin_unlock+0x28/0x50 [ 274.776997][T10770] try_charge_memcg+0x783/0xf60 [ 274.777019][T10770] ? __pfx_try_charge_memcg+0x10/0x10 [ 274.777035][T10770] ? find_held_lock+0x2b/0x80 [ 274.777051][T10770] ? rcu_read_unlock+0x17/0x60 [ 274.777068][T10770] ? rcu_read_unlock+0x17/0x60 [ 274.777085][T10770] ? find_held_lock+0x2b/0x80 [ 274.777101][T10770] ? rcu_read_unlock+0x17/0x60 [ 274.777122][T10770] charge_memcg+0x1ae/0x210 [ 274.777139][T10770] __mem_cgroup_charge+0x2b/0x1c0 [ 274.777152][T10770] shmem_alloc_and_add_folio+0x451/0xd40 [ 274.777173][T10770] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 274.777191][T10770] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 274.777212][T10770] shmem_get_folio_gfp+0x75b/0x1980 [ 274.777233][T10770] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 274.777251][T10770] ? vm_normal_page+0x1d1/0x380 [ 274.777264][T10770] ? __pfx_vm_normal_page+0x10/0x10 [ 274.777304][T10770] shmem_write_begin+0x1a4/0x420 [ 274.777323][T10770] ? __pfx_shmem_write_begin+0x10/0x10 [ 274.777341][T10770] ? balance_dirty_pages_ratelimited_flags+0x91/0x1170 [ 274.777366][T10770] generic_perform_write+0x292/0xa40 [ 274.777381][T10770] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 274.777397][T10770] ? __pfx_generic_perform_write+0x10/0x10 [ 274.777412][T10770] ? file_update_time_flags+0x38c/0x520 [ 274.777432][T10770] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 274.777443][T10770] shmem_file_write_iter+0x10e/0x140 [ 274.777457][T10770] __kernel_write_iter+0x2ac/0x930 [ 274.777470][T10770] ? __pfx___kernel_write_iter+0x10/0x10 [ 274.777482][T10770] ? __up_read+0x333/0x980 [ 274.777498][T10770] ? dump_user_range+0x65e/0xad0 [ 274.777514][T10770] dump_user_range+0x3f9/0xad0 [ 274.777528][T10770] ? __pfx_dump_user_range+0x10/0x10 [ 274.777545][T10770] ? __pfx_writenote+0x10/0x10 [ 274.777558][T10770] ? elf_core_dump+0x1f25/0x3d20 [ 274.777573][T10770] elf_core_dump+0x2d68/0x3d20 [ 274.777593][T10770] ? __pfx_elf_core_dump+0x10/0x10 [ 274.777606][T10770] ? kasan_save_stack+0x3f/0x50 [ 274.777618][T10770] ? kasan_save_stack+0x30/0x50 [ 274.777631][T10770] ? kasan_save_track+0x14/0x30 [ 274.777643][T10770] ? __kasan_kmalloc+0xaa/0xb0 [ 274.777656][T10770] ? vfs_coredump+0x21f6/0x54a0 [ 274.777666][T10770] ? get_signal+0x1f2a/0x21e0 [ 274.777671][T11074] CacheFiles: mkdir cache failed with error -122 [ 274.777679][T10770] ? arch_do_signal_or_restart+0x91/0x7e0 [ 274.777700][T10770] ? 0xffffffffff600000 [ 274.777707][T11074] CacheFiles: Failed to register: -122 [ 274.777726][T10770] ? lock_acquire+0x1d1/0x380 [ 274.777765][T10770] ? get_signal+0x1f2a/0x21e0 [ 274.777785][T10770] ? vfs_coredump+0x281a/0x54a0 [ 274.777796][T10770] vfs_coredump+0x281a/0x54a0 [ 274.777813][T10770] ? __pfx_vfs_coredump+0x10/0x10 [ 274.777825][T10770] ? __lock_acquire+0x5c0/0x1f40 [ 274.777840][T10770] ? __lock_acquire+0x5c0/0x1f40 [ 274.777854][T10770] ? lock_acquire+0x1d1/0x380 [ 274.777866][T10770] ? unwind_next_frame+0xbd/0x2090 [ 274.777890][T10770] ? lock_acquire+0x1d1/0x380 [ 274.777905][T10770] ? bpf_ksym_find+0x128/0x1c0 [ 274.777922][T10770] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 274.777938][T10770] ? arch_stack_walk+0xa6/0xf0 [ 274.777957][T10770] ? __sigqueue_free+0xbe/0x2a0 [ 274.777973][T10770] ? stack_trace_save+0x8e/0xc0 [ 274.777983][T10770] ? __pfx_stack_trace_save+0x10/0x10 [ 274.777994][T10770] ? stack_depot_save_flags+0x27/0x9f0 [ 274.778010][T10770] ? __lock_acquire+0x5c0/0x1f40 [ 274.778045][T10770] ? proc_coredump_connector+0x2d3/0x4f0 [ 274.778057][T10770] ? __pfx_proc_coredump_connector+0x10/0x10 [ 274.778078][T10770] ? rcu_is_watching+0x13/0xc0 [ 274.778096][T10770] get_signal+0x1f2a/0x21e0 [ 274.778114][T10770] ? __pfx_get_signal+0x10/0x10 [ 274.778131][T10770] arch_do_signal_or_restart+0x91/0x7e0 [ 274.778149][T10770] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 274.778174][T10770] irqentry_exit+0x402/0xa10 [ 274.778205][T10770] asm_exc_page_fault+0x26/0x30 [ 274.778218][T10770] RIP: 0033:0x7f0dbeb9e161 [ 274.778229][T10770] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 274.778240][T10770] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 274.778250][T10770] RAX: 0000000000000000 RBX: 00007f0dbee25fa0 RCX: 00007f0dbeb9e159 [ 274.778257][T10770] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 274.778265][T10770] RBP: 00007f0dbec3506b R08: 0000000000000000 R09: 0000000000000000 [ 274.778272][T10770] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 274.778278][T10770] R13: 00007f0dbee26038 R14: 00007f0dbee25fa0 R15: 00007ffdbf7c4998 [ 274.778293][T10770] [ 274.778523][T10770] memory: usage 307200kB, limit 307200kB, failcnt 43018 [ 274.778533][T10770] memory+swap: usage 430260kB, limit 9007199254740988kB, failcnt 0 [ 274.778540][T10770] kmem: usage 8780kB, limit 9007199254740988kB, failcnt 0 [ 274.778547][T10770] Memory cgroup stats for /syz8: [ 274.778635][T10770] cache 305332224 [ 274.778641][T10770] rss 229376 [ 274.778646][T10770] rss_huge 0 [ 274.778650][T10770] shmem 305332224 [ 274.778654][T10770] mapped_file 1576960 [ 274.778658][T10770] dirty 0 [ 274.778662][T10770] writeback 0 [ 274.778666][T10770] workingset_refault_anon 15 [ 274.778671][T10770] workingset_refault_file 0 [ 274.778675][T10770] swap 126013440 [ 274.778679][T10770] swapcached 265003008 [ 274.778683][T10770] pgpgin 295846 [ 274.778688][T10770] pgpgout 221241 [ 274.778692][T10770] pgfault 54835 [ 274.778696][T10770] pgmajfault 25 [ 274.778700][T10770] inactive_anon 259330048 [ 274.778705][T10770] active_anon 46252032 [ 274.778709][T10770] inactive_file 0 [ 274.778714][T10770] active_file 0 [ 274.778718][T10770] unevictable 0 [ 274.778722][T10770] hierarchical_memory_limit 314572800 [ 274.778727][T10770] hierarchical_memsw_limit 9223372036854771712 [ 274.778732][T10770] total_cache 305332224 [ 274.778737][T10770] total_rss 229376 [ 274.778741][T10770] total_rss_huge 0 [ 274.778745][T10770] total_shmem 305332224 [ 274.778750][T10770] total_mapped_file 1576960 [ 274.778754][T10770] total_dirty 0 [ 274.778758][T10770] total_writeback 0 [ 274.778762][T10770] total_workingset_refault_anon 15 [ 274.778767][T10770] total_workingset_refault_file 0 [ 274.778772][T10770] total_swap 126013440 [ 274.778776][T10770] total_swapcached 265003008 [ 274.778781][T10770] total_pgpgin 295846 [ 274.778785][T10770] total_pgpgout 221241 [ 274.778789][T10770] total_pgfault 54835 [ 274.778794][T10770] total_pgmajfault 25 [ 274.778798][T10770] total_inactive_anon 259330048 [ 274.778803][T10770] total_active_anon 46252032 [ 274.778807][T10770] total_inactive_file 0 [ 274.778811][T10770] total_active_file 0 [ 274.778816][T10770] total_unevictable 0 [ 274.778820][T10770] anon_cost 0 [ 274.778824][T10770] file_cost 0 [ 274.778828][T10770] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz8,task_memcg=/syz8,task=syz.8.1219,pid=10770,uid=0 [ 274.780196][T10770] Memory cgroup out of memory: Killed process 10770 (syz.8.1219) total-vm:100216kB, anon-rss:1264kB, file-rss:61320kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:0 [ 274.880409][T10748] Memory cgroup out of memory: Killed process 10763 (syz.8.1219) total-vm:100216kB, anon-rss:1264kB, file-rss:59336kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:0 [ 274.889276][T10777] Memory cgroup out of memory: Killed process 10777 (syz.8.1219) total-vm:100216kB, anon-rss:1264kB, file-rss:59208kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:0 [ 274.979323][ T30] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 274.993987][T10748] Memory cgroup out of memory: Killed process 10774 (syz.8.1219) total-vm:100216kB, anon-rss:1276kB, file-rss:59208kB, shmem-rss:0kB, UID:0 pgtables:212kB oom_score_adj:0 [ 275.167189][ T30] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 275.168025][ T30] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.168052][ T30] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 275.168070][ T30] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 275.168087][ T30] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 275.168117][ T30] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.203528][T11076] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 275.203595][T11076] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 275.204593][ T30] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 275.220658][ T30] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 275.220725][ T30] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 275.222123][ T30] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 275.223478][ T30] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 275.223543][ T30] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 275.247382][ T30] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 275.375871][T11095] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1288'. [ 275.416127][T11076] binder: 11075:11076 ioctl c0306201 200000000040 returned -14 [ 275.416290][T11076] binder: 11075:11076 ioctl c0306201 200000000640 returned -22 [ 275.439306][T11101] netlink: 'syz.8.1289': attribute type 7 has an invalid length. [ 275.439320][T11101] netlink: 'syz.8.1289': attribute type 8 has an invalid length. [ 275.579366][T11108] tmpfs: Using encoding : utf8-12.1.0 [ 275.585875][ T1480] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 275.725950][ T1480] usb 12-1: device descriptor read/64, error -71 [ 275.891407][T11133] block device autoloading is deprecated and will be removed. [ 275.896944][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 275.896955][ T43] audit: type=1400 audit(1790131583.556:28915): avc: denied { getattr } for pid=11132 comm="syz.1.1294" name="/" dev="failfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 275.920172][T11133] syzkaller1: entered promiscuous mode [ 275.920188][T11133] syzkaller1: entered allmulticast mode [ 275.965772][ T1480] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 276.095989][ T1480] usb 12-1: device descriptor read/64, error -71 [ 276.215823][ T1480] usb usb12-port1: attempt power cycle [ 276.465905][T11153] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 276.466205][ T8375] bond_slave_0: entered promiscuous mode [ 276.466233][ T8375] bond_slave_1: entered promiscuous mode [ 276.565800][ T1480] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 276.586679][ T1480] usb 12-1: device descriptor read/8, error -71 [ 276.782291][T11165] af_packet: tpacket_rcv: packet too big, clamped from 65512 to 4294967272. macoff=96 [ 276.805076][T11165] bridge0: port 3(ipvlan2) entered blocking state [ 276.805161][T11165] bridge0: port 3(ipvlan2) entered disabled state [ 276.805224][T11165] ipvlan2: entered allmulticast mode [ 276.805233][T11165] bridge0: entered allmulticast mode [ 276.806671][T11165] ipvlan2: left allmulticast mode [ 276.806685][T11165] bridge0: left allmulticast mode [ 276.835718][ T1480] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 276.856432][ T1480] usb 12-1: device descriptor read/8, error -71 [ 276.966388][ T1480] usb usb12-port1: unable to enumerate USB device [ 277.126569][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.126763][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.355796][ T1042] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 277.485682][ T1042] usb 6-1: device descriptor read/64, error -71 [ 277.486874][T11176] tipc: Enabling of bearer rejected, failed to enable media [ 277.519170][ T5729] Bluetooth: hci0: unexpected event for opcode 0x2012 [ 277.520376][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1308'. [ 277.725622][ T1042] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 277.759310][ T63] usb 14-1: USB disconnect, device number 4 [ 277.844819][ T43] audit: type=1400 audit(1790131585.496:28916): avc: denied { getopt } for pid=11182 comm="syz.9.