last executing test programs: 4m16.811493238s ago: executing program 0 (id=133): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x1}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x5a, 0x0, 0x1}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01080000000000000000050000000900010073797a30000000000900030073797a310000000054000000060a010400000000000000000500000008000b40000000002c0004802800018008000100667764001c0002800800034000000002080001400000008d080002400000000d0900010073797a30"], 0xc8}}, 0x0) 4m16.809794428s ago: executing program 0 (id=134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfff7}, 0x3a, [0x3, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0xa, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xfffffff9, 0x3, 0x0, 0x5, 0x24, 0x1, 0x0, 0x3c5b, 0x4, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x5, 0x0, 0x0, 0x80008071, 0x7, 0x17, 0xd, 0x407, 0x5, 0x3a, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x8, 0x400, 0x80, 0x5, 0x3ff, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x315, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x5, 0x8, 0x9, 0x8, 0x9, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0xc, 0x5, 0x3, 0x4, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x3f, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x5, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x2, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x4, 0x800003, 0x200, 0x7e, 0x7, 0xc4f, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0x2000af, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2004, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x8000b, 0x8, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x451, 0x3, 0x102, 0x10000, 0x4, 0x7fff, 0xffff, 0x85, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0xfffffffe, 0x80000003, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10003, 0x3, 0x7e, 0xfffffc00, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x5, 0x8, 0x30b1d693, 0x5, 0xf40, 0x7, 0x1, 0x1000, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) (async) userfaultfd(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) (async, rerun: 32) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) (async, rerun: 64) listen(r3, 0x8) (async, rerun: 64) syz_emit_ethernet(0x56, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaf900f500200600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e225811216ca59f7b164afb07170eb3533de0c101e54a426e0331c0a8baaa1f56d8179f38e917840d0988f4cc46aebd8846ff489ad39a1541", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="80020000907800001e0c81050000000000000004"], 0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) (rerun: 64) r6 = socket(0x10, 0x3, 0x0) (async) close(0x3) (async, rerun: 32) r7 = socket(0x2, 0x80805, 0x0) (rerun: 32) sendmmsg$inet(r7, &(0x7f00000017c0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)}], 0x1}}, {{&(0x7f00000002c0)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000100)="a7", 0x1}], 0x1}}], 0x2, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000140)={r9, 0x7}, 0x8) (async, rerun: 64) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async, rerun: 64) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast2, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7}, 0x0, 0x0, 0x1}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@loopback, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe8) sendmmsg(r5, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xffe0, 0xc}, {}, {0x7, 0x300}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (rerun: 64) 4m16.560625098s ago: executing program 0 (id=139): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) cachestat(r0, &(0x7f0000000040)={0x2}, &(0x7f0000000080), 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f00000001c0)={0x0, 0x0}) r4 = socket$kcm(0x10, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r5 = io_uring_setup(0x75bd, &(0x7f00000000c0)={0x0, 0xfa59, 0x20, 0x2, 0x1b9}) io_uring_enter(r5, 0x6d40, 0xab3b, 0x92, &(0x7f0000000140)={[0x7]}, 0x8) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) cachestat(r0, &(0x7f0000000040)={0x2}, &(0x7f0000000080), 0x0) (async) syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) (async) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000840)) (async) openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) (async) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) (async) fchown(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f00000001c0)={0x0, 0x0}) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) io_uring_setup(0x75bd, &(0x7f00000000c0)={0x0, 0xfa59, 0x20, 0x2, 0x1b9}) (async) io_uring_enter(r5, 0x6d40, 0xab3b, 0x92, &(0x7f0000000140)={[0x7]}, 0x8) (async) 4m11.938810965s ago: executing program 0 (id=190): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)="b8", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1c) read(r0, &(0x7f0000000080)=""/21, 0x15) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') mount$9p_virtio(&(0x7f0000000000), &(0x7f00000002c0)='.