last executing test programs: 2m53.625594383s ago: executing program 1 (id=106): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) write(r4, &(0x7f00000007c0)='n', 0x1) close_range(r3, 0xffffffffffffffff, 0x0) socket(0x80000000000000a, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) socket(0x80000000000000a, 0x2, 0x0) (async) socket(0x1e, 0x2, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) (async) write(r4, &(0x7f00000007c0)='n', 0x1) (async) close_range(r3, 0xffffffffffffffff, 0x0) (async) 2m52.920774362s ago: executing program 1 (id=113): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 2m52.318313249s ago: executing program 1 (id=117): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r5 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r0, r1, 0x5, 0x0, @void}, 0x10) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) accept(r6, &(0x7f0000000180)=@in={0x2, 0x0, @remote}, &(0x7f0000000200)=0x80) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = inotify_init() mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x0, 0x3d70000000, &(0x7f0000ffe000/0x2000)=nil}) ioctl$KVM_CAP_SPLIT_IRQCHIP(r8, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0xf71}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001"], 0x24}}, 0x0) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000001080)={r5, r0, 0x4, r0}, 0x10) 2m51.480056192s ago: executing program 1 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r0, 0xc138fd0d, &(0x7f0000000000)="04000000000000") openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@cred={{0x1c, 0x1, 0x2, {r2, 0x0, 0xee00}}}], 0x20, 0x40000}}], 0x1, 0x0) close(0x3) 2m50.90631477s ago: executing program 1 (id=125): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991100b00000000000010902200001010080320904000002000000000705810200020007050202"], 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) sendmsg$inet6(r0, &(0x7f0000000780)={&(0x7f0000000080)={0xa, 0x4e20, 0x800001, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000002c0)="dc", 0x1}], 0x1}, 0x48043) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./proc/net/ip_vs_conn/file0\x00', 0x17a) mount(0x0, &(0x7f0000000240)='./proc/net/ip_vs_conn\x00', &(0x7f0000000100)='devtmpfs\x00', 0x200000, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./proc\x00', 0xc00, 0x24) semctl$SETALL(0x0, 0x0, 0x11, 0x0) lseek(r4, 0x0, 0x2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000000)={'ip6erspan0\x00', @random="01350100106a"}) read$FUSE(r4, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c000000", @ANYRES64=r4, @ANYRESHEX=r6, @ANYRES8=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008094) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000", @ANYRESDEC=r2, @ANYBLOB="00042abd7000fedb1fe5d71ddf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x10815}, 0x4040000) r7 = dup(r0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) mkdirat(r1, &(0x7f0000000040)='./dev\x00', 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$XFS_IOC_FSGETXATTRA(r8, 0x801c582d, 0x0) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/ip_vs_conn\x00', 0x0, 0x0) read(r9, &(0x7f0000000300)=""/1024, 0x400) 2m50.177229148s ago: executing program 1 (id=128): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/171, 0xab, 0x9b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) 2m49.791349004s ago: executing program 32 (id=128): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) pread64(r0, &(0x7f00000000c0)=""/171, 0xab, 0x9b) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000040)={'syz_tun\x00', @random='\x00\x00\x00\x00\x00 '}) 2m15.221183715s ago: executing program 4 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0) socket$unix(0x1, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000007c0)='net/vlan/config\x00') r4 = fanotify_init(0x2, 0x8000) readv(r4, &(0x7f0000000940), 0x0) fanotify_mark(r4, 0x1, 0x40001009, r3, 0x0) close_range(r3, r3, 0x0) getdents64(r3, &(0x7f0000000080)=""/73, 0x22) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') read$FUSE(r5, &(0x7f00000027c0)={0x2020}, 0x2038) preadv(r5, &(0x7f0000000200)=[{&(0x7f0000000000)=""/246, 0xf6}], 0x1, 0x6, 0x4) read$char_usb(r5, &(0x7f0000000580)=""/78, 0x4e) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f0, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x220, 0x20a, 0x278, 0x220, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @private1, [], [], 'gretap0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x180, 0xa42, 0xb}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x350) socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), &(0x7f00000002c0)=0xfffffffffffffce5) close(r1) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r6, 0x484, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) fspick(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x1) sendto$inet6(r6, &(0x7f00000004c0)="c3", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000018000506010000000000000002000000fc00000600000000060015000200000024001680200008801c000180060001000120000005000200010000000800030001020304"], 0x48}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001a00010302000000000000000200000000ecffffff0000005a0c7c941892d80a67fa704ba3a49ade8e4493d1c0e05021aabd5912d901d20735cc42b32f80b2024fed63176890207ee81a14e2261ea5ce95cffba8383d3e4f93d8fd064697f840"], 0x1c}}, 0x0) 2m15.052084108s ago: executing program 4 (id=327): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x2, 0x0) r1 = timerfd_create(0x9, 0x80000) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) timerfd_settime(r1, 0x3, &(0x7f00000001c0)={{0x77359400}, {0x0, 0x989680}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r3, 0x8982, &(0x7f00000026c0)={0x0, 'hsr0\x00', {0x3}, 0x8}) setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000080)=0x53, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6gretap0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x64, 0x30, 0xb, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}, @TCA_CT_MARK={0x8, 0x10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000080)={@remote, 0x13, r6}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x0, 0x0}, 0x10) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, r6}, 0x14) write(r0, &(0x7f0000000180)="ff00", 0x2) 2m14.474088882s ago: executing program 4 (id=330): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380), 0x149842, 0x0) write$dsp(r3, &(0x7f00000003c0)="91", 0xffffffb5) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000b, 0x8012, r3, 0x0) close(r3) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f00000002c0)=[@code={0xa, 0x5d, {"b8010000000f01c166bad104ec0fdb4d70b99f030000b8feffffffba000000000f300f20578f292098953200000066baf80cb8e68af88def66bafc0c66ed2666420fc737ff4d49c4c155f3e9"}}], 0x5d}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa}, @NDA_MASTER={0x8, 0x9, 0x1}]}, 0x30}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000000)=@arm64={0x5, 0x5e, 0x0, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m13.262691808s ago: executing program 4 (id=337): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', 0x0, 0x2f, 0xd0, 0x9, 0x0, 0x1b, @private1, @remote, 0x80, 0x66af932232556e2e, 0x8, 0xc06}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000002c0)={'vxcan0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x58, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x18, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)=@RTM_NEWMDB={0xb8, 0x54, 0x300, 0x70bd2b, 0x25dfdbfc, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x6, 0x0, {@in6_addr=@mcast2, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x0, {@in6_addr=@empty, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x1, {@ip4=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x4, {@in6_addr=@dev={0xfe, 0x80, '\x00', 0x41}, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r5, 0x0, 0x2, 0x1, {@ip4=@dev={0xac, 0x14, 0x14, 0x29}, 0x800}}}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4004}, 0x801) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1705, 0x200feff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m12.447567348s ago: executing program 4 (id=341): sendmsg$kcm(0xffffffffffffffff, 0x0, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r2 = gettid() sendmsg$nl_generic(r0, &(0x7f0000001980)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001940)={&(0x7f0000000680)={0x12b0, 0x15, 0x300, 0x70bd2d, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x3e, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x9a, 0x0, 0x0, @u32=0x2}, @nested={0x7c, 0x7e, 0x0, 0x1, [@nested={0x4, 0x22}, @typed={0x71, 0x45, 0x0, 0x0, @binary="c7b421a3e8c299643e864707def40b8d2b521fc1fd38c9cc687dba058b5bfe6fb7a8a2b2a33edd92ba91eea72f006f5a558d24c178833fdd80ecb58aadc983ace1e998572a34edb6f09db07319b9e968c4f199721af0ab9196c0093f08c4b5b386fe23755e2e65bf9ec78bccd2"}]}, @typed={0xd4, 0x144, 0x0, 0x0, @binary="44e29cbe883fe425d691aed9cfa84e10004bee7002982a02712a7d37ab65d756adfb190c60241e8f2bc60a01116aade26a63a27eced99d8f15386f7b4b0cf5cdfa1030e5a214becc24a7dd3a1042e5e5daac62844f7fbc80e199ce7a5041361778f8847e82160468d7aec7a6c2e9ab0b9394f7582998b5c8cc90f4ac6b4f91226e0531c97fc3ff4cea7f386148ab91455d445bdadf3d3bd25349406f9742e07e65f0406f8f4a0e568de414889135b3226afc56ec468705fff9d47dead7306d66082267587fdef7d8ad295edbfda47919"}, @nested={0x1139, 0x4b, 0x0, 0x1, [@generic="751143342638faa3c3", @generic="cbf43b55da5c1fd090051ccafc55b783a4b69f974bf615fe98dd24d8efe77798a536b458b2b8c5abcd350045cbd38f7f6bf9dac71f7ab13026640128b22d6db82416af482f086b7f05b8b9cd8aeb578ed1d4", @generic="8ea7", @typed={0x8, 0x35, 0x0, 0x0, @u32=0x1b60}, @generic="1377fca4aa6edf52dfee265d40197f97360720b279f92785edb48a8b98646d0bac89de68ee2a66bb3d9b182d89eb50817c4a1a32ba38a9c3318cd76a8ac551a87526b3f9ba891be319ec85d6fe2e6384387980a205a91930cc110b232936099ce9e204b590df06695410e782e37aa0345c5d21c3234ef01a136ef090b16ee84014133e44461271d27dff9d8277a838c4600c9a9eecb292e76a1cd05f7957bca0fb26ebbb49ae40e0365b8e8838a8ce6e3a32493e", @typed={0xa, 0x94, 0x0, 0x0, @str='sysfs\x00'}, @nested={0x4, 0xb5}, @generic="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", @typed={0x8, 0x6c, 0x0, 0x0, @u32=0x401}, @nested={0x4, 0x15}]}]}, 0x12b0}, 0x1, 0x0, 0x0, 0x8000000}, 0x20000890) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000240)="45d94d52a98d4908726ae5c6224144dd37392669f6a41a9d3eadda17a9a56c0bed361684d5e928a58363711c4fa9339f1830425ed916a9e2f6d47a2864db18e3b2f3979528309e05a9840fcf49f4a48efa440ffd5cadce6cb8f1ee01b1f8f7661a6c448f79178002bcb1cbf1c71b19a322eb1bc2822f3a8f001b5c3d6bc1312df08545d7b73b4007e2de8cd9c81f9139a5db8532d322dd474952c0be6bdd54c691276df6b9ff95660a300a4f9dfbb32f1411a19fd0b67eb44785bc68abf4438c0078ec27b40b21188c8ad246eb1d5382b2c73931bbab99b0137e009ef1cc9d8f30c6c7fe1095dcf4ce670133c5785900"/253, 0xfd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setregs(0xd, r3, 0x0, &(0x7f0000000540)) ptrace$cont(0x1f, r3, 0x0, 0x3) write(r1, &(0x7f00000001c0)='1', 0x1) 2m9.538400355s ago: executing program 4 (id=358): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='9p\x00', 0x64a00, &(0x7f0000000080)={@align=0x1, {0x9, 0x7, 0x5e4, 0x2}}, 0x719, &(0x7f00000000c0), &(0x7f0000000100)=0x800}) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 1m53.387385391s ago: executing program 33 (id=358): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='9p\x00', 0x64a00, &(0x7f0000000080)={@align=0x1, {0x9, 0x7, 0x5e4, 0x2}}, 0x719, &(0x7f00000000c0), &(0x7f0000000100)=0x800}) read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) utimes(&(0x7f0000000040)='./file0\x00', 0x0) 1m51.135849367s ago: executing program 2 (id=431): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r0, 0x0, 0x0) 1m51.055921926s ago: executing program 2 (id=432): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) 1m23.986903989s ago: executing program 2 (id=435): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_NMI(r2, 0xae9a) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000400)="1ccc0ad55cd13a", 0x7}], 0x1, &(0x7f0000000900)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30, 0x8011}], 0x1, 0x4044800) (async) recvmsg(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x6, 0x4, 0x7f, 0x100000, 0x0, 0x2004c8, 0x7fffffc, 0x20000000000, 0x4, 0x7, 0x103, 0xb, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/vhci\x00', 0x40002, 0x0) (async) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000400)={0x40, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000080)={0x0, 0x5f5e100}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f00000002c0)='omfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000200)='ccgx-ucsi 0x08\n', 0xf) write(0xffffffffffffffff, 0x0, 0x0) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl(r8, 0x400caed0, &(0x7f0000000800)="0100") mount(0x0, 0x0, 0x0, 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) (async) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x38602, 0x0) 1m23.914470008s ago: executing program 2 (id=442): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000410005000200000000000000010100002a"], 0x38}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000041000103030000000000000003"], 0x18}}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r3 = socket$inet(0x2, 0x1, 0x0) getsockopt(r3, 0x0, 0x50, &(0x7f0000000200), &(0x7f0000000204)=0x10) write$binfmt_script(r2, &(0x7f00000001c0)={'#! ', './mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable', [{0x20, '\xff\xff\xfe\x13k\x03\x8c\xf5\x99\x13\xfd\x93\x81\x9f\xc0\x01\x00\x00\x00\x01\x00\x00\x00\x13\xec\xdf\xc9\x1c\xcd\xa4\xcf\x05\xf2\xb5lj\xb1\xaf\xba\xfc\xe0 \xce\xb2\xcf\x81\xf5\x1cc\xa5c]\x1e\xa8C?\x8dV\\`r>Y\x15\x81\xde8\xd3H\xed\xd7\xbb\xbfh\f\xb7\x8c\xac\x97\x8e\xcb\xc9\xbff\x19\xa2\xae-\xbf\xf8aO\x9b\x04\xe0]<\xb2\x161\x83\x9969\xd0\x845\xd4\xf8S\x86y)$0O~\x1f?\xa4\fYe\xbd\x1a\x83\xe5^\x9f\xdd\x8a\x10\n\xe4\x00\x00<\xd7\tD\x91\x8870x0}, &(0x7f0000000140)=0xc) quotactl$Q_GETFMT(0xffffffff80000401, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, r5, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="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", 0x2000, &(0x7f0000003e80)={&(0x7f0000003040)={0x50, 0x0, 0x9, {0x7, 0x2d, 0x200, 0xffffffff83001000, 0x9, 0x200, 0x3, 0x9, 0x0, 0x0, 0x80, 0x6}}, &(0x7f00000030c0)={0x18, 0x0, 0xf, {0x6}}, &(0x7f0000003100)={0x18, 0x0, 0x66, {0xe7e}}, &(0x7f0000003140)={0x18, 0x0, 0x52c, {0x6}}, &(0x7f0000003180)={0x18, 0x0, 0x3, {0x40}}, &(0x7f0000003200)={0x28, 0x0, 0xfffffffffffff001, {{0x6, 0x1, 0x578a2eb1e7a2f176}}}, &(0x7f0000003240)={0x60, 0x0, 0x4, {{0x0, 0x3ff, 0x2, 0x80000000, 0x9, 0x3, 0x2b8, 0x5}}}, &(0x7f00000032c0)={0x18, 0x0, 0x9}, &(0x7f0000003300)={0x15, 0xfffffffffffffffe, 0xf, {'hash\x00'}}, &(0x7f0000003340)={0x20, 0x0, 0x7fffffff, {0x0, 0xa}}, &(0x7f0000003440)={0x78, 0xfffffffffffffff5, 0x1, {0x40, 0x100, 0x0, {0x3, 0x6, 0x100000001, 0x2f, 0x40, 0xffffffffffffffff, 0x73ae63f1, 0x6, 0x8e, 0x6000, 0xd, 0xee00, 0x0, 0xfffffbff, 0xb}}}, &(0x7f0000003580)={0x90, 0xfffffffffffffffe, 0x0, {0x2, 0x2, 0x4076, 0x10, 0x3, 0x0, {0x4, 0x1a, 0x7ff, 0x6, 0xe, 0x81, 0xff, 0x98, 0x7, 0x8000, 0x7, 0x0, 0x0, 0x5, 0x7}}}, &(0x7f0000003640)={0x120, 0xffffffffffffffda, 0x10000, [{0x5, 0x1000, 0x93, 0x2, '\xff\xff\xfe\x13k\x03\x8c\xf5\x99\x13\xfd\x93\x81\x9f\xc0\x01\x00\x00\x00\x01\x00\x00\x00\x13\xec\xdf\xc9\x1c\xcd\xa4\xcf\x05\xf2\xb5lj\xb1\xaf\xba\xfc\xe0 \xce\xb2\xcf\x81\xf5\x1cc\xa5c]\x1e\xa8C?\x8dV\\`r>Y\x15\x81\xde8\xd3H\xed\xd7\xbb\xbfh\f\xb7\x8c\xac\x97\x8e\xcb\xc9\xbff\x19\xa2\xae-\xbf\xf8aO\x9b\x04\xe0]<\xb2\x161\x83\x9969\xd0\x845\xd4\xf8S\x86y)$0O~\x1f?\xa4\fYe\xbd\x1a\x83\xe5^\x9f\xdd\x8a\x10\n\xe4\x00\x00<\xd7\tD\x91\x8870xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x1c, &(0x7f0000000440)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_SET_DESC={0x20, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}]}]}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x10, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, '\x00\x00\x00\x00\x00\x00\x00\x00'}]}, @NFTA_SET_ELEM_KEY_END={0x10, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc, 0x1, "f81f3fe70a58a077"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 1m22.763517075s ago: executing program 2 (id=454): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x101481, 0x1a5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002300)=@generic={&(0x7f0000002280)='./tracing\x00', r0}, 0x18) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000022c0)=0xfffffffffffffffb) (async) chmod(&(0x7f0000000000)='./cgroup\x00', 0x37) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000380)=""/39, 0x85}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000740)=""/195, 0xb7}], 0x7, &(0x7f00000006c0)=""/29, 0x1d}, 0x20) 1m22.45509313s ago: executing program 34 (id=454): mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', 0x0, 0x0, 0x0) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x6e, 0x800) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup\x00', 0x101481, 0x1a5) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020}, 0x2020) (async) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000002300)=@generic={&(0x7f0000002280)='./tracing\x00', r0}, 0x18) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f00000022c0)=0xfffffffffffffffb) (async) chmod(&(0x7f0000000000)='./cgroup\x00', 0x37) recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000140)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/52, 0x34}, {&(0x7f0000000200)=""/117, 0x75}, {&(0x7f0000000280)=""/210, 0xd2}, {&(0x7f0000000380)=""/39, 0x85}, {&(0x7f00000003c0)=""/136, 0x88}, {&(0x7f0000000480)=""/67, 0x43}, {&(0x7f0000000740)=""/195, 0xb7}], 0x7, &(0x7f00000006c0)=""/29, 0x1d}, 0x20) 46.191021998s ago: executing program 5 (id=747): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x3000000, 0x30, 0xffffffffffffffff, 0xffffd000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x15f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0xc) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x220008d0}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x80002, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000080)={0x84, @rand_addr=0x64010100, 0x4e21, 0x3, 'wrr\x00', 0x1, 0xa8a, 0x30}, 0x2c) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x24004052) 46.159063696s ago: executing program 5 (id=749): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, &(0x7f00000002c0)={{0xff, @rand_addr, 0x0, 0x2, 'wlc\x00', 0x29, 0x2, 0x3}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0xffff, 0x3, 0x5, 0x6a, 0x2}}, 0x44) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000200000000000000000500010006"], 0x1c}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$I2C(&(0x7f00000000c0), 0x6, 0x444000) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000240)={0xdf, 0x0, 0x4000}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000340)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000940)={0x2, 0x0, @ioapic={0x5000, 0x8004, 0x1, 0xfffffffe, 0x0, [{0x7, 0xc, 0x7, '\x00', 0x38}, {0x9, 0xde, 0x7a, '\x00', 0x9}, {0x2, 0xb3, 0x1, '\x00', 0x5}, {0x5, 0x9, 0x6, '\x00', 0x4}, {0x5, 0x5, 0x6, '\x00', 0x7c}, {0x0, 0x80, 0x0, '\x00', 0x6}, {0x4, 0x8, 0xff, '\x00', 0x45}, {0x52, 0xc, 0x9, '\x00', 0x7}, {0x7, 0x6, 0x73, '\x00', 0x3}, {0x1, 0xb7, 0x89, '\x00', 0x7}, {0x16, 0x24, 0xa9, '\x00', 0x81}, {0x3, 0x1, 0x17, '\x00', 0xb}, {0x6, 0x5, 0x5, '\x00', 0x3}, {0x19, 0x9, 0x89, '\x00', 0x4}, {0x5, 0x1, 0x3, '\x00', 0x1}, {0x8, 0x9, 0xcb, '\x00', 0x5}, {0x4, 0xe, 0xb, '\x00', 0x5}, {0x9, 0x0, 0xfa, '\x00', 0x5}, {0x44, 0x3, 0x3}, {0xf4, 0x8, 0x7, '\x00', 0xf8}, {0x4, 0x7, 0x31, '\x00', 0xf7}, {0x7, 0x87, 0xe6, '\x00', 0xb}, {0xff, 0x8, 0x3, '\x00', 0xa}, {0x7, 0x87, 0x4, '\x00', 0xff}]}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x8ed, 0x0, 0x4}, {0x32c}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000070, 0x0, 0x400006}]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfe, 0x20000}, 0xc) 45.974536819s ago: executing program 5 (id=752): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0xe, 0x300, &(0x7f00000002c0)="f57b0bb7994307a7ac95a7c71016", 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, &(0x7f0000000180)="b8"}, 0x3a) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000), 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x5, 0x80000000, 0x8, @empty, @empty, 0x7, 0x1, 0x9, 0xfffff1e5}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex=r1, 0x5, 0x1, 0x89, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)}, 0x40) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r2}, 0x8) close(r3) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f0000000800)='GPL\x00'}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r3, r4, 0x0, r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r5) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r10, 0x0) ioctl$KVM_SET_REGS(r10, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x0, 0x81, 0x4, 0x8, 0x0, 0x7, 0x12, 0x400, 0x80000004, 0xfffffffffffffff8, 0x7, 0x1, 0x6, 0x100000000001], 0x8000000, 0x4fb40}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r12 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r12, 0xc0d05640, &(0x7f00000004c0)={0xa, @sdr={0x4745504a, 0x7fff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) ioctl$KVM_SET_REGS(r11, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x8000000000000000, 0x4000000000000e52, 0x1, 0x5479, 0x1043, 0x200000000006, 0x4, 0x1, 0xfffffffffffffffe, 0x100000000, 0xcc78, 0x200001, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) 45.717011618s ago: executing program 5 (id=755): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zoned\x00', 0x1, 0x0) close(r0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/rnullb0/zone_size\x00', 0x1, 0x0) write(r0, &(0x7f00000004c0)="06f69754f4293b79f70c1c6b6d6db14f5ab0107cb65ede34f052d61e3378ae0ec05924b003d8862def48495555c793adcc43ccd1d9033ec15448c162a1a44d863f55445125a92a3afb31bd700000802bc1b85f9e597c5809a531fc6fd1831a67f0c315107c8d1692c2ffe14d981a9ee8d1979c7e79fbedc832bf49fa75737694374e65af8ed1f54482701d537af308a769321cd03800", 0x96) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$setsig(0x4203, r1, 0x5, &(0x7f0000000140)={0x3, 0x4, 0xfffffff7}) ptrace$cont(0x20, r1, 0x80, 0x0) getpgid(r1) 45.663306713s ago: executing program 5 (id=756): mkdir(&(0x7f0000000080)='./my_configfs/target/usb_gadget\x00', 0xd4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='wwnn=0x1111111111111111,wwpn=0x2222222222222222', 0x2f) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./config\x00', &(0x7f0000000380)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0), 0x0) write(0xffffffffffffffff, &(0x7f0000000740)='f', 0x1) symlinkat(&(0x7f0000000800)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./config/nvmet/ports/1/subsystems/testsubsys\x00') mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"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", 0xa75}}, 0x1006) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) rmdir(&(0x7f0000000180)='./my_configfs/target/usb_gadget\x00') 45.258377144s ago: executing program 5 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc0, 0x104) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000059b446bdab78fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x4884) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r8, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r7, 0x7) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000003c0)={'\x00', 0x2, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000340)={0x2, 0x6, 0x400, 0x1, 0x1}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000200)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}, 0x3a}], [], 0x2f}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0xe500, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000021401002abd7800fddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$CDROMEJECT(r9, 0x5309) ioctl$CDROMREADMODE2(r9, 0x530c, &(0x7f0000000580)={0x6, 0xc4, 0x1, 0xb, 0xd, 0x4d}) 45.257524235s ago: executing program 35 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0xc0, 0x104) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000059b446bdab78fcffffef000000000000000085000000ae0000009500"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002", @ANYBLOB="f7", @ANYRESDEC], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, 0x0, 0x0) syz_usb_ep_write(r3, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") read$char_usb(r4, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_LIMIT={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc004}, 