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 277.865795][ T1042] usb 6-1: device descriptor read/64, error -71 [ 277.880146][ T63] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 277.881450][ T63] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 277.881630][ T63] keyspan 14-1:1.0: device disconnected [ 277.947585][ T43] audit: type=1400 audit(1790131585.606:28917): avc: denied { cmd } for pid=11189 comm="iou-wrk-11190" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 277.977073][ T1042] usb usb6-port1: attempt power cycle [ 278.008079][ T43] audit: type=1400 audit(1790131585.666:28918): avc: denied { write } for pid=11192 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.051761][ T43] audit: type=1400 audit(1790131585.706:28919): avc: denied { write } for pid=11197 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.315936][ T1042] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 278.336093][ T1042] usb 6-1: device descriptor read/8, error -71 [ 278.379577][ T43] audit: type=1400 audit(1790131586.036:28920): avc: denied { write } for pid=11214 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.446453][ T43] audit: type=1400 audit(1790131586.106:28921): avc: denied { write } for pid=11218 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.457284][T11220] netlink: Unknown conntrack attr (0) [ 278.457309][T11220] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.493107][T11225] »»»»»»: renamed from vlan0 (while UP) [ 278.513052][T11225] bridge0: port 3(ipvlan2) entered blocking state [ 278.513128][T11225] bridge0: port 3(ipvlan2) entered disabled state [ 278.513187][T11225] ipvlan2: entered allmulticast mode [ 278.513197][T11225] bridge0: entered allmulticast mode [ 278.514341][T11225] ipvlan2: left allmulticast mode [ 278.514352][T11225] bridge0: left allmulticast mode [ 278.541383][T11227] bridge0: port 3(ipvlan2) entered blocking state [ 278.541432][T11227] bridge0: port 3(ipvlan2) entered disabled state [ 278.541541][T11227] ipvlan2: entered allmulticast mode [ 278.541550][T11227] bridge0: entered allmulticast mode [ 278.543144][T11227] ipvlan2: left allmulticast mode [ 278.543158][T11227] bridge0: left allmulticast mode [ 278.575715][ T1042] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 278.596677][ T1042] usb 6-1: device descriptor read/8, error -71 [ 278.614611][T11232] overlayfs: failed to clone upperpath [ 278.618964][T11232] overlayfs: failed to clone upperpath [ 278.655808][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 278.711174][ T1042] usb usb6-port1: unable to enumerate USB device [ 278.756145][ T43] audit: type=1400 audit(1790131586.416:28922): avc: denied { write } for pid=11239 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.799220][T11245] input: syz1 as /devices/virtual/input/input13 [ 278.833210][ T43] audit: type=1400 audit(1790131586.486:28923): avc: denied { write } for pid=11246 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.951669][T11253] netlink: Unknown conntrack attr (0) [ 278.951687][T11253] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.011710][T11260] netlink: 'syz.9.1326': attribute type 46 has an invalid length. [ 279.011724][T11260] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1326'. [ 279.238732][ T43] audit: type=1400 audit(1790131586.896:28924): avc: denied { setattr } for pid=11278 comm="syz.9.1332" name="cuse" dev="devtmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 279.602560][T11306] netlink: Unknown conntrack attr (0) [ 279.602586][T11306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 279.993535][T11336] netlink: 'syz.7.1339': attribute type 16 has an invalid length. [ 279.993633][T11336] netlink: 64138 bytes leftover after parsing attributes in process `syz.7.1339'. [ 280.128618][T11346] netlink: Unknown conntrack attr (0) [ 280.128634][T11346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.180790][T11349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1344'. [ 280.226952][T11351] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 280.228541][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1346'. [ 280.291049][T11366] hfs: can't find a HFS filesystem on dev sr0 [ 280.336229][T11372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1350'. [ 280.343495][T11373] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1350'. [ 280.568900][T11396] tmpfs: Unknown parameter 'grpquota_bl' [ 280.590682][T11401] UHID_CREATE from different security context by process 168 (syz.9.1354), this is not allowed. [ 280.593310][ T30] logitech-hidpp-device 0003:046D:C082.0005: item fetching failed at offset 0/2 [ 280.593768][ T30] logitech-hidpp-device 0003:046D:C082.0005: hidpp_probe:parse failed [ 280.593825][ T30] logitech-hidpp-device 0003:046D:C082.0005: probe with driver logitech-hidpp-device failed with error -22 [ 280.989841][ T1042] libceph: connect (1)[c::]:6789 error -101 [ 280.990076][ T1042] libceph: mon0 (1)[c::]:6789 connect error [ 281.015921][ T63] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 281.065833][T11428] ceph: No mds server is up or the cluster is laggy [ 281.175909][ T63] usb 6-1: Using ep0 maxpacket: 16 [ 281.178568][ T63] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 281.179610][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.179634][ T63] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.179660][ T63] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.181918][ T63] usb 6-1: config 0 descriptor?? [ 281.340291][T11449] fuse: fd is not a fuse device [ 281.443103][ T63] usbhid 6-1:0.0: can't add hid device: -71 [ 281.443180][ T63] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 281.455364][ T63] usb 6-1: USB disconnect, device number 8 [ 281.564516][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 281.564529][ T43] audit: type=1400 audit(1790131589.216:28930): avc: denied { create } for pid=11463 comm="syz.9.1366" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 281.611987][T11466] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1366'. [ 281.633797][ T43] audit: type=1400 audit(1790131589.286:28931): avc: denied { mounton } for pid=11475 comm="syz.7.1369" path="/136/gadget" dev="gadgetfs" ino=26017 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 281.646122][T11466] 8021q: adding VLAN 0 to HW filter on device bond1 [ 281.654713][T11477] batman_adv: batadv0: Adding interface: dummy0 [ 281.654725][T11477] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.654740][T11477] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 281.769804][T11480] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1370'. [ 281.825875][T11481] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1370'. [ 281.982340][T11495] tipc: Started in network mode [ 281.982355][T11495] tipc: Node identity 1000001, cluster identity 4369 [ 281.982362][T11495] tipc: Node number set to 16777217 [ 281.983485][T11495] tipc: Cannot configure node identity twice [ 281.985020][T11495] netlink: 'syz.8.1374': attribute type 63 has an invalid length. [ 281.985041][T11495] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1374'. [ 281.997146][T11495] tipc: New replicast peer: 127.0.0.1 [ 282.000911][T11495] tipc: Enabled bearer , priority 10 [ 282.279352][T11501] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11501 comm=syz.1.1377 [ 282.500531][ T43] audit: type=1400 audit(1790131590.156:28932): avc: denied { unmount } for pid=8157 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 282.586252][T11526] erofs: Unknown parameter 'uƒst{' [ 282.625212][T11529] fuse: Bad value for 'fd' [ 282.683228][ T8157] overlayfs: failed lookup in lower (newroot/138, name='bus', err=-40): overlapping layers [ 282.684144][ T8157] overlayfs: failed lookup in lower (newroot/138, name='bus', err=-40): overlapping layers [ 282.735847][ T9897] tipc: Resetting bearer [ 282.767332][ T9897] tipc: Disabling bearer [ 283.093123][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.184208][ T5732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 283.186604][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.192365][T11552] netlink: 'syz.9.1394': attribute type 15 has an invalid length. [ 283.194462][ T5732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 283.196142][ T5732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 283.203193][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 283.203899][ T5732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 283.278750][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.361218][ T43] audit: type=1400 audit(1790131591.016:28933): avc: denied { write } for pid=11573 comm="syz.9.1398" name="mouse0" dev="devtmpfs" ino=1100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 283.400415][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.504733][T11129] Bluetooth: hci4: Frame reassembly failed (-84) [ 283.504808][T11129] Bluetooth: hci4: Frame reassembly failed (-84) [ 283.504917][T11129] Bluetooth: hci4: Frame reassembly failed (-84) [ 283.504946][T11129] Bluetooth: hci4: Frame reassembly failed (-84) [ 283.533227][T11549] wlan0 speed is unknown, defaulting to 1000 [ 283.603824][T11600] overlayfs: failed to clone upperpath [ 283.677672][ T12] bridge_slave_1: left promiscuous mode [ 283.679801][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.681639][ T12] bridge_slave_0: left allmulticast mode [ 283.681654][ T12] bridge_slave_0: left promiscuous mode [ 283.681798][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.765744][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 283.771014][T11608] netlink: 'syz.8.1405': attribute type 15 has an invalid length. [ 283.854042][ T12] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 283.854061][ T12] bridge1 (unregistering): left promiscuous mode [ 283.874933][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.881271][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.883109][ T12] bond0 (unregistering): Released all slaves [ 283.889148][ T12] bond1 (unregistering): Released all slaves [ 283.916200][ T30] usb 6-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 283.917041][ T30] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 283.917064][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.948875][ T12] tipc: Left network mode [ 284.023280][ T43] audit: type=1400 audit(1790131591.676:28934): avc: denied { write } for pid=11613 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.047499][T11621] netlink: 'syz.8.1407': attribute type 30 has an invalid length. [ 284.099718][T11625] netlink: 'syz.8.1407': attribute type 30 has an invalid length. [ 284.103297][ T43] audit: type=1400 audit(1790131591.756:28935): avc: denied { write } for pid=11623 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.130528][ T30] qmi_wwan 6-1:1.0: cdc-wdm0: USB WDM device [ 284.152162][ T30] wwan wwan0: port wwan0qmi0 attached [ 284.175083][ T5446] 8021q: adding VLAN 0 to HW filter on device eth2 [ 284.175299][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.175445][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.175509][T11549] bridge_slave_0: entered allmulticast mode [ 284.178701][T11549] bridge_slave_0: entered promiscuous mode [ 284.183484][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.183541][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.183642][T11549] bridge_slave_1: entered allmulticast mode [ 284.184650][T11549] bridge_slave_1: entered promiscuous mode [ 284.206778][T11549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.208803][T11549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.242179][T11549] team0: Port device team_slave_0 added [ 284.271595][T11549] team0: Port device team_slave_1 added [ 284.322159][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.322175][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.322197][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.323361][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.323373][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.323393][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.333759][ T43] audit: type=1400 audit(1790131591.986:28937): avc: denied { write } for pid=11631 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.358204][ T43] audit: type=1400 audit(1790131591.976:28936): avc: denied { read write } for pid=11595 comm="syz.1.1402" name="cdc-wdm0" dev="devtmpfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 284.358247][ T43] audit: type=1400 audit(1790131592.016:28938): avc: denied { open } for pid=11595 comm="syz.1.1402" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 284.370955][T11549] hsr_slave_0: entered promiscuous mode [ 284.371543][T11549] hsr_slave_1: entered promiscuous mode [ 284.372066][T11549] debugfs: 'hsr0' already exists in 'hsr' [ 284.372083][T11549] Cannot create hsr debugfs directory [ 284.405195][ T43] audit: type=1400 audit(1790131592.056:28939): avc: denied { write } for pid=11638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.441516][ T30] qmi_wwan 6-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 2e:79:0a:32:ce:ad [ 284.446378][ T30] usb 6-1: USB disconnect, device number 9 [ 284.450994][ T30] qmi_wwan 6-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 284.459324][ T12] hsr_slave_0: left promiscuous mode [ 284.459969][ T12] hsr_slave_1: left promiscuous mode [ 284.460516][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.460528][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.461065][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.461075][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.461552][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 284.468638][ T12] veth1_macvtap: left promiscuous mode [ 284.468659][ T12] veth0_macvtap: left promiscuous mode [ 284.468746][ T12] veth1_vlan: left promiscuous mode [ 284.468777][ T12] veth0_vlan: left promiscuous mode [ 284.623449][ T12] team0 (unregistering): Port device team_slave_1 removed [ 284.633767][ T12] team0 (unregistering): Port device team_slave_0 removed [ 284.728039][ T5446] 8021q: adding VLAN 0 to HW filter on device eth3 [ 284.812953][ T30] wwan wwan0: port wwan0qmi0 disconnected [ 284.825052][T11648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11648 comm=syz.8.1413 [ 285.066601][ T5446] 8021q: adding VLAN 0 to HW filter on device eth4 [ 285.225855][ T5732] Bluetooth: hci3: command tx timeout [ 285.279772][T11685] bonding: unable to delete non-existent b [ 285.290351][ T37] IPVS: starting estimator thread 0... [ 285.311646][ T5446] 8021q: adding VLAN 0 to HW filter on device eth5 [ 285.371694][T11693] netlink: 'syz.1.1422': attribute type 4 has an invalid length. [ 285.387741][T11690] IPVS: using max 44 ests per chain, 105600 per kthread [ 285.534452][T11705] __nla_validate_parse: 3 callbacks suppressed [ 285.534472][T11705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 285.541669][ T5732] Bluetooth: hci4: command 0x1003 tx timeout [ 285.546293][ T5729] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 285.582690][T11712] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1423'. [ 285.697488][T11724] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 285.728472][T11549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 285.745484][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.751217][T11549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 285.759103][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.761453][T11549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 285.768237][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.771818][T11549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 285.779926][T11549] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 285.874936][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.896592][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.903327][T11115] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.903414][T11115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.923106][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.923218][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.965660][ T850] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 286.116946][ T850] usb 6-1: not running at top speed; connect to a high speed hub [ 286.116972][ T850] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 286.117859][ T850] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 286.119579][ T850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.119595][ T850] usb 6-1: Product: syz [ 286.119605][ T850] usb 6-1: Manufacturer: syz [ 286.119614][ T850] usb 6-1: SerialNumber: syz [ 286.123815][ T850] oti6858 6-1:1.0: oti6858 converter detected [ 286.137800][ T850] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 286.362583][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.398169][T11549] veth0_vlan: entered promiscuous mode [ 286.404383][T11795] wlan0 speed is unknown, defaulting to 1000 [ 286.424899][T11549] veth1_vlan: entered promiscuous mode [ 286.498357][T11797] wlan0 speed is unknown, defaulting to 1000 [ 286.561658][T11549] veth0_macvtap: entered promiscuous mode [ 286.574823][T11549] veth1_macvtap: entered promiscuous mode [ 286.604251][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 286.604270][ T43] audit: type=1400 audit(1790131594.256:28959): avc: denied { write } for pid=11803 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.626475][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.639797][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.665993][ T8104] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.666042][ T8104] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.666119][ T8104] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.666150][ T8104] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.732064][ T43] audit: type=1400 audit(1790131594.386:28960): avc: denied { write } for pid=11807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.827979][ T43] audit: type=1400 audit(1790131594.486:28961): avc: denied { write } for pid=11810 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.839151][T11128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.839171][T11128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.884551][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.884638][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.908866][T11813] netlink: 5000 bytes leftover after parsing attributes in process `syz.8.1437'. [ 286.983316][ T43] audit: type=1400 audit(1790131594.636:28962): avc: denied { write } for pid=11814 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.984209][ T5729] Bluetooth: hci0: unexpected event for opcode 0x2024 [ 287.053637][ T43] audit: type=1400 audit(1790131594.706:28963): avc: denied { write } for pid=11821 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.188453][T11832] net_ratelimit: 10 callbacks suppressed [ 287.188467][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.188603][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.188725][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.188862][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.189063][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.189351][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.189562][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.189790][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.189994][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.190194][T11832] ip_tables: iptables: counters copy to user failed while replacing table [ 287.238609][ T43] audit: type=1400 audit(1790131594.896:28964): avc: denied { write } for pid=11828 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.254983][ T43] audit: type=1400 audit(1790131594.906:28965): avc: denied { unlink } for pid=10360 comm="syz-executor" name="ublkc0" dev="devtmpfs" ino=3096 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 287.261091][ T43] audit: type=1400 audit(1790131594.916:28966): avc: denied { unlink } for pid=10360 comm="syz-executor" name="rnullb0" dev="devtmpfs" ino=3026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 287.296019][ T5729] Bluetooth: hci3: command tx timeout [ 287.372320][ T43] audit: type=1400 audit(1790131595.026:28967): avc: denied { write } for pid=11842 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.690101][ T43] audit: type=1400 audit(1790131595.346:28968): avc: denied { write } for pid=11848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 287.949678][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.105013][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.275145][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.303835][T11876] netlink: 'syz.9.1447': attribute type 101 has an invalid length. [ 288.484859][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 288.563601][T11891] sd 0:0:0:0: PR command failed: 1026 [ 288.563626][T11891] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 288.563647][T11891] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 288.775881][T11899] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 288.838996][T11903] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1454'. [ 288.848171][ T13] bridge_slave_1: left allmulticast mode [ 288.848193][ T13] bridge_slave_1: left promiscuous mode [ 288.849628][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.867143][ T13] bridge_slave_0: left allmulticast mode [ 288.867169][ T13] bridge_slave_0: left promiscuous mode [ 288.867432][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.920875][ T13] bond_slave_0: left promiscuous mode [ 288.920895][ T13] bond_slave_1: left promiscuous mode [ 288.995877][T11911] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11911 comm=syz.9.1454 [ 289.232405][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.234927][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.249120][ T13] bond0 (unregistering): Released all slaves [ 289.286078][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 289.375730][ T5729] Bluetooth: hci3: command tx timeout [ 289.441068][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1455'. [ 289.441128][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1455'. [ 289.477295][T11921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1455'. [ 289.477317][T11921] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1455'. [ 289.479080][T11922] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1455'. [ 289.480259][T11922] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1455'. [ 289.591037][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 289.595645][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.595671][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.595690][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.595707][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 289.680511][T11934] bridge0: port 3(dummy0) entered blocking state [ 289.680600][T11934] bridge0: port 3(dummy0) entered disabled state [ 289.680687][T11934] dummy0: entered allmulticast mode [ 289.683880][T11934] dummy0: entered promiscuous mode [ 289.689499][T11934] bridge0: port 3(dummy0) entered blocking state [ 289.689577][T11934] bridge0: port 3(dummy0) entered forwarding state [ 289.704032][ T13] hsr_slave_0: left promiscuous mode [ 289.712165][ T13] hsr_slave_1: left promiscuous mode [ 289.712801][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.712817][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.730574][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.730588][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.744232][ T13] veth1_macvtap: left promiscuous mode [ 289.744254][ T13] veth0_macvtap: left promiscuous mode [ 289.744300][ T13] veth1_vlan: left promiscuous mode [ 289.744316][ T13] veth0_vlan: left promiscuous mode [ 289.909104][ T13] team0 (unregistering): Port device team_slave_1 removed [ 289.919454][ T13] team0 (unregistering): Port device team_slave_0 removed [ 289.994731][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 290.190460][T11959] bond3: option downdelay: invalid value (18446744073709551615) [ 290.190476][T11959] bond3: option downdelay: allowed values 0 - 2147483647 [ 290.208667][T11959] bond3 (unregistering): Released all slaves [ 290.313408][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 290.352465][ T13] IPVS: stop unused estimator thread 0... [ 290.685702][ T1480] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 290.834949][T12008] netlink: 'syz.8.1477': attribute type 2 has an invalid length. [ 290.835642][ T1480] usb 7-1: Using ep0 maxpacket: 32 [ 290.836744][ T1480] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 290.837624][ T1480] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 290.837637][ T1480] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 290.837647][ T1480] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 290.837667][ T1480] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 290.837705][ T1480] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 290.837723][ T1480] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 290.837744][ T1480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.839036][ T1480] usb 7-1: config 0 descriptor?? [ 291.058554][ T1480] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 291.061112][ T1480] usb 7-1: USB disconnect, device number 5 [ 291.066394][ T1480] usblp0: removed [ 