\x00', &(0x7f0000001b00), 0x10000, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=virtio,posixacl,noxattr,']) read$FUSE(r2, &(0x7f00000045c0)={0x2020}, 0x2020) 4m11.850417122s ago: executing program 0 (id=192): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@binder={0x73622a85, 0x100, 0x2}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r2, 0x2000004, 0x4000010, r5, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x10002, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000680)={"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"}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x0, 0x5e12, 0x20, 0x13, 0x8000000000007, 0x106c, 0x9, 0x8000000000000, 0x6f1f, 0x0, 0x6, 0x0, 0x204, 0x0, 0x8001], 0xeeee0000, 0x2c0290}) ioctl$KVM_RUN(r6, 0xae80, 0x0) 4m11.421329595s ago: executing program 0 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @loopback}, &(0x7f00000000c0)=0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}}, 0x20}}, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) splice(r3, 0x0, r2, 0x0, 0x18, 0x7) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "abde5434733d0b8224d88b9cce307f82e3acbe9888094d5ab61d12a5ebd93a6c54246ff0f35a32a9a4f94c4bd5535623b0b566b2fe4e621514"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x65}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x91}, 0x0) 4m11.409158386s ago: executing program 32 (id=196): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @loopback}, &(0x7f00000000c0)=0xc) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3f}}, 0x20}}, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) pipe2(&(0x7f0000000300)={0xffffffffffffffff}, 0x4800) splice(r3, 0x0, r2, 0x0, 0x18, 0x7) (async) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xf}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x3d, 0xbe, "abde5434733d0b8224d88b9cce307f82e3acbe9888094d5ab61d12a5ebd93a6c54246ff0f35a32a9a4f94c4bd5535623b0b566b2fe4e621514"}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x65}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x91}, 0x0) 2m0.469409951s ago: executing program 1 (id=1773): socket$packet(0x11, 0x3, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) getgroups(0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r0, &(0x7f0000000380), 0x0}, 0x20) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) prlimit64(0x0, 0x0, &(0x7f0000000000)={0x9, 0x100009b}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) listen(r4, 0x5) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) r5 = fsopen(&(0x7f0000000100)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000001c0)='clientaddr\x00', &(0x7f0000000200)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000240)='minorversion\x00', &(0x7f0000000280)='1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002a0)='source\x00', &(0x7f00000002b0)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f00000002c0)='port\x00', &(0x7f00000002d0)='32776\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) (async) r6 = accept(r4, 0x0, 0x0) write(r6, &(0x7f0000000300)="80000028000000010000000000000000", 0x10) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8, 0xb, r3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x20048040) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000000c0), 0x24000, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x4) 1m59.519953446s ago: executing program 1 (id=1775): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xb, 0x1}) r1 = socket$l2tp6(0xa, 0x2, 0x73) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/206, 0xce, 0x40012020, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7fffffff}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffc}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8001}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xff}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8000}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x63}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x800) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000003c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0xc7}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r3, 0x84, 0x74, &(0x7f0000000440)=""/181, &(0x7f0000000500)=0xb5) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000540)) sendto$inet6(r3, &(0x7f0000000580)="bb6f049b0c81dc79a7fb2061e80fb4bfcdf98d619665ec79af507cc748ea9bb14809dd0fa69d33dd452075c5e7b65dc99aebe5222c835ce4895c3ae70bb0e4a985405269d820be8fd1e0ac16ef7571fa55997bbe802a7428e49a880598c1a0042723c648e23a6e3bf0d78b47f11480e31b5ec77dc47fac8e310d2671a22329bba84935d2654cebac7edc824587e48b23eb111e893511a73b4d9d8db945e1803fac262b720d81a14fbb3aefca19b53740166f1d7e50713d64f6e9c80443b4524f2d17b9729f4280aeb4114a6f109e30955d1232f6", 0xd4, 0x4004000, &(0x7f0000000680)={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x17}, 0x8}, 0x1c) clock_gettime(0x0, &(0x7f0000000700)={0x0, 0x0}) ppoll(&(0x7f00000006c0)=[{r3, 0xa404}, {r1, 0x21}, {r0}], 0x3, &(0x7f0000000740)={r4, r5+10000000}, &(0x7f0000000780)={[0x100]}, 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)={0x98, 0x1, 0x8, 0x301, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x10b18}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7136}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000000}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7887}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6c0}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10001}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xcc5}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6004}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000980)=@security={'security\x00', 