0x4884) r7 = gettid() r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r8, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r8, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r7, 0x7) ioctl$PTP_PIN_SETFUNC(r1, 0x40603d07, &(0x7f00000003c0)={'\x00', 0x2, 0x1}) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000340)={0x2, 0x6, 0x400, 0x1, 0x1}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000200)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}, 0x3a}], [], 0x2f}) r9 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0xe500, 0x0) mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r10, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000021401002abd7800fddbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$CDROMEJECT(r9, 0x5309) ioctl$CDROMREADMODE2(r9, 0x530c, &(0x7f0000000580)={0x6, 0xc4, 0x1, 0xb, 0xd, 0x4d}) 38.787226911s ago: executing program 0 (id=801): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000480)=[{0x0}, {0x0}, {0x0}, {0x0}, {&(0x7f0000000680)}], 0x5, 0x4, 0x5) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x4, 0xfffffff8, 0x0, 0xff, 0xff}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000840) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000440)={'\x00', 0x5001}) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000180)={0x0, 0x0, 0x10, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r5, r6, r7, &(0x7f00000002c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xf6c4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x164}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r4, r9, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x4, 0x401, 0x31c, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x8, 0x1, 0x902c4, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x2ee, 0x0, r4}}], 0x16, &(0x7f0000001540)={0x2e, 0x2, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x6}, 0x0, r8, '\x00', {0x3, 0xea2, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20040000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) prlimit64(0x0, 0x7, &(0x7f00000003c0)={0x7, 0x10003}, 0x0) fsopen(&(0x7f0000000100)='udf\x00', 0x1) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x3) 38.535059704s ago: executing program 0 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000130001002cbd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='G'], 0x20}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x19) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000ffff27bd020000450dfed2000000", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd0000140012800c0001006d61637674617000040002800a000100aaaaaaaaaaaa0000"], 0x40}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 38.393689491s ago: executing program 0 (id=812): setns(0xc9, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ocfs2\x00', 0x204001, 0x0) r0 = socket(0xa, 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r3, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0xf}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) getsockopt(r0, 0x29, 0x4b, 0x0, &(0x7f0000001ffc)) r4 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0x3, @empty, 0x3}], 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x4004094) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000040)={0x6, 'veth0_vlan\x00', {0xd97e}, 0xff}) write$uinput_user_dev(r4, &(0x7f0000000580)={'syz1\x00', {0x3, 0xc, 0xffff, 0x4}, 0x1c, [0x5, 0xfffff001, 0x3ff, 0x3, 0x80000001, 0xc4, 0x3, 0x8, 0x2, 0x6, 0x5, 0xdd8, 0xffffffff, 0x0, 0x1, 0x8, 0x5, 0x4, 0x8, 0x0, 0x8, 0xffffff01, 0x8b, 0xffffffff, 0x7, 0x8, 0x7fffffff, 0x80000001, 0x3, 0x10, 0x7, 0x9, 0x401, 0x5, 0x1, 0xd, 0x8, 0x5, 0xfffffffc, 0x579, 0xbb, 0x0, 0x6, 0x7b1a7295, 0x998, 0x4, 0x4, 0xf, 0x1, 0x10, 0x7, 0x8, 0x80000000, 0xb, 0x400, 0x2, 0x7, 0x9, 0x1, 0x2, 0x5, 0xd, 0x2, 0xb6], [0x3, 0x3, 0x4a98, 0x7, 0x18000, 0x430, 0x3ff, 0x10000, 0x8, 0xab8, 0x600, 0x0, 0x97f1, 0x0, 0x1000, 0xc, 0x9, 0x7, 0x1, 0x1ff, 0x3, 0x2, 0x9, 0xffff, 0x80, 0x7, 0x5, 0x6d17, 0x3, 0x30abe38, 0xd022, 0x4, 0x800, 0x2, 0x6, 0x0, 0x8, 0x8, 0x8, 0x2c191e7c, 0x6c, 0x0, 0x8, 0x7, 0x0, 0x6, 0x1, 0xd8a0, 0x3, 0x4, 0x1, 0x8, 0x8, 0x0, 0x80000000, 0x10000, 0x3, 0xa7, 0xb, 0x182b, 0x3607, 0x50000000, 0x5, 0x1], [0x0, 0x5, 0xfff, 0x5, 0x2, 0x8b, 0x1a7, 0x6, 0x9, 0x0, 0x4, 0x4b, 0x0, 0xf1, 0x800, 0x3, 0x5beba198, 0x908, 0x9, 0x3, 0x2, 0x8569, 0xff, 0x101, 0x2, 0x1, 0x2, 0x1, 0xffff, 0x0, 0x40, 0x2, 0xa, 0x4, 0x0, 0xc8e, 0x3, 0x0, 0x9, 0x9, 0xfffffff7, 0xbdd, 0x40, 0x1, 0x3, 0x1, 0x0, 0x9, 0x9, 0x401, 0x4, 0x8, 0x81, 0x6, 0x4, 0x6d4, 0xffffffff, 0x3, 0x3, 0xfffff800, 0x25e, 0xfff, 0x685, 0x5], [0xffffffff, 0x5, 0x9f, 0x5, 0x0, 0xc9, 0xc6e6, 0x1, 0x5, 0x4, 0x7, 0x4, 0x2, 0xb, 0xb0, 0x10001, 0x5, 0x7, 0x7, 0x20000, 0x75, 0x5, 0x1ff, 0x8, 0x5, 0x8, 0x8001, 0x0, 0x100, 0x4, 0x9, 0x4, 0x5, 0x9, 0x8, 0xb, 0x8, 0x7, 0x8, 0x4, 0x7ff, 0x5, 0x662, 0x3ff, 0x5, 0xa, 0x7, 0x6, 0x80000000, 0x100, 0xfffffffb, 0x3, 0x3, 0x1, 0x5, 0xa, 0x4, 0x2, 0x10001, 0x9, 0x5, 0x100, 0x4f, 0x80]}, 0x45c) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000000000000095"]) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1f7) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r6, &(0x7f0000000000)='3', 0x4e) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, 0x0) add_key(&(0x7f0000000b00)='cifs.spnego\x00', 0x0, &(0x7f0000000200)='0', 0x1, 0xffffffffffffffff) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4006, &(0x7f0000000c00)=0xe, 0x6, 0x2) mbind(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4006, &(0x7f0000000c00)=0x7, 0x6, 0x2) bind$rds(r4, &(0x7f0000000000)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e1e, @empty}}, 0xffffff01, 0x67, 0xa4f, 0xc0, 0x15, 0xffffff86, 0xa9}, 0x9c) 38.246626762s ago: executing program 0 (id=815): r0 = syz_io_uring_setup(0x2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x400000, 0x34a}, &(0x7f00000002c0)=0x0, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) r4 = socket(0x2, 0x1, 0x0) syz_open_dev$admmidi(0x0, 0x20, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x4}, 0x4) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="08001a00", @ANYRES32=r6, @ANYBLOB="08001b"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x8008662c, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x10, 0xffff}, {0xfff2}}}, 0x24}}, 0x0) listen(r4, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0xf1}, @exit], &(0x7f00000000c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x4, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x17b}]}) io_uring_enter(r0, 0x2, 0x0, 0x0, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0xc) 38.150445337s ago: executing program 0 (id=818): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5c00000012d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d2447fbc24eab556a705251e6182949a36c2151fef08d8cdbf9367b41ad2080000000000000000000000002591f776be89177d7226c96c69f8930d255a1e4cc8047a47895d2323c28b0bbd5eb260ecd2c1d3940a78482ae6ca4f357772a87532eb3f544248f9d4c3d36d37eae51c4351428553464bb36292d7d0d47b", 0x9f}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_ublk_setup_io_uring(0x1078, &(0x7f00000003c0)={0x0, 0x74f9, 0x1, 0x2, 0x39d}, &(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=ANY=[@ANYBLOB="680200000005030000000000000000000500000254020100010000000000008001050900ff00120073797a310000000000000000000000000000000000000000000000000000000083536fbebb759c421376cc71fc07dd45365540742570280cc97680299f52a2d35d606f739128a0826de95fedb865085504ce24b573cf03e6bb5bcc31c9eff265000807000000000008000000010000007400040002000000010001002000008000000000040000004a06080001"], 0x268}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/drivers/usbip-host\x00', 0x0, 0x0) r7 = openat(r6, &(0x7f0000000100)='match_busid\x00', 0x2, 0x0) write(r7, &(0x7f0000000140)='del 1', 0x5) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$OSF_MSG_REMOVE(r5, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x20000020) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r9, 0x0, 0x0}, 0x10) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, 0x0, 0x0, &(0x7f00000002c0)={0x2e, 0x78, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0xfc2, 0x0, r10, '\x00', {0xffffffff, 0xffff, 0x0, 0x0}}, 0x0) close_range(r1, r11, 0x2) mknod$loop(&(0x7f0000000380)='./file0\x00', 0x0, 0x1) r12 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x402000, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r12, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$SNDCTL_TMR_TEMPO(r13, 0xc0045405, &(0x7f00000000c0)=0x6c) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') 36.890246443s ago: executing program 0 (id=827): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x288020, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) semget(0x2, 0x4, 0x92) (async) r1 = semget(0x2, 0x4, 0x92) semtimedop(r1, &(0x7f0000001000)=[{0x3, 0xffff}], 0x1, &(0x7f0000001040)) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) lseek(r3, 0x7, 0x4) (async) lseek(r3, 0x7, 0x4) bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffb, 0x1, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0xc0305720, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) 21.095560518s ago: executing program 6 (id=996): ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000a00)={'#! ', './file1'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r2, 0x0, 0x12, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f0000000580)=0x1, 0x4) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f0000000040)={0x6000000, 0x2, 0x1000}) 21.095368137s ago: executing program 6 (id=997): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xc5) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r1], 0x7c}, 0x1, 0x0, 0x0, 0x8890}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a31"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000080)=0x272) write(r0, &(0x7f0000000280)="31d1c2f9f9cb6e57a260fb75cd683382b43fffd545aeb1ab8e21d5b8d55e8dab8d6f79c3f2e027ae80105ad17eb09de078b8d74784e4306ea69f1e4ae6f378ac11", 0xfffffd8d) creat(&(0x7f00000002c0)='./file0\x00', 0x104) 21.000315395s ago: executing program 6 (id=998): socket(0x15, 0x5, 0x0) (async) r0 = socket(0x15, 0x5, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi3\x00', 0x800, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) (async) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) r3 = syz_open_dev$dvb_frontend(&(0x7f00000002c0), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r3, 0x80106f53, &(0x7f0000000580)={0x9, &(0x7f0000000000)=[{0x1e, '\x00', @st={0x4, [{0x0, @uvalue=0x8}, {0x3, @svalue=0x4}, {0x1, @uvalue=0x1}, {0x3, @uvalue=0x64}]}, 0x6}]}) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'mpc624\x00', [0x100, 0x5, 0x2, 0x3, 0x10, 0x5, 0x79, 0x0, 0x1, 0x4, 0x2, 0x1, 0x7, 0x8, 0x40, 0xfd, 0xfffffffb, 0xdd, 0x4000003, 0x7fff, 0xffffffff, 0xca9d, 0x7, 0x5, 0xfffffffe, 0xf39e, 0xffffffff, 0x8, 0x7, 0x0, 0xfffffff9]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x13, r1, 0x0) r4 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xeb, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x3, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x7fffffff, 0xffffffff, 0x1000], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x80, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x403, 0x0, 0x0, 0x1}, {0x400, 0x1002, 0x0, 0x0, 0x1}, {0x2, 0x8000, 0x0, 0x0, 0x1}, {0xc2, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) (async) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r4, 0xc2604111, &(0x7f0000000c00)={0xeb, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x6, 0x3, 0x0, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x7fffffff, 0xffffffff, 0x1000], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0x80, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x403, 0x0, 0x0, 0x1}, {0x400, 0x1002, 0x0, 0x0, 0x1}, {0x2, 0x8000, 0x0, 0x0, 0x1}, {0xc2, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r4, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_START(r4, 0x4142, 0x0) ioctl$SNDRV_PCM_IOCTL_REWIND(r4, 0x40084146, &(0x7f0000000040)=0x7) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_DRAIN(r4, 0x4144, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000001c0)={0x1, 0x7ff, 0x3, 0x3, 0xca, 0x4000000000000000, 0xa, 0x883, 0x2, 0x3c4cd05, 0x7ffffffd}) getsockopt(r0, 0x200000000114, 0x5, 0x0, &(0x7f0000000000)=0x300) getsockopt$nfc_llcp(r0, 0x118, 0x1, &(0x7f0000000040)=""/240, 0xf0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') 20.703364057s ago: executing program 36 (id=827): mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x288020, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) semget(0x2, 0x4, 0x92) (async) r1 = semget(0x2, 0x4, 0x92) semtimedop(r1, &(0x7f0000001000)=[{0x3, 0xffff}], 0x1, &(0x7f0000001040)) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r2, 0x5000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) lseek(r3, 0x7, 0x4) (async) lseek(r3, 0x7, 0x4) bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) (async) bind$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) r4 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x1) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0xfffffffc, 0x7a}, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r5 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x3) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffb, 0x1, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r4, 0xc0305720, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) 20.657743214s ago: executing program 6 (id=1000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10001, 0x0, 0x200000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000180)="8fe838edaa00000000ac640fe9d8363e0f06b81c1500000f23c00f21f83500000d000f23f8b9710300000f32c4c319449915430000e9b8010000000f01d9c4e14dfb2f362e0f01c3660f3a63ce0f", 0x4e}], 0x1, 0x24, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x2100, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 20.508928222s ago: executing program 6 (id=1001): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x502, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) read(r1, &(0x7f0000000140)=""/180, 0xb4) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = gettid() r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000180)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee88197c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x200, &(0x7f00000001c0)={&(0x7f0000000440)="c94522e546f93f6dedf11f1509685636", 0x60}) r5 = syz_open_procfs(r4, &(0x7f0000000000)='net/tcp\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x2, {0x7, r7}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x0, 0x0, {@ip4=@multicast1, 0x800}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004804}, 0x40080c0) sendmmsg$sock(r5, &(0x7f00000024c0)=[{{&(0x7f0000000240)=@isdn={0x22, 0x1, 0xf, 0x7, 0xff}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000340)="289d3518afb1a3b6e899415040a6cd950d79ee8e29a97d062d84765c2c5b3261b1204762ea734985a3b779618decb578cc6e261f04d326ce6812f21088ba21191748823d8ffbaf6877a7a6f4c71b2425914fa42d06a45dcdfdfb5362b8daf8e6d7c7b3e4f7f5daabc64a485514466f4d644ffca0d53e3149dced4d962ea572962ae06096ccb9dd3a106af770a51fe7a3dcc70ce50d7e40b527952e6c487ca6574a126cb88135327f34624f5d6c2c0cb8cdb201", 0xb3}, {&(0x7f0000000400)="a198b56ce01deadd1e97222dade51ca89802128c92d956c9e8d36e9f168d75f83814", 0x22}, {&(0x7f0000000480)="706d2667434552ff507375f275486a", 0xf}, {&(0x7f00000004c0)="c47f7bc763a7dbbd0963", 0xa}, {&(0x7f0000000540)="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", 0x1000}, {&(0x7f0000001540)="2942441c14af20162610e49a776388099391c7d3882a393eaa087c8abf95cae8e5734b64e2d5f6192752335e41e5fd", 0x2f}, {&(0x7f0000001580)="ba2ff73e05a32eb349daa8375be5b2c52d250193dcd0c30f67a147463653692a36283bd2d1d8ac422785fb67908eb5c00da8d74fcd3892862249511919c8d6709acaae84d2bf3cd94932e9fa9422893e27cea54715fc394d3316754e7732c72bd7dcefa91ffd3da37124f02f789da2233c070f7feb712387a84c7b36a17e9c08fdb3177edf679f20d6be4ce821c1ae54823d5ac84cd1f3837e16fe9a64652d8627eda7e6303284cd70c2cc7f41ffa39845dba8574283830b2a1eb5634ea8fa1f8d7d7b00abd780f21f1d93228476ea03956f245211172c4e6a74dd221df193dc6ab000ddf457189883ec78d3c724f5b6ae", 0xf1}], 0x7, &(0x7f0000001700)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}, {{&(0x7f0000001740)=@xdp={0x2c, 0xc, r7, 0x29}, 0x80, &(0x7f00000018c0)=[{&(0x7f00000017c0)="8567bdf4cfdcfbcada682c82fade2723bf7426be9975c84817c0a48df54f046442e42e69e4ad941334c0c019d82d4cf438adf27fdec96bd67b3386049f9c4d7c15fad3fa0ef5f819f812e72c7aaa0c800ae81794dae4838603f12ffa694adaf9437f66a7dafae80e9c6401f4cc29fe83caa3903a40f01348b48bef1e6c338313a8504c96ca91a40c20084b9ad8733cdc4c47ff28d785a55f7af021630545fd1b933835d0cb5031a9c2279b9e51fc30ccff2d66521bfc83cf7833600f6d644291ac7fbd42029351984b1a910ad4f4d1e2b0440acbbb48d2fe33c993a3dd7718cd996eef0677dcdf047d49ed5ea89d2a5c42a46a0b364974a7", 0xf8}], 0x1, &(0x7f0000001900)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x556d15b1}}, @txtime={{0x18, 0x1, 0x3d, 0x7d4}}, @mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x8}}, @mark={{0x14, 0x1, 0x24, 0xe9}}], 0x90}}, {{&(0x7f00000019c0)=@in={0x2, 0x4e24, @broadcast}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001a40)="9576bf338dc968b797d8c66b702ffc424c0755717315a39ca7e3436814286368739428871ffa63f290d1cc997acf538eb77a87d05ffd1a97deae8ab06ca90891416cb737bbc881eaaf8b83631d13f2dbea057a54ddd0904886bd1ee62e6df52c864900ea1136ce58fe03430f5784cfd92ca7b28a023ff2cb3d53e5e7688684e71a270fab54c50dddbecc7edc78a085de5f75ce0b98f139eeb45165c322", 0x9d}, {&(0x7f0000001b00)="ec1e4c6f066ebf3fd3463d3fee7dcb64544a87370774501d6893334ed17337fb99b6df2f78c4f6ab4913491e3bcefa13872e507276affc22b8a5ed5c8aa7c0430d67acfac662ced891b64eb9e2ce12a91e656749761d618a07c7b163bf86014e8c6e2836ddfbb99ce080c935ba35062b944485ca8aff6f7b6305098196d54f291792dab9dee32ca1b1f65d3bed7ce657385090f261", 0x95}, {&(0x7f0000001bc0)="ed6ef9ef58eef612272c42d0e81fa2a88c2eb2eff350d77275ef00ca6c7c889bc2ddd8779bca0571b9b37051cf105794e8230a9afc2840ef3b7c411ae3241dfad2a90fc3193f9b63b3102a398ef36eed34882ede2be8ed2cc115101e47b9c602aae8ca01a61c31c01f4f8916c024e0585ae7d4796b73be475f7dc2598f0fba591747821a8b367cf43cdaefe6b2f796b422ad914ee209a908c6e9e889f29f5f95fd4644161d69344c2f83b21feba9100c901ce77e0809640345a0b84445e0f4d9ad8587306927d8de646637657c3fb004687fdf7efd2e7608c5684e2cb326e918447eab2678", 0xe5}], 0x3}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000001d00)="fd48c7b0e12bb32ff0b16faec1b49141fa24de3eca3307bd3d500709726075881f07825505e075becaaa929ad0", 0x2d}, {&(0x7f0000001d40)="760d71021aabbead07fbee6ce835228e93d5332073884848a7980d52790f25e36672adfe782b8b1fc35f91b484630361154616adcc9f4289936dce52de3be18a37a98a4d9bbf399a8734792e98784dcce6c8a4768e2d4ce81498f71bc59aa466e6506c671578ce03e6619f45906068d4905d67b95c5a56d99e5b0fa99bef64f225a4c2d4070894fad566f1c42fd6953c4eff7c1e617b22bcb6a34894c2fd8f4b112597c45df5e00af0b99f51219210bfb30520c71feac576ae348b2d28ec9e3fdacd5d18989ccdb1f234290fbea498c6f1aad2322b8e9ce7f47272", 0xdb}, {&(0x7f0000001e40)="502edcfa6a8055ce873dd6b0f47c156eaf58a3c9fd70f518ece98b50f9266ed9a9eba580928a1cb6443544ccf81e09f9044ad72faa5282e4e179e30d2782b16effac8d035097267c0adf1df6c225e453c803c793145ef5d567799ca9b7c905145665e83c2c031cc58f9b77897ff67f210bc9aad951177b4dae2ceb5fa6ef1e9843b9496f63665366a5e8b31a0ab1cf36ec73763de5548a2013ca2c2651dbc1d27b4cf8ad583a626c1e701939bfc3b9c628", 0xb1}, {&(0x7f0000001f00)="92f75c36e7c0e3c393b2d940f4dcf6140126072c7cc9d8e86468e34b134f6ff27df2ab326e4b7daf00ffcfe4eb9fce6e5f380ea10450ac2b29c70718d25036708180c52aebb0bb9b3cf0f9a62e8a65503fcf796fa4ba5028bfa1abf3d03cd8ed06fb9c3d4d8f473bb33a1dceb2f53897a2aaf67d495511632e5e8ca63f262b5685fa09fc344163bbd4bd875826b771c047eed02e", 0x94}, {&(0x7f0000001fc0)="841f8860699cfdf454b432c2d9acfa908da483da7695c327a6d2df91fc92a4c9a3b32a2a7a9c766c6b9131e491845a450a2450c4edfd81d71cdb6cc23afbb628d9cb8e244027d78e7d8fd7ef9cae4d80c16c83c0f41a52e6233c5d80163fd62abddbd53fc53390920e5b24d9a4f6b2dde78c9dfe9a505f9c70e12db695d06ef45cf22b2b260cdaa59a8b8f5453159162d0042a0387b2f9a0dc59926b793555ad1df4915f38b87cfd3627bb93657aa3acbcd4c4b66c0af8f5f94489885a25c117ac5f6cc78ee37c89e26fa14b9c2c5b5d99bd819e3a3fe2", 0xd7}, {&(0x7f00000020c0)="64f17d473e49e68cd5cd2d8d66fa595fc195bbf3f78a9c90564a2be519f4886e1e96d7ad26768dca93621f1f176243f3737d6d15fecb49ac6039b19878f75fd409004a1682ab8509b9f189ce388d2516c7f87ee61ef5c3c92103d46642f6fef5aee728c6c8263d282d4ac838d4b1816e5e50a4b4dec44f5c7cfd24edb4dadf14b554f97ccc4342e650d789f8e1e6fb823133e78fdc80e287e0ea952a1ccdbf1278ea68406e3c5ddd0bbf0964fa39ed875d", 0xb1}, {&(0x7f0000002180)="bcce9a4c10c46ee0554a0901def6fa3bc8ab6c82d360effb29378531e3b37e44617cfef8b664da84b12955708a28b2d593dc6b808e8adf5ff08d87f0a1bf6f1a0884aa5f38acbc6bd9918b0976cec7650443c201a0cdb28aafd4de625d9660c8c4ed4ae55cb9b9cd5cd459916e629a0ca022b364986f1c7b1c8a76093449828769c1b27ec33a90a98568a2136ce2222766278beb58540aed7066fd5a71464eda5dbe5fc02687a47f07d02fcf0c4541d4f782232156c843fa91987cf9feaa1c692a", 0xc1}, {&(0x7f0000002280)="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", 0xfa}, {&(0x7f0000002380)="94137a6c81ad5cef1a079b8fd65842e0b84e8f5ccfa587e2ec886ceeaba25ac9d51044116e7f121942de981221a5839f9263a1b84b95a5da459d80d29214e4811d49551085c1c902957d0cd81ed137e9c3a18ef86a30903dbe8573abee4c", 0x5e}], 0x9}}], 0x4, 0x10) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYRES16=r3], 0x30}}, 0x20044000) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200013, 0x0) 20.505993078s ago: executing program 6 (id=1003): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'dt2811\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000004, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x800013, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000001600)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000600)={@multicast, @link_local, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x3}}, {@generic={0x80d, "e906c8e58cc3e6dbd83792cff95a4fc18b8da9e14c93f0a2124fc2b348086aa709313ee751e4f95898c53bbb85afd70903c4383d03e8fee197a62425465a8a827ecee56a752d03e1aae0880ee77a9c39997b60036bb271bacd8cc4bcd2ad64fbc6542cefd48e6cafbbea11aa1bdbbd8f9603f18eef5e938f2531d2beb4d5c798512bb4e0710b5c91287ad11e1812593fc9deb58c9e5467f0009b1ab4c81a706e36731a7ec6ec9ecea711198fb667c34e8f551ba7c58fc586b0d895909521c3866151c417f8"}}}, &(0x7f0000000700)={0x0, 0x2, [0x293, 0x88a, 0x4cd, 0x764]}) ioctl(r4, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") close_range(r0, 0xffffffffffffffff, 0x100000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r8) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012cbd7000fddbdf250100000108000800ac14140c050003003c000000050002000200000004000500050003005e00000014070000ee000000000000000000000000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x1) read(r5, &(0x7f0000000c00)=""/4096, 0x1000) read$qrtrtun(r5, &(0x7f0000000000)=""/28, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 4.380222759s ago: executing program 37 (id=1003): ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000080)={'dt2811\x00', [0x3c8, 0x5, 0x2, 0x8, 0x14000004, 0x0, 0x3, 0xa, 0xefd, 0x7ffe, 0x9, 0x13, 0x400, 0x2, 0x800013, 0xbd55, 0xffffffa7, 0x3c, 0x34d, 0x1, 0x3ff, 0x9, 0x200, 0x860, 0xaa14, 0x1, 0x4, 0x0, 0x7, 0xf58, 0x3]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000300)='./proc\x00', &(0x7f0000000400)='proc\x00', 0x0, 0x0) r0 = epoll_create1(0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x17, 0x0, &(0x7f0000001600)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_emit_ethernet(0xdb, &(0x7f0000000600)={@multicast, @link_local, @val={@val={0x88a8, 0x3, 0x1, 0x4}, {0x8100, 0x2, 0x0, 0x3}}, {@generic={0x80d, "e906c8e58cc3e6dbd83792cff95a4fc18b8da9e14c93f0a2124fc2b348086aa709313ee751e4f95898c53bbb85afd70903c4383d03e8fee197a62425465a8a827ecee56a752d03e1aae0880ee77a9c39997b60036bb271bacd8cc4bcd2ad64fbc6542cefd48e6cafbbea11aa1bdbbd8f9603f18eef5e938f2531d2beb4d5c798512bb4e0710b5c91287ad11e1812593fc9deb58c9e5467f0009b1ab4c81a706e36731a7ec6ec9ecea711198fb667c34e8f551ba7c58fc586b0d895909521c3866151c417f8"}}}, &(0x7f0000000700)={0x0, 0x2, [0x293, 0x88a, 0x4cd, 0x764]}) ioctl(r4, 0x4048aecb, &(0x7f0000001000)="070000000000000001000000ffffffff") close_range(r0, 0xffffffffffffffff, 0x100000000000000) r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./proc/net/rpc/auth.unix.ip/content\x00', 0x0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000000100)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r8 = dup3(r7, r6, 