291.101212][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101233][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101246][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101258][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101270][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101283][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101295][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101307][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101320][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101332][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101344][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101356][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101368][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101390][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101402][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101414][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101426][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101438][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101450][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101463][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101475][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101487][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101499][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101511][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101523][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101535][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101547][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101559][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101571][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101584][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101596][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101608][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.101620][T12019] IPVS: set_ctl: invalid protocol: 51 172.20.20.67:20002 [ 291.104819][T12019] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 291.105227][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.105240][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.108873][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.108884][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.110196][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.110206][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.112326][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.112335][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.115280][T12020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.115290][T12020] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1481'. [ 291.457129][ T5729] Bluetooth: hci3: command tx timeout [ 291.486656][ T1480] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 291.531742][T12034] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 291.534628][T12034] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 291.538512][T12034] netlink: 'syz.9.1487': attribute type 1 has an invalid length. [ 291.634481][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 291.634501][ T43] audit: type=1400 audit(1790131599.286:28991): avc: denied { write } for pid=12044 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.635626][ T1480] usb 7-1: Using ep0 maxpacket: 32 [ 291.638269][ T1480] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 291.639242][ T1480] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 291.639257][ T1480] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 291.639272][ T1480] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 291.639309][ T1480] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 291.639328][ T1480] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 291.639358][ T1480] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 291.639392][ T1480] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.641490][ T1480] usb 7-1: config 0 descriptor?? [ 291.709484][ T43] audit: type=1400 audit(1790131599.366:28992): avc: denied { write } for pid=12051 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.805119][ T43] audit: type=1400 audit(1790131599.456:28993): avc: denied { write } for pid=12055 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.844333][T12059] binder: BINDER_SET_CONTEXT_MGR already set [ 291.844347][T12059] binder: 12058:12059 ioctl 4018620d 200000000240 returned -16 [ 291.851885][T12061] tipc: Started in network mode [ 291.851897][T12061] tipc: Node identity 4, cluster identity 5 [ 291.851955][T12061] tipc: Node number set to 4 [ 291.861791][ T1480] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 291.863880][T11984] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.864194][T11984] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.888291][ T43] audit: type=1400 audit(1790131599.546:28994): avc: denied { write } for pid=12060 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.992285][ T43] audit: type=1400 audit(1790131599.646:28995): avc: denied { write } for pid=12068 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.055731][ T43] audit: type=1400 audit(1790131599.706:28996): avc: denied { write } for pid=12075 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.095566][ C1] tipc: RX(1000001): key[1] is activated [ 292.147613][ T43] audit: type=1400 audit(1790131599.806:28997): avc: denied { write } for pid=12077 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.177355][ T5729] Bluetooth: hci1: command tx timeout [ 292.205753][ T1480] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 292.208622][ T43] audit: type=1400 audit(1790131599.866:28998): avc: denied { write } for pid=12080 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 292.216816][ T43] audit: type=1400 audit(1790131599.876:28999): avc: denied { read write } for pid=11983 comm="syz.2.1469" name="lp0" dev="devtmpfs" ino=3131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 292.217064][ T43] audit: type=1400 audit(1790131599.876:29000): avc: denied { open } for pid=11983 comm="syz.2.1469" path="/dev/usb/lp0" dev="devtmpfs" ino=3131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 292.277522][T12085] /dev/nullb0: Can't lookup blockdev [ 292.358331][ T1480] usb 14-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 292.359183][ T1480] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.359207][ T1480] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.565718][ T1480] qmi_wwan 14-1:1.0: cdc-wdm1: USB WDM device [ 292.570838][ T1480] wwan wwan0: port wwan0qmi0 attached [ 292.788265][ T1480] qmi_wwan 14-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.9-1, WWAN/QMI device, 42:dc:2a:99:79:57 [ 292.790681][ T1480] usb 14-1: USB disconnect, device number 5 [ 292.794259][ T1480] qmi_wwan 14-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.9-1, WWAN/QMI device [ 292.859821][ T1480] wwan wwan0: port wwan0qmi0 disconnected [ 293.332976][T12135] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(4) [ 293.333001][T12135] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.335083][T12135] vhci_hcd vhci_hcd.0: Device attached [ 293.335377][T12136] vhci_hcd: connection closed [ 293.340800][ T5812] vhci_hcd vhci_hcd.9: stop threads [ 293.340815][ T5812] vhci_hcd vhci_hcd.9: release socket [ 293.340826][ T5812] vhci_hcd vhci_hcd.9: disconnect device [ 293.456084][ T30] usb 7-1: USB disconnect, device number 6 [ 293.464172][ T30] usblp0: removed [ 293.632443][T12156] overlay: Unknown parameter 'uid<00000000000000000000' [ 293.820271][T12178] overlayfs: failed to resolve 'lower2': -2 [ 293.822684][T12176] overlayfs: failed to resolve 'lower2': -2 [ 293.901059][T12184] net_ratelimit: 24 callbacks suppressed [ 293.901072][T12184] ip_tables: iptables: counters copy to user failed while replacing table [ 294.167713][T12202] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 294.167744][T12202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.168039][T12202] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 294.168063][T12202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.168339][T12202] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 294.168364][T12202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.168635][T12202] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 294.168658][T12202] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 294.168942][T12202] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 294.214462][T12199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12199 comm=syz.8.1517 [ 294.430911][T12227] kvm [12226]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 294.824725][T12245] tipc: Enabling of bearer rejected, media not registered [ 294.998386][T12259] FAULT_INJECTION: forcing a failure. [ 294.998386][T12259] name failslab, interval 1, probability 0, space 0, times 0 [ 294.998419][T12259] CPU: 0 UID: 0 PID: 12259 Comm: syz.2.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.998444][T12259] Tainted: [L]=SOFTLOCKUP [ 294.998451][T12259] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 294.998461][T12259] Call Trace: [ 294.998468][T12259] [ 294.998492][T12259] dump_stack_lvl+0x100/0x190 [ 294.998540][T12259] should_fail_ex.cold+0x5/0xa [ 294.998569][T12259] should_failslab+0xc2/0x120 [ 294.998599][T12259] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 294.998620][T12259] ? sock_alloc_inode+0x26/0x2c0 [ 294.998655][T12259] ? __pfx_sock_alloc_inode+0x10/0x10 [ 294.998682][T12259] sock_alloc_inode+0x26/0x2c0 [ 294.998707][T12259] ? __pfx_sock_alloc_inode+0x10/0x10 [ 294.998734][T12259] alloc_inode+0x68/0x250 [ 294.998752][T12259] sock_alloc+0x44/0x280 [ 294.998775][T12259] ? security_socket_create+0x7f/0x250 [ 294.998796][T12259] __sock_create+0xc2/0x860 [ 294.998818][T12259] __sys_socketpair+0x1e4/0x5b0 [ 294.998838][T12259] ? __pfx___sys_socketpair+0x10/0x10 [ 294.998858][T12259] ? __pfx___x64_sys_futex+0x10/0x10 [ 294.998885][T12259] ? __pfx_ksys_write+0x10/0x10 [ 294.998910][T12259] __x64_sys_socketpair+0x96/0x100 [ 294.998929][T12259] ? lockdep_hardirqs_on+0x7d/0x110 [ 294.998962][T12259] do_syscall_64+0x123/0x790 [ 294.998990][T12259] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.999011][T12259] RIP: 0033:0x7fd8e6f9e159 [ 294.999029][T12259] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.999046][T12259] RSP: 002b:00007fd8e7f27028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 294.999067][T12259] RAX: ffffffffffffffda RBX: 00007fd8e7225fa0 RCX: 00007fd8e6f9e159 [ 294.999081][T12259] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 294.999093][T12259] RBP: 00007fd8e703506b R08: 0000000000000000 R09: 0000000000000000 [ 294.999105][T12259] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 294.999119][T12259] R13: 00007fd8e7226038 R14: 00007fd8e7225fa0 R15: 00007fff5b721768 [ 294.999145][T12259] [ 295.364281][T12267] netlink: 'syz.9.1536': attribute type 1 has an invalid length. [ 295.364294][T12268] netlink: 'syz.9.1536': attribute type 1 has an invalid length. [ 295.969911][T12288] vlan0: entered promiscuous mode [ 295.969932][T12288] hsr0: entered promiscuous mode [ 295.970219][T12288] vlan0: entered allmulticast mode [ 295.970231][T12288] hsr0: entered allmulticast mode [ 295.970242][T12288] hsr_slave_0: entered allmulticast mode [ 295.970255][T12288] hsr_slave_1: entered allmulticast mode [ 295.971522][T12290] hsr_slave_0: left promiscuous mode [ 295.972542][T12290] hsr_slave_1: left promiscuous mode [ 296.117493][T12292] __nla_validate_parse: 36 callbacks suppressed [ 296.117516][T12292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 296.117535][T12292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 296.119891][T12292] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1543'. [ 296.119913][T12292] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1543'. [ 296.372389][T12309] overlayfs: failed to clone upperpath [ 296.602453][T12325] overlayfs: missing 'lowerdir' [ 296.603209][T12325] overlayfs: missing 'lowerdir' [ 296.603790][T12325] overlayfs: missing 'lowerdir' [ 296.604337][T12325] overlayfs: missing 'lowerdir' [ 296.604921][T12325] overlayfs: missing 'lowerdir' [ 296.605462][T12325] overlayfs: missing 'lowerdir' [ 296.608384][T12325] overlayfs: missing 'lowerdir' [ 296.610492][T12325] overlayfs: missing 'lowerdir' [ 296.612176][T12325] overlayfs: missing 'lowerdir' [ 296.613866][T12325] overlayfs: missing 'lowerdir' [ 296.617282][T12325] overlayfs: missing 'lowerdir' [ 296.619093][T12325] overlayfs: missing 'lowerdir' [ 296.620782][T12325] overlayfs: missing 'lowerdir' [ 296.622284][T12325] overlayfs: missing 'lowerdir' [ 296.624065][T12325] overlayfs: missing 'lowerdir' [ 296.625063][T12325] overlayfs: missing 'lowerdir' [ 296.627548][T12325] overlayfs: missing 'lowerdir' [ 296.629343][T12325] overlayfs: missing 'lowerdir' [ 296.631028][T12325] overlayfs: missing 