0xe, 0x4, 0x470, 0xffffffff, 0x118, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x3a0, 0x3a0, 0x3a0, 0xffffffff, 0x4, &(0x7f0000000940), {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x9f6, {0x7fffffffffffffff}}}}, {{@uncond, 0x0, 0x120, 0x160, 0x0, {}, [@common=@dst={{0x48}, {0x2, 0x0, 0x0, [0x0, 0x3, 0xf, 0xf292, 0x6, 0x36d, 0x4, 0x6, 0x7, 0x5a8, 0x3, 0x3, 0x7, 0xfffb, 0x0, 0xace6], 0x3}}, @common=@frag={{0x30}, {[0x3, 0xaa15], 0x759, 0x20, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x5, 0x20, "01123a38423530fbae881b94d43350a2a80e55b22e738ef4a2b7437cac25"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffff00, 0xff0000ff, 0xff, 0xffffff00], [0x0, 0x0, 0xff, 0xff], 'wg2\x00', 'dvmrp0\x00', {}, {}, 0x73, 0x0, 0x1, 0x9}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x89, 0x80, 0x7, 0x6, 0xc265, 0x1000, 0x3602}}, @common=@ipv6header={{0x28}, {0xed, 0x0, 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x51}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r6, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x20, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x1) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001000)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000001040)=0x4) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r3) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000001180)={&(0x7f0000001080), 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r9, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x9000}, 0x24000040) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x24, 0x1, 0x9, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xf}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4004810) r10 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000015c0)={0x0, &(0x7f00000012c0)=[@nested_amd_vmload={0x182, 0x18, 0x1}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @host32=0x4c00, 0x3, 0x2, 0x4}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_syzos={0x136, 0x170, {0x1, 0x3, [@wrmsr={0x65, 0x20, {0x85c, 0x9}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0xc0000000000000, 0xde, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @wr_crn={0x67, 0x20, {0x0, 0x8000000000000000}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest32=0x4804, 0x10001, 0x3, 0xf}}, @in_dx={0x69, 0x20, {0x1c91, 0x1}}, @nested_create_vm={0x12d, 0x18, 0x1}, @out_dx={0x6a, 0x28, {0x7f68, 0x5, 0x7}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xb7, 0x7d1b09bc, 0x1}}]}}, @nested_vmresume={0x130, 0x18, 0x3}, @cpuid={0x64, 0x18, {0x3, 0x4}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x200000, 0x9dc9}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @host16=0xc04, 0xfff, 0x7, 0x7ff}}, @nested_amd_vmload={0x182, 0x18, 0x3}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @host32=0x4c00, 0xffffffff80000001, 0xdd}}], 0x2d8}) syz_kvm_setup_cpu$x86(r3, r10, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000001680)=[@text16={0x10, &(0x7f0000001600)="66b9410800000f322e660f3882710a66b895a100000f23c80f21f866350c0020000f23f80f300f1855b2f080800090553e3ef30f012c660f20d6b8db000f00d8640f01d1", 0x44}], 0x1, 0x13, &(0x7f00000016c0), 0x0) ioctl$MON_IOCX_GET(r3, 0x40189206, &(0x7f00000017c0)={&(0x7f0000001700), &(0x7f0000001740)=""/71, 0x47}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r11, &(0x7f0000001a40)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f0000001880)={0x180, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0xff}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x8}, {0x8}, {0x5, 0x14, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffffff0f}, {0x6, 0x11, 0x7ff}, {0x8, 0x13, 0xfffffffa}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x10}, {0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x81}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0xfffffff7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x101}, {0x8, 0x13, 0xffffffff}, {0x5, 0x14, 0x1}}]}, 0x180}, 0x1, 0x0, 0x0, 0x24008004}, 0x4000800) 1m58.648555038s ago: executing program 1 (id=1783): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='statm\x00') ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x0, r1}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x0, 0xffffffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0xc0) 1m58.558927971s ago: executing program 1 (id=1784): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) timerfd_create(0x9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x5a}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x3}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x17}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_CSUM_OFFSET={0x8, 0x7, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x4) 1m58.459714035s ago: executing program 1 (id=1785): bind$inet(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/drivers/ata_generic/new_id\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='8086 