0x0) r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r9, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000240), r8) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00012cbd7000fddbdf250100000108000800ac14140c050003003c000000050002000200000004000500050003005e00000014070000ee000000000000000000000000000100"], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x1) read(r5, &(0x7f0000000c00)=""/4096, 0x1000) read$qrtrtun(r5, &(0x7f0000000000)=""/28, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 3.686090704s ago: executing program 7 (id=1122): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002"], 0x20}}, 0x4000084) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRESOCT=r0, @ANYRESOCT, @ANYBLOB="f5ff0f00252133b21c00fe761176dccac7e7d6027bc912000c0001f0616f6e6400"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40000) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x2) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYRES16=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r8, &(0x7f0000000500)=' 294 67 95 2\\000 0000 0\n', 0x18) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r9, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 3.613603443s ago: executing program 7 (id=1123): r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x1e, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b0000010902"], 0x0) (async) ioctl$EVIOCRMFF(r0, 0x550c, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000004300), 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000340)={0x8, 0x3000}) (async) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000140)=0x1, 0x4) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x4040000) recvmmsg(r3, &(0x7f0000006200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000041, 0x0) 2.26571259s ago: executing program 7 (id=1130): sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022bbd7000fbdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0xc001}, 0x84090) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$sock(r1, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0xfffffe01, 0xffffffffffffffff, 0x1, 0x6b9f}}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x7, 0x3, @void}]}]}, {0x4, 0x6, "a0955de1c1171bd76aeb484079b69d35da94d51bc36a29966fb08ee1c67a153fde699a35e331c75cb2dd570472e91647db6fc2b1a8695dc23bee33342873b3063d74088d526c18fb8290e30431d5c027ed1d5faf81fa4a235e42bd0e9bcb32c91a67dc0c6e5045816ae2c723bbd6ffca03fd9940e4e345a72ef84fc9ab0c478bee51c56a733f46b3318bb3f1bd78e20f8ad7e35d0746dab421c20bb67bc941c6a230103ed1dd0b437e08f77a6e465ee76a5e0ac092fe7a9af378edaa151d75862ca620ca4de06ae0552a885bae91c6e8d7ad42cb6a1dd9b3234056a29652b928ff69bbd346c56a10c9fe30ca4fe033661cde458c83cc475feebaecb4dbedc09924ee43adeb6343311754f402cd060a5db5495e47c55826e8e84a5b04f23cb5a7aabd7d21cdd7f7ce574c17fdb463e6b87b0d61547577ca633b0e7af7c322b65fa24059367b342d35ed901b7f79ade354500f69998030b5487a12888208511aff32b458a9bce371fb4d99af45339a58ca05ec5b0909302dc79631ccad4c1b8ece0df709946c21083dfdc443b6fad822ac2b9b3a897d9fe1bd83f708964e311ebdcb3c813fb419abbc120f17b39735add5e4eb6e31a2db53509e53cdb5d5b4c5743fa33824d870c50d82679dac9bbcc8078fa230567639399cc43575fcae03e13933f1be48bfaf23347847f5382d568e5589d6969123df6c6534262ccdb632bca0ecd281b9b9ef847828c4a65ab9acd260b25327bb9a47ea3be48db18db7532e142a12e23b0ce0970000000093198e4658ae6fc2a150e53758f7b25639e27e1378653f039b6dfdd71bed0b97f8975f84ffcc0d5a745d698feed333b513e70fd7c466da0dc403157a8fc86b6e8cdb590fd49d7968c3cb7d0b"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r5, 0x0, {}, 0xfe}, 0x18) (async, rerun: 64) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0xb, &(0x7f00000000c0)=@framed={{0x18, 0x4}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb1}}]}, &(0x7f00000005c0)='GPL\x00'}, 0x90) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x53, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="200027bd7000fbdbdf25790000000400f4001333b30c35bd0cb467152a476b0253bbfa5f47e9950f1517d7681cc69be6aa3f93ffe97b64b825f9f7f6b0a346bb2ea28b24e1385ea23003558251d7c6161b17092754f155f6ac5f89392b474752015fce0b08bbf3978ec485b3ac79b5424024108f131ffe47d06ab6c6e002cd1e63682ee1e3eb9b82a681789e0b9275a1005c0242b8b0e2c145b4f96616112be8ce1ba43519fac2e3b3d6c26703cd83597f74"], 0x18}, 0x1, 0x0, 0x0, 0x8004}, 0x1) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)={0x14, r7, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8890}, 0x800) (async, rerun: 64) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) (rerun: 64) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x2c, r9, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0x4}, @NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "4163205ff9"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x4008084) (async) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f00000001c0)=0x1, 0x4) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) (async) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000080)=0x4a96, 0x4) (async, rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x44, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async, rerun: 64) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new '], 0x2d, 0xfffffffffffffff9) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) prctl$PR_GET_CHILD_SUBREAPER(0xe) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newtaction={0x8c, 0x30, 0xffff}, 0x8c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.138266992s ago: executing program 7 (id=1132): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20004041, 0x0, 0x0) r2 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x102, 0x0) ioctl$SG_GET_RESERVED_SIZE(r2, 0x2272, &(0x7f0000000040)) setsockopt$inet6_tcp_int(r1, 0x6, 0x6, &(0x7f0000000080)=0x2, 0x4) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000380)={{r1, &(0x7f0000000180)='syz0\x00', 0x10040, &(0x7f00000001c0)={@align=0x1ff, {0x2, 0x6, 0x1, 0xfff}}, 0xb, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)}, 0x1, &(0x7f0000000340)=[{0x3, 0x7ff, &(0x7f0000000280)='syz0\x00', &(0x7f00000002c0)="9f6f21b5ef041a7cc78d39daed5c6dfd43889306db17181f72bb918a230029ba05ea1c48baf363403e45fcc74efc83d4c2f688d289e33d6df754e57feeb95171700e61c2b2671738b2946afb6afd134526838efcfa3d3111f5d0801f5ce8c16a07146a29c6a86fefbfbf599180e6", 0x6e, 0x40}]}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x20, r5, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_DISABLE_HT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000d0}, 0x24040044) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x2000000, 0x0, 0x0, 0x400, 0xe4, 0x4a, 0x0, 0x2}) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd34, 0x25dfdbfd, {0x0, 0x0, 0x0, r14, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0xf, 0xfff3}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x24000804) ioctl$UI_DEV_SETUP(r7, 0x405c5503, &(0x7f0000000440)={{0x7, 0x5, 0xfff9, 0x25}, 'syz0\x00', 0x47}) 2.030428729s ago: executing program 7 (id=1133): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3f0, 0x0, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x308}}, {{@arp={@loopback, @remote, 0xffffff00, 0x0, 0x0, 0x2b, {@empty, {[0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x0, 0xff]}}, 0x0, 0x0, 0xfffe, 0xfffc, 0x0, 0x1, 'veth1_vlan\x00', 'erspan0\x00', {0x101}, {}, 0x0, 0xe2}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @private, 0x1}}}, {{@arp={@multicast2, @empty, 0xffffffff, 0xffffffff, 0xf, 0x5, {@empty, {[0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, {[0x0, 0xca63d3e56e13e625]}}, 0x0, 0x1, 0x4, 0xe4, 0x1, 0xfd, 'veth0_vlan\x00', 'geneve0\x00', {0xff}, {0x1fe}, 0x0, 0x200}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac, @multicast2, @rand_addr=0x64010101, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) write$cgroup_int(r1, &(0x7f0000000040)=0x8000000001cb, 0x12) ioctl$UI_END_FF_UPLOAD(r1, 0x406855c9, &(0x7f00000006c0)={0x1, 0xf818, {0x54, 0xe2bb, 0xf801, {0xffab, 0x4}, {0x8, 0xd650}, @period={0x59, 0x28, 0xd, 0x3, 0x6, {0x5, 0xff28, 0x5, 0x1}, 0xa, &(0x7f0000000080)=[0x9, 0x9bb, 0x0, 0x30, 0x5, 0x3, 0x800, 0x4, 0x6, 0x7fff]}}, {0x51, 0x1, 0x1, {0x7, 0x8001}, {0x3, 0x200}, @const={0xfffc, {0x3, 0x2, 0x5, 0x2}}}}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r4 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000480)=0x10) r5 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021207c109050c04400006030f07059acbf5"], 0x0) syz_usb_control_io$cdc_ncm(r5, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000080)={0x4000201e}) epoll_wait(r7, &(0x7f0000000180)=[{}], 0x1, 0x496a) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000600), &(0x7f0000000640)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r3, 0x20e, 0x125, 0x0, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000}, 0x50) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$l2tp(0x2, 0x2, 0x73) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x2}, 0x10) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000680)={0x1, 'syz_tun\x00', {}, 0x2}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x40, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1111}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1000001}, @TIPC_NLA_NET_NODEID_W1={0xc}]}]}, 0x40}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x58, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "000102030405060708090a0b0c0d0e0f10111213"}}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x58}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x1127, @loopback}}, {0x14, 0x2, @in={0x2, 0x1127, @loopback}}}}]}]}, 0x54}}, 0x0) 1.716720844s ago: executing program 9 (id=1117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x800, 0x70bd2c, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@TCA_RATE={0x6, 0x5, {0x73}}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0x7, "60ec17a2b5143cfbef9b16e2e3c69a66"}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) (async) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) 1.615145986s ago: executing program 9 (id=1135): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'pimreg0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000140)={r3, r2, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r6 = socket$unix(0x1, 0x2, 0x0) connect$unix(r6, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r6, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x53fe0) ppoll(&(0x7f0000000240)=[{r6, 0x610a}, {r6, 0x1600}], 0x2, 0x0, 0x0, 0x0) connect$unix(r6, &(0x7f0000000280)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) close_range(r4, 0xffffffffffffffff, 0x0) 1.423028636s ago: executing program 9 (id=1137): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0xa, 0xa9, 0x1, 0xe3}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000700)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c689ef8daa63ca62e496be091cc1c7d4f371acaaec43337aee38", 0xf4}, {&(0x7f0000000cc0)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8009900000000000000000000000000001c8a9f7956583e26f6f0edc41585", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8, 0x32, 0xffffffffffffffff, 0x6931b000) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000240), 0xa, 0x88042) getxattr(&(0x7f0000000040)='./proc\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="757365722e70726fa5f7a0d76afcfbc8a92357227fffb281"], &(0x7f00000001c0)=""/124, 0x7c) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000440)) write(r2, &(0x7f0000000000)='3', 0x4e) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(r2, 0x4, &(0x7f0000000280)='proc\x00', &(0x7f00000002c0)='./proc\x00', r2) r5 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCGPTLCK(r5, 0x80045439, &(0x7f0000001b80)) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) 1.346834698s ago: executing program 9 (id=1138): r0 = socket$nl_generic(0x10, 0x3, 0x10) move_pages(0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x2) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000021000900020000000000c1b7e11471f3f61796b6c28a18b7c45a586ba8f30a38363d796bd9ac7c13ea0992d6559f7df70895bf8d42c433e3bc6651dc299e67c420c54e22000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x20004855) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(0xffffffffffffffff, 0x942e, 0x0) 1.283458887s ago: executing program 9 (id=1139): r0 = fcntl$getown(0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001400010028bd7000fcdbdf25022001c8", @ANYRES32=r3, @ANYBLOB="0800020096"], 0x20}}, 0x40000c0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3816}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x40}}, 0x440b0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) r5 = openat(0xffffffffffffffff, &(0x7f0000000500)='./sys/bus/acpi/uevent\x00', 0x1, 0x0) write(r5, &(0x7f0000000180)="61fb6b8530f22e028a42259a1e541bca633a14a8540976a881289a09620cde63696a737466429c7082760c", 0x2b) (async) write(r5, &(0x7f0000000180)="61fb6b8530f22e028a42259a1e541bca633a14a8540976a881289a09620cde63696a737466429c7082760c", 0x2b) r6 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) sendto$inet6(r6, &(0x7f0000000100)="9f52efffa0989c6bb9e31a3f8d85aca0602ad539352f10", 0x17, 0x44095, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @private2, 0xc5f}, 0x1c) (async) sendto$inet6(r6, &(0x7f0000000100)="9f52efffa0989c6bb9e31a3f8d85aca0602ad539352f10", 0x17, 0x44095, &(0x7f0000000040)={0xa, 0x4e24, 0x8, @private2, 0xc5f}, 0x1c) r7 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r7, &(0x7f0000002000)=""/4096, 0x1000) (async) getdents(r7, &(0x7f0000002000)=""/4096, 0x1000) syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x800) (async) syz_open_dev$vcsa(&(0x7f0000000040), 0x9, 0x800) r8 = syz_open_dev$hidraw(&(0x7f0000000080), 0x4, 0x800) kcmp$KCMP_EPOLL_TFD(r0, r4, 0x7, r5, &(0x7f00000000c0)={r7, r8, 0x1}) io_setup(0x239f, &(0x7f0000000380)) 429.469923ms ago: executing program 7 (id=1147): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000006000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="660fadf466b8d4000f00d0ea312b2baa030066b898000f00d00f09b8367100000f23d80f21f835800000d00f23f8c4e1fd2bb42500800000260fc7af00000000c4c19dd5080f01f6", 0x48}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000180)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0x3}, @any, 0x0, 0x0, 0xff, 0x100, 0x12, 0x3}) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff03"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x5c}}, 0x48090) r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000240)="166ec4b16abf8d77", 0x8, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r1, r2, r1}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x6) syz_kvm_setup_cpu$x86(r4, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 427.890707ms ago: executing program 3 (id=1149): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000980)={[0x8000, 0x9, 0x81, 0xfffffffd, 0x8001, 0x8, 0x1e, 0x200, 0x9, 0x0, 0x3, 0x7, 0x10001, 0x3, 0x0, 0x10000, 0x10001, 0x9759, 0x4, 0x3593, 0x7fff, 0x8b5, 0x9, 0x80000000, 0xc535, 0xf3, 0xfffffff7, 0x9, 0x1, 0x7f, 0x400, 0xe7c, 0x8, 0x0, 0x5fbb482e, 0x0, 0x6, 0x8000, 0x401, 0x3, 0x9, 0xa, 0x0, 0x4, 0x3, 0xdd, 0x401, 0x7, 0x1, 0x1830, 0x6, 0x101, 0x6, 0x1, 0xb9, 0x4, 0x9c, 0xd, 0x7fffffff, 0xa, 0x3, 0x9, 0xfffffff8, 0x1c0000, 0x70, 0xfdc, 0x5, 0x7, 0x4, 0x2, 0x10001, 0xa5, 0x2400, 0x5, 0x2, 0x7, 0x9, 0xd, 0x6, 0x91, 0xfe00, 0x3, 0x756, 0x20, 0x7, 0x0, 0x9, 0x8d, 0x5, 0x80000000, 0x7fff, 0x1, 0x5, 0x8, 0x2, 0x18, 0x1000, 0x7, 0x9, 0xe46, 0xfffff2e7, 0x8, 0x1, 0x2, 0x48, 0x8, 0x1, 0x200, 0x4, 0x7fffffff, 0x2, 0x0, 0xfffffff8, 0x9, 0x78c, 0xfffffff7, 0xfc3f, 0x3, 0xa, 0xfffffff7, 0x9, 0x6c43, 0x18073831, 0x45ccf2b6, 0x5, 0x6, 0x92, 0x7, 0x0, 0x10, 0x6, 0x7, 0x2, 0x15, 0xc, 0x5, 0x7, 0x80000001, 0x7, 0x6, 0x8, 0x7, 0x8, 0x3, 0x3, 0x8, 0x0, 0x8, 0x3, 0x6, 0x2, 0x751, 0x7, 0xdf7, 0x6, 0x9, 0x0, 0x7, 0xffffffff, 0x1, 0x3, 0x5, 0x1, 0x8e79, 0x3, 0x1, 0xfffffdbc, 0x8001, 0x3, 0x5, 0x6, 0x5, 0xffffffff, 0x5, 0x7, 0x8, 0x9, 0xfffffffd, 0x8, 0x66, 0xb9, 0x2, 0x1, 0xca2, 0xe, 0x80000001, 0x8, 0x5, 0x1, 0x0, 0xffff0000, 0x9, 0x7, 0xd821, 0x1, 0xffff, 0x10, 0x7, 0x8fa, 0x0, 0x0, 0x2, 0x2, 0x2, 0x1ff, 0x9, 0x101, 0x3, 0x9, 0x3f3, 0x4, 0x8, 0x1, 0x6, 0x3, 0x10, 0x3, 0x6, 0x2, 0x800, 0x7, 0x5, 0x0, 0x3d3, 0x8, 0xa, 0x2, 0x5296, 0x5, 0x400, 0x400, 0x2, 0x7f, 0x70, 0x7, 0x0, 0x100, 0x9, 0x18000000, 0x8, 0x7, 0x40, 0xd, 0x80000000, 0x9, 0x3, 0xcb8, 0xfffffff7, 0xc2, 0xffffffff, 0x3, 0x0, 0x7, 0x2, 0x3, 0x7, 0x2, 0x8001, 0x0, 0x4, 0xf, 0xf77b, 0xb, 0x5, 0x4, 0xe00000, 0xd22, 0x2, 0xfffffffb, 0x7, 0x0, 0xff, 0x7fffffff, 0x2, 0xd, 0x7, 0x7, 0x3, 0x5, 0x3, 0xbb, 0xc4, 0x2, 0x7f, 0x4, 0xb, 0x26f, 0x3, 0x6, 0x2, 0x7f, 0x5, 0x10000, 0x0, 0xfffffffb, 0x6, 0x3, 0x4, 0x4, 0x1000, 0x1000, 0x3, 0x400, 0x0, 0x101, 0x1, 0x3ff, 0x4, 0x400, 0xb, 0x23, 0x0, 0xfff, 0x1000, 0x7, 0x23, 0x7, 0x2, 0x3, 0x7f, 0x66d601b3, 0x6, 0xcf3, 0x4f53, 0x9, 0xe0ad, 0x7, 0xff, 0x8, 0xfffffff9, 0x0, 0x3, 0x6, 0x8, 0x7, 0x81, 0x9, 0x7, 0x401, 0x0, 0x200, 0x5, 0x0, 0x4, 0x0, 0x7, 0x63c, 0x4, 0x1, 0x3, 0xe, 0x5, 0x800, 0xf, 0x2, 0x8, 0x7cba, 0x3, 0x3, 0x3, 0x401, 0x5, 0x7, 0x8, 0xfffffffb, 0x57, 0x9d4, 0x8, 0x4, 0x5, 0x5, 0x80000000, 0x4, 0xfffffffa, 0x9, 0x5a57, 0x7, 0x1, 0xc6, 0xc3, 0x8, 0x2, 0x4, 0x0, 0x9, 0x5b, 0x3, 0x5, 0x8, 0x1, 0x62c5, 0x2, 0x9, 0x9, 0x8f5, 0x3, 0xfff, 0xc, 0x8, 0x3, 0x93, 0x7fffffff, 0x7, 0x7, 0x4, 0x2, 0x9, 0x4, 0x5, 0x6, 0x40, 0x0, 0x62c, 0x7, 0x1, 0x1000, 0x7, 0x3fe0, 0x9, 0xe5000000, 0x9, 0x2, 0x451fe1fb, 0x1a1, 0x0, 0xb, 0x630, 0x1, 0x4352, 0x8, 0x7, 0x5, 0x7, 0x1, 0xfffffffb, 0x9, 0x1ff, 0x9, 0x5, 0xc, 0xe3, 0x0, 0x605a, 0xe, 0x7fff, 0x80, 0x7fff, 0x6, 0xffff4cc8, 0x2, 0x9, 0xc, 0x3, 0x2, 0x8, 0x1, 0xf72, 0xa3cd, 0x5, 0x2, 0x469b, 0x1, 0x400, 0xd0a, 0x10000, 0x0, 0x4a3, 0x15c1, 0x7, 0x6, 0x4, 0x1, 0xa760, 0x9, 0x3, 0x401, 0x82, 0x800, 0x9, 0x1, 0x55670646, 0x5, 0x8, 0x3ff, 0x2, 0x2, 0xb, 0x400, 0x9, 0xf551, 0xffffffff, 0x1, 0xe, 0xe1a6, 0x1, 0x5, 0x7, 0xfd55, 0x4b6a, 0x6, 0x76, 0x63, 0x4, 0x3, 0x5, 0x5, 0xff, 0x5, 0x83f, 0xc, 0xfffffff7, 0x335, 0x573, 0x2, 0xfff, 0x3, 0x5284, 0x4, 0x81, 0x6, 0x200, 0x75c, 0x3, 0xaf, 0x10001, 0x5, 0x1, 0x3, 0x6, 0x9, 0x6e, 0x12e4, 0xff, 0x4139, 0x9, 0x1000, 0x1, 0x7ff, 0x1ff, 0x8, 0x6, 0x3ff, 0x1, 0x2, 0x80, 0x5, 0xffff, 0x9f, 0x79, 0x5, 0x10001, 0x7da, 0x5, 0x8, 0x6, 0x3, 0x9, 0x3, 0x5, 0x1b2, 0x8001, 0x3, 0x9, 0x9, 0xe, 0x7fff, 0x1ff, 0xb, 0x0, 0x4, 0x8, 0xba, 0x2, 0x5, 0x6, 0x800, 0x8, 0x1, 0x1, 0xd, 0xb8, 0x8, 0x2, 0x100, 0x9, 0x6375, 0x1, 0x8, 0xb000, 0x7, 0x29, 0x8, 0x6, 0xffffffff, 0x0, 0xffffffff, 0x1ff, 0x6, 0xa, 0x4, 0x3, 0x150, 0x1, 0x8001, 0x1, 0x2, 0x2f8, 0x1, 0xd, 0x1, 0x8, 0x5, 0x100, 0x101, 0x7, 0xb7b, 0x4, 0x1e5, 0xffffffff, 0x494d, 0xfffffff9, 0x2, 0xffffffff, 0x80c, 0x5436, 0xc36, 0x10001, 0x40, 0x0, 0x3, 0x4b50, 0x7, 0xf9c, 0xfff, 0x8, 0x5, 0xc37, 0x0, 0x45869bea, 0x40, 0xb1, 0x2, 0x9, 0x5, 0x0, 0x2, 0x9, 0xff, 0xf3a3, 0x6, 0x1, 0x4, 0x2, 0x1ff, 0xee2, 0x7, 0xf008, 0xfffffffa, 0x4, 0xffffff7f, 0x6, 0x0, 0x8, 0x92f4, 0x6ce, 0x1, 0x2, 0xa9, 0x7, 0x9, 0x5, 0x2040, 0xe, 0x10, 0x7fffffff, 0xe, 0x6045, 0x8b, 0x6, 0x920, 0xe, 0x5, 0x7, 0x1, 0xfff, 0x3aa6, 0x0, 0x4, 0x0, 0x57ad, 0x1, 0x3, 0x2, 0x2, 0x1, 0x2, 0xfffffff7, 0x1, 0x3ff, 0x2, 0x3, 0x4, 0xb3, 0x10, 0x4, 0x2, 0xd, 0xb6, 0x400000, 0x2, 0x1, 0xffffffff, 0x9, 0x24d, 0x6, 0x2, 0x101, 0x10001, 0x1, 0x0, 0xffff, 0xf86, 0xe9, 0x9, 0x3, 0x2, 0x6, 0x9b6, 0x0, 0x0, 0x2, 0x400, 0xfffffff8, 0x4, 0x2, 0x80000001, 0x9, 0x5, 0xdc3, 0x0, 0x80, 0x7, 0x8, 0x2, 0x6, 0x9, 0x5, 0x40, 0xeb5f, 0x8, 0x9, 0x53d, 0x0, 0xfffffffc, 0x5, 0x6, 0x0, 0x41, 0x4, 0x8, 0x5, 0x8c, 0x80000000, 0x3b5, 0x60c224a0, 0x5, 0x9, 0x6, 0xf9b, 0xffff, 0x401, 0xfffffe00, 0x1ff, 0x40, 0x5, 0x5, 0xe, 0x0, 0x6, 0xe, 0x6, 0xd, 0x8, 0x3, 0x4, 0xefbc, 0x401, 0xfffffff7, 0x7, 0x2, 0x2, 0x4, 0x8, 0x45, 0xf, 0x6, 0x8357, 0xf3c, 0x6, 0x7, 0x3, 0x6, 0xfffffffd, 0x0, 0x8d, 0x7fff, 0x200, 0x80, 0x3, 0xffffff47, 0x6, 0x1000, 0x4, 0x7, 0x1, 0xf, 0x7, 0xb28, 0xfffffffd, 0x3ff, 0x3, 0x9, 0xfffffffc, 0x9, 0x2, 0x93, 0x6, 0x401, 0x0, 0x1, 0x1, 0xfe, 0x1ff, 0x3, 0x0, 0x6, 0xc, 0x3, 0x0, 0x10000, 0xf, 0x46f, 0x800, 0x8, 0x8000, 0x64cc, 0x8, 0xf, 0x3, 0x4, 0xa17, 0x800, 0xffffffff, 0x80000000, 0xffff, 0x9, 0xdb0, 0x8, 0xd, 0x7, 0x1, 0x7, 0x8, 0x88b, 0x7, 0xfff, 0x0, 0x7, 0x5, 0x81, 0x0, 0x3, 0x7, 0x67, 0xc6, 0x8, 0xf56, 0x7, 0x9, 0xaead, 0x8, 0x1, 0x7, 0x8, 0xd0b, 0xf, 0x8, 0x3, 0x4, 0xfffffffc, 0x0, 0x7, 0x6, 0x87a, 0xfffff79c, 0x6, 0x5, 0xf, 0xd191, 0xd, 0x4, 0x1, 0x81, 0x3, 0x0, 0xfff, 0x10000, 0x2, 0xffe, 0x35, 0x2, 0x8001, 0xa, 0xff, 0x6, 0xc2, 0xd, 0x0, 0x1, 0x18c8, 0x4, 0x5, 0x80, 0x6, 0x8, 0x401, 0x400, 0x4, 0x9da, 0x55b, 0x2, 0x9, 0x2, 0x7, 0xda, 0x522, 0x6, 0x1, 0x0, 0x7, 0x6, 0x0, 0x2, 0x1, 0x2, 0x1e40, 0x5, 0x65, 0xc872, 0x5, 0x7, 0x1f9d, 0x0, 0x1e15, 0x7, 0x9, 0x2, 0x227, 0x0, 0x0, 0x7, 0xae2, 0x1, 0x8001, 0x7, 0x3a0, 0x8, 0x1ff, 0xc3, 0x100, 0x1, 0x100, 0x5, 0x6, 0x7ff, 0x1000, 0xffe00000, 0x3, 0x9, 0x0, 0xd6800000, 0x2, 0x2, 0x401, 0x9, 0x0, 0x9, 0x5, 0x2, 0x3a7a, 0x4, 0x6, 0x8, 0x6, 0x3f, 0x8, 0xb, 0x5bc, 0x7, 0x2, 0x10001, 0x0, 0x8, 0x9, 0xffffff81, 0x6, 0x7, 0xa, 0x3, 0x4, 0x1c6, 0x7, 0xc00000, 0x9, 0x9, 0x7, 0x0, 0x6, 0xdede, 0x3, 0x8, 0x933, 0xb, 0x6]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r4, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r5}, 0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mysys/bus/usb/devices/usb2/2-0:1.0/usb2-port1/disable\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='1', 0x1) 339.392461ms ago: executing program 3 (id=1151): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) signalfd4(r0, &(0x7f0000000180)={[0x3]}, 0x8, 0x80800) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (async, rerun: 32) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async, rerun: 32) r1 = openat2$dir(0xffffff9c, &(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000140)={0x103243, 0x131, 0x2}, 0x18) ioctl$FS_IOC_FIEMAP(r1, 0xc020660b, 0x0) 338.158663ms ago: executing program 8 (id=1152): setregid(0x0, 0xee01) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x404040, 0x166) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x3, 0x101001) r2 = getpgid(0x0) syz_pidfd_open(r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000000c0)={{0x3, 0x2, 0x1, 0x25b, '\x00', 0x3}, 0x3, 0x200, 0xaf, r2, 0x3, 0x9, 'syz1\x00', &(0x7f0000000080)=['\x00', 'i$\x00', '--*\x00'], 0x8}) faccessat2(r0, 0x0, 0x9e, 0x200) 245.3614ms ago: executing program 9 (id=1153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='menu\x00', 0x5) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000040), 0x20000000000005, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc038563b, &(0x7f0000000080)={0x0, 0x1, @raw_data=[0x7, 0x5, 0x26, 0x38, 0xfffffff8, 0x6, 0xc3b, 0xc8, 0x6de9, 0x7, 0xfffffff7, 0x5, 0x6, 0x0, 0xff4, 0x401]}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './sys'}, 0x9) read(r3, &(0x7f00000002c0)=""/153, 0x99) 244.980561ms ago: executing program 8 (id=1154): openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0xc0b45545, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0x7, 0x0, &(0x7f0000000680)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) write(r2, &(0x7f0000000000)="927ad35073706f7274080063702c7472486464723d3132372e302e302e312c747273766369643d343432302c6e716e3d743e4f694b74b17ff1f1cf560dece4e53d057d7558ab418b6471447f4e299774b1fd8a84d99ca4ad4d32b1bef8abaeaef805d928d16a248bec941bb174e5f5217ad47e0060d25c7c5250cf424a0de2f85eef97f724d617600ab4b19bfc8fef662f17c6318d578c64790c8d73167ffa4adf8b1e7dc2d31f925069235d687385833728d462c15d11dd5535c4b05e6673ebfbb15e334460c65630d762206955c74cfedd170bd3799bd58d4cd72385874219", 0xe0) 190.436648ms ago: executing program 3 (id=1155): mount$9p_virtio(&(0x7f0000000000), &(0x7f00000001c0)='.