'lowerdir' [ 296.632708][T12325] overlayfs: missing 'lowerdir' [ 296.634546][T12325] overlayfs: missing 'lowerdir' [ 296.636404][T12325] overlayfs: missing 'lowerdir' [ 296.637868][T12325] overlayfs: missing 'lowerdir' [ 296.639399][T12325] overlayfs: missing 'lowerdir' [ 296.641234][T12325] overlayfs: missing 'lowerdir' [ 296.644337][T12325] overlayfs: missing 'lowerdir' [ 296.646655][T12325] overlayfs: missing 'lowerdir' [ 296.648223][T12325] overlayfs: missing 'lowerdir' [ 296.650722][T12325] overlayfs: missing 'lowerdir' [ 296.653954][T12325] overlayfs: missing 'lowerdir' [ 296.716246][T12331] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1554'. [ 296.718435][T12334] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1554'. [ 296.720559][ T43] kauditd_printk_skb: 13 callbacks suppressed [ 296.720570][ T43] audit: type=1400 audit(1790131604.376:29014): avc: denied { map } for pid=12310 comm="syz.2.1549" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 296.877962][ T43] audit: type=1400 audit(1790131604.536:29015): avc: denied { ioctl } for pid=12337 comm="syz.9.1556" path="/dev/fb0" dev="devtmpfs" ino=638 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 297.105808][T12355] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 297.123224][ T43] audit: type=1400 audit(1790131604.776:29016): avc: denied { write } for pid=12350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.182107][ T43] audit: type=1400 audit(1790131604.836:29017): avc: denied { write } for pid=12360 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.254756][T12368] overlayfs: failed to clone upperpath [ 297.259651][T12368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1563'. [ 297.259924][T12368] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1563'. [ 297.260091][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 297.260108][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1563'. [ 297.263733][ T43] audit: type=1400 audit(1790131604.916:29018): avc: denied { remount } for pid=12367 comm="syz.2.1563" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 297.349381][ T43] audit: type=1400 audit(1790131605.006:29019): avc: denied { accept } for pid=12378 comm="syz.8.1566" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 297.432606][T12387] xt_LOG: level 115 >= 8 [ 297.566785][ T43] audit: type=1400 audit(1790131605.226:29020): avc: denied { write } for pid=12392 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.675172][ T43] audit: type=1400 audit(1790131605.326:29021): avc: denied { write } for pid=12398 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.717346][T12396] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.719988][T12397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.879252][T12409] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 298.015401][T12419] wlan0 speed is unknown, defaulting to 1000 [ 298.266242][ T6281] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 298.281384][T12430] overlayfs: failed to clone lowerpath [ 298.283596][T12430] overlayfs: failed to clone upperpath [ 298.416547][ T6281] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 298.417972][ T6281] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.417999][ T6281] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 298.418012][ T6281] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 298.418024][ T6281] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 298.418043][ T6281] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.420541][T12421] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 298.420671][T12421] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 298.423377][ T6281] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 298.424545][ T6281] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 298.424580][ T6281] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 298.426692][ T6281] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 298.430123][ T6281] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 298.430248][ T6281] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 298.444559][ T6281] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 298.557569][T12443] overlayfs: failed to clone lowerpath [ 298.558662][T12443] overlayfs: failed to clone lowerpath [ 298.629696][T12421] binder: 12420:12421 ioctl c0306201 200000000040 returned -14 [ 298.629859][T12421] binder: 12420:12421 ioctl c0306201 200000000640 returned -22 [ 298.632334][ T6281] usb 14-1: USB disconnect, device number 6 [ 298.648503][ T6281] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 298.654669][ T6281] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 298.655141][ T6281] keyspan 14-1:1.0: device disconnected [ 298.721481][T12446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.734022][T12446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.800700][ T43] audit: type=1400 audit(1790131606.456:29022): avc: denied { write } for pid=12454 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.863020][ T43] audit: type=1400 audit(1790131606.516:29023): avc: denied { write } for pid=12458 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.377085][T12474] Invalid source name [ 299.377103][T12474] UBIFS error (pid: 12474): cannot open "/dev/sg0", error -22 [ 300.575648][ T9] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 300.726498][ T9] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 300.727676][ T9] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.727714][ T9] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 300.727734][ T9] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 300.727812][ T9] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 300.727848][ T9] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.732917][T12503] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 300.733084][T12503] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 300.736045][ T9] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 300.739598][ T9] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 300.739724][ T9] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 300.745874][ T9] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 300.753288][ T9] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 300.757816][ T9] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 300.763469][ T9] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 300.939463][T12503] binder: 12502:12503 ioctl c0306201 200000000040 returned -14 [ 300.939628][T12503] binder: 12502:12503 ioctl c0306201 200000000640 returned -22 [ 300.940836][ T5103] usb 14-1: USB disconnect, device number 7 [ 300.965024][ T5103] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 300.969287][ T5103] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 300.970301][ T5103] keyspan 14-1:1.0: device disconnected [ 301.491414][T12439] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 301.655512][T12526] netlink: 'syz.8.1603': attribute type 1 has an invalid length. [ 301.677898][T12526] ifb0: entered promiscuous mode [ 301.703265][T12526] netlink: 'syz.8.1603': attribute type 1 has an invalid length. [ 301.804863][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 301.804882][ T43] audit: type=1400 audit(1790131609.446:29031): avc: denied { setopt } for pid=12532 comm="syz.2.1607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 301.809939][T12533] __nla_validate_parse: 9 callbacks suppressed [ 301.810026][T12533] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1607'. [ 301.820901][T12536] net_ratelimit: 123 callbacks suppressed [ 301.820921][T12536] netlink: Unknown conntrack attr (0) [ 301.820941][T12536] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 301.843855][T12531] wlan0 speed is unknown, defaulting to 1000 [ 302.006194][ T43] audit: type=1400 audit(1790131609.666:29032): avc: denied { write } for pid=12548 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.049967][T12551] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1612'. [ 302.083692][ T43] audit: type=1400 audit(1790131609.736:29033): avc: denied { write } for pid=12563 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.245313][T12573] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1615'. [ 302.245383][T12573] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1615'. [ 302.249165][ T43] audit: type=1400 audit(1790131609.906:29034): avc: denied { append } for pid=12572 comm="syz.2.1615" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 302.303211][T12576] netlink: Unknown conntrack attr (0) [ 302.303228][T12576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.308727][ T43] audit: type=1400 audit(1790131609.966:29035): avc: denied { write } for pid=12571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.364109][ T43] audit: type=1400 audit(1790131610.016:29036): avc: denied { write } for pid=12578 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.504645][ T43] audit: type=1400 audit(1790131610.156:29037): avc: denied { write } for pid=12582 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.568023][ T43] audit: type=1400 audit(1790131610.226:29038): avc: denied { write } for pid=12585 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.589800][T12589] xt_l2tp: v2 doesn't support IP mode [ 302.592473][T12589] xt_hashlimit: max too large, truncated to 1048576 [ 302.594544][T12589] xt_hashlimit: size too large, truncated to 1048576 [ 302.594603][T12589] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 302.713156][ T5732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 302.724011][ T5732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 302.732670][ T5732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 302.745275][ T5732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 302.746984][ T5732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 302.862616][ T43] audit: type=1400 audit(1790131610.516:29039): avc: denied { write } for pid=12614 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 302.903120][T12626] netlink: Unknown conntrack attr (0) [ 302.903150][T12626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.915145][ T43] audit: type=1400 audit(1790131610.566:29040): avc: denied { write } for pid=12627 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 303.071342][T12603] wlan0 speed is unknown, defaulting to 1000 [ 303.131956][T12650] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1631'. [ 303.200282][T12657] tmpfs: Unknown parameter 'grpquota_inode_habdlimit' [ 303.263545][T12666] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1636'. [ 303.278965][T12603] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.279092][T12603] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.279153][T12603] bridge_slave_0: entered allmulticast mode [ 303.280192][T12603] bridge_slave_0: entered promiscuous mode [ 303.282016][T12603] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.282082][T12603] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.282180][T12603] bridge_slave_1: entered allmulticast mode [ 303.283322][T12603] bridge_slave_1: entered promiscuous mode [ 303.306455][T12603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.307926][T12603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.325251][T12603] team0: Port device team_slave_0 added [ 303.328244][T12603] team0: Port device team_slave_1 added [ 303.351350][T12603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.351365][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.351383][T12603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.352438][T12603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.352447][T12603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 303.352460][T12603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.390986][T12603] hsr_slave_0: entered promiscuous mode [ 303.391787][T12603] hsr_slave_1: entered promiscuous mode [ 303.392491][T12603] debugfs: 'hsr0' already exists in 'hsr' [ 303.392510][T12603] Cannot create hsr debugfs directory [ 303.608534][T12684] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1642'. [ 303.661057][T12603] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.686176][T12684] 8021q: adding VLAN 0 to HW filter on device bond2 [ 303.724491][T12684] FAULT_INJECTION: forcing a failure. [ 303.724491][T12684] name failslab, interval 1, probability 0, space 0, times 0 [ 303.724586][T12684] CPU: 0 UID: 0 PID: 12684 Comm: syz.9.