100e\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='ata_generic\x00', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/ata_generic/bind\x00', 0x1, 0x92) write(r3, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r3, 0x40085874, &(0x7f0000000280)={r4, 0xe02d70a}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f00000006c0)="cc", &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r5, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000400)={r5, &(0x7f0000000380), &(0x7f0000000500)=""/166}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004055) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1c, &(0x7f0000000200)={0x2, &(0x7f0000000000)=[{0x7}, {0x6, 0x8d, 0x0, 0x1}]}) 1m58.1944817s ago: executing program 1 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m43.116560278s ago: executing program 33 (id=1787): mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='sys\x00', 0x1ff) mount(0x0, &(0x7f00000007c0)='sys\x00', &(0x7f00000007e0)='sysfs\x00', 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xa4, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x88, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='./sys/devices/platform/vhci_hcd.0/attach\x00', 0x1, 0x0) writev(r3, &(0x7f0000000900)=[{&(0x7f0000000980)='0 ', 0x2}, {&(0x7f00000009a0)='4 ', 0x2}, {&(0x7f00000009c0)='0 3', 0x3}], 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) setxattr$trusted_overlay_origin(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000240), 0x2, 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x2, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 45.685897152s ago: executing program 5 (id=2527): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e1d19"], 0x1c) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./sys\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC=0x0]) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:1d.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000800)='1', 0x1) 44.906718978s ago: executing program 5 (id=2535): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r2, &(0x7f0000002500)="00112233445566778899aabb08004500001c0000000040110000", 0x1a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 44.779419316s ago: executing program 5 (id=2536): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x9, 0x3, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x108, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, &(0x7f00000002c0), {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@dscp={{0x28}, {0xff}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x5, 'syz0\x00', {0x2}}}}, {{@ip={@rand_addr=0x64010100, @local, 0xffffff00, 0xffffff00, 'ip_vti0\x00', 'wlan1\x00', {}, {}, 0x6, 0x1, 0x2}, 0x0, 0xc8, 0x130, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x81}}, @common=@ah={{0x30}, {[0x2, 0x1], 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x2, 0x3, 0x0, 0x8000, '\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup2(r3, r4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r5, 0x84, 0x16, &(0x7f00000001c0)={0x1, [0x5]}, &(0x7f0000000200)=0x6) listen(r2, 0x5) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0xfffffffffffffebd, &(0x7f0000000380)=[@in={0x2, 0x4e23, @local}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r7 = socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r8, &(0x7f0000000400)='!non_existent_event:mod:', 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x19) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x0, 0x1, 0x6, 0x401, 0xfe226735, 0xc000, 0xe9, r9}, 0x20) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r10, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r10, 0xf503, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) syz_clone3(&(0x7f00000004c0)={0x100801000, &(0x7f0000000180), 0x0, 0x0, {0x1d}, &(0x7f0000000440)=""/118, 0x76, 0x0, 0x0}, 0x58) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xd, &(0x7f0000000300)=@raw=[@generic={0x7b, 0xa, 0x1, 0xfff8}, @generic={0xb7, 0x2, 0x0, 0x0, 0xa}, @generic={0x85, 0x0, 0x0, 0x0, 0x3e}, @generic={0x79, 0x1, 0xa, 0xfff8}, @map_fd={0x18, 0x2, 0x1, 0x0, r11}, @generic={0x62, 0xa, 0x0, 0xfff4}, @generic={0xbf, 0x3, 0xa}, @generic={0x7, 0x3, 0x0, 0x0, 0xfff4}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0xb7, 0x0, 0x0, 0x0, 0x1}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r11, r12, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r11, &(0x7f0000000640)='\x00\x00\x00\x00', &(0x7f0000000680)=@tcp=r0}, 0x20) 43.910236698s ago: executing program 5 (id=2541): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='attr\x00') r2 = syz_clone(0x80020000, &(0x7f00000023c0), 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012dbd7000ffdbdf253400000008000300", @ANYRES32=r6, @ANYBLOB="14005500b9566f6833ee2ecacfa43321ce6bd7280a000600fffffff3ffff000008001f0113000000"], 0x44}, 0x1, 0x0, 0x0, 0x2e0080a4}, 0x20000010) ioprio_set$pid(0x2, 0x0, 0x2007) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101090, 0x0) chroot(&(0x7f0000000540)='./file0/../file0/../file0\x00') mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) chroot(&(0x7f0000000040)='./file0/../file0/../file0/../file0\x00') pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00') getdents(r1, &(0x7f0000000000)=""/34, 