\x00', &(0x7f0000000080), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@cache_fscache}]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mnt\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, &(0x7f0000000080)='size=4K%') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ipv6_route\x00') preadv(r0, &(0x7f0000000380)=[{&(0x7f00000001c0)=""/7, 0x7}], 0x1, 0xffffffbf, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f0000000200)={0x2c, 0x11, '\x00', [@ra, @jumbo={0xc2, 0x4, 0x8}, @generic={0x5, 0x7d, "8d8637f29defe03a3138dbd9e39fc82fab7690304e7c444cf394e4527f36792522a68ab60c2089fcb523987c23989b1169c0fb07614b77dcbf8d7ef1da19dd4f427b374d627e3d32e742a670917753021752d9f8b36286b1df564ca91c540369f29ce8eed565c46bb98ae4c3c35744de2fda70ee4e1a216fb101622779"}]}, 0x98) statfs(&(0x7f0000000040)='./mnt\x00', &(0x7f0000000100)=""/208) 184.859724ms ago: executing program 8 (id=1156): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) (async) symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00') (async) chmod(&(0x7f0000000040)='./file0\x00', 0x34a) (async) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x60840, 0x8) (async) syz_emit_ethernet(0x76, &(0x7f0000000140)={@broadcast, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2e5cea", 0x40, 0x3c, 0x0, @rand_addr=' \x01\x00', @mcast2, {[@hopopts={0x0, 0x4, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}]}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ed) (async) mkdir(&(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x116) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) (async) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000030c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f00000002c0)) (async) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="03030006000000000000005d00001100000057bdea19173fee604e445a43b436bff555dec2f21c8b669e69c3dbfafa7d8a4fc3040000962ff81df3cb994d88b4f513f3b5fc7e246d6b7325ea6e715a6b08144065dc8530a89882072a9f7d52e1e5f090e4a0b4afa3cc21bc31ac057bd4b1de080bc7b6cebfaeeec92f61b5ff641d416c0bc242f892af0a45f3d3fc1f70882c4378b0aad8bdef652672560ee369ad45edb7dbe68e62c0ff794f7ab0226ca23efa998b817ebbb073e981cda35277cb62dac07a2a3f97158bae0b2c25287607907b4d0752c9074ad19347dea35129d8262acd8b85fde7690a128f10", @ANYRES32=r3, @ANYBLOB="0a000600ffffffffffff0000"], 0x28}}, 0x14014) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x1, 0x11, r4, 0x0) recvfrom$unix(r4, &(0x7f0000000340)=""/94, 0x5e, 0x40000160, &(0x7f00000003c0)=@file={0x1, './config/usb_gadget/g1\x00'}, 0x6e) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x129c40, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r5, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x11c}}, './file1\x00'}) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f0000000280)=0xd7a) (async) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') 95.178828ms ago: executing program 8 (id=1157): socket$inet_smc(0x2b, 0x1, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="97e2000094868d6adb0000e63d3579bd5dc830e372cf4ef0be0953d5a84c20528fc5ee38b1d358b1569614006bcd9e00", 0x30}], 0x1, 0x0, 0x0, 0x1f000000}, 0x8644) socket$inet_smc(0x2b, 0x1, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) read$FUSE(r4, &(0x7f0000005180)={0x2020}, 0x2020) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1}, &(0x7f0000000100), &(0x7f0000000140)='%pS \x00'}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x2, 0x4) (async) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="97e2000094868d6adb0000e63d3579bd5dc830e372cf4ef0be0953d5a84c20528fc5ee38b1d358b1569614006bcd9e00", 0x30}], 0x1, 0x0, 0x0, 0x1f000000}, 0x8644) (async) 93.195351ms ago: executing program 8 (id=1158): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000780)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000780)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r1, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b70400000000000085000000a4000000b7000000000000009500000000000000b7000000fffffff29500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x40f00, 0x0, '\x00', 0x0, @fallback, r2, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) (async) 92.580949ms ago: executing program 3 (id=1159): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0xa, 0x3, 0x87) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'veth1_macvtap\x00', 0x0}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) listen(r4, 0x80) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x23, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r5, 0x0, 0xe, 0x0, &(0x7f0000000600)='\x00'/14, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001d00)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbfd, {0xa, 0x3f, 0x0, 0xc8, r3}, [@IFA_FLAGS={0x8, 0x8, 0x7a2}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c040}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFBR(r6, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x6, 0x200040000}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000013000100000000000000000007000000", @ANYRES32=r10, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200030000000800030000000000080004"], 0x54}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x1d, 0x16, &(0x7f0000000140)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r10, @fallback=0x23}, 0x94) 1.456056ms ago: executing program 3 (id=1160): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0xc0010015, 0x0, 0x4}]}) (async) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x200, 0x18) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, 0x0) (async) ioctl$IOMMU_IOAS_COPY(r5, 0x3b83, &(0x7f0000000040)={0x28, 0x2, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x3fff}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) ioctl$COMEDI_INSNLIST(r4, 0x8010640b, &(0x7f0000000040)={0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x18) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) rmdir(&(0x7f00000002c0)='./file2\x00') (async) chdir(&(0x7f0000000040)='./file0\x00') (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$SG_NEXT_CMD_LEN(r6, 0x2283, &(0x7f0000000140)=0xef) 1.087113ms ago: executing program 8 (id=1161): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xffffff7d, 0x25dfdbff, {0x60, 0x0, 0x0, 0x0, {0xf, 0x2}, {0xa, 0xb}, {0x6, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x94a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c8d1) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1a, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_udp(0x2, 0x2, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000000c0)={@void, @void, @eth={@remote, @broadcast, @val={@void, {0x8100, 0x5, 0x0, 0x4}}, {@ipv6={0x86dd, @dccp_packet={0x8, 0x6, "ce1ada", 0x10, 0x21, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x4e22, 0x4e21, 0x4, 0x1, 0x3, 0x0, 0x0, 0x1, 0x7, "da40f4", 0x7, "4ad001"}}}}}}}}, 0x4a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/target/usb_gadget/naa.6001405c935d7912\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/target/usb_gadget/naa.6001405c935d7912/tpgt_1/nexus\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='naa.6001405c935d7912\n', 0x16) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r3, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000240)='1', 0x1) close(r0) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000b80)="d4fa0c511aad03aa5ed217677bc41c027d9c830c439c7f821ddd78b6915cb170e7603acf9e43a5d68312888b1845421400000033ef", 0x35}], 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 0s ago: executing program 3 (id=1162): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f000029a000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x14da7e, 0x20) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000240)=0x10) copy_file_range(r2, 0x0, r2, 0x0, 0xb51, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f0000000040)={0x5, "784d69c67f853644b05df044d9aef2c50e8862380f0b0ff99984d466579e8902", 0x1, 0x10, 0xfff, 0x40, 0x1, 0x2, 0x7, 0x8}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x40) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r8, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f01390ff2f63e0fa10f01c966b80a00000066ba000000000f300f79d80f232d0f01c966b9024d564b0f32350280660f38dfec", 0x33}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = epoll_create(0x10) epoll_pwait(r9, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x6, &(0x7f00000001c0)={[0x1400000000000]}, 0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x8, 0x5, 0x101, 0x5, 0x0, 0x7, 0x5}, 0xc) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 249.178347][ T8500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8500 comm=syz.6.659 [ 249.243198][ T8505] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input11 [ 249.377488][ T8510] [U] [ 250.146717][ T68] Bluetooth: hci2: unexpected cc 0x203e length: 2 > 1 [ 250.147896][ T68] Bluetooth: hci2: unexpected event for opcode 0x203e [ 250.151077][ T68] Bluetooth: unknown link type 3 [ 250.151103][ T68] Bluetooth: hci1: connection err: -111 [ 250.743993][ T8550] usb usb8: usbfs: process 8550 (syz.6.674) did not claim interface 0 before use [ 250.745441][ T8550] SELinux: failed to load policy [ 250.813461][ T8559] netlink: 'syz.0.677': attribute type 11 has an invalid length. [ 250.921493][ T8562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4864 sclass=netlink_route_socket pid=8562 comm=syz.0.678 [ 251.371799][ T58] hsr0: entered promiscuous mode [ 251.374469][ T8583] __nla_validate_parse: 1 callbacks suppressed [ 251.374482][ T8583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.683'. [ 251.580240][ T8589] netlink: 16 bytes leftover after parsing attributes in process `syz.5.686'. [ 251.888690][ T8603] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8603 comm=syz.3.690 [ 252.064246][ T8615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.693'. [ 252.077462][ T8619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8619 comm=syz.0.694 [ 252.097742][ T8615] bridge1: port 1(veth3) entered blocking state [ 252.097824][ T8615] bridge1: port 1(veth3) entered disabled state [ 252.097886][ T8615] veth3: entered allmulticast mode [ 252.098790][ T8615] veth3: entered promiscuous mode [ 252.103085][ T8615] bridge1: port 2(veth0_to_bond) entered blocking state [ 252.103166][ T8615] bridge1: port 2(veth0_to_bond) entered disabled state [ 252.103238][ T8615] veth0_to_bond: entered allmulticast mode [ 252.103995][ T8615] veth0_to_bond: entered promiscuous mode [ 252.104606][ T8615] bridge1: port 2(veth0_to_bond) entered blocking state [ 252.104652][ T8615] bridge1: port 2(veth0_to_bond) entered forwarding state [ 252.106300][ T8615] netlink: 8 bytes leftover after parsing attributes in process `syz.6.693'. [ 252.106332][ T8615] IPv6: Can't replace route, no match found [ 252.269795][ T8630] openvswitch: netlink: Key type 7430 is out of range max 32 [ 252.556661][ T8645] binder: BINDER_SET_CONTEXT_MGR already set [ 252.556675][ T8645] binder: 8643:8645 ioctl 40046207 0 returned -16 [ 252.599530][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.5.700'. [ 252.984626][ T8664] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 253.033418][ T8667] netlink: 'syz.5.702': attribute type 1 has an invalid length. [ 253.064878][ T8669] fuse: fd is not a fuse device [ 253.107141][ T8672] netlink: 8 bytes leftover after parsing attributes in process `syz.3.707'. [ 253.107156][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz.3.707'. [ 253.125371][ T8674] netlink: 172 bytes leftover after parsing attributes in process `syz.6.708'. [ 253.259849][ T43] kauditd_printk_skb: 14 callbacks suppressed [ 253.259867][ T43] audit: type=1400 audit(5370787783.444:660): avc: denied { write } for pid=8685 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.265915][ T8691] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8691 comm=syz.0.714 [ 253.286204][ T8693] trusted_key: encrypted_key: keylen parameter is missing [ 253.329412][ T43] audit: type=1400 audit(5370787783.510:661): avc: denied { write } for pid=8697 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.370888][ T43] audit: type=1400 audit(5370787783.547:662): avc: denied { write } for pid=8702 comm="syz.3.717" name="file0" dev="tmpfs" ino=1004 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 253.371322][ T43] audit: type=1400 audit(5370787783.547:663): avc: denied { ioctl } for pid=8702 comm="syz.3.717" path="/177/file0" dev="tmpfs" ino=1004 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 253.375458][ T8705] netlink: 'syz.3.717': attribute type 2 has an invalid length. [ 253.404485][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404555][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404615][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404653][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404690][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404726][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404764][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404800][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404836][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404873][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404910][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404946][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.404982][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.405024][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.405062][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.405114][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.406555][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.406629][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.406697][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.406761][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.406825][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.406889][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407232][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407279][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407316][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407352][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407388][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407424][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407461][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407497][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407538][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407613][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407650][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407686][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407741][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407802][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407863][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407922][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.407987][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408055][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408120][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408182][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408247][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408311][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408397][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408459][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408521][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408578][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408640][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408703][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.408764][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410371][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410443][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410509][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410575][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410646][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410716][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410779][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410842][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410904][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.410967][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.411038][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.411103][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.411167][ T8704] blktrace: Concurrent blktraces are not allowed on loop6 [ 253.480218][ T58] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 253.500295][ T8718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.719'. [ 253.500325][ T8718] netlink: 20 bytes leftover after parsing attributes in process `syz.3.719'. [ 253.624583][ T8723] 9p: Unknown Cache mode or invalid value i [ 253.629994][ T58] usb 11-1: device descriptor read/64, error -71 [ 253.853539][ T8731] openvswitch: netlink: Key type 2054 is out of range max 32 [ 253.896798][ T58] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 253.956454][ T8735] fuse: fd is not a fuse device [ 253.975356][ T8735] veth1_macvtap: left promiscuous mode [ 254.035906][ T58] usb 11-1: device descriptor read/64, error -71 [ 254.081900][ T43] audit: type=1400 audit(5370787784.212:664): avc: denied { setopt } for pid=8745 comm="syz.5.728" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 254.099311][ T43] audit: type=1400 audit(5370787784.230:665): avc: denied { ioctl } for pid=8745 comm="syz.5.728" path="/80/config/nullb/rnullb0/zoned" dev="configfs" ino=27678 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 254.153591][ T58] usb usb11-port1: attempt power cycle [ 254.249004][ T43] audit: type=1400 audit(5370787784.371:666): avc: denied { write } for pid=8750 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.317622][ T43] audit: type=1400 audit(5370787784.436:667): avc: denied { write } for pid=8753 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.338028][ T8756] No such timeout policy "syz1" [ 254.414736][ T43] audit: type=1400 audit(5370787784.530:668): avc: denied { write } for pid=8757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.464257][ T68] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 254.464312][ T68] Bluetooth: hci2: Injecting HCI hardware error event [ 254.465379][ T68] Bluetooth: hci2: hardware error 0x00 [ 254.481677][ T43] audit: type=1400 audit(5370787784.586:669): avc: denied { write } for pid=8762 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.527334][ T58] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 254.561214][ T58] usb 11-1: device descriptor read/8, error -71 [ 254.596336][ T8769] fuse: fd is not a fuse device [ 254.640527][ T8776] openvswitch: netlink: Key type 7430 is out of range max 32 [ 254.847839][ T58] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 254.869725][ T58] usb 11-1: device descriptor read/8, error -71 [ 254.915219][ T8806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 254.919858][ T8770] cgroup: fork rejected by pids controller in /syz3 [ 254.998652][ T58] usb usb11-port1: unable to enumerate USB device [ 255.244450][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.245606][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.353889][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 255.357410][ T8825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 255.471273][ T8834] jffs2: notice: (8834) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.475324][ T8834] jffs2 filesystem being mounted at /187/mnt supports timestamps until 2106-02-07 (0xffffffff) [ 255.523945][ T8825] erspan1: left promiscuous mode [ 255.533835][ T8825] vlan0: left allmulticast mode [ 255.533855][ T8825] bond0: left allmulticast mode [ 255.533867][ T8825] bond_slave_0: left allmulticast mode [ 255.533878][ T8825] bond_slave_1: left allmulticast mode [ 255.542606][ T6429] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.542637][ T6429] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.542671][ T6429] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.542693][ T6429] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.542724][ T6429] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.542746][ T6429] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.542776][ T6429] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.542798][ T6429] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.613382][ T8840] lo speed is unknown, defaulting to 1000 [ 255.613443][ T8840] lo speed is unknown, defaulting to 1000 [ 255.625182][ T8840] lo speed is unknown, defaulting to 1000 [ 255.626564][ T8840] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 255.626594][ T8840] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 255.626633][ T8840] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 255.633850][ T8840] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 255.645995][ T8840] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 255.692611][ T8840] lo speed is unknown, defaulting to 1000 [ 255.695429][ T8840] lo speed is unknown, defaulting to 1000 [ 255.698237][ T8840] lo speed is unknown, defaulting to 1000 [ 255.699561][ T8840] lo speed is unknown, defaulting to 1000 [ 255.701582][ T8840] lo speed is unknown, defaulting to 1000 [ 255.896629][ T8859] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 255.971668][ T8861] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x481e8 [ 255.971693][ T8861] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 255.971707][ T8861] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 255.971722][ T8861] page_type: f5(slab) [ 255.971736][ T8861] raw: 00fff00000000040 ffff88801c04ca00 dead000000000122 0000000000000000 [ 255.971751][ T8861] raw: 0000000000000000 0000000200100010 00000000f5000000 0000000000000000 [ 255.971767][ T8861] head: 00fff00000000040 ffff88801c04ca00 dead000000000122 0000000000000000 [ 255.971780][ T8861] head: 0000000000000000 0000000200100010 00000000f5000000 0000000000000000 [ 255.972637][ T8861] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 255.972654][ T8861] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 255.972664][ T8861] page dumped because: unmovable page [ 255.972672][ T8861] page_owner tracks the page as allocated [ 255.972678][ T8861] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8770, tgid 8768 (syz.3.732), ts 255019726184 [ 255.972706][ T8861] post_alloc_hook+0xfd/0x120 [ 255.972733][ T8861] get_page_from_freelist+0x110d/0x35d0 [ 255.972748][ T8861] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 255.972762][ T8861] new_slab+0xa9/0x6e0 [ 255.972775][ T8861] refill_objects+0xe3/0x410 [ 255.972788][ T8861] __prefill_sheaf_pfmemalloc+0x5f/0xb0 [ 255.972802][ T8861] kmem_cache_prefill_sheaf+0x1bd/0x450 [ 255.972818][ T8861] mas_dup_alloc.isra.0+0x863/0xbd0 [ 255.972833][ T8861] __mt_dup+0x69b/0xce0 [ 255.972845][ T8861] dup_mmap+0x3d0/0x2370 [ 255.972864][ T8861] copy_process+0x4811/0x8370 [ 255.972881][ T8861] kernel_clone+0x176/0x9d0 [ 255.972897][ T8861] __do_sys_clone+0xd9/0x120 [ 255.972914][ T8861] do_syscall_64+0x123/0x790 [ 255.972937][ T8861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.972953][ T8861] page last free pid 10 tgid 10 ts 245139311456 stack trace: [ 255.972964][ T8861] __free_frozen_pages+0x79f/0x10f0 [ 255.972985][ T8861] kasan_depopulate_vmalloc_pte+0x5d/0x80 [ 255.973003][ T8861] __apply_to_page_range+0xb1d/0x1520 [ 255.973025][ T8861] __kasan_release_vmalloc+0xd7/0xe0 [ 255.973041][ T8861] purge_vmap_node+0x210/0xb40 [ 255.973058][ T8861] process_one_work+0xac7/0x1b10 [ 255.973082][ T8861] worker_thread+0x5ef/0xe50 [ 255.973106][ T8861] kthread+0x373/0x450 [ 255.973129][ T8861] ret_from_fork+0x730/0xd60 [ 255.973147][ T8861] ret_from_fork_asm+0x1a/0x30 [ 256.178724][ T8872] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 256.478415][ T8886] netlink: 'syz.6.757': attribute type 15 has an invalid length. [ 256.478429][ T8886] netlink: 'syz.6.757': attribute type 18 has an invalid length. [ 256.517611][ T8886] bond2: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 256.518487][ T8886] bond2 (unregistering): Released all slaves [ 256.681395][ T68] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 256.796401][ T5825] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.856117][ T8898] netlink: 'syz.6.762': attribute type 4 has an invalid length. [ 256.856132][ T8898] __nla_validate_parse: 10 callbacks suppressed [ 256.856182][ T8898] netlink: 17 bytes leftover after parsing attributes in process `syz.6.762'. [ 256.889463][ T8900] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2564 sclass=netlink_tcpdiag_socket pid=8900 comm=syz.3.764 [ 256.918335][ T5093] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 256.920749][ T5093] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 256.936552][ T5093] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 256.937493][ T5825] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.947334][ T5093] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 256.959774][ T5093] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 257.040105][ T5825] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.101142][ T5825] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.210260][ T8901] lo speed is unknown, defaulting to 1000 [ 257.390249][ T5825] bridge_slave_1: left allmulticast mode [ 257.390273][ T5825] bridge_slave_1: left promiscuous mode [ 257.391327][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.404770][ T5825] bridge_slave_0: left allmulticast mode [ 257.404793][ T5825] bridge_slave_0: left promiscuous mode [ 