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.724612][T12684] Tainted: [L]=SOFTLOCKUP [ 303.724619][T12684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 303.724628][T12684] Call Trace: [ 303.724632][T12684] [ 303.724640][T12684] dump_stack_lvl+0x100/0x190 [ 303.724699][T12684] should_fail_ex.cold+0x5/0xa [ 303.724723][T12684] should_failslab+0xc2/0x120 [ 303.724753][T12684] __kmalloc_noprof+0xfc/0x840 [ 303.724775][T12684] ? lsm_blob_alloc+0x68/0x90 [ 303.724805][T12684] lsm_blob_alloc+0x68/0x90 [ 303.724825][T12684] security_key_alloc+0x34/0x310 [ 303.724847][T12684] key_alloc+0x876/0x1310 [ 303.724874][T12684] ? __kmalloc_noprof+0x350/0x840 [ 303.724894][T12684] ? __pfx_key_alloc+0x10/0x10 [ 303.724911][T12684] ? hook_cred_prepare+0x177/0x370 [ 303.724938][T12684] keyring_alloc+0x44/0xc0 [ 303.724964][T12684] lookup_user_key+0x9b8/0x1300 [ 303.724987][T12684] ? __pfx_lookup_user_key+0x10/0x10 [ 303.725008][T12684] ? lock_acquire+0x1d1/0x380 [ 303.725025][T12684] ? __might_fault+0xc5/0x140 [ 303.725049][T12684] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 303.725075][T12684] ? strncpy_from_user+0x19d/0x2d0 [ 303.725100][T12684] __do_sys_add_key+0x2a6/0x460 [ 303.725121][T12684] ? __pfx___do_sys_add_key+0x10/0x10 [ 303.725155][T12684] do_syscall_64+0x123/0x790 [ 303.725190][T12684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.725208][T12684] RIP: 0033:0x7eff8419e159 [ 303.725219][T12684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.725237][T12684] RSP: 002b:00007eff8505e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 303.725255][T12684] RAX: ffffffffffffffda RBX: 00007eff84425fa0 RCX: 00007eff8419e159 [ 303.725269][T12684] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 303.725280][T12684] RBP: 00007eff8423506b R08: ffffffffffffffff R09: 0000000000000000 [ 303.725292][T12684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.725308][T12684] R13: 00007eff84426038 R14: 00007eff84425fa0 R15: 00007fff00b5dd78 [ 303.725348][T12684] [ 303.780419][T12684] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1642'. [ 303.810024][T12691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1642'. [ 303.837962][T12603] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.874636][T12691] bond2 (unregistering): Released all slaves [ 303.940584][T12603] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.056944][T12603] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.286983][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1657'. [ 304.287056][T12731] netlink: 'syz.9.1657': attribute type 10 has an invalid length. [ 304.311922][T12731] geneve2: entered promiscuous mode [ 304.311947][T12731] geneve2: entered allmulticast mode [ 304.334601][T12603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 304.338611][T12603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 304.339343][T12603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 304.346003][T12603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 304.346808][T12603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 304.349881][T12603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 304.350659][T12603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 304.355472][T12603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.441700][T12603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.470153][T12603] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.477413][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.477494][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.488068][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.488115][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.816034][ T5732] Bluetooth: hci2: command tx timeout [ 304.839150][T12603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.881337][T12773] netlink: Unknown conntrack attr (0) [ 304.881355][T12773] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 304.919042][T12778] batadv_slave_1: entered promiscuous mode [ 304.932248][T12777] batadv_slave_1: left promiscuous mode [ 304.963684][T12786] netlink: 'syz.8.1665': attribute type 39 has an invalid length. [ 305.031029][T12603] veth0_vlan: entered promiscuous mode [ 305.039039][T12603] veth1_vlan: entered promiscuous mode [ 305.063203][T12603] veth0_macvtap: entered promiscuous mode [ 305.081709][T12603] veth1_macvtap: entered promiscuous mode [ 305.092019][T12603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.097070][T12603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.145999][ T5812] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.146025][ T5812] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.153945][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.153958][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.165966][ T5812] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.166005][ T5812] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.223219][ T1162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.223234][ T1162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.540024][T12806] netlink: Unknown conntrack attr (0) [ 305.540053][T12806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 305.587049][T12811] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 305.610517][T12811] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 305.613740][T12811] team0: Port device netdevsim1 added [ 305.619467][T12811] netlink: 'syz.2.1674': attribute type 10 has an invalid length. [ 305.620234][T12798] syz.4.1668 (12798): drop_caches: 2 [ 305.750683][T12823] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 305.778024][T12823] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 305.940131][T12836] jffs2: notice: (12836) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 305.956386][T12840] overlayfs: unescaped trailing colons in lowerdir mount option. [ 306.118250][T12830] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 306.118276][T12830] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 306.118299][T12830] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 306.132826][T12830] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 306.215416][ T1164] smbdirect: ib_dev[syz2] removed [ 306.222837][T12830] siw: device registration error -19 [ 306.771323][T12905] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12905 comm=syz.9.1696 [ 306.896435][ T5732] Bluetooth: hci2: command tx timeout [ 306.976423][T12918] __nla_validate_parse: 2 callbacks suppressed [ 306.976442][T12918] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.1700'. [ 306.976457][T12918] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1700'. [ 307.644261][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 307.644274][ T43] audit: type=1400 audit(1790131615.296:29055): avc: denied { ioctl } for pid=12954 comm="syz.4.1713" path="socket:[53258]" dev="sockfs" ino=53258 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 307.792737][T12966] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1717'. [ 307.811724][T12961] FAULT_INJECTION: forcing a failure. [ 307.811724][T12961] name failslab, interval 1, probability 0, space 0, times 0 [ 307.811810][T12961] CPU: 1 UID: 0 PID: 12961 Comm: syz.4.1716 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.811834][T12961] Tainted: [L]=SOFTLOCKUP [ 307.811840][T12961] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.811851][T12961] Call Trace: [ 307.811859][T12961] [ 307.811868][T12961] dump_stack_lvl+0x100/0x190 [ 307.811901][T12961] should_fail_ex.cold+0x5/0xa [ 307.811942][T12961] should_failslab+0xc2/0x120 [ 307.811965][T12961] __kmalloc_noprof+0xfc/0x840 [ 307.811986][T12961] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 307.812014][T12961] kvm_io_bus_register_dev+0x1d2/0x710 [ 307.812043][T12961] kvm_pic_init+0x25e/0x380 [ 307.812065][T12961] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 307.812085][T12961] ? register_lock_class+0x3f/0x7b0 [ 307.812107][T12961] ? find_held_lock+0x2b/0x80 [ 307.812136][T12961] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 307.812162][T12961] ? __lock_acquire+0x5c0/0x1f40 [ 307.812188][T12961] ? __lock_acquire+0x5c0/0x1f40 [ 307.812214][T12961] ? __lock_acquire+0x5c0/0x1f40 [ 307.812238][T12961] ? __lock_acquire+0x5c0/0x1f40 [ 307.812260][T12961] ? lock_acquire+0x1d1/0x380 [ 307.812278][T12961] ? unwind_next_frame+0xbd/0x2090 [ 307.812309][T12961] ? find_held_lock+0x2b/0x80 [ 307.812335][T12961] ? is_bpf_text_address+0x8a/0x1a0 [ 307.812362][T12961] ? is_bpf_text_address+0x8a/0x1a0 [ 307.812387][T12961] ? bpf_ksym_find+0x128/0x1c0 [ 307.812414][T12961] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 307.812435][T12961] ? is_bpf_text_address+0x94/0x1a0 [ 307.812458][T12961] ? kernel_text_address+0x8d/0x100 [ 307.812486][T12961] ? __kernel_text_address+0xd/0x30 [ 307.812515][T12961] ? unwind_get_return_address+0x59/0xa0 [ 307.812544][T12961] ? arch_stack_walk+0xa6/0xf0 [ 307.812576][T12961] ? tomoyo_path_number_perm+0x46d/0x580 [ 307.812599][T12961] ? stack_trace_save+0x8e/0xc0 [ 307.812616][T12961] ? __pfx_stack_trace_save+0x10/0x10 [ 307.812634][T12961] ? stack_depot_save_flags+0x27/0x9f0 [ 307.812662][T12961] ? __lock_acquire+0x5c0/0x1f40 [ 307.812686][T12961] ? tomoyo_path_number_perm+0x46d/0x580 [ 307.812717][T12961] ? kasan_save_stack+0x3f/0x50 [ 307.812744][T12961] kvm_vm_ioctl+0x167d/0x42d0 [ 307.812778][T12961] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 307.812816][T12961] ? kasan_quarantine_put+0x104/0x240 [ 307.812838][T12961] ? lockdep_hardirqs_on+0x7d/0x110 [ 307.812871][T12961] ? find_held_lock+0x2b/0x80 [ 307.812896][T12961] ? tomoyo_path_number_perm+0x28f/0x580 [ 307.812916][T12961] ? tomoyo_path_number_perm+0x28f/0x580 [ 307.812939][T12961] ? tomoyo_path_number_perm+0x188/0x580 [ 307.812962][T12961] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.812992][T12961] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.813018][T12961] ? do_vfs_ioctl+0x226/0x13e0 [ 307.813041][T12961] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 307.813059][T12961] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 307.813085][T12961] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 307.813112][T12961] ? __fget_files+0x34/0x3d0 [ 307.813145][T12961] ? selinux_file_ioctl+0x13b/0x290 [ 307.813168][T12961] ? selinux_file_ioctl+0xb6/0x290 [ 307.813193][T12961] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 307.813216][T12961] __x64_sys_ioctl+0x18e/0x210 [ 307.813240][T12961] do_syscall_64+0x123/0x790 [ 307.813269][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.813288][T12961] RIP: 0033:0x7f9440b9e159 [ 307.813306][T12961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.813323][T12961] RSP: 002b:00007f943edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 307.813344][T12961] RAX: ffffffffffffffda RBX: 00007f9440e25fa0 RCX: 00007f9440b9e159 [ 307.813358][T12961] RDX: 0000000000000000 RSI: 000000000000ae60 RDI: 0000000000000009 [ 307.813370][T12961] RBP: 00007f9440c3506b R08: 0000000000000000 R09: 0000000000000000 [ 307.813384][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.813397][T12961] R13: 00007f9440e26038 R14: 00007f9440e25fa0 R15: 00007fff1fc70288 [ 307.813423][T12961] [ 307.819266][ T43] audit: type=1400 audit(1790131615.476:29056): avc: denied { view } for pid=12963 comm="syz.9.1717" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 307.905789][T12971] Bluetooth: MGMT ver 1.23 [ 307.913418][T12971] Bluetooth: MGMT ver 1.23 [ 307.919158][T12971] Bluetooth: MGMT ver 1.23 [ 308.075452][T12973] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1719'. [ 308.075954][T12973] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1719'. [ 308.154509][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1720'. [ 308.154544][T12977] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 308.160222][T12977] rnbd_client L202: map_device: Unknown parameter or missing value 'p' [ 308.162347][T12977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1720'. [ 308.162441][T12977] netlink: 'syz.4.1720': attribute type 2 has an invalid length. [ 308.165413][T12980] rnbd_client L202: map_device: Unknown parameter or missing value 'p' [ 308.277060][ T43] audit: type=1400 audit(1790131615.936:29057): avc: denied { ioctl } for pid=12985 comm="syz.4.1723" path="pid:[4026533147]" dev="nsfs" ino=4026533147 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 308.468568][T13005] netlink: 148 bytes leftover after parsing attributes in process `syz.9.1730'. [ 308.718607][ T43] audit: type=1400 audit(1790131616.376:29058): avc: denied { getopt } for pid=13015 comm="syz.9.