0x22) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bind$netlink(r1, &(0x7f0000000500)={0x10, 0x0, 0x25dfdbfd, 0x8000000}, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x80}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r7, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r8}}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(r7, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {0x0, r8}}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000004c0)={0x5, &(0x7f0000000480)=[{0x1, 0xb3, 0x1, 0xfffffffe}, {0xca01, 0x8, 0x9, 0xf}, {0x2, 0x6, 0x5, 0x5}, {0x4006, 0x1e, 0x2, 0xffff}, {0x7f, 0x8, 0xfd, 0x4}]}) write$qrtrtun(r1, &(0x7f0000000040)="121d672be0e65d", 0x7) sendmmsg(r1, &(0x7f0000000a80)=[{{&(0x7f0000000080)=@ax25={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000100)="533f1bcaa9f79813caf075", 0xb}, {&(0x7f0000000140)="a078a1a14b6245218641c1b0441c14980b723a61f53368d559a33b663ac1daecd9f318c78d5039c276e3db4fc0fdf973c53044d2d9bf3e8afe7ba5db5d72e8ee5e9f3f4a75ab80e7aca5f9e46f347c2b771238ea6d86ff690268b06658526f9ac2b60df19f46bf31f883e86976c220a6463571a47751446f9b6bf4b1317a3d5a309ce3e226c9f5dcb7ae0043e1d6ce2e383be2812f5d997b8beea1fe32f55c4bc578f452dd642adbfe4266e5e5f5242f52e551405bd89720b349c488f2bde7cd5b915628090592b3e75e5143a21ccbc25305440e19219be2464bcdf26c87e6adef598216ec349384", 0xe8}, {&(0x7f0000000240)="e2cf384d10a1a4806f223d3dcb327c78182fd931a05fd695cc1fafac3285bb3a27c29c976241a663083dbac0630046001efd8beeff73035447d6e93a5a053e309f29a7664bcfb2878648b2d2731176115a18cbb169ea8ca0b1218fdb311ab82bfb8554000bff6e9f60588feb806dbc1f257aa64d1417fa3b910cfdb4c84e8170512d619c7aa1f596766d58293fa71b93e5770b8253fa87bb0e1b5267f8c0c9234d1901a1b8da16eb7d22e202c975916c8e7989af6852f378c5d88d1349df34ad8a601dd12250025c6df7bfa2e487a469adada91d26375fba4d626d3901399f0a18f42ea86f75fa5df6ac36fb7814b87a85c9c3a22086639a75", 0xf9}, {&(0x7f0000000340)="2668c2c788685b73663bc1601af23c6b470dce18b9beae763f80916c80d7d5597e3a5593875ae0d71b52e54ab7b83c8f74bbbfbb0b95b1c5afb749b9816f689aa7c08cb7511a1a9076c220a05f7a450b24d85982b7ebc27f6e2df8dadc70985ae55952c0535a657136743eccbc7cca867345e5a8a014b43ca184a10febc39eb172c12f6c63428f3e5887515c30c475d30d6c8ae7aa12084e756ebabc23c6a71a9f22836b54e2717e47833e5995cd59dd667465a580c002efff571a616029a2caaf6f6f76dcc2f5b4267b8bde", 0xcc}, {&(0x7f0000000580)="f716b28f9a05ddd0b893d95df3fcb3b6f19a676f0edf6fce50645ca904319ea6ddd56c2d503c933288d80b58dd83bfa212b22615fc5b5c98f1da5c69e4cad3726358140ac1f97ec5a738de30143e7e1d186a8a74b3feaee2ddc925d2d2c7586ef50cc8fedd864441ae33aca90d53bd4aef77d30d025d28617418b4fb57d2a30a4be1f28e7f23d900c880cf45368c930dca85afd23b52ef39d32013ae67fd1aae648c61d16bef2c8c06d10c090aec6c28fd0c2f800d6b3cab167e47e8a94da58401b2b9c24d69ef318fb25cdb99321affcfd84c9d29105179", 0xd8}], 0x5, &(0x7f0000000700)=ANY=[@ANYRES32=r7], 0x378}}], 0x1, 0x2004c080) ptrace$ARCH_SET_CPUID(0x1e, r2, 0x0, 0x1012) 43.454944011s ago: executing program 5 (id=2547): r0 = socket$alg(0x26, 0x5, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='0123:abcd:a,4567:ef01:m', 0x17) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) r2 = socket(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x20, &(0x7f00000003c0)={&(0x7f0000000080)=""/72, 0x48, 0x0, 0x0}}, 0x10) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, 0x0, 0x410) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x25, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write(r2, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) connect$netlink(r2, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) write(r2, &(0x7f0000000000)='\"', 0x1) socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r1, &(0x7f0000001f00)={&(0x7f0000000280)=@nl, 0x80, &(0x7f0000001dc0), 0x0, &(0x7f0000001e40)=""/156, 0x9c}, 0x142) recvmmsg(r2, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="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", 0x261) accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000003740)=[{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000300)="ff9ff65da38f193600bddf2c4a38436038de44a404a4039e1e7e745be932e9f2b8b8bc6f7f28cf37fc790f26484171b8bcd5c3c3da8e68b6d4933499dabec011cba33adc3dcb01ebb012ddeedcb69356fecafa587d24bd9aa8c9f715fb51c43485c9e6084e22810c16d5c45e", 0x6c}, {&(0x7f0000000600)="7fead2cd233eef25c2448cda053e8ced772f82b8edb80e35e5bceb79692868ada217c096863477dbf8a0b5b37ef10ef8dae09bcef7f2206306481996d07a5c0972b1fff1a21fe6c67b7aa68deb9665fba5ec18d113215cc51b0fd8796d8f80f3c43a737f3b47bfe59b2eeac813b5c1acb135c0727d97e7b6a975db78b10424fee28759d80bf90d50a8902e84131b961d3b9443f3b764837426e762d1cdea031b2e06ecbd075ef9a4b63186f9008e7c3c8582e0695df6cc3c1795f2662bcb30549579", 0xc2}], 0x2, &(0x7f0000000740)=[@iv={0xb0, 0x117, 0x2, 0x95, "b0ecd6729d07f9216c68874b6420bc6dfaf91f132439b466794d9dfd188d2486af4e445ab6108f707e338112b39c92067d2f122bf9f7dec0184e3f5ff1a6766dbc0dd590604faae0ab69d46c372a75e766885ab96af80e2baf7dd82063222b5b69d2c392bbe663e53c6fa9a6958c816d47f52226823758dcd8c54bca71f96394d25b5397b6e23a2f623572d4bbd6b4a4cb985768e9"}], 0xb0, 0x800}, {0x0, 