257.404980][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.579690][ T5825] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.581228][ T5825] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.582059][ T5825] bond0 (unregistering): Released all slaves [ 257.638858][ T8901] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.638994][ T8901] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.639058][ T8901] bridge_slave_0: entered allmulticast mode [ 257.639800][ T8901] bridge_slave_0: entered promiscuous mode [ 257.641441][ T8901] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.641516][ T8901] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.641575][ T8901] bridge_slave_1: entered allmulticast mode [ 257.642339][ T8901] bridge_slave_1: entered promiscuous mode [ 257.655866][ T8901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.658795][ T8901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.669827][ T5895] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 257.672160][ T8901] team0: Port device team_slave_0 added [ 257.673388][ T8901] team0: Port device team_slave_1 added [ 257.685644][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.685655][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.685668][ T8901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.687445][ T8901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.687459][ T8901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.687479][ T8901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.738000][ T8901] hsr_slave_0: entered promiscuous mode [ 257.738510][ T8901] hsr_slave_1: entered promiscuous mode [ 257.738807][ T8901] debugfs: 'hsr0' already exists in 'hsr' [ 257.738819][ T8901] Cannot create hsr debugfs directory [ 257.783376][ T8940] tmpfs: Unknown parameter 'ÕB'~–AJ’' [ 257.783518][ T8941] tmpfs: Unknown parameter 'ÕB'~–AJ’' [ 257.860853][ T5895] usb 11-1: Using ep0 maxpacket: 32 [ 257.883548][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 257.899668][ T5895] usb 11-1: unable to get BOS descriptor or descriptor too short [ 257.899708][ T5895] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 257.907281][ T5895] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 257.907311][ T5895] usb 11-1: can't read configurations, error -71 [ 257.974199][ T8957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 258.039384][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.039401][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.039881][ T5825] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.039892][ T5825] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.041793][ T5825] veth1_macvtap: left promiscuous mode [ 258.041822][ T5825] veth0_macvtap: left promiscuous mode [ 258.041891][ T5825] veth1_vlan: left promiscuous mode [ 258.041924][ T5825] veth0_vlan: left promiscuous mode [ 258.238088][ T5825] team0 (unregistering): Port device team_slave_1 removed [ 258.242900][ T5825] team0 (unregistering): Port device team_slave_0 removed [ 258.246372][ T6554] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 258.307543][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 258.324169][ T8901] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 258.326096][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 258.328873][ T8901] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 258.330539][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 258.332877][ T8901] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 258.336635][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 258.337339][ T8901] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 258.342249][ T8901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 258.414042][ T8901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.417050][ T6554] usb 5-1: Using ep0 maxpacket: 8 [ 258.417716][ T6554] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 258.418567][ T6554] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 258.418583][ T6554] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 258.418595][ T6554] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 258.418607][ T6554] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 258.418625][ T6554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.456301][ T8901] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.477361][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.477449][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.508028][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.508112][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.565558][ T5825] IPVS: stop unused estimator thread 0... [ 258.584929][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 258.637712][ T6554] usb 5-1: GET_CAPABILITIES returned 0 [ 258.637737][ T6554] usbtmc 5-1:16.0: can't read capabilities [ 258.697048][ T43] kauditd_printk_skb: 127 callbacks suppressed [ 258.697066][ T43] audit: type=1400 audit(5370787788.535:797): avc: denied { write } for pid=8986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.763162][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.777'. [ 258.778719][ T43] audit: type=1400 audit(5370787788.610:798): avc: denied { write } for pid=9004 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.832666][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 258.859111][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 258.863346][ T8954] usbtmc 5-1:16.0: Unable to send data, error -71 [ 258.870349][ T10] usb 5-1: USB disconnect, device number 13 [ 258.892952][ T8901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.057438][ T8901] veth0_vlan: entered promiscuous mode [ 259.063530][ T8901] veth1_vlan: entered promiscuous mode [ 259.084813][ T8901] veth0_macvtap: entered promiscuous mode [ 259.087035][ T8901] veth1_macvtap: entered promiscuous mode [ 259.093857][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.101608][ T8901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.145859][ T5825] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.155701][ T68] Bluetooth: hci3: command tx timeout [ 259.188554][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.188583][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.188600][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.204104][ T8350] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.204118][ T8350] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.223880][ T8350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.223908][ T8350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.458565][ T9034] 9p filesystem being mounted at /225/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 259.466739][ T43] audit: type=1400 audit(5370787789.246:799): avc: denied { write } for pid=9033 comm="syz.0.781" name="/" dev="9p" ino=71827627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.469294][ T43] audit: type=1400 audit(5370787789.256:800): avc: denied { remove_name } for pid=9033 comm="syz.0.781" name="file0" dev="9p" ino=71827785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.469651][ T43] audit: type=1400 audit(5370787789.256:801): avc: denied { unlink } for pid=9033 comm="syz.0.781" name="file0" dev="9p" ino=71827785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.483218][ T43] audit: type=1400 audit(5370787789.265:802): avc: denied { write } for pid=9033 comm="syz.0.781" name="/" dev="9p" ino=71827627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.483542][ T43] audit: type=1400 audit(5370787789.265:803): avc: denied { add_name } for pid=9033 comm="syz.0.781" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 259.483806][ T43] audit: type=1400 audit(5370787789.265:804): avc: denied { create } for pid=9033 comm="syz.0.781" name="freezer.parent_freezing" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 259.483962][ T43] audit: type=1400 audit(5370787789.265:805): avc: denied { associate } for pid=9033 comm="syz.0.781" name="freezer.parent_freezing" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 259.492219][ T43] audit: type=1400 audit(5370787789.274:806): avc: denied { read append open } for pid=9033 comm="syz.0.781" path="/225/file0/freezer.parent_freezing" dev="9p" ino=71827785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 259.528410][ T66] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 259.691234][ T66] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 259.692130][ T66] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 259.692144][ T66] usb 12-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 259.692153][ T66] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 259.692173][ T66] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 259.692186][ T66] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 259.694829][ T66] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 259.694849][ T66] usb 12-1: Product: syz [ 259.694860][ T66] usb 12-1: Manufacturer: syz [ 259.699041][ T66] cdc_wdm 12-1:1.0: skipping garbage [ 259.699050][ T66] cdc_wdm 12-1:1.0: skipping garbage [ 259.717010][ T66] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 259.717023][ T66] cdc_wdm 12-1:1.0: Unknown control protocol [ 259.749824][ T9039] netlink: Conntrack attr has 8 unknown bytes [ 259.749854][ T9039] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.759833][ T9041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.784'. [ 259.978833][ T9056] syzkaller0: entered promiscuous mode [ 259.978850][ T9056] syzkaller0: entered allmulticast mode [ 260.007799][ T9058] Process accounting resumed [ 260.219976][ T9070] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.061408][ T9083] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 261.377193][ T68] Bluetooth: hci3: command tx timeout [ 262.166795][ T9095] pim6reg1: entered promiscuous mode [ 262.166811][ T9095] pim6reg1: entered allmulticast mode [ 262.321290][ T9098] ip_tables: iptables: counters copy to user failed while replacing table [ 262.322961][ T9098] netlink: 'syz.0.797': attribute type 2 has an invalid length. [ 262.490878][ T35] usb 12-1: USB disconnect, device number 2 [ 262.694736][ T9110] netlink: 'syz.0.800': attribute type 3 has an invalid length. [ 262.699375][ T9110] netlink: 'syz.0.800': attribute type 3 has an invalid length. [ 263.281276][ T9063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.349092][ T9116] netlink: 132 bytes leftover after parsing attributes in process `syz.3.802'. [ 263.349924][ T9116] libceph: secret too big 3051 [ 263.350483][ T9116] sctp: [Deprecated]: syz.3.802 (pid 9116) Use of int in maxseg socket option. [ 263.350483][ T9116] Use struct sctp_assoc_value instead [ 263.447008][ T9131] FAULT_INJECTION: forcing a failure. [ 263.447008][ T9131] name failslab, interval 1, probability 0, space 0, times 0 [ 263.447032][ T9131] CPU: 1 UID: 0 PID: 9131 Comm: syz.6.805 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.447048][ T9131] Tainted: [L]=SOFTLOCKUP [ 263.447052][ T9131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.447059][ T9131] Call Trace: [ 263.447063][ T9131] [ 263.447068][ T9131] dump_stack_lvl+0x100/0x190 [ 263.447089][ T9131] should_fail_ex.cold+0x5/0xa [ 263.447108][ T9131] should_failslab+0xc2/0x120 [ 263.447135][ T9131] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 263.447149][ T9131] ? proc_alloc_inode+0x25/0x200 [ 263.447167][ T9131] ? __pfx_proc_alloc_inode+0x10/0x10 [ 263.447186][ T9131] proc_alloc_inode+0x25/0x200 [ 263.447201][ T9131] alloc_inode+0x68/0x250 [ 263.447212][ T9131] new_inode+0x22/0x1c0 [ 263.447223][ T9131] proc_pid_make_inode+0x22/0x160 [ 263.447241][ T9131] proc_pident_instantiate+0x85/0x310 [ 263.447260][ T9131] proc_pident_lookup+0x1e3/0x270 [ 263.447277][ T9131] ? __pfx_down_read+0x10/0x10 [ 263.447290][ T9131] __lookup_slow+0x155/0x320 [ 263.447308][ T9131] lookup_slow+0x50/0x70 [ 263.447325][ T9131] link_path_walk+0x1377/0x1cc0 [ 263.447342][ T9131] path_openat+0x1ac/0x2440 [ 263.447358][ T9131] ? __pfx_path_openat+0x10/0x10 [ 263.447376][ T9131] do_file_open+0x20e/0x430 [ 263.447391][ T9131] ? __pfx_do_file_open+0x10/0x10 [ 263.447410][ T9131] ? __pfx_kfree_link+0x10/0x10 [ 263.447427][ T9131] ? _raw_spin_unlock+0x28/0x50 [ 263.447441][ T9131] ? alloc_fd+0x471/0x7a0 [ 263.447460][ T9131] do_sys_openat2+0x10f/0x1e0 [ 263.447475][ T9131] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.447492][ T9131] ? __do_sys_capset+0xfb/0x460 [ 263.447507][ T9131] __x64_sys_openat+0x12d/0x210 [ 263.447523][ T9131] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.447543][ T9131] do_syscall_64+0x123/0x790 [ 263.447560][ T9131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.447572][ T9131] RIP: 0033:0x7fa40fb5e98e [ 263.447581][ T9131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.447592][ T9131] RSP: 002b:00007fa4109d1ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.447604][ T9131] RAX: ffffffffffffffda RBX: 00007fa4109d26c0 RCX: 00007fa40fb5e98e [ 263.447611][ T9131] RDX: 0000000000000002 RSI: 00007fa4109d1f90 RDI: ffffffffffffff9c [ 263.447619][ T9131] RBP: 00007fa40fc3506b R08: 0000000000000000 R09: 0000000000000000 [ 263.447627][ T9131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.447634][ T9131] R13: 00007fa40fe26038 R14: 00007fa40fe25fa0 R15: 00007ffcc89f7278 [ 263.447649][ T9131] [ 263.514976][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 263.567013][ T9135] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.599787][ T68] Bluetooth: hci3: command tx timeout [ 263.703742][ T9154] (syz.0.812,9154,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 263.703762][ T9154] (syz.0.812,9154,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 263.748499][ T9154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.812'. [ 263.750139][ T9154] program syz.0.812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 263.750171][ T9154] ata1.00: non-matching transfer count (1768126720/0) [ 263.764688][ T9165] netlink: 'syz.7.813': attribute type 39 has an invalid length. [ 263.765300][ T9163] netlink: 'syz.7.813': attribute type 39 has an invalid length. [ 263.775298][ T9154] FAULT_INJECTION: forcing a failure. [ 263.775298][ T9154] name failslab, interval 1, probability 0, space 0, times 0 [ 263.775320][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.0.812 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.775336][ T9154] Tainted: [L]=SOFTLOCKUP [ 263.775340][ T9154] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.775347][ T9154] Call Trace: [ 263.775352][ T9154] [ 263.775356][ T9154] dump_stack_lvl+0x100/0x190 [ 263.775377][ T9154] should_fail_ex.cold+0x5/0xa [ 263.775395][ T9154] should_failslab+0xc2/0x120 [ 263.775411][ T9154] kmem_cache_alloc_noprof+0x92/0x6a0 [ 263.775425][ T9154] ? __mpol_dup+0x74/0x390 [ 263.775444][ T9154] __mpol_dup+0x74/0x390 [ 263.775460][ T9154] ? __pfx___mpol_dup+0x10/0x10 [ 263.775478][ T9154] ? anon_vma_name+0x5a/0x250 [ 263.775495][ T9154] vma_dup_policy+0x42/0xb0 [ 263.775511][ T9154] __split_vma+0x31f/0x1de0 [ 263.775530][ T9154] ? __pfx___split_vma+0x10/0x10 [ 263.775553][ T9154] vma_modify+0x1ef4/0x29b0 [ 263.775575][ T9154] ? __pfx_vma_modify+0x10/0x10 [ 263.775591][ T9154] ? queue_pages_test_walk+0x258/0x420 [ 263.775606][ T9154] ? __pfx_find_vma+0x10/0x10 [ 263.775617][ T9154] ? __pfx_queue_pages_test_walk+0x10/0x10 [ 263.775634][ T9154] ? walk_page_test+0x78/0x180 [ 263.775665][ T9154] vma_modify_policy+0x2a4/0x390 [ 263.775676][ T9154] ? __pfx_vma_modify_policy+0x10/0x10 [ 263.775699][ T9154] ? mas_next_slot+0xc05/0x13a0 [ 263.775716][ T9154] mbind_range+0x175/0x550 [ 263.775736][ T9154] do_mbind+0x7dc/0xfd0 [ 263.775757][ T9154] ? __pfx_do_mbind+0x10/0x10 [ 263.775776][ T9154] ? _copy_from_user+0x59/0xd0 [ 263.775793][ T9154] ? __pfx_get_nodes+0x10/0x10 [ 263.775806][ T9154] ? __do_sys_add_key+0x37d/0x460 [ 263.775826][ T9154] kernel_mbind+0x1b7/0x200 [ 263.775837][ T9154] ? __pfx_kernel_mbind+0x10/0x10 [ 263.775858][ T9154] do_syscall_64+0x123/0x790 [ 263.775875][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.775887][ T9154] RIP: 0033:0x7f6c8759e159 [ 263.775897][ T9154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.775909][ T9154] RSP: 002b:00007f6c88402028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 263.775925][ T9154] RAX: ffffffffffffffda RBX: 00007f6c87825fa0 RCX: 00007f6c8759e159 [ 263.775935][ T9154] RDX: 0000000000004006 RSI: 0000000000002000 RDI: 0000200000001000 [ 263.775944][ T9154] RBP: 00007f6c8763506b R08: 0000000000000006 R09: 0000000000000002 [ 263.775953][ T9154] R10: 0000200000000c00 R11: 0000000000000246 R12: 0000000000000000 [ 263.775963][ T9154] R13: 00007f6c87826038 R14: 00007f6c87825fa0 R15: 00007ffe8bbb2af8 [ 263.775982][ T9154] [ 263.782208][ T9170] scsi_nl_rcv_msg: discarding partial skb [ 263.831636][ T5448] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 263.876757][ T9178] netlink: 6060 bytes leftover after parsing attributes in process `syz.0.815'. [ 263.905891][ T9180] xt_cluster: node mask cannot exceed total number of nodes [ 263.913704][ T9182] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=55314 sclass=netlink_tcpdiag_socket pid=9182 comm=syz.0.818 [ 264.140944][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.140968][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.141669][ T9200] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.141683][ T9200] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.196430][ T9202] xt_bpf: check failed: parse error [ 264.566569][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 264.566581][ T43] audit: type=1400 audit(5370787794.028:817): avc: denied { read } for pid=9211 comm="syz.7.824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 264.624011][ T43] audit: type=1400 audit(5370787794.075:818): avc: denied { lock } for pid=9211 comm="syz.7.824" path="socket:[29794]" dev="sockfs" ino=29794 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 264.890415][ T43] audit: type=1400 audit(5370787794.328:819): avc: denied { ioctl } for pid=9225 comm="syz.6.826" path="socket:[29803]" dev="sockfs" ino=29803 ioctlcmd=0x8981 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 264.898629][ T9226] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9226 comm=syz.6.826 [ 265.217798][ T9233] openvswitch: netlink: Duplicate key (type 6). [ 265.240501][ T43] audit: type=1400 audit(5370787794.655:820): avc: denied { write } for pid=9231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.316703][ T43] audit: type=1400 audit(5370787794.730:821): avc: denied { write } for pid=9238 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 265.823688][ T68] Bluetooth: hci3: command tx timeout [ 265.868729][ T43] audit: type=1400 audit(5370787795.245:822): avc: denied { nlmsg_write } for pid=9258 comm="syz.7.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 265.890782][ T9259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.966959][ T35] bridge0: entered promiscuous mode [ 266.028373][ T9266] openvswitch: netlink: Key 9 has unexpected len 12 expected 4 [ 266.058254][ T43] audit: type=1400 audit(5370787795.422:823): avc: denied { connect } for pid=9267 comm="syz.6.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 266.114387][ T9270] kernel profiling enabled (shift: 63) [ 266.114400][ T9270] profiling shift: 63 too large [ 266.163116][ T126] IPVS: starting estimator thread 0... [ 266.167692][ T9274] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:21 [ 266.189145][ T9277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 266.190537][ T43] audit: type=1400 audit(5370787795.544:824): avc: denied { setopt } for pid=9276 comm="syz.7.841" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 266.250702][ T9275] IPVS: using max 47 ests per chain, 112800 per kthread [ 266.276049][ T43] audit: type=1400 audit(5370787795.628:825): avc: denied { write } for pid=9278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.346770][ T9290] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=260 sclass=netlink_route_socket pid=9290 comm=syz.3.847 [ 266.362841][ T43] audit: type=1400 audit(5370787795.703:826): avc: denied { write } for pid=9287 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 266.450046][ T9295] openvswitch: netlink: Key 22 has unexpected len 12 expected 4 [ 266.503449][ T9299] netlink: 4 bytes leftover after parsing attributes in process `syz.3.849'. [ 266.644548][ T9291] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 266.644562][ T9291] syzkaller1: Linktype set failed because interface is up [ 266.646648][ T9291] netlink: 40 bytes leftover after parsing attributes in process `syz.6.846'. [ 266.672787][ T5894] syzkaller1: tun_net_xmit 90 [ 266.801086][ T9309] befs: (nullb0): No write support. Marking filesystem read-only [ 266.801924][ T9309] befs: (nullb0): invalid magic header [ 267.007152][ T9320] bridge0: port 5(veth0) entered disabled state [ 267.007306][ T9320] bridge0: port 4(dummy0) entered disabled state [ 267.007425][ T9320] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.007632][ T9320] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.197857][ T5894] lo speed is unknown, defaulting to 1000 [ 267.199497][ T5894] syz0: Port: 1 Link DOWN [ 267.201744][ T6429] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.201780][ T6429] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.212642][ T6429] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.212678][ T6429] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.510661][ T9352] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=9352 comm=syz.6.858 [ 267.561231][ T9351] FAULT_INJECTION: forcing a failure. [ 267.561231][ T9351] name failslab, interval 1, probability 0, space 0, times 0 [ 267.561263][ T9351] CPU: 3 UID: 0 PID: 9351 Comm: syz.6.858 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.561288][ T9351] Tainted: [L]=SOFTLOCKUP [ 267.561295][ T9351] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 267.561305][ T9351] Call Trace: [ 267.561311][ T9351] [ 267.561318][ T9351] dump_stack_lvl+0x100/0x190 [ 267.561348][ T9351] should_fail_ex.cold+0x5/0xa [ 267.561374][ T9351] should_failslab+0xc2/0x120 [ 267.561398][ T9351] __kmalloc_noprof+0xfc/0x840 [ 267.561419][ T9351] ? lsm_blob_alloc+0x68/0x90 [ 267.561448][ T9351] lsm_blob_alloc+0x68/0x90 [ 267.561472][ T9351] security_prepare_creds+0x2d/0x290 [ 267.561495][ T9351] prepare_creds+0x5d6/0x950 [ 267.561517][ T9351] restrict_one_thread_callback+0x180/0xba0 [ 267.561552][ T9351] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.561578][ T9351] task_work_run+0x150/0x240 [ 267.561606][ T9351] ? __pfx_task_work_run+0x10/0x10 [ 267.561640][ T9351] get_signal+0x1bd/0x21e0 [ 267.561666][ T9351] ? putname+0xb1/0x110 [ 267.561689][ T9351] ? kmem_cache_free+0x127/0x6c0 [ 267.561717][ T9351] ? __pfx_get_signal+0x10/0x10 [ 267.561737][ T9351] ? do_futex+0x190/0x440 [ 267.561763][ T9351] arch_do_signal_or_restart+0x91/0x7e0 [ 267.561790][ T9351] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.561821][ T9351] ? __x64_sys_openat+0x12d/0x210 [ 267.561853][ T9351] exit_to_user_mode_loop+0x139/0x700 [ 267.561874][ T9351] ? rcu_is_watching+0x13/0xc0 [ 267.561900][ T9351] do_syscall_64+0x661/0x790 [ 267.561928][ T9351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.561947][ T9351] RIP: 0033:0x7fa40fb9e159 [ 267.561963][ T9351] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.561979][ T9351] RSP: 002b:00007fa4109b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 267.561997][ T9351] RAX: 0000000000000000 RBX: 00007fa40fe26098 RCX: 00007fa40fb9e159 [ 267.562008][ T9351] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa40fe26098 [ 267.562019][ T9351] RBP: 00007fa40fe26090 R08: 0000000000000000 R09: 0000000000000000 [ 267.562030][ T9351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.562039][ T9351] R13: 00007fa40fe26128 R14: 00007ffcc89f7190 R15: 00007ffcc89f7278 [ 267.562064][ T9351] [ 267.565341][ T9352] cgroup: subsys name conflicts with all [ 267.767295][ T58] usb 11-1: new low-speed USB device number 8 using dummy_hcd [ 267.784097][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.786834][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.787205][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.787545][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.789806][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.790598][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.791925][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.793400][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.793746][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.794095][ T9367] xt_CT: You must specify a L4 protocol and not use inversions on it [ 267.828814][ T9369] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 268.827408][ T9414] netlink: 132 bytes leftover after parsing attributes in process `syz.3.867'. [ 268.846670][ T57] usb 12-1: new high-speed USB device number 3 using dummy_hcd [ 268.987454][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 268.987485][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.017618][ T57] usb 12-1: Using ep0 maxpacket: 8 [ 269.030973][ T57] usb 12-1: unable to get BOS descriptor or descriptor too short [ 269.031010][ T57] usb 12-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 269.034065][ T57] usb 12-1: unable to read config index 0 descriptor/start: -71 [ 269.034094][ T57] usb 12-1: can't read configurations, error -71 [ 269.924101][ T9450] sctp: [Deprecated]: syz.3.876 (pid 9450) Use of struct sctp_assoc_value in delayed_ack socket option. [ 269.924101][ T9450] Use struct sctp_sack_info instead [ 269.965261][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 269.965281][ T43] audit: type=1400 audit(5370787799.072:847): avc: denied { write } for pid=9451 comm="syz.7.877" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 269.965375][ T43] audit: type=1400 audit(5370787799.072:848): avc: denied { add_name } for pid=9451 comm="syz.7.877" name="cgroup.freeze" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 270.079975][ T9462] IPVS: set_ctl: invalid protocol: 47 172.30.1.4:20003 [ 270.081274][ T9462] ip6t_hbh: unknown flags 83 [ 270.183802][ T9463] No such timeout policy "vxcan1" [ 270.183825][ T9463] netlink: Failed to associated timeout policy 'vxcan1' [ 270.188274][ T43] audit: type=1400 audit(5370787799.287:849): avc: denied { shutdown } for pid=9470 comm="syz.3.882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 270.910176][ T43] audit: type=1400 audit(5370787799.970:850): avc: denied { write } for pid=9481 comm="syz.6.886" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:syslogd_exec_t:s0" [ 270.937066][ T9484] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 271.013708][ T9492] netlink: Conntrack attr has 8 unknown bytes [ 271.013725][ T9492] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.023302][ T9494] jffs2: notice: (9494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 271.024771][ T9494] jffs2 filesystem being mounted at /239/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 271.025829][ T9494] netlink: 'syz.3.892': attribute type 4 has an invalid length. [ 271.025840][ T9494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.892'. [ 271.029120][ T9494] .