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 308.945930][ T43] audit: type=1400 audit(1790131616.596:29059): avc: denied { write } for pid=13032 comm="syz.2.1739" name="cluster" dev="configfs" ino=2176 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 308.976006][ T5729] Bluetooth: hci2: command tx timeout [ 308.991974][ T43] audit: type=1326 audit(1790131616.646:29060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.8.1740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbeb9e159 code=0x7ffc0000 [ 308.992152][ T43] audit: type=1326 audit(1790131616.646:29061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13035 comm="syz.8.1740" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbeb9e159 code=0x7ffc0000 [ 309.154016][ T43] audit: type=1400 audit(1790131616.806:29062): avc: denied { getopt } for pid=13044 comm="syz.2.1744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.175912][ T13] netdevsim netdevsim8 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.175943][ T13] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.220591][T13049] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1743'. [ 309.244672][ T1278] IPVS: starting estimator thread 0... [ 309.245176][T13052] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 309.292377][ T43] audit: type=1326 audit(1790131616.946:29063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.1746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbeb9e159 code=0x7ffc0000 [ 309.307244][ T43] audit: type=1326 audit(1790131616.966:29064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13054 comm="syz.8.1746" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0dbeb9e159 code=0x7ffc0000 [ 309.326652][T13053] IPVS: using max 43 ests per chain, 103200 per kthread [ 309.436933][T13066] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1752'. [ 309.635713][ T6058] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 309.711680][T13090] net_ratelimit: 4 callbacks suppressed [ 309.711739][T13090] openvswitch: netlink: Message has 24 unknown bytes. [ 309.787008][ T6058] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 309.788440][ T6058] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.788463][ T6058] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 309.788477][ T6058] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 309.788489][ T6058] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 309.788511][ T6058] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.790989][T13064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 309.791129][T13064] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 309.792786][ T6058] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 309.794380][ T6058] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 309.794416][ T6058] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 309.823086][ T6058] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 309.824170][ T6058] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 309.824204][ T6058] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 309.838113][ T6058] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 309.996877][T13064] binder: 13063:13064 ioctl c0306201 200000000040 returned -22 [ 309.999270][ T3268] usb 9-1: USB disconnect, device number 4 [ 310.010670][ T3268] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 310.014165][ T3268] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 310.024863][ T3268] keyspan 9-1:1.0: device disconnected [ 310.242914][T13106] overlayfs: regular lower layers cannot follow data lower layers [ 310.320102][T13110] bond3: (slave sit2): The slave device specified does not support setting the MAC address [ 310.320624][T13110] bond3: (slave sit2): Error -95 calling set_mac_address [ 310.369231][T13112] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 310.550409][T13118] tipc: Can't bind to reserved service type 2 [ 310.609656][T13130] IPVS: length: 57 != 8 [ 310.647376][T13138] openvswitch: netlink: Message has 24 unknown bytes. [ 310.747549][T13143] netlink: 'syz.4.1777': attribute type 1 has an invalid length. [ 310.785004][T13143] bond1: option mode: invalid value (9) [ 310.793882][T13143] bond1 (unregistering): Released all slaves [ 310.802933][ T5729] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 310.899509][T13150] fuse: fd is not a fuse device [ 311.005822][ T3268] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 311.065758][ T5729] Bluetooth: hci2: command tx timeout [ 311.156828][ T3268] usb 7-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 311.158322][ T3268] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.158360][ T3268] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 311.158382][ T3268] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 311.158402][ T3268] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 311.158492][ T3268] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.164200][T13147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.164407][T13147] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 311.166785][T13161] random: crng reseeded on system resumption [ 311.168523][ T3268] keyspan 7-1:1.0: Keyspan 2 port adapter converter detected [ 311.171536][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 84 [ 311.171677][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 2 [ 311.174425][ T3268] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 311.179876][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 88 [ 311.180010][ T3268] keyspan 7-1:1.0: found no endpoint descriptor for endpoint 6 [ 311.192348][ T3268] usb 7-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 311.214699][T13161] ovs-system: entered promiscuous mode [ 311.311235][T13164] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 311.317046][T13164] netlink: 'syz.9.1783': attribute type 5 has an invalid length. [ 311.369430][T13147] binder: 13146:13147 ioctl c0306201 200000000040 returned -22 [ 311.371583][ T5833] usb 7-1: USB disconnect, device number 7 [ 311.379014][ T5833] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 311.381572][ T5833] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 311.382076][ T5833] keyspan 7-1:1.0: device disconnected [ 311.413421][T13167] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 311.423331][T13167] romfs: unable to set blocksize [ 311.423331][T13167] [ 311.543524][T13173] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 311.576268][T13175] bond1: entered promiscuous mode [ 311.585078][T13175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 311.617906][T13175] bond1: (slave ipip0): refused to change device type [ 312.092605][T13223] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.366782][ T6058] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 312.464126][T13245] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 312.516656][ T6058] usb 14-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 312.517761][ T6058] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 312.517784][ T6058] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.519247][T13250] openvswitch: netlink: Key 24 has unexpected len 2 expected 4 [ 312.589742][ T8690] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 312.757646][ T8690] usb 9-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 312.758675][ T8690] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 312.758698][ T8690] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 312.758712][ T8690] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 312.758763][ T8690] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 312.758787][ T8690] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.761651][T13236] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 312.761768][T13236] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 312.763654][ T8690] keyspan 9-1:1.0: Keyspan 2 port adapter converter detected [ 312.765269][ T8690] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 84 [ 312.765357][ T8690] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 2 [ 312.770590][ T8690] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 312.771854][ T8690] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 88 [ 312.771936][ T8690] keyspan 9-1:1.0: found no endpoint descriptor for endpoint 6 [ 312.773161][ T8690] usb 9-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 312.842115][ T6058] qmi_wwan 14-1:1.0: cdc-wdm0: USB WDM device [ 312.849608][ T6058] wwan wwan0: port wwan0qmi0 attached [ 312.858821][ T6058] qmi_wwan 14-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.9-1, WWAN/QMI device, d6:40:23:b1:0f:c0 [ 312.912587][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 312.912600][ T43] audit: type=1400 audit(1790131620.566:29100): avc: denied { write } for pid=13269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.957540][T13273] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 312.969615][T13236] binder: 13235:13236 ioctl c0306201 200000000040 returned -22 [ 312.970998][T13236] binder: 13235:13236 ioctl c0306201 200000000640 returned -22 [ 312.972393][ T43] audit: type=1400 audit(1790131620.626:29101): avc: denied { write } for pid=13274 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.975141][ T8690] usb 9-1: USB disconnect, device number 5 [ 312.994403][ T8690] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 313.002729][ T8690] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 313.003226][ T8690] keyspan 9-1:1.0: device disconnected [ 313.045135][T13282] syzkaller0: entered promiscuous mode [ 313.045150][T13282] syzkaller0: entered allmulticast mode [ 313.053522][T13282] tipc: Started in network mode [ 313.053539][T13282] tipc: Node identity 52946edab135, cluster identity 4711 [ 313.053709][T13282] tipc: Enabled bearer , priority 0 [ 313.103104][T13282] tipc: Resetting bearer [ 313.105491][ T43] audit: type=1400 audit(1790131620.756:29102): avc: denied { write } for pid=13286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.130991][T13282] tipc: Disabling bearer [ 313.157620][ T43] audit: type=1400 audit(1790131620.816:29103): avc: denied { write } for pid=13289 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.244244][T13292] __nla_validate_parse: 10 callbacks suppressed [ 313.244258][T13292] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 313.328345][ T43] audit: type=1400 audit(1790131620.986:29104): avc: denied { write } for pid=13301 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.366364][T13309] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 313.395268][ T43] audit: type=1400 audit(1790131621.046:29105): avc: denied { write } for pid=13310 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.475508][T13316] block2mtd: illegal erase size [ 313.506988][ T43] audit: type=1400 audit(1790131621.166:29106): avc: denied { write } for pid=13314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.544119][ T43] audit: type=1400 audit(1790131621.196:29107): avc: denied { write } for pid=13320 comm="syz.4.1819" name="functions" dev="configfs" ino=6978 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.545025][ T43] audit: type=1400 audit(1790131621.196:29108): avc: denied { write } for pid=13320 comm="syz.4.1819" name="core" dev="configfs" ino=5932 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.545434][ T43] audit: type=1400 audit(1790131621.196:29109): avc: denied { write } for pid=13320 comm="syz.4.1819" name="rd_mcp_0" dev="configfs" ino=53884 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 313.572524][T13322] ** replaying previous printk message ** [ 313.572524][T13322] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 313.577883][T13322] [ 313.582478][T13322] ====================================================== [ 313.584776][T13322] WARNING: possible circular locking dependency detected [ 313.587053][T13322] syzkaller #0 Tainted: G L [ 313.589129][T13322] ------------------------------------------------------ [ 313.591453][T13322] syz.4.1819/13322 is trying to acquire lock: [ 313.593418][T13322] ffff888020632280 (&sb->s_type->i_mutex_key#28){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 313.597197][T13322] [ 313.597197][T13322] but task is already holding lock: [ 313.599557][T13322] ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 313.602848][T13322] [ 313.602848][T13322] which lock already depends on the new lock. [ 313.602848][T13322] [ 313.606249][T13322] [ 313.606249][T13322] the existing dependency chain (in reverse order) is: [ 313.609397][T13322] [ 313.609397][T13322] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 313.612569][T13322] lock_acquire+0x1d1/0x380 [ 313.614440][T13322] __mutex_lock+0x1a4/0x1bd0 [ 313.616177][T13322] usbg_make_tpg+0x10b/0x610 [ 313.617985][T13322] target_fabric_make_tpg+0xab/0x8c0 [ 313.619904][T13322] configfs_mkdir+0x525/0xd40 [ 313.621669][T13322] vfs_mkdir+0x364/0x850 [ 313.623263][T13322] filename_mkdirat+0x48b/0x5e0 [ 313.625088][T13322] __x64_sys_mkdirat+0x89/0xc0 [ 313.626851][T13322] do_syscall_64+0x123/0x790 [ 313.628541][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.630688][T13322] [ 313.630688][T13322] -> #1 (&subsys->su_mutex){+.