0x0, &(0x7f0000003180)=[{&(0x7f0000000800)="299d4db833d4d7793ea7f96121d9ff8f9415b55d0b0958467f1b4c6f0f28a188b77762103bf5bc69ac8f2fb3f4678daf00af7f79b22edb905b8333259e98bb1efb36f6e0130b19125ac967d329c0373684edf566a0ebb48f6bbeef4a27c50435df4ad6fb84256081938f7dcc0bbc38e9779bed4e061a9971a6f44184aecc963e4a20661843faa0a8a75b876d2d70a5ef53f0a95c772616589f3024fca46d152ce0d079d00aaedf1975ad69361dfcd8a2c1629d802d9746c6922bbc", 0xbb}, {&(0x7f00000008c0)="9428b91ff752b7b55d2e23170c7bafb16f727ab9e3066a0224b94a1b1510ec3821d3fb8c61a2ab5419947b6faba81fb126eca5ba1a35029612aafc77e857725da7768865ad6c9626fba5ce3cabcaede81a6769ccb40d4fb9094e543647af149fcb0e886ff6512c02fb79a985646606dfa2fe912a286202dd14a32f2809d641dffdf3aaa59b974ac650375576920b9f0c273c12c070695f4f52d9f8f5f7519b3d75f8e33523b5d81e829c451433cac3d9c92934c1d230d4901e6ed23c20ac501ed8ce06b2303041be7f1de5cddca3567bb79a5a792652d64a599a4d5d8c0d672eff212cd9738ac6d41ce394b6c51762cf384580", 0xf3}, {&(0x7f0000000c40)="6dbd12c5af269a40a9bb04d1c32dca25cc91b702338d25dc0de22d488e326d9450d04382b5d36550d666c2ffe3f8ec65181d9eb6c0c84a273be62fff9414dba1019dfa8f01377d81388001d0cc5024eea13ac0879263ff4311dd56b5a238e2858cfa482700370e6e5da9cf7d4ca63c5eb4e4468abc9c2c69d596d623ea6135411b9dfc5e0e7be1b7fdbcc2dd2df45f9b36bdb4c947fbc0613f2a79ea719483d4dbe15ea62634ea11fd9dc851d95f79a43e37c89180f156182b9bcc0a0d99932ebe316401b7928442f3646181a097d20d2590facbfd01ef1413decdd87e852ce35f1d4fdaa018f27b3c119ab2d050593a", 0xf0}, {&(0x7f0000000d40)="b363b431b6ce9e64830e213f14757b6488a18401eddd6705188f5771cf15ce3fa5552cf2a5fde1a47b6db17cd14066035ef77512d4a8a4217868f54bb08ff079ebdd3d4193c17b5516ef8c55648b2e753ee7e4c4ee95511210d00de5e6", 0x5d}, {&(0x7f0000000dc0)="703c6b6e9a7d1022c2326ad15285e80153b34f5dbd36a5050fd5998a9a3bea296c3e0db2bd20cd1b49372faca660d89e90a5d2ac19a1f66ad2b04c03e195343177ceb923006924a96798472962314868b040305233bfe6a102501f001afbd6872ce2d1ffd8f91704311d8e6dc85d47861dc7c7a06bb8f6a9557a03eabf30b9ab0e871cf88a229562f2abc9f9d4eb3a342af306d730f311d2787e191d77a9af54a45133249187634eac7341bab989b1c956a95b06ccf3", 0xb6}, {&(0x7f0000000e80)="b931d61832f717aa9dd44fc4c6a79039da62874560333c11e275d843c3d5b0aa2e9de2bd90bf83e82bd419684f603e7bf18f4722fbe88ac6486a4ba8c2c19c82ef63161b38a8110a", 0x48}, {&(0x7f0000001f40)="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", 0x1000}, {&(0x7f0000002f40)="e9340820efe9a5d3ae77f369ee7c373f4d7eb3571172e53ac5fb0d1090f83964a47eee157fe61c97a9f69c9ef7b44884621335a7b1bedd122522d74fc7f4ebf2365459eda84a98a03288e4ad76d7a45ccd8cc1eb2c85cfc4e694be29978ffc3c60e4ee93bcf5bfab9f71d9f73390de1975665aa4f8e1dc238be852", 0x7b}, {&(0x7f0000002fc0)="a4fc3643228f42e8a3efe9d5b1f2a7d28a4f9e63ae8f7387819945e1557ca907bc255c66b1001b33a97e56a2fb454b787d62b612f14cc4cab71e0c9f13cb82c46468cf9093873f163a5c579408b166aaee3b17f8b6b84b52733bb20adc2d5eff25eb3e06b630d0407aa2bd33dc265b95291bad3b781067e60b39083ce80064b1846f9af03b89027d2c517108959f2959d475", 0x92}, {&(0x7f0000003080)="e0b977a6f25591cfd1515d929f1d7b93c7ef8c78782d26960cc7e4f7f77e854c14846c1329b749e7dfe03ae0f1c954eea16398a29b8a9307058580f9527e57534e19a671d3ddf2fb28dec91895c7fbb115447d798a66e4ba342025a629ae8d3c21ee98c2a317f64c5f161f6c869af427fb479ce483d03076f68d2f77893bb300e176934e897c05fe405224508c076a87fa2453dc28decca3b71093f291928795598a20f08524f5a7f018f11488659331d8ba8a8f9790247eaf06016f798b2eaa1091bec7cc266c390c4a48ecc8cab473cffc0321c48059ce52644830e244f5f7c2fd748ee51a9951abb95aee906b549347", 0xf1}], 0xa, &(0x7f0000003240)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x20000004}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000003280)="4aa7c8ba6136b1d4f8c207b9eacdf608f4aba242d7296afb611d993c652de9acd23fafa8cfdc00e4feacce41c12fa189ef871e4279ab7e5eabcf3e68292945fbe38786784237bf79204ad05be9a5160866137a53c28729b83e8673f44b2d59894ba89da3bb070a306b99b39543135fa3cf", 0x71}, {&(0x7f0000003300)="d9ba25ae09a5a7803deb7822addd95a0a92b0f34801160b37417f6801d19c956b480f317c3bc9cf63b470dcf5376811b514f4acc8ff6fdecda80f70b8aefbf382aba96ad1a80e328d541abfea6bcaebdedf834aeb1a2d75fe1dfd4978a2b7943e6567e9d66a6d6d67859216e8c48f5f612f5a6f2e58715de9c2336bda5a35ca0581134f2b70e6c77249bdb3c124ccdf47a6cbca7d9a2bed0b4382efc", 0x9c}], 0x2, &(0x7f0000000f00)=ANY=[@ANYBLOB="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"], 0x250, 0x48044}], 0x3, 0x40800) 42.965998801s ago: executing program 5 (id=2549): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208402, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003600)=""/4125, &(0x7f00000010c0)=0x101d) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) socket(0x400000000010, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208402, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003600)=""/4125, &(0x7f00000010c0)=0x101d) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) (async) 42.903829925s ago: executing program 34 (id=2549): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208402, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003600)=""/4125, &(0x7f00000010c0)=0x101d) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) socket(0x400000000010, 0x3, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x208402, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) (async) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000003600)=""/4125, &(0x7f00000010c0)=0x101d) (async) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8, 0x8, 0x7, 0x4000000000000e52, 0x800000000001, 