`: renamed from bond0 [ 271.120937][ T9506] lo: entered allmulticast mode [ 271.121724][ T9506] bond0: entered allmulticast mode [ 271.121980][ T9506] dummy0: entered allmulticast mode [ 271.122181][ T9506] eql: entered allmulticast mode [ 271.122266][ T9506] ifb0: entered allmulticast mode [ 271.122325][ T9506] ifb1: entered allmulticast mode [ 271.135871][ T9506] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 271.141386][ T43] audit: type=1400 audit(5370787800.176:851): avc: denied { write } for pid=9503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.149061][ T9506] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 271.158407][ T9506] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 271.158959][ T9506] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 271.159639][ T9506] hwsim0: entered allmulticast mode [ 271.159709][ T9506] ieee802154 phy0 wpan0: entered allmulticast mode [ 271.161453][ T9506] ieee802154 phy1 wpan1: entered allmulticast mode [ 271.161538][ T9506] teql0: entered allmulticast mode [ 271.161595][ T9506] tunl0: entered allmulticast mode [ 271.161658][ T9506] gre0: entered allmulticast mode [ 271.161725][ T9506] gretap0: entered allmulticast mode [ 271.161781][ T9506] erspan0: entered allmulticast mode [ 271.161824][ T9506] ip_vti0: entered allmulticast mode [ 271.161884][ T9506] ip6_vti0: entered allmulticast mode [ 271.161927][ T9506] sit0: entered allmulticast mode [ 271.161969][ T9506] ip6tnl0: entered allmulticast mode [ 271.162065][ T9506] ip6gre0: entered allmulticast mode [ 271.162124][ T9506] lapb0: entered allmulticast mode [ 271.162288][ T9506] lapb1: entered allmulticast mode [ 271.162382][ T9506] lapb2: entered allmulticast mode [ 271.166476][ T9506] lapb3: entered allmulticast mode [ 271.166701][ T9506] lapb4: entered allmulticast mode [ 271.167035][ T9506] lapb5: entered allmulticast mode [ 271.167260][ T9506] lapb6: entered allmulticast mode [ 271.167589][ T9506] lowpan0: entered allmulticast mode [ 271.167672][ T9506] netdevsim netdevsim1 eth2: entered allmulticast mode [ 271.168034][ T9506] netdevsim netdevsim1 eth3: entered allmulticast mode [ 271.168263][ T9506] netdevsim netdevsim1 eth4: entered allmulticast mode [ 271.168527][ T9506] netdevsim netdevsim1 eth5: entered allmulticast mode [ 271.169775][ T9506] netdevsim netdevsim2 eth6: entered allmulticast mode [ 271.170775][ T9506] netdevsim netdevsim2 eth7: entered allmulticast mode [ 271.171024][ T9506] netdevsim netdevsim2 eth8: entered allmulticast mode [ 271.171249][ T9506] netdevsim netdevsim2 eth9: entered allmulticast mode [ 271.171488][ T9506] macvlan0: entered allmulticast mode [ 271.171670][ T9506] lapb7: entered allmulticast mode [ 271.171770][ T9506] netdevsim netdevsim5 eth10: entered allmulticast mode [ 271.172022][ T9506] netdevsim netdevsim5 eth11: entered allmulticast mode [ 271.172270][ T9506] netdevsim netdevsim5 eth12: entered allmulticast mode [ 271.172573][ T9506] netdevsim netdevsim5 eth13: entered allmulticast mode [ 271.172800][ T9506] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 271.174183][ T9512] tipc: Started in network mode [ 271.174208][ T9512] tipc: Node identity 7f000001, cluster identity 4711 [ 271.174249][ T9512] tipc: Enabling of bearer rejected, failed to enable media [ 271.282769][ T43] audit: type=1400 audit(5370787800.307:852): avc: denied { write } for pid=9517 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.385026][ T43] audit: type=1400 audit(5370787800.410:853): avc: denied { write } for pid=9527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.420488][ T9533] syz.6.902: vmalloc error: size 34359742464, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 271.420553][ T9533] CPU: 1 UID: 0 PID: 9533 Comm: syz.6.902 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.420568][ T9533] Tainted: [L]=SOFTLOCKUP [ 271.420572][ T9533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.420579][ T9533] Call Trace: [ 271.420583][ T9533] [ 271.420588][ T9533] dump_stack_lvl+0x100/0x190 [ 271.420621][ T9533] warn_alloc.cold+0x9e/0xb2 [ 271.420634][ T9533] ? __pfx_warn_alloc+0x10/0x10 [ 271.420647][ T9533] ? __kasan_kmalloc+0xaa/0xb0 [ 271.420659][ T9533] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 271.420675][ T9533] ? xskq_create+0x52/0x290 [ 271.420694][ T9533] ? do_sock_setsockopt+0xf3/0x1d0 [ 271.420713][ T9533] ? do_syscall_64+0x123/0x790 [ 271.420729][ T9533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.420756][ T9533] ? xsk_setsockopt+0x56f/0xab0 [ 271.420770][ T9533] __vmalloc_node_range_noprof+0x123b/0x1420 [ 271.420791][ T9533] ? xsk_setsockopt+0x56f/0xab0 [ 271.420807][ T9533] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 271.420822][ T9533] ? kasan_save_track+0x14/0x30 [ 271.420834][ T9533] ? __kasan_kmalloc+0xaa/0xb0 [ 271.420848][ T9533] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 271.420866][ T9533] ? xskq_create+0x52/0x290 [ 271.420880][ T9533] ? xsk_setsockopt+0x56f/0xab0 [ 271.420894][ T9533] xskq_create+0x18f/0x290 [ 271.420913][ T9533] ? xsk_setsockopt+0x56f/0xab0 [ 271.420928][ T9533] xsk_setsockopt+0x56f/0xab0 [ 271.420942][ T9533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.420955][ T9533] ? find_held_lock+0x2b/0x80 [ 271.420972][ T9533] ? __fget_files+0x215/0x3d0 [ 271.420989][ T9533] ? selinux_socket_setsockopt+0x6a/0x80 [ 271.421003][ T9533] ? __pfx_xsk_setsockopt+0x10/0x10 [ 271.421018][ T9533] do_sock_setsockopt+0xf3/0x1d0 [ 271.421037][ T9533] __sys_setsockopt+0x195/0x220 [ 271.421053][ T9533] __x64_sys_setsockopt+0xbd/0x160 [ 271.421065][ T9533] ? do_syscall_64+0xae/0x790 [ 271.421081][ T9533] ? lockdep_hardirqs_on+0x7d/0x110 [ 271.421097][ T9533] do_syscall_64+0x123/0x790 [ 271.421115][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.421130][ T9533] RIP: 0033:0x7fa40fb9e159 [ 271.421143][ T9533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.421157][ T9533] RSP: 002b:00007fa4109d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 271.421172][ T9533] RAX: ffffffffffffffda RBX: 00007fa40fe25fa0 RCX: 00007fa40fb9e159 [ 271.421181][ T9533] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 271.421191][ T9533] RBP: 00007fa40fc3506b R08: 0000000000000004 R09: 0000000000000000 [ 271.421201][ T9533] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.421209][ T9533] R13: 00007fa40fe26038 R14: 00007fa40fe25fa0 R15: 00007ffcc89f7278 [ 271.421223][ T9533] [ 271.421228][ T9533] Mem-Info: [ 271.421233][ T9533] active_anon:5796 inactive_anon:12490 isolated_anon:0 [ 271.421233][ T9533] active_file:18095 inactive_file:278 isolated_file:0 [ 271.421233][ T9533] unevictable:1000 dirty:650 writeback:0 [ 271.421233][ T9533] slab_reclaimable:8174 slab_unreclaimable:74722 [ 271.421233][ T9533] mapped:25806 shmem:4921 pagetables:4058 [ 271.421233][ T9533] sec_pagetables:298 bounce:0 [ 271.421233][ T9533] kernel_misc_reclaimable:0 [ 271.421233][ T9533] free:471554 free_pcp:18248 free_cma:0 [ 271.421258][ T9533] Node 0 active_anon:23184kB inactive_anon:49952kB active_file:72304kB inactive_file:872kB unevictable:4000kB isolated(anon):0kB isolated(file):0kB mapped:103224kB dirty:2592kB writeback:0kB shmem:19680kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15616kB pagetables:9028kB sec_pagetables:1192kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 271.421285][ T9533] Node 1 active_anon:0kB inactive_anon:8kB active_file:76kB inactive_file:240kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:4kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:160kB pagetables:7204kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 271.421312][ T9533] Node 0 DMA free:15172kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:188kB local_pcp:20kB free_cma:0kB [ 271.421343][ T9533] lowmem_reserve[]: 0 1223 1223 1223 1223 [ 271.421364][ T9533] Node 0 DMA32 free:244348kB boost:0kB min:27356kB low:34192kB high:41028kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23184kB inactive_anon:49952kB active_file:72304kB inactive_file:872kB unevictable:4000kB writepending:2592kB zspages:0kB present:2080628kB managed:1253220kB mlocked:0kB bounce:0kB free_pcp:50376kB local_pcp:26048kB free_cma:0kB [ 271.421397][ T9533] lowmem_reserve[]: 0 0 0 0 0 [ 271.421415][ T9533] Node 1 Normal free:1626696kB boost:0kB min:39880kB low:49848kB high:59816kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:8kB active_file:76kB inactive_file:240kB unevictable:0kB writepending:8kB zspages:0kB present:2097152kB managed:1781880kB mlocked:0kB bounce:0kB free_pcp:22428kB local_pcp:9968kB free_cma:0kB [ 271.421445][ T9533] lowmem_reserve[]: 0 0 0 0 0 [ 271.421462][ T9533] Node 0 DMA: 1*4kB (U) 4*8kB (U) 4*16kB (U) 3*32kB (U) 4*64kB (U) 3*128kB (U) 0*256kB 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15172kB [ 271.421575][ T9533] Node 0 DMA32: 742*4kB (UME) 713*8kB (UME) 470*16kB (UME) 389*32kB (UME) 185*64kB (UME) 204*128kB (UME) 149*256kB (UME) 97*512kB (UM) 58*1024kB (UM) 9*2048kB (UM) 3*4096kB (U) = 244512kB [ 271.421666][ T9533] Node 1 Normal: 302*4kB (UM) 314*8kB (UM) 262*16kB (UME) 257*32kB (UM) 247*64kB (UM) 215*128kB (UM) 202*256kB (UME) 188*512kB (UME) 156*1024kB (UME) 9*2048kB (UME) 303*4096kB (M) = 1626696kB [ 271.421758][ T9533] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.421766][ T9533] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.427971][ T9533] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 271.427983][ T9533] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 271.427991][ T9533] 23288 total pagecache pages [ 271.427995][ T9533] 0 pages in swap cache [ 271.427999][ T9533] Free swap = 124996kB [ 271.428003][ T9533] Total swap = 124996kB [ 271.428008][ T9533] 1048443 pages RAM [ 271.428011][ T9533] 0 pages HighMem/MovableOnly [ 271.428016][ T9533] 285828 pages reserved [ 271.428019][ T9533] 0 pages cma reserved [ 271.430284][ T43] audit: type=1400 audit(5370787800.448:854): avc: denied { ioctl } for pid=9530 comm="syz.6.902" path="socket:[30260]" dev="sockfs" ino=30260 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 271.435245][ T43] audit: type=1400 audit(5370787800.448:855): avc: denied { setattr } for pid=9530 comm="syz.6.902" name="file1" dev="9p" ino=71827821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 271.467528][ T9539] netlink: 'syz.7.903': attribute type 1 has an invalid length. [ 271.477283][ T9539] 8021q: adding VLAN 0 to HW filter on device bond1 [ 271.519254][ T43] audit: type=1400 audit(5370787800.532:856): avc: denied { write } for pid=9537 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.748048][ T9544] tmpfs: Bad value for 'mpol' [ 271.776480][ T9544] Console: switching to colour dummy device 80x25 [ 272.039944][ T9546] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 272.062114][ T9546] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref] [ 272.062310][ T9546] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 272.062394][ T9546] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff] [ 272.062525][ T9546] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 272.063871][ T9546] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 272.098494][ T9546] pci 0000:00:01.0: Adding to iommu group 1 [ 272.104310][ T9546] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 272.104332][ T9546] pci 0000:00:01.0: vgaarb: bridge control possible [ 272.104346][ T9546] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 272.122178][ T9546] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 272.122289][ T9546] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 272.126582][ T9546] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 272.180441][ T9546] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 272.180586][ T9546] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 272.181896][ T9546] [drm] features: -virgl +edid -resource_blob -host_visible [ 272.181907][ T9546] [drm] features: -context_init -blob_alignment [ 272.193427][ T9546] [drm] number of scanouts: 1 [ 272.193460][ T9546] [drm] number of cap sets: 0 [ 272.218656][ T9562] fuse: fd is not a fuse device [ 272.221432][ T9546] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 272.290609][ T9546] Console: switching to colour frame buffer device 160x50 [ 272.310916][ T9568] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 272.310981][ T9567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.907'. [ 272.311611][ T9567] netlink: 12 bytes leftover after parsing attributes in process `syz.3.907'. [ 272.319088][ T9546] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 272.402409][ T9576] netlink: 'syz.6.909': attribute type 14 has an invalid length. [ 272.402423][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.909'. [ 272.418506][ T9576] netlink: 'syz.6.909': attribute type 14 has an invalid length. [ 272.418522][ T9576] netlink: 4 bytes leftover after parsing attributes in process `syz.6.909'. [ 272.426677][ T5825] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.426713][ T5825] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.426738][ T5825] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.426764][ T5825] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.427812][ T9580] tipc: MTU too low for tipc bearer [ 272.441848][ T9576] SELinux: ebitmap start bit (8390656) is beyond the end of the bitmap (1088) [ 272.441895][ T9576] SELinux: invalid class [ 272.444013][ T9576] SELinux: failed to load policy [ 272.535048][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803766d000: rx timeout, send abort [ 272.581024][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.6.914'. [ 272.612673][ T9589] tipc: Started in network mode [ 272.612691][ T9589] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 272.612713][ T9589] tipc: Enabling of bearer rejected, failed to enable media [ 272.638535][ T9594] block nbd6: Device being setup by another task [ 272.660231][ T9590] block nbd6: shutting down sockets [ 272.849820][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.925'. [ 272.861072][ T9617] FAULT_INJECTION: forcing a failure. [ 272.861072][ T9617] name failslab, interval 1, probability 0, space 0, times 0 [ 272.861116][ T9617] CPU: 0 UID: 0 PID: 9617 Comm: syz.6.924 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.861137][ T9617] Tainted: [L]=SOFTLOCKUP [ 272.861142][ T9617] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.861149][ T9617] Call Trace: [ 272.861153][ T9617] [ 272.861158][ T9617] dump_stack_lvl+0x100/0x190 [ 272.861230][ T9617] should_fail_ex.cold+0x5/0xa [ 272.861248][ T9617] should_failslab+0xc2/0x120 [ 272.861282][ T9617] __kvmalloc_node_noprof+0x113/0x9b0 [ 272.861295][ T9617] ? __pfx___mutex_lock+0x10/0x10 [ 272.861333][ T9617] ? nf_hook_entries_grow+0x255/0x870 [ 272.861368][ T9617] nf_hook_entries_grow+0x255/0x870 [ 272.861382][ T9617] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 272.861400][ T9617] __nf_register_net_hook+0x112/0x780 [ 272.861415][ T9617] nf_register_net_hook+0xdb/0x170 [ 272.861429][ T9617] nf_register_net_hooks+0x5d/0xd0 [ 272.861444][ T9617] ip_vs_register_hooks+0xe3/0x150 [ 272.861461][ T9617] ip_vs_add_service+0x515/0x2240 [ 272.861477][ T9617] ? __ip_vs_service_find+0x4d0/0x9c0 [ 272.861498][ T9617] ? do_ip_vs_set_ctl+0xb86/0xc90 [ 272.861509][ T9617] do_ip_vs_set_ctl+0xb86/0xc90 [ 272.861521][ T9617] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 272.861531][ T9617] ? rcu_is_watching+0x13/0xc0 [ 272.861549][ T9617] ? find_held_lock+0x2b/0x80 [ 272.861564][ T9617] ? nf_sockopt_find.isra.0+0x222/0x290 [ 272.861579][ T9617] ? nf_sockopt_find.isra.0+0x222/0x290 [ 272.861600][ T9617] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 272.861625][ T9617] ? nf_setsockopt+0x8d/0xf0 [ 272.861638][ T9617] nf_setsockopt+0x8d/0xf0 [ 272.861654][ T9617] ip_setsockopt+0xcb/0xf0 [ 272.861667][ T9617] udp_setsockopt+0x64/0xb0 [ 272.861682][ T9617] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 272.861701][ T9617] do_sock_setsockopt+0xf3/0x1d0 [ 272.861718][ T9617] __sys_setsockopt+0x195/0x220 [ 272.861736][ T9617] __x64_sys_setsockopt+0xbd/0x160 [ 272.861748][ T9617] ? do_syscall_64+0xae/0x790 [ 272.861764][ T9617] ? lockdep_hardirqs_on+0x7d/0x110 [ 272.861780][ T9617] do_syscall_64+0x123/0x790 [ 272.861798][ T9617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.861809][ T9617] RIP: 0033:0x7fa40fb9e159 [ 272.861819][ T9617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.861829][ T9617] RSP: 002b:00007fa4109d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 272.861840][ T9617] RAX: ffffffffffffffda RBX: 00007fa40fe25fa0 RCX: 00007fa40fb9e159 [ 272.861847][ T9617] RDX: 0000000000000482 RSI: 0000000000000000 RDI: 0000000000000005 [ 272.861854][ T9617] RBP: 00007fa40fc3506b R08: 000000000000002c R09: 0000000000000000 [ 272.861860][ T9617] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.861867][ T9617] R13: 00007fa40fe26038 R14: 00007fa40fe25fa0 R15: 00007ffcc89f7278 [ 272.861881][ T9617] [ 272.935459][ T9620] autofs: Bad value for 'fd' [ 273.046540][ T9632] fuse: Bad value for 'fd' [ 273.069402][ C2] vcan0: j1939_tp_rxtimer: 0xffff888036922c00: rx timeout, send abort [ 273.071074][ C2] vcan0: j1939_tp_rxtimer: 0xffff88803766d000: abort rx timeout. Force session deactivation [ 273.091510][ T9637] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 273.132569][ T9640] netlink: 36 bytes leftover after parsing attributes in process `syz.3.931'. [ 273.377556][ T5895] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 273.538979][ T5895] usb 11-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 273.540027][ T5895] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.540060][ T5895] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 273.540079][ T5895] usb 11-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 273.542068][ T5895] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 273.542086][ T5895] usb 11-1: Product: syz [ 273.542097][ T5895] usb 11-1: Manufacturer: syz [ 273.548485][ T9637] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 273.549559][ T5895] garmin_gps 11-1:1.0: Garmin GPS usb/tty converter detected [ 273.560620][ T5895] usb 11-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 273.603761][ C2] vcan0: j1939_tp_rxtimer: 0xffff888036922c00: abort rx timeout. Force session deactivation [ 273.815251][ T25] usb 11-1: USB disconnect, device number 9 [ 273.831798][ T25] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 273.832257][ T25] garmin_gps 11-1:1.0: device disconnected [ 274.022300][ T9686] fuse: fd is not a fuse device [ 274.050866][ T9692] hpfs: hpfs_map_sector(): read error [ 274.405635][ T9698] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.448637][ T9700] fuse: Bad value for 'fd' [ 274.756013][ T58] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 274.916269][ T58] usb 11-1: Using ep0 maxpacket: 8 [ 274.916823][ T58] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 274.917716][ T58] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 274.917731][ T58] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 274.917743][ T58] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 274.917754][ T58] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 274.917773][ T58] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.139190][ T58] usb 11-1: GET_CAPABILITIES returned 0 [ 275.139213][ T58] usbtmc 11-1:16.0: can't read capabilities [ 275.354812][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.354855][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.354889][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.354918][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.354946][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.354975][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.355009][ C3] usbtmc 11-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 275.452514][ T66] usb 11-1: USB disconnect, device number 10 [ 275.490068][ T9714] fuse: fd is not a fuse device [ 275.495278][ T9718] fuse: fd is not a fuse device [ 275.563064][ T9722] netlink: 'syz.7.949': attribute type 1 has an invalid length. [ 275.577538][ T9722] 8021q: adding VLAN 0 to HW filter on device bond2 [ 275.632751][ T9728] e1000e 0000:00:02.0 eth1: removed PHC [ 275.668066][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 275.668078][ T43] audit: type=1400 audit(5370787804.416:866): avc: denied { write } for pid=9730 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.707340][ T43] audit: type=1400 audit(5370787804.453:867): avc: denied { write } for pid=9734 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.756578][ T9728] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 275.838994][ T43] audit: type=1400 audit(5370787804.575:868): avc: denied { write } for pid=9736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.880867][ T43] audit: type=1400 audit(5370787804.612:869): avc: denied { write } for pid=9739 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.937323][ T43] audit: type=1400 audit(5370787804.668:870): avc: denied { write } for pid=9741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 275.961794][ T9729] genirq: Flags mismatch irq 22. 00200000 (intel_ish_ipc) vs. 00200080 (eth0) [ 275.961831][ T9729] intel_ish_ipc 0000:00:02.0: error -EBUSY: request_irq(22) ish_irq_handler 0x0 intel_ish_ipc [ 275.961876][ T9729] intel_ish_ipc 0000:00:02.0: probe with driver intel_ish_ipc failed with error -16 [ 276.002091][ T43] audit: type=1400 audit(5370787804.724:871): avc: denied { write } for pid=9744 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.043581][ T9733] genirq: Flags mismatch irq 22. 