+.}-{4:4}: [ 313.633327][T13322] lock_acquire+0x1d1/0x380 [ 313.634928][T13322] __mutex_lock+0x1a4/0x1bd0 [ 313.636531][T13322] configfs_rmdir+0x5ae/0x950 [ 313.638193][T13322] vfs_rmdir+0x328/0x8a0 [ 313.639735][T13322] filename_rmdir+0x31a/0x5c0 [ 313.641554][T13322] __x64_sys_rmdir+0x46/0x70 [ 313.643270][T13322] do_syscall_64+0x123/0x790 [ 313.644966][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.647160][T13322] [ 313.647160][T13322] -> #0 (&sb->s_type->i_mutex_key#28){++++}-{4:4}: [ 313.650146][T13322] check_prev_add+0xeb/0xe60 [ 313.651920][T13322] __lock_acquire+0x1528/0x1f40 [ 313.653701][T13322] lock_acquire+0x1d1/0x380 [ 313.655445][T13322] down_write+0x8b/0x1f0 [ 313.657040][T13322] configfs_depend_item_unlocked+0xf3/0x6a0 [ 313.659151][T13322] usbg_make_tpg+0x251/0x610 [ 313.660923][T13322] target_fabric_make_tpg+0xab/0x8c0 [ 313.662838][T13322] configfs_mkdir+0x525/0xd40 [ 313.664540][T13322] vfs_mkdir+0x364/0x850 [ 313.666143][T13322] filename_mkdirat+0x48b/0x5e0 [ 313.667979][T13322] __x64_sys_mkdirat+0x89/0xc0 [ 313.669749][T13322] do_syscall_64+0x123/0x790 [ 313.671458][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.673608][T13322] [ 313.673608][T13322] other info that might help us debug this: [ 313.673608][T13322] [ 313.676914][T13322] Chain exists of: [ 313.676914][T13322] &sb->s_type->i_mutex_key#28 --> &subsys->su_mutex --> tpg_instances_lock [ 313.676914][T13322] [ 313.681701][T13322] Possible unsafe locking scenario: [ 313.681701][T13322] [ 313.684093][T13322] CPU0 CPU1 [ 313.685912][T13322] ---- ---- [ 313.687656][T13322] lock(tpg_instances_lock); [ 313.689225][T13322] lock(&subsys->su_mutex); [ 313.691612][T13322] lock(tpg_instances_lock); [ 313.693930][T13322] lock(&sb->s_type->i_mutex_key#28); [ 313.695788][T13322] [ 313.695788][T13322] *** DEADLOCK *** [ 313.695788][T13322] [ 313.698460][T13322] locks held by syz.4.1819/13322: 4, last CPU#1: [ 313.700503][T13322] #0: ffff8880245c0460 (sb_writers#16){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 313.703613][T13322] #1: ffff888039b35b80 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 313.707146][T13322] #2: ffffffff8ffb2e68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 313.710306][T13322] #3: ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 313.713473][T13322] [ 313.713473][T13322] stack backtrace: [ 313.715458][T13322] CPU: 1 UID: 0 PID: 13322 Comm: syz.4.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 313.718963][T13322] Tainted: [L]=SOFTLOCKUP [ 313.720378][T13322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 313.723717][T13322] Call Trace: [ 313.724847][T13322] [ 313.725814][T13322] dump_stack_lvl+0x100/0x190 [ 313.727382][T13322] print_circular_bug.cold+0x178/0x1be [ 313.729227][T13322] check_noncircular+0x146/0x160 [ 313.730851][T13322] check_prev_add+0xeb/0xe60 [ 313.732405][T13322] __lock_acquire+0x1528/0x1f40 [ 313.734012][T13322] ? rcu_is_watching+0x13/0xc0 [ 313.735621][T13322] lock_acquire+0x1d1/0x380 [ 313.737153][T13322] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 313.739204][T13322] ? __pfx___might_resched+0x10/0x10 [ 313.740961][T13322] down_write+0x8b/0x1f0 [ 313.742402][T13322] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 313.744460][T13322] ? __pfx_down_write+0x10/0x10 [ 313.746083][T13322] ? kstrtou16+0xde/0x130 [ 313.747535][T13322] configfs_depend_item_unlocked+0xf3/0x6a0 [ 313.749455][T13322] usbg_make_tpg+0x251/0x610 [ 313.751025][T13322] ? __pfx_usbg_make_tpg+0x10/0x10 [ 313.752789][T13322] ? find_held_lock+0x2b/0x80 [ 313.754349][T13322] ? __pfx_usbg_make_tpg+0x10/0x10 [ 313.756038][T13322] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 313.758084][T13322] target_fabric_make_tpg+0xab/0x8c0 [ 313.759838][T13322] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 313.761792][T13322] configfs_mkdir+0x525/0xd40 [ 313.763356][T13322] ? may_create+0x285/0x440 [ 313.764865][T13322] ? __pfx_configfs_mkdir+0x10/0x10 [ 313.766654][T13322] vfs_mkdir+0x364/0x850 [ 313.768071][T13322] filename_mkdirat+0x48b/0x5e0 [ 313.769690][T13322] ? __pfx_filename_mkdirat+0x10/0x10 [ 313.771466][T13322] ? strncpy_from_user+0x19d/0x2d0 [ 313.773148][T13322] ? do_getname+0x191/0x390 [ 313.774692][T13322] __x64_sys_mkdirat+0x89/0xc0 [ 313.776348][T13322] do_syscall_64+0x123/0x790 [ 313.777903][T13322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.779833][T13322] RIP: 0033:0x7f9440b9e159 [ 313.781336][T13322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.787590][T13322] RSP: 002b:00007f943edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 313.790319][T13322] RAX: ffffffffffffffda RBX: 00007f9440e25fa0 RCX: 00007f9440b9e159 [ 313.792993][T13322] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 313.795718][T13322] RBP: 00007f9440c3506b R08: 0000000000000000 R09: 0000000000000000 [ 313.798363][T13322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.800987][T13322] R13: 00007f9440e26038 R14: 00007f9440e25fa0 R15: 00007fff1fc70288 [ 313.803610][T13322] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 313.881002][ T8567] usb 14-1: USB disconnect, device number 8 [ 313.881602][ T8567] qmi_wwan 14-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.9-1, WWAN/QMI device [ 314.000490][ T8567] wwan wwan0: port wwan0qmi0 disconnected [ 314.151044][ T12] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.264887][ T12] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.341126][ T12] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.371100][ T12] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.452520][ T12] bridge_slave_1: left allmulticast mode [ 314.452536][ T12] bridge_slave_1: left promiscuous mode [ 314.452652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.453579][ T12] bridge_slave_0: left allmulticast mode [ 314.453590][ T12] bridge_slave_0: left promiscuous mode [ 314.453648][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.542479][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.545271][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.547563][ T12] bond0 (unregistering): Released all slaves [ 314.550982][ T12] bond1 (unregistering): Released all slaves [ 314.612581][ T12] tipc: Left network mode [ 314.750536][ T12] hsr_slave_0: left promiscuous mode [ 314.751090][ T12] hsr_slave_1: left promiscuous mode [ 314.751603][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.751620][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.752376][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.752390][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.758569][ T12] veth1_macvtap: left promiscuous mode [ 314.758591][ T12] veth0_macvtap: left promiscuous mode [ 314.758648][ T12] veth1_vlan: left promiscuous mode [ 314.758757][ T12] veth0_vlan: left promiscuous mode [ 314.850887][ T12] team0 (unregistering): Port device team_slave_1 removed [ 314.853647][ T12] team0 (unregistering): Port device team_slave_0 removed [ 314.888960][ T5446] 8021q: adding VLAN 0 to HW filter on device eth24 [ 315.028943][ T5446] 8021q: adding VLAN 0 to HW filter on device eth25 [ 315.109591][ T12] IPVS: stop unused estimator thread 0... [ 315.149659][ T5446] 8021q: adding VLAN 0 to HW filter on device eth26 [ 315.170562][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.193862][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.249749][ T12] team0: Port device netdevsim1 removed [ 315.250752][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.285673][ T5446] 8021q: adding VLAN 0 to HW filter on device eth27 [ 315.304535][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.399863][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.450131][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.493410][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.554385][ T5446] 8021q: adding VLAN 0 to HW filter on device eth28 [ 315.571845][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.641459][ T12] dummy0: left allmulticast mode [ 315.641699][ T12] dummy0: left promiscuous mode [ 315.641830][ T12] bridge0: port 3(dummy0) entered disabled state [ 315.643004][ T12] bridge_slave_1: left allmulticast mode [ 315.643021][ T12] bridge_slave_1: left promiscuous mode [ 315.643123][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.644329][ T12] bridge_slave_0: left allmulticast mode [ 315.644345][ T12] bridge_slave_0: left promiscuous mode [ 315.644449][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.655193][ T12] bridge_slave_1: left allmulticast mode [ 315.655214][ T12] bridge_slave_1: left promiscuous mode [ 315.655320][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.658608][ T12] bridge_slave_0: left allmulticast mode [ 315.658626][ T12] bridge_slave_0: left promiscuous mode [ 315.658726][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.756925][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.759368][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.761894][ T12] bond0 (unregistering): Released all slaves [ 315.806848][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 315.808841][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 315.810342][ T12] bond0 (unregistering): Released all slaves [ 315.813226][ T5446] 8021q: adding VLAN 0 to HW filter on device eth29 [ 315.870160][ T12] ovs-system: left promiscuous mode [ 315.937070][ T12] tipc: Left network mode [ 315.969091][ T5446] 8021q: adding VLAN 0 to HW filter on device eth30 [ 316.116751][ T5446] 8021q: adding VLAN 0 to HW filter on device eth31 [ 316.280442][ T5446] 8021q: adding VLAN 0 to HW filter on device eth32 [ 316.358697][ T12] hsr_slave_0: left promiscuous mode [ 316.359283][ T12] hsr_slave_1: left promiscuous mode [ 316.359713][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.359729][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.362621][ T12] hsr_slave_0: left promiscuous mode [ 316.363358][ T12] hsr_slave_1: left promiscuous mode [ 316.363999][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.364014][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.364842][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.364858][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.373465][ T12] veth1_macvtap: left promiscuous mode [ 316.373496][ T12] veth0_macvtap: left promiscuous mode [ 316.373625][ T12] veth1_vlan: left promiscuous mode [ 316.373668][ T12] veth0_vlan: left promiscuous mode [ 316.383282][ T12] veth1_macvtap: left promiscuous mode [ 316.383386][ T12] veth0_macvtap: left promiscuous mode [ 316.383450][ T12] veth1_vlan: left promiscuous mode [ 316.383553][ T12] veth0_vlan: left promiscuous mode [ 316.509641][ T12] team0 (unregistering): Port device team_slave_1 removed [ 316.515816][ T12] team0 (unregistering): Port device team_slave_0 removed [ 316.644702][ T12] team0 (unregistering): Port device team_slave_1 removed [ 316.648966][ T12] team0 (unregistering): Port device team_slave_0 removed [ 316.679276][ T5446] 8021q: adding VLAN 0 to HW filter on device eth33 [ 316.852204][ T5446] 8021q: adding VLAN 0 to HW filter on device eth34 [ 317.011040][ T5446] 8021q: adding VLAN 0 to HW filter on device eth35 [ 317.028429][ T12] IPVS: stop unused estimator thread 0... [ 317.056934][ T1437] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.056971][ T1437] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.166850][T13429] usb 6-1: USB disconnect, device number 10 [ 317.169935][T13429] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 317.170099][T13429] oti6858 6-1:1.0: device disconnected [ 323.414486][ T43] kauditd_printk_skb: 41 callbacks suppressed [ 323.414499][ T43] audit: type=1400 audit(1790131631.066:29151): avc: denied { write } for pid=13476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 323.450127][ T43] audit: type=1400 audit(1790131631.106:29152): avc: denied { write } for pid=13479 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1