0x5479, 0x1041, 0x200200000006, 0x0, 0x400000001, 0xfffffffffffffffe, 0x100000000, 0x200000000000001, 0x40000000009, 0x8000000000005, 0x800040068], 0x54000, 0x547d1}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) (async) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x8, 0x0, 0xfffffffe}}) (async) 32.028975741s ago: executing program 2 (id=2679): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async, rerun: 32) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (rerun: 32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x15}, 0x48) (async, rerun: 32) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x2, 0x7000000, &(0x7f0000001580)="ce6c"}) 31.918913156s ago: executing program 2 (id=2680): sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) userfaultfd(0x80001) (async) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x463}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="9f576b0000000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x4, 0x400004, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x0, 0x4, 0x400004, 0x7, 0x0, 0xffffffffffffffff, 0x7, '\x00', 0x0, r2, 0x2, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xdae, 0x0, 0x0, 0x0, 0x401}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) (async) r5 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}, 0x1, 0x0, 0x0, 0x24048044}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e000f000713c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f40000000003", 0x2b}], 0x1}, 0x4005) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c00078008"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000000)=""/147) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000200)=0x2, 0xfffffffffffffff2, 0x1) (async) mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, &(0x7f0000000200)=0x2, 0xfffffffffffffff2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0x7, 0x0, 0x0, 0x1}, @exit]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r8, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r9 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x8c\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x1, 0x0) mq_timedsend(r9, &(0x7f0000000280)="1d3473d2743ca6992524206e44299a897f96c774110c07fe7ec406e0d0f19f6e751d150a5667", 0x26, 0x4, &(0x7f0000000300)={0x0, 0x3938700}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r10, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) getsockopt$inet_buf(r10, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000e80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000740)=[{&(0x7f0000001dc0)="bb", 0xfdef}, {0x0}], 0x2}}, {{&(0x7f0000000580)=@file={0x0, './file0/file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000600)='z', 0xfdef}], 0x1}}], 0x3, 0x0) 28.892646405s ago: executing program 2 (id=2710): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x6, 0x0, 0x0, 0x9, 0x3, 0x9, 0x1, 0xfd, 0x7, 0x5, 0x4, 0x0, 0x7dd, 0x7fffffff, 0x4d, 0x6, 0x2, 0x5, '\x00', 0x5, 0x1}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x1f, 0x4, 0x50, 0x0, 0x0, 0x5}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008280)="cab1f92d585917232bcfa47f91900c936355a83b5a41f6f43bd8b0d1a1e13674b6a8596a8376e6851e0b96decd071d92ce4887ddad2b82183858d82c7d11948024607d92ec0f1c23a4e755f29fa557d1353a3ced680f530e822eed64b4d1aaf20d1320f3583cadb9dfde95993487f96bc290dc10cfccc5ec8ea864590fc1678b79b0a36c9668b27ae142d22c305496881af0d0546076ec21e31bdab2465010e779e7140036d2b12f59b971792cfed8d07f0b8ae13ee944268f573ec11c1b14d53880a64fd2fdbe981f4d9af8863191efc03a39d5a3f19badf65dd49443297b38bf0c009eafad5879cb78e63b00e961de7d7180941f0d1e87a2635294bcb4619e9d84be1816784325d23fcb9c66388b586c8e719f3edfa2aa37cc3f6511add854c10fe546d1c11f11eeaff24cecc0d47ec8fd336ec08470f06227e4a9410074a3d715eb6a697b04bdfeda0b6753d880d012ef8fada7f4ed649ca214609e31cace9a33937813012e4c1b787d8f71ce9b495a69e5c8810ff9954b7b96743dcdd7e52ebbf526f339d3c8ad2550326d3a396de5ac90787b352feabe013c4044ca813344c97f836851d6daf2de3a8b07a61d1052bd302a641706af7629a042dc2f0374671b287f1325763e1818beba9f7cab9e25d6f8749f7dea4c5ef684723d33938aca32e19b1c6a6237d899fb397e9023764b3f4d6399885533a802e4d3ca76f2e0234ed6d7257f8cebddc900af88cc21ee2816513045e92f71fc8523894d684678f17b5fdb4adeda98fc019c0ba05efeffeff3bbda1d6d84a98002a74237cb8d13cb30d8a9a7e47e4da8273a47df4e6ea53036b5b154b9597e6eb00fcad29ed04a820b1ce807bf1818344122a6f0aac52d24426feeba0af56925cb4a1e70a84251f2b4d4693e689518a0e159647b5b60a62db699a25275520c208652ce4401bb5dcd633e7c889758d3d213f4dbe69c9bb76e80b6e892bb5f5809e042ee5cb1982a2373b1886711d1e68d0bc3d4c9d69ac605432bf84cd81104e77c71cd7c0708244fc9428edd52f8cc8f3023b4c6d3bbad7a9b874111098c4652b34c428a8f789c5e5f3f84354ab7afec1a7b11d2a34771ebad2f15c169a61b431c8a1cca9ca1596fce65242d03814ebf977da9bbde5707b22b5002cce68bd0f6d196df341c96bd0cf0916b8775e75021663ea82c99a90b844cc5f8b6c56b21b1fbbbf6fb40ed0c29ee4ecc2998df2cbe3a4d75025ef73dd9f3aa5bc7aa694fe573a73453c9ff873d0a8840afd91be319181836de45260b4e252394edae58f840858a9b64f0ff37bb1820031e563250e62ceea5a7c4d2cd4d5d10e57176fcf576e774920db06b36ea02f9cae9c1087bd1866fb4bcf7fbf393093b339860a61c61248000a2a1bbc982fa691e311fa1bf2a38afdf08b574eed0df42bdc30c3db7cdcb71687f48070077f91fef93e8e47e248d3e53e8a79fcb5a8f8aa39b3bfa2dd88d5c5840d517ae8c