00200000 (intel_ish_ipc) vs. 00200080 (eth0) [ 276.043615][ T9733] intel_ish_ipc 0000:00:02.0: error -EBUSY: request_irq(22) ish_irq_handler 0x0 intel_ish_ipc [ 276.043645][ T9733] intel_ish_ipc 0000:00:02.0: probe with driver intel_ish_ipc failed with error -16 [ 276.092482][ T43] audit: type=1400 audit(5370787804.818:872): avc: denied { write } for pid=9748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.146202][ T43] audit: type=1400 audit(5370787804.865:873): avc: denied { create } for pid=9752 comm="syz.7.952" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 276.151305][ T43] audit: type=1400 audit(5370787804.865:874): avc: denied { write } for pid=9751 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.185595][ T9747] ieee802154 phy0 wpan0: encryption failed: -22 [ 276.186775][ T9753] __nla_validate_parse: 3 callbacks suppressed [ 276.186785][ T9753] netlink: 4 bytes leftover after parsing attributes in process `syz.7.952'. [ 276.216978][ T43] audit: type=1400 audit(5370787804.930:875): avc: denied { write } for pid=9756 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 276.354466][ T9766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.733624][ T9794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.958'. [ 276.831852][ T9798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 276.834119][ T9798] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.866885][ T9798] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 276.882578][ T9798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 276.882657][ T9798] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 276.890257][ T9798] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 276.903518][ T9798] netlink: 328 bytes leftover after parsing attributes in process `syz.7.959'. [ 276.990971][ T9807] No source specified [ 277.037521][ T9809] netlink: 14 bytes leftover after parsing attributes in process `syz.6.962'. [ 277.157177][ T9811] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.095680][ T9828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.969'. [ 278.095783][ T9828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.969'. [ 278.207534][ T9] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 278.303074][ T9840] netlink: Conntrack attr has 12 unknown bytes [ 278.303104][ T9840] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.391711][ T9] usb 12-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 278.393015][ T9] usb 12-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 278.393036][ T9] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.393051][ T9] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 278.393148][ T9] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.395287][ T9] usb 12-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 278.395314][ T9] usb 12-1: Product: syz [ 278.395326][ T9] usb 12-1: Manufacturer: syz [ 278.406969][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 278.406980][ T9] cdc_wdm 12-1:1.0: skipping garbage [ 278.407736][ T9] cdc_wdm 12-1:1.0: cdc-wdm0: USB WDM device [ 278.407744][ T9] cdc_wdm 12-1:1.0: Unknown control protocol [ 278.652573][ T6554] usb 12-1: USB disconnect, device number 5 [ 278.988862][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 279.073183][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 279.230218][ T9849] netlink: 4 bytes leftover after parsing attributes in process `syz.3.976'. [ 279.249023][ T9854] netlink: 116 bytes leftover after parsing attributes in process `syz.7.977'. [ 279.250640][ T9854] netlink: 8 bytes leftover after parsing attributes in process `syz.7.977'. [ 279.331547][ T9860] bond3: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 279.340651][ T9860] bond3 (unregistering): Released all slaves [ 279.469747][ T9873] netlink: Conntrack attr type has unexpected length (type=7, length=8, expected=0) [ 279.469776][ T9873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.635818][ T9899] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 280.637684][ T9899] netlink: 168 bytes leftover after parsing attributes in process `syz.3.992'. [ 280.640284][ T9899] openvswitch: netlink: IPv6 tunnel dst address is zero [ 280.672116][ T9899] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 280.673866][ T9899] bond0 (unregistering): Released all slaves [ 281.023411][ T9919] 9p filesystem being mounted at /129/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 281.037551][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 281.037563][ T43] audit: type=1400 audit(5370787809.441:888): avc: denied { write } for pid=9918 comm="syz.6.997" name="/" dev="9p" ino=71827627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.039943][ T43] audit: type=1400 audit(5370787809.441:889): avc: denied { write } for pid=9918 comm="syz.6.997" path="/129/file0/file0" dev="9p" ino=71827931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 281.221030][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 281.296010][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 281.483169][ T68] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.483934][ T68] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.484815][ T68] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.499254][ T68] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.510687][ T68] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 281.566428][ T43] audit: type=1400 audit(5370787809.937:890): avc: denied { create } for pid=9933 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.566460][ T43] audit: type=1400 audit(5370787809.937:891): avc: denied { bind } for pid=9933 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.566480][ T43] audit: type=1400 audit(5370787809.937:892): avc: denied { setopt } for pid=9933 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.569785][ T43] audit: type=1400 audit(5370787809.937:893): avc: denied { accept } for pid=9933 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.569815][ T43] audit: type=1400 audit(5370787809.937:894): avc: denied { read } for pid=9933 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.570410][ T9931] hfs: can't find a HFS filesystem on dev loop6 [ 281.621846][ T43] audit: type=1400 audit(5370787809.984:895): avc: denied { write } for pid=9933 comm="syz.3.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 281.774968][ T9927] lo speed is unknown, defaulting to 1000 [ 282.013115][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.013413][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.013509][ T9927] bridge_slave_0: entered allmulticast mode [ 282.014958][ T9927] bridge_slave_0: entered promiscuous mode [ 282.056102][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.056238][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.056408][ T9927] bridge_slave_1: entered allmulticast mode [ 282.058180][ T9927] bridge_slave_1: entered promiscuous mode [ 282.092782][ T9927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.101155][ T9927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.130623][ T9927] team0: Port device team_slave_0 added [ 282.131974][ T9927] team0: Port device team_slave_1 added [ 282.167249][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.167262][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.167275][ T9927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.168150][ T9927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.168158][ T9927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 282.168171][ T9927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.204839][ T9927] hsr_slave_0: entered promiscuous mode [ 282.205300][ T9927] hsr_slave_1: entered promiscuous mode [ 282.205631][ T9927] debugfs: 'hsr0' already exists in 'hsr' [ 282.205643][ T9927] Cannot create hsr debugfs directory [ 282.322778][ T6429] bridge_slave_1: left allmulticast mode [ 282.322795][ T6429] bridge_slave_1: left promiscuous mode [ 282.325730][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.328427][ T6429] bridge_slave_0: left allmulticast mode [ 282.328444][ T6429] bridge_slave_0: left promiscuous mode [ 282.328549][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.419352][ T6429] bond2 (unregistering): (slave geneve2): Releasing active interface [ 282.446495][ T6429] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.448308][ T6429] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.449068][ T6429] bond0 (unregistering): Released all slaves [ 282.454533][ T6429] bond1 (unregistering): Released all slaves [ 282.469313][ T6429] bond2 (unregistering): Released all slaves [ 282.564664][ T43] audit: type=1400 audit(5370787810.863:896): avc: denied { write } for pid=9968 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.637119][ T6429] tipc: Left network mode [ 282.637756][ T43] audit: type=1400 audit(5370787810.938:897): avc: denied { write } for pid=9971 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.653451][ T9927] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 282.659864][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 282.669368][ T9927] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 282.673929][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 282.675898][ T9927] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 282.681983][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 282.682801][ T9927] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 282.690518][ T9927] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 282.713400][ T5448] 8021q: adding VLAN 0 to HW filter on device eth1 [ 282.773712][ T9927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.809337][ T9927] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.812224][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.812292][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.816776][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.816861][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.961370][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 282.976304][ T6429] hsr_slave_0: left promiscuous mode [ 282.976952][ T6429] hsr_slave_1: left promiscuous mode [ 282.977343][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.977938][ T6429] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.067653][ T6429] team0 (unregistering): Port device team_slave_1 removed [ 283.074855][ T6429] team0 (unregistering): Port device team_slave_0 removed [ 283.330826][ T9927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.374753][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 283.389926][T10009] __nla_validate_parse: 2 callbacks suppressed [ 283.389939][T10009] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1010'. [ 283.434271][ T5093] Bluetooth: hci1: command 0x0c1a tx timeout [ 283.488653][T10022] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 283.521813][ T5093] Bluetooth: hci3: command 0x0c1a tx timeout [ 283.545745][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 283.555283][ T9927] veth0_vlan: entered promiscuous mode [ 283.565626][ T9927] veth1_vlan: entered promiscuous mode [ 283.583421][T10028] netlink: 'syz.7.1012': attribute type 1 has an invalid length. [ 283.610762][ T9927] veth0_macvtap: entered promiscuous mode [ 283.617253][ T9927] veth1_macvtap: entered promiscuous mode [ 283.633640][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.649158][ T9927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.682653][T10035] deleting an unspecified loop device is not supported. [ 283.691760][ T5093] Bluetooth: hci4: command tx timeout [ 283.721576][ T6429] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.739590][ T6429] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.739617][ T6429] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.739634][ T6429] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.820094][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.820108][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.860052][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.860065][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.902140][T10044] netlink: 'syz.7.1016': attribute type 10 has an invalid length. [ 283.917835][T10044] team0 (unregistering): Port device team_slave_0 removed [ 283.919846][T10044] team0 (unregistering): Port device team_slave_1 removed [ 284.111807][T10051] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 284.156450][T10051] loop0: detected capacity change from 0 to 1 [ 284.197140][T10051] loop0: detected capacity change from 1 to 0 [ 284.443661][T10071] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 284.625453][T10082] netlink: 9 bytes leftover after parsing attributes in process `syz.8.1023'. [ 284.626705][T10082] gretap0: entered promiscuous mode [ 284.639221][T10082] netlink: 5 bytes leftover after parsing attributes in process `syz.8.1023'. [ 284.639359][T10082] 0ªî{X¹¦: renamed from gretap0 [ 284.642371][T10082] 0ªî{X¹¦: left promiscuous mode [ 284.642390][T10082] 0ªî{X¹¦: entered allmulticast mode [ 284.643700][T10082] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 284.826699][T10089] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1026'. [ 284.826714][T10089] openvswitch: netlink: Flow actions attr not present in new flow. [ 284.849456][T10089] netlink: 92 bytes leftover after parsing attributes in process `syz.8.1026'. [ 285.180481][T10102] input: syz1 as /devices/virtual/input/input14 [ 285.193212][T10102] fuse: Unknown parameter ' ' [ 285.373585][T10123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1035'. [ 285.576764][T10135] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0, syncid = 1, id = 0 [ 285.800453][T10150] xt_REDIRECT: bad MAP_IPS. [ 285.915891][ T5093] Bluetooth: hci4: command tx timeout [ 285.920468][T10157] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 285.920489][T10157] netlink: 'syz.3.1046': attribute type 2 has an invalid length. [ 286.091880][T10160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1047'. [ 286.248094][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1048'. [ 286.643200][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 286.643218][ T43] audit: type=1800 audit(5370787814.691:919): pid=10180 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.7.1049" name="/syz7" dev="cgroup2" ino=498 res=0 errno=0 [ 287.900065][ T66] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 288.092096][ T66] usb 12-1: Using ep0 maxpacket: 8 [ 288.093388][ T66] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 288.094211][ T66] usb 12-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 1024 [ 288.094227][ T66] usb 12-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 64 [ 288.094239][ T66] usb 12-1: config 1 interface 0 has no altsetting 0 [ 288.096021][ T66] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.096038][ T66] usb 12-1: Product: syz [ 288.096048][ T66] usb 12-1: Manufacturer: syz [ 288.096060][ T66] usb 12-1: SerialNumber: syz [ 288.097881][T10233] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 288.097947][T10233] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 288.135265][ T5093] Bluetooth: hci4: command tx timeout [ 288.321362][ T66] cdc_ether 12-1:1.0: probe with driver cdc_ether failed with error -71 [ 288.340119][ T66] usb 12-1: USB disconnect, device number 6 [ 288.506213][ T43] audit: type=1400 audit(5370787816.422:920): avc: denied { setopt } for pid=10266 comm="syz.3.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 288.540474][T10269] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 288.540487][T10269] Unsupported digest algo: 106 [ 288.547838][ T43] audit: type=1400 audit(5370787816.469:921): avc: denied { mount } for pid=10268 comm="syz.3.1057" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 288.549128][ T43] audit: type=1400 audit(5370787816.469:922): avc: denied { listen } for pid=10268 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.604159][ T43] audit: type=1400 audit(5370787816.515:923): avc: denied { accept } for pid=10268 comm="syz.3.1057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 288.614158][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1057'. [ 289.044403][T10281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1060'. [ 290.291141][ T43] audit: type=1400 audit(5370787818.097:924): avc: denied { read } for pid=10289 comm="syz.8.1063" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 290.291330][ T43] audit: type=1400 audit(5370787818.097:925): avc: denied { open } for pid=10289 comm="syz.8.1063" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 290.324094][T10290] lo speed is unknown, defaulting to 1000 [ 290.357736][ T68] Bluetooth: hci4: command tx timeout [ 290.416156][T10297] netlink: 'syz.7.1065': attribute type 1 has an invalid length. [ 290.445532][T10297] 8021q: adding VLAN 0 to HW filter on device bond4 [ 291.079029][T10309] ªªªªªª: renamed from vlan0 [ 291.084181][T10307] i8042 kbd 00:00: in use; can't configure [ 291.084687][T10309] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1068'. [ 291.196742][ T43] audit: type=1400 audit(5370787818.948:926): avc: denied { setattr } for pid=10310 comm="syz.3.1069" name="RAWv6" dev="sockfs" ino=33410 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 291.235252][ T43] audit: type=1326 audit(5370787818.986:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.8.1070" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1e85f9e159 code=0x0 [ 292.181475][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1074'. [ 292.269141][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1077'. [ 292.332770][ T43] audit: type=1400 audit(5370787820.006:928): avc: denied { ioctl } for pid=10342 comm="syz.8.1079" path="socket:[34620]" dev="sockfs" ino=34620 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 292.336278][T10343] ip_tables: iptables: counters copy to user failed while replacing table [ 292.349953][ T43] audit: type=1400 audit(5370787820.025:929): avc: denied { setattr } for pid=10342 comm="syz.8.1079" name="PNPIPE" dev="sockfs" ino=34620 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 292.351107][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1079'. [ 292.351126][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1079'. [ 292.479751][ T43] audit: type=1400 audit(5370787820.146:930): avc: denied { listen } for pid=10347 comm="syz.8.1082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 292.532873][ T43] audit: type=1400 audit(5370787820.193:931): avc: denied { wake_alarm } for pid=10355 comm="syz.7.1084" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 292.556714][T10360] ptrace attach of "/syz-executor exec"[8901] was attempted by ""[10360] [ 292.583305][T10354] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 293.009035][T10366] 9p filesystem being mounted at /307/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 293.056145][T10370] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1087'. [ 293.073862][T10372] Cache volume key already in use (9p,syz,) [ 293.078279][T10372] 9p filesystem being mounted at /307/file0/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 293.323028][T10387] No control pipe specified [ 293.325569][T10387] autofs: Unknown parameter '' [ 293.570027][ T43] audit: type=1400 audit(5370787821.166:932): avc: denied { map } for pid=10399 comm="syz.7.1095" path="/85/mnt" dev="tmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 293.572517][T10400] sctp: [Deprecated]: syz.7.1095 (pid 10400) Use of int in max_burst socket option deprecated. [ 293.572517][T10400] Use struct sctp_assoc_value instead [ 293.572560][T10401] sctp: [Deprecated]: syz.7.1095 (pid 10401) Use of int in max_burst socket option deprecated. [ 293.572560][T10401] Use struct sctp_assoc_value instead [ 293.768006][T10411] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1098'. [ 294.309612][ T43] audit: type=1400 audit(5370787821.859:933): avc: denied { write } for pid=10417 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.369394][ T43] audit: type=1400 audit(5370787821.915:934): avc: denied { write } for pid=10422 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.849851][ T43] audit: type=1400 audit(5370787822.364:935): avc: denied { write } for pid=10433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.902466][ T43] audit: type=1400 audit(5370787822.420:936): avc: denied { write } for pid=10436 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 294.942271][ T25] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 295.059185][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1105'. [ 295.103197][ T25] usb 13-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 295.105958][ T25] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.105979][ T25] usb 13-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 295.107850][ T25] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.107870][ T25] usb 13-1: Product: syz [ 295.107880][ T25] usb 13-1: Manufacturer: syz [ 295.107893][ T25] usb 13-1: SerialNumber: syz [ 295.555052][T10432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.555320][T10432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.032747][ T43] audit: type=1400 audit(5370787823.478:937): avc: denied { write } for pid=10452 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.905675][T10407] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 296.912134][ T7556] usb 13-1: USB disconnect, device number 2 [ 297.124996][T10473] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1111'. [ 297.756275][T10496] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1118'. [ 297.756297][T10496] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1118'. [ 297.756308][T10496] netlink: 'syz.8.1118': attribute type 6 has an invalid length. [ 297.756318][T10496] netlink: 'syz.8.1118': attribute type 5 has an invalid length. [ 297.756327][T10496] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1118'. [ 297.786626][ T5093] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 297.789327][ T5093] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 297.790253][ T5093] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 297.792874][ T5093] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 297.795192][ T5093] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 297.914632][T10510] netlink: Unknown conntrack attr (type=22, max=9) [ 297.914654][T10510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.986067][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.986102][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.059234][T10499] lo speed is unknown, defaulting to 1000 [ 298.084754][ T42] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 298.136151][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.136213][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.243955][ T42] usb 13-1: Using ep0 maxpacket: 8 [ 298.249414][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.249437][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.252165][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.253044][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.267943][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.272589][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.274389][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.277290][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.280784][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.281128][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.281964][T10504] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.282313][T10504] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 298.304269][ T42] usb 13-1: unable to get BOS descriptor or descriptor too short [ 298.304314][ T42] usb 13-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 298.305134][ T42] usb 13-1: unable to read config index 0 descriptor/start: -71 [ 298.305162][ T42] usb 13-1: can't read configurations, error -71 [ 298.330290][T10499] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.330417][T10499] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.330522][T10499] bridge_slave_0: entered allmulticast mode [ 298.331893][T10499] bridge_slave_0: entered promiscuous mode [ 298.339037][T10499] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.339164][T10499] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.339322][T10499] bridge_slave_1: entered allmulticast mode [ 298.341483][T10499] bridge_slave_1: entered promiscuous mode [ 298.373542][T10525] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1122'. [ 298.378749][T10499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.403991][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 298.404286][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.416854][T10499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.447816][T10499] team0: Port device team_slave_0 added [ 298.449651][T10499] team0: Port device team_slave_1 added [ 298.477465][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 298.477484][ T43] audit: type=1400 audit(5370787825.752:942): avc: denied { read } for pid=10526 comm="syz.7.1123" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 298.478184][T10499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 298.478194][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.478206][T10499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 298.479245][T10499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 298.479253][T10499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 298.479266][T10499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.550790][T10499] hsr_slave_0: entered promiscuous mode [ 298.551294][T10499] hsr_slave_1: entered promiscuous mode [ 298.551622][T10499] debugfs: 'hsr0' already exists in 'hsr' [ 298.551634][T10499] Cannot create hsr debugfs directory [ 298.643088][ T12] bridge_slave_1: left allmulticast mode [ 298.643113][ T12] bridge_slave_1: left promiscuous mode [ 298.643268][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.646855][ T12] bridge_slave_0: left allmulticast mode [ 298.646870][ T12] bridge_slave_0: left promiscuous mode [ 298.646968][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.666272][ T12] veth0_to_bond: left allmulticast mode [ 298.666297][ T12] veth0_to_bond: left promiscuous mode [ 298.666462][ T12] bridge1: port 2(veth0_to_bond) entered disabled state [ 298.669099][ T12] veth3: left allmulticast mode [ 298.669120][ T12] veth3: left promiscuous mode [ 298.669263][ T12] bridge1: port 1(veth3) entered disabled state [ 298.735950][ T30] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 298.792079][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.793892][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.795062][ T12] bond0 (unregistering): Released all slaves [ 298.797789][ T12] bond1 (unregistering): Released all slaves [ 298.923010][ T30] usb 12-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 298.923720][ T30] usb 12-1: config 0 has no interfaces? [ 298.925087][ T30] usb 12-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 298.925105][ T30] usb 12-1: Manufacturer: syz [ 298.929989][ T30] usb 12-1: config 0 descriptor?? [ 298.952373][ T43] audit: type=1400 audit(5370787826.210:943): avc: denied { write } for pid=10537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.006201][ T43] audit: type=1400 audit(5370787826.257:944): avc: denied { write } for pid=10540 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.039104][T10499] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 299.054875][T10499] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 299.077012][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 299.079392][T10499] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 299.085016][T10499] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 299.085727][T10499] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 299.087529][T10499] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 299.088144][T10499] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 299.102200][T10499] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 299.116209][ T12] hsr_slave_0: left promiscuous mode [ 299.116735][ T12] hsr_slave_1: left promiscuous mode [ 299.117106][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.117117][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.117573][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.117583][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.119161][ T12] veth1_macvtap: left promiscuous mode [ 299.119181][ T12] veth0_macvtap: left promiscuous mode [ 299.119224][ T12] veth1_vlan: left promiscuous mode [ 299.119254][ T12] veth0_vlan: left promiscuous mode [ 299.221783][ T7556] usb 12-1: USB disconnect, device number 7 [ 299.311199][ T12] team0 (unregistering): Port device team_slave_1 removed [ 299.320091][ T12] team0 (unregistering): Port device team_slave_0 removed [ 299.419525][ T42] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 299.444783][T10499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.470516][T10499] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.479934][ T9187] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.480022][ T9187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.487322][ T43] audit: type=1400 audit(5370787826.706:945): avc: denied { write } for pid=10549 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.488457][ T9187] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.488540][ T9187] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.587046][ T43] audit: type=1400 audit(5370787826.800:946): avc: denied { write } for pid=10552 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.601671][ T42] usb 13-1: Using ep0 maxpacket: 8 [ 299.602252][ T42] usb 13-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 299.603224][ T42] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 299.603257][ T42] usb 13-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 299.603276][ T42] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 299.603294][ T42] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 299.608302][ T42] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.608326][ T42] usb 13-1: Product: syz [ 299.608336][ T42] usb 13-1: Manufacturer: syz [ 299.608346][ T42] usb 13-1: SerialNumber: syz [ 299.610338][ T42] usb 13-1: config 0 descriptor?? [ 299.610997][T10536] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 299.654540][ T5448] 8021q: adding VLAN 0 to HW filter on device eth18 [ 299.667956][T10560] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1127'. [ 299.713345][ T12] IPVS: stop unused estimator thread 0... [ 299.753978][ T43] audit: type=1400 audit(5370787826.959:947): avc: denied { write } for pid=10565 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.802083][ T43] audit: type=1400 audit(5370787826.996:948): avc: denied { mount } for pid=10574 comm="syz.3.1129" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 299.828899][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1130'. [ 299.828924][T10579] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1130'. [ 299.839699][ T42] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 299.857197][ T42] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:0.0/input/input15 [ 299.869229][T10580] trusted_key: encrypted_key: master key parameter '' is invalid [ 299.869714][T10580] netlink: 120 bytes leftover after parsing attributes in process `syz.7.1130'. [ 299.897414][T10499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.914499][ T43] audit: type=1400 audit(5370787827.099:949): avc: denied { write } for pid=10576 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.993869][ T5448] 8021q: adding VLAN 0 to HW filter on device eth19 [ 300.016083][T10589] overlayfs: failed to clone lowerpath [ 300.032274][ T68] Bluetooth: hci0: command tx timeout [ 300.059669][T10536] FAULT_INJECTION: forcing a failure. [ 300.059669][T10536] name failslab, interval 1, probability 0, space 0, times 0 [ 300.059692][T10536] CPU: 3 UID: 0 PID: 10536 Comm: syz.8.1125 Tainted: G L syzkaller #0 PREEMPT(full) [ 300.059710][T10536] Tainted: [L]=SOFTLOCKUP [ 300.059714][T10536] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 300.059721][T10536] Call Trace: [ 300.059726][T10536] [ 300.059730][T10536] dump_stack_lvl+0x100/0x190 [ 300.059766][T10536] should_fail_ex.cold+0x5/0xa [ 300.059785][T10536] should_failslab+0xc2/0x120 [ 300.059806][T10536] __kmalloc_cache_noprof+0x91/0x6d0 [ 300.059825][T10536] ? vlan_vid_add+0x326/0x730 [ 300.059845][T10536] vlan_vid_add+0x326/0x730 [ 300.059860][T10536] register_vlan_dev+0xc2/0x910 [ 300.059875][T10536] vlan_ioctl_handler+0x8e9/0xa70 [ 300.059899][T10536] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 300.059917][T10536] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 300.059935][T10536] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 300.059948][T10536] sock_ioctl+0x5e9/0x6b0 [ 300.059961][T10536] ? __pfx_sock_ioctl+0x10/0x10 [ 300.059978][T10536] ? selinux_file_ioctl+0x13b/0x290 [ 300.059992][T10536] ? selinux_file_ioctl+0xb6/0x290 [ 300.060006][T10536] ? __pfx_sock_ioctl+0x10/0x10 [ 300.060019][T10536] __x64_sys_ioctl+0x18e/0x210 [ 300.060032][T10536] do_syscall_64+0x123/0x790 [ 300.060055][T10536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.060067][T10536] RIP: 0033:0x7f1e85f9e159 [ 300.060077][T10536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.060089][T10536] RSP: 002b:00007f1e86e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 300.060100][T10536] RAX: ffffffffffffffda RBX: 00007f1e86225fa0 RCX: 00007f1e85f9e159 [ 300.060108][T10536] RDX: 0000200000000040 RSI: 0000000000008983 RDI: 000000000000000b [ 300.060115][T10536] RBP: 00007f1e8603506b R08: 0000000000000000 R09: 0000000000000000 [ 300.060122][T10536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.060129][T10536] R13: 00007f1e86226038 R14: 00007f1e86225fa0 R15: 00007ffc63e8a098 [ 300.060145][T10536] [ 300.134730][T10499] veth0_vlan: entered promiscuous mode [ 300.144977][T10499] veth1_vlan: entered promiscuous mode [ 300.147706][ C2] powermate: config urb returned -71 [ 300.149136][ C2] powermate: config urb returned -71 [ 300.149323][ C2] powermate: config urb returned -71 [ 300.149501][ C2] powermate: config urb returned -71 [ 300.149678][ C2] powermate: config urb returned -71 [ 300.149980][ T35] usb 13-1: USB disconnect, device number 4 [ 300.150046][ C2] powermate 13-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 300.176756][T10499] veth0_macvtap: entered promiscuous mode [ 300.180430][T10499] veth1_macvtap: entered promiscuous mode [ 300.192021][T10499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.200514][T10499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.206383][T10601] block device autoloading is deprecated and will be removed. [ 300.229704][ T43] audit: type=1400 audit(5370787827.399:950): avc: denied { write } for pid=10606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.242647][ T7713] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.242677][ T7713] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.242695][ T7713] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.242713][ T7713] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.296773][ T126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.296797][ T126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.332466][ T126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.332485][ T126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.361561][ T43] audit: type=1400 audit(5370787827.530:951): avc: denied { write } for pid=10610 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.402552][ T7556] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 300.408127][T10613] __nla_validate_parse: 2 callbacks suppressed [ 300.408140][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1117'. [ 300.408148][T10613] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1117'. [ 300.422037][ T5448] 8021q: adding VLAN 0 to HW filter on device eth20 [ 300.573489][ T7556] usb 12-1: Using ep0 maxpacket: 8 [ 300.574274][ T7556] usb 12-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 300.575327][ T7556] usb 12-1: config 0 has an invalid interface number: 186 but max is 0 [ 300.575357][ T7556] usb 12-1: config 0 has no interface number 0 [ 300.575396][ T7556] usb 12-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 300.575415][ T7556] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x1 has an invalid bInterval 18, changing to 8 [ 300.575438][ T7556] usb 12-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 300.575459][ T7556] usb 12-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 300.575481][ T7556] usb 12-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.577652][ T7556] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.577673][ T7556] usb 12-1: Product: syz [ 300.577685][ T7556] usb 12-1: Manufacturer: syz [ 300.577697][ T7556] usb 12-1: SerialNumber: syz [ 300.579906][ T7556] usb 12-1: config 0 descriptor?? [ 300.673612][T10622] bond0: entered allmulticast mode [ 300.784904][T10632] netlink: 'syz.9.1139': attribute type 1 has an invalid length. [ 300.785114][T10632] netlink: 'syz.9.1139': attribute type 1 has an invalid length. [ 300.805042][ T7556] iowarrior 12-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 301.025973][T10601] tipc: Started in network mode [ 301.025992][T10601] tipc: Node identity 1000001, cluster identity 4369 [ 301.026001][T10601] tipc: Node number set to 16777217 [ 301.026319][T10601] tipc: Cannot configure node identity twice [ 301.029840][T10601] tipc: New replicast peer: 127.0.0.1 [ 301.032005][T10601] tipc: Enabled bearer , priority 10 [ 301.047221][ T7556] usb 12-1: USB disconnect, device number 8 [ 301.534906][T10655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4128 sclass=netlink_route_socket pid=10655 comm=syz.3.1145 [ 301.538762][T10656] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4128 sclass=netlink_route_socket pid=10656 comm=syz.3.1145 [ 301.719557][T10676] overlayfs: failed to clone upperpath [ 301.720627][T10676] overlayfs: failed to clone upperpath [ 301.721291][T10676] overlayfs: failed to clone upperpath [ 301.721888][T10676] overlayfs: failed to clone upperpath [ 301.722455][T10676] overlayfs: failed to clone upperpath [ 301.723289][T10678] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.723392][T10676] overlayfs: failed to clone upperpath [ 301.724138][T10676] overlayfs: failed to clone upperpath [ 301.724923][T10676] overlayfs: failed to clone upperpath [ 301.725599][T10676] overlayfs: failed to clone upperpath [ 301.726597][T10676] overlayfs: failed to clone upperpath [ 301.735108][T10676] overlayfs: failed to clone upperpath [ 301.763210][T10676] overlayfs: failed to clone upperpath [ 301.773696][T10676] overlayfs: failed to clone upperpath [ 301.774515][T10676] overlayfs: failed to clone upperpath [ 301.775307][T10676] overlayfs: failed to clone upperpath [ 301.775989][T10676] overlayfs: failed to clone upperpath [ 301.777117][T10676] overlayfs: failed to clone upperpath [ 301.777669][T10676] overlayfs: failed to clone upperpath [ 301.778208][T10676] overlayfs: failed to clone upperpath [ 301.793418][T10676] overlayfs: failed to clone upperpath [ 301.797739][T10676] overlayfs: failed to clone upperpath [ 301.798953][T10676] overlayfs: failed to clone upperpath [ 301.801236][T10676] overlayfs: failed to clone upperpath [ 301.804100][T10676] overlayfs: failed to clone upperpath [ 301.805961][T10676] overlayfs: failed to clone upperpath [ 301.808053][T10676] overlayfs: failed to clone upperpath [ 301.821720][T10676] overlayfs: failed to clone upperpath [ 301.825660][T10676] overlayfs: failed to clone upperpath [ 301.826928][T10676] overlayfs: failed to clone upperpath [ 301.829189][T10676] overlayfs: failed to clone upperpath [ 301.831282][T10676] overlayfs: failed to clone upperpath [ 301.833400][T10676] overlayfs: failed to clone upperpath [ 301.837379][T10676] overlayfs: failed to clone upperpath [ 301.888056][ T42] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 301.927127][T10692] block2mtd: error: cannot open device #! ./sys [ 301.929718][T10691] autofs4:pid:10691:validate_dev_ioctl: invalid path supplied for cmd(0xc018937a) [ 301.968064][T10700] binder: BINDER_SET_CONTEXT_MGR already set [ 301.968075][T10700] binder: 10697:10700 ioctl 4018620d 200000000100 returned -16 [ 301.969739][T10699] binder: BINDER_SET_CONTEXT_MGR already set [ 301.969747][T10699] binder: 10697:10699 ioctl 4018620d 200000004a80 returned -16 [ 301.969973][T10698] binder_alloc: binder_alloc_mmap_handler: 10697 200000ffd000-200001000000 already mapped failed -16 [ 302.051096][ T42] usb 12-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 302.057046][ T42] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.057086][ T42] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 302.057107][ T42] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.060147][ T42] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.060192][ T42] usb 12-1: Product: syz [ 302.060204][ T42] usb 12-1: Manufacturer: syz [ 302.060216][ T42] usb 12-1: SerialNumber: syz [ 302.065807][ T42] usb 12-1: config 0 descriptor?? [ 302.066977][T10666] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 302.067988][ T42] usb 12-1: ucan: probing device on interface #0 [ 302.068004][ T42] usb 12-1: ucan: invalid EP count (1) [ 302.068016][ T42] usb 12-1: ucan: probe failed; try to update the device firmware [ 302.151148][T10719] [ 302.151945][T10719] ====================================================== [ 302.154100][T10719] WARNING: possible circular locking dependency detected [ 302.156289][T10719] syzkaller #0 Tainted: G L [ 302.158490][T10719] ------------------------------------------------------ [ 302.160777][T10719] syz.8.1161/10719 is trying to acquire lock: [ 302.162642][T10719] ffff88802067d200 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 302.166187][T10719] [ 302.166187][T10719] but task is already holding lock: [ 302.168478][T10719] ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 302.171393][T10719] [ 302.171393][T10719] which lock already depends on the new lock. [ 302.171393][T10719] [ 302.174662][T10719] [ 302.174662][T10719] the existing dependency chain (in reverse order) is: [ 302.177552][T10719] [ 302.177552][T10719] -> #3 (tpg_instances_lock){+.+.}-{4:4}: [ 302.179945][T10719] lock_acquire+0x1d1/0x380 [ 302.181515][T10719] __mutex_lock+0x1a4/0x1bd0 [ 302.183132][T10719] tcm_alloc_inst+0x5f/0x1e0 [ 302.184762][T10719] try_get_usb_function_instance+0x136/0x1f0 [ 302.186826][T10719] usb_get_function_instance+0x16/0x70 [ 302.188758][T10719] function_make+0x18c/0x3f0 [ 302.190605][T10719] configfs_mkdir+0x525/0xd40 [ 302.192313][T10719] vfs_mkdir+0x364/0x850 [ 302.193772][T10719] filename_mkdirat+0x48b/0x5e0 [ 302.195385][T10719] __x64_sys_mkdirat+0x89/0xc0 [ 302.197775][T10719] do_syscall_64+0x123/0x790 [ 302.199296][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.201336][T10719] [ 302.201336][T10719] -> #2 (func_lock){+.+.}-{4:4}: [ 302.203466][T10719] lock_acquire+0x1d1/0x380 [ 302.205060][T10719] __mutex_lock+0x1a4/0x1bd0 [ 302.206649][T10719] try_get_usb_function_instance+0x26/0x1f0 [ 302.208621][T10719] usb_get_function_instance+0x16/0x70 [ 302.210484][T10719] function_make+0x18c/0x3f0 [ 302.212055][T10719] configfs_mkdir+0x525/0xd40 [ 302.213703][T10719] vfs_mkdir+0x364/0x850 [ 302.215210][T10719] filename_mkdirat+0x48b/0x5e0 [ 302.216881][T10719] __x64_sys_mkdirat+0x89/0xc0 [ 302.218495][T10719] do_syscall_64+0x123/0x790 [ 302.220051][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.222004][T10719] [ 302.222004][T10719] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 302.224527][T10719] lock_acquire+0x1d1/0x380 [ 302.226419][T10719] __mutex_lock+0x1a4/0x1bd0 [ 302.228263][T10719] configfs_rmdir+0x5ae/0x950 [ 302.229974][T10719] vfs_rmdir+0x328/0x8a0 [ 302.231452][T10719] filename_rmdir+0x31a/0x5c0 [ 302.233052][T10719] __x64_sys_rmdir+0x46/0x70 [ 302.234621][T10719] do_syscall_64+0x123/0x790 [ 302.236206][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.238136][T10719] [ 302.238136][T10719] -> #0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 302.240868][T10719] check_prev_add+0xeb/0xe60 [ 302.242654][T10719] __lock_acquire+0x1528/0x1f40 [ 302.244364][T10719] lock_acquire+0x1d1/0x380 [ 302.246051][T10719] down_write+0x8b/0x1f0 [ 302.247632][T10719] configfs_depend_item_unlocked+0xf3/0x6a0 [ 302.249573][T10719] usbg_make_tpg+0x251/0x610 [ 302.251157][T10719] target_fabric_make_tpg+0xab/0x8c0 [ 302.252988][T10719] configfs_mkdir+0x525/0xd40 [ 302.254579][T10719] vfs_mkdir+0x364/0x850 [ 302.256049][T10719] filename_mkdirat+0x48b/0x5e0 [ 302.257717][T10719] __x64_sys_mkdirat+0x89/0xc0 [ 302.259327][T10719] do_syscall_64+0x123/0x790 [ 302.261373][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.263305][T10719] [ 302.263305][T10719] other info that might help us debug this: [ 302.263305][T10719] [ 302.266307][T10719] Chain exists of: [ 302.266307][T10719] &sb->s_type->i_mutex_key#24 --> func_lock --> tpg_instances_lock [ 302.266307][T10719] [ 302.270798][T10719] Possible unsafe locking scenario: [ 302.270798][T10719] [ 302.273278][T10719] CPU0 CPU1 [ 302.274908][T10719] ---- ---- [ 302.276526][T10719] lock(tpg_instances_lock); [ 302.277955][T10719] lock(func_lock); [ 302.279950][T10719] lock(tpg_instances_lock); [ 302.282127][T10719] lock(&sb->s_type->i_mutex_key#24); [ 302.283784][T10719] [ 302.283784][T10719] *** DEADLOCK *** [ 302.283784][T10719] [ 302.286240][T10719] locks held by syz.8.1161/10719: 4, last CPU#3: [ 302.288127][T10719] #0: ffff88802461a460 (sb_writers#13){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 302.291079][T10719] #1: ffff88803ad6ba40 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 302.294369][T10719] #2: ffffffff8ffb2e68 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4c0/0xd40 [ 302.297454][T10719] #3: ffffffff90480000 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x610 [ 302.300460][T10719] [ 302.300460][T10719] stack backtrace: [ 302.302308][T10719] CPU: 3 UID: 0 PID: 10719 Comm: syz.8.1161 Tainted: G L syzkaller #0 PREEMPT(full) [ 302.305661][T10719] Tainted: [L]=SOFTLOCKUP [ 302.307035][T10719] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 302.310595][T10719] Call Trace: [ 302.311618][T10719] [ 302.312525][T10719] dump_stack_lvl+0x100/0x190 [ 302.313953][T10719] print_circular_bug.cold+0x178/0x1be [ 302.315892][T10719] check_noncircular+0x146/0x160 [ 302.317462][T10719] check_prev_add+0xeb/0xe60 [ 302.318939][T10719] __lock_acquire+0x1528/0x1f40 [ 302.320527][T10719] ? rcu_is_watching+0x13/0xc0 [ 302.322084][T10719] lock_acquire+0x1d1/0x380 [ 302.323522][T10719] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 302.325459][T10719] ? __pfx___might_resched+0x10/0x10 [ 302.327115][T10719] down_write+0x8b/0x1f0 [ 302.328467][T10719] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 302.330506][T10719] ? __pfx_down_write+0x10/0x10 [ 302.332091][T10719] ? kstrtou16+0xde/0x130 [ 302.333484][T10719] configfs_depend_item_unlocked+0xf3/0x6a0 [ 302.335435][T10719] usbg_make_tpg+0x251/0x610 [ 302.336945][T10719] ? __pfx_usbg_make_tpg+0x10/0x10 [ 302.338603][T10719] ? find_held_lock+0x2b/0x80 [ 302.340113][T10719] ? __pfx_usbg_make_tpg+0x10/0x10 [ 302.341777][T10719] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 302.343702][T10719] target_fabric_make_tpg+0xab/0x8c0 [ 302.345489][T10719] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 302.347383][T10719] configfs_mkdir+0x525/0xd40 [ 302.349116][T10719] ? may_create+0x285/0x440 [ 302.350832][T10719] ? __pfx_configfs_mkdir+0x10/0x10 [ 302.352917][T10719] vfs_mkdir+0x364/0x850 [ 302.354622][T10719] filename_mkdirat+0x48b/0x5e0 [ 302.356576][T10719] ? __pfx_filename_mkdirat+0x10/0x10 [ 302.358763][T10719] ? strncpy_from_user+0x19d/0x2d0 [ 302.360777][T10719] ? do_getname+0x191/0x390 [ 302.362590][T10719] __x64_sys_mkdirat+0x89/0xc0 [ 302.364517][T10719] do_syscall_64+0x123/0x790 [ 302.366399][T10719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.368264][T10719] RIP: 0033:0x7f1e85f9e159 [ 302.369708][T10719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.376169][T10719] RSP: 002b:00007f1e86e77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 302.378707][T10719] RAX: ffffffffffffffda RBX: 00007f1e86225fa0 RCX: 00007f1e85f9e159 [ 302.381377][T10719] RDX: 00000000000001ff RSI: 0000200000000380 RDI: ffffffffffffff9c [ 302.383872][T10719] RBP: 00007f1e8603506b R08: 0000000000000000 R09: 0000000000000000 [ 302.386212][T10719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 302.389045][T10719] R13: 00007f1e86226038 R14: 00007f1e86225fa0 R15: 00007ffc63e8a098 [ 302.391913][T10719] [ 302.393981][ T68] Bluetooth: hci0: command tx timeout [ 302.433708][T10719] event trace: Could not enable event p [ 302.469923][ T8829] usb 12-1: USB disconnect, device number 9 [ 304.559323][ T68] Bluetooth: hci0: command tx timeout [ 306.782038][ T68] Bluetooth: hci0: command tx timeout [ 311.360584][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 311.360596][ T43] audit: type=1400 audit(5370787837.814:969): avc: denied { write } for pid=10731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.397910][ T43] audit: type=1400 audit(5370787837.842:970): avc: denied { write } for pid=10734 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.082260][ C0] tipc: RX(1000001): key[1] is activated