132d423a37a8be3301d62a99753bc72f674205a11850e045430abbdc4e68223a93c76d6d2f1d646af10a15705793e2fc5a532af3dda88f52063a091f1f79cd5a5b23ea7742b149eab1aa43c21c2f15227a1f94b5580adbb1e1c49ade49d6e8b838cff43aa2426651817f479252c8ef7af9e4a5ad33839be6c15b50016c59f13c26cfca796cfc01207acc69e9d3952f6e71c975bc77d5a001f6f6c044770f54d86a4518a4898e3136988d643dd2de907859f0b4d4de2a2d461ba5e05cff49eda86772799b2e7947fdbb89fc5b0347e87f1b9dbb94842cc1457d07f3e0c41342510f5ccb551cdf0fcac1a758041bff75812de1b2abf341ed5f667c9b0581d2c33e0b17f1b46c2287399c62252edb9c1cf2b80b7a1b4c3c903aa4cf5332a2998b9072f61f589ae5df1168f8d18e98fce2bec1d5d876f9757017b73495a4e8f4f2423cde8875aa8c95a9ce180cac6690657b8a70e5541d5ef46575cd74e063759fe4889f4d9737a6c9732f8b7f7836508814093b9bdac5733938e761b3642910d4df0b646c1b9583a502246988e9ab78de3d011e8590e48eadfcdb70c8aad6dfbe1dbd3ef20d9ba393db4e6cf91e3bb4e84883c60dc20ed974a5decde12d3c5a1c9a00999f8eefc244465f518425820b9713cbfc6027f427b9cd8756edec5b3a0301a01ebb12c6d412ee3422aeb8b291619f62f4ce41511156f73e54b5097051ea777af7cb73b36e1274ce1a3892007466cc793eb0515b8984acb99c04c7eaa51e175bd73d99bc0c67c8ea84d808a7906a6ad330ba2c9651b2ab82d0781a969873dcddb068c15b7899fd560a1c3d44b34e81cce079c46fd86522052659e2c3151c79a8ccab1dfcdb91f53ca067ea1b2aa507278e4166e817eb0d7dea67cde1598a1bdb76a8caf82add2b43fdd10bf80b0d2f32365849c425d6ac3d2d88a76378d23961eb96c8422e785ea61f33e4daec02393d51f44b177755749fe84b43f5246d20177800af05752af524265f34f62bd5167fa647d2118aa905a1af53f07e7447bee29675cc23f547339af140c0818aa974ca16da33e767d508e4f56726c7076acce57a9957d08348ef84a39188e800ca44682fccaa9ee1b42e1aaf7738dced1dce3ef2dadfcba2863f36b5f8080ed22539b5176bc2c57e52e4cfde659c1ce9e179c79f85d60ca51c7453dad593190b19a1be8f5c5b0249d70079f10f9d0f07f25a98bd95e6e6f71101842b55347ee008d58522e8f7598c1636c58fd20984a6bb17fd47e7db4bc72854054e7900cac4174cf0b4eda2406842955fd8a2ba00ea4d490dbbab02d659cea4c449d9ee37c8f35daa4740b3273693ee2c1b00965a79d18ad98ae92bf2e1ea84ff1e6181937d38765cb353c6223ead1257d88a8844cb0be17aecc2dd56b78dcd6e2999fe695db248dd68275a5ad0f223a4629b17a040a766b2bd2376d77a422375de14a3daaf4fee92f23ca831452826bc66d0cee2049acbde07bdbb6ce228147f9ed4f9437301e8ca9e1ace0684700e9623a1534212d4c557712a3196d86c86077e97172d7e89436e95e1d7e7629d5bc908e346e504839498890210ca15bea51bb2840f1275d36b99490ff0706aa3ca9e89f33fd99df863acc3bca504c15501ba9d987999ee118f47b7737d2dfe73ab257d680f983da1f5fd5975491ad966989f7b15e76e4e6b1a2987801adb3b7cd4cb1d2c9d0454429c2955643c8fb82ccf8e93051cc10081f8181af0d143deee686f67ec42db1e9914ed047e4bf0006af01028e3839451fa3e17d33586022c63cafaf6d0fc773c96143473316988d32f9943d7477604a27ae4b8a7093bee2cefe10cc02109c748d0676692a2411e5c3b4c4c1b9ac7f9b71a1a7126dacf4615e8c9c3d38f536e8b32e37f406b3dc44db80a00d6e423deec869edb32a411986be1517b6ea45e1f984a6fbd08edb25a305122fe5a90cc46af48ebc36433a1f27f43d85492ea60fd2f43125e7328da93f7aad97f97910112fed7ae7b1785822356a525df1f3ab4637b68d92ecd8d7f234973c686fb11821bb1de5f8459b57892f1dae08aae1924ee60a904d7be6e6611ec3d00002152ab7e0c29c7bf124dbec9a6eff25e619d89c27d187e3ffff63c996c33f4b7e967b607f36a8ac8dba6beb43395c9c9b2e3e36de29b07f9c2d60cdfd1d02813d4e508c56b99405b752758a01cc25bb5436ea1efd52c536fa1d2fb1cd9b1ee006d42b58600be2c1aba59c480cb6e9224d7a4df920598950634033087d3e356f35cd2f8b021d30f4ba79bc60eb6715c6c9bed84648552395cffa97c8cdb8f562f8f127f0e6f86dc61fab11ff782560d88cf2872d0e07a27f38120a0831a93c377298c2ed4fe180eb078422e5f030540fd21ebd414e6c42f1fa5491b5b8fdcada476376732edbfd66e10a475e2c0a43ccf6a41f7879f4577e987695d8d5097f6920fbe2b9ac2cb424de7afded1b5b7db89f3612c487770d58a7bb7517f1fa7a98ff6db3778d40c5f36b27d233a0c18587220f900f4a8e867e33e24c1981acb3445de995132d8fcc58f79ddb1475ba69c464071e95c0707c396c0b1b710cceb51efba5f30a271cd456d5f7216d90b412156ecb01dd41f15ac31980649c5eabc7fbb085a38318d43b0683cba055deb9dde4dc4584935473508837c1023993d50b434b311f126df6a0be0653b97a97bbc9b165098dac8dfd6ed6f033ccf7b32cfa3292296222aebfaec4dcd5066b66be45696067dfab907e2984f1bb6067c170e0617e245c9c09a85a061c4b7e2873ce0571b48d557007d5c7ddf5cc2ffa533e2a3975f3687a6d08a09dc1d285cfed129ec887d70bb5aded429b676c242d57c8f36721bf5732b1f25eced0ffedba7254486c9caab3fb3e0ad3b2dc332a06dadd39e5483a314b1d3086cc198b6b6b272fb56e35e0388b1dcddd484fde0ef9d855ca7bd98ebf0f686cec7d5e37f7b5dffbe4ab28c4422adbaef0c45649b0b830dfff90bbea3b7103ea9dd87d856ba7c5bb485319eecc71acc943c733f489ad72e13b1b232cd1eb4ce87917daad4b0405c9905f7a35501c75332d9acb36057715a6abd0958061fda860c00000000bc9aeac4f47acd022927c381012150fed83a99c2d7b268ff2e1c8d162d3feae2c5bdee747aa10566a94f13d4e1a00a4043bd179310e72ec8e4c68659be77907bba82fc416a72c0d2076821f77e8afdbeac769195a01515ab45ba73ec85a2f8a52146dbbc8d585def095aef4e4491362b596a84d2e9fd0131de2c72b71c4bd239146011eaa209957b2bb3f74bf2f42a17440749688d66a18a9d4a7d1e2bbb34dbb2a45460e69a1ec43467665c59438d35fe9b04a94e408ec4bcf7ba1a25bfc287d6189b65711904be9860f8a68d1bab99eed54890f963caef1fa0179224b650f090f67dca59f1241c2a25bc921d522f61e57d2bad88c057d3f7729499a0391fca3a62b27cc0a9b976da3eef333d88ad128ea757697ffdd50633b66b73ea3ddb565bc3d8780f9c0bb2347551969aaa500e7c030da2a92eb3f78d88b91eb547dba2e9be7ab2aa617f0890c39c73c8c2b35ff7ec529f6b8d08e3fcf2630e454bdb6474185ae72ba69310654c9c0b3ba158fe223954e1d46f9d27b0a4e090b0084918b2964bdcee31d258325b89ef96790ed1df4842b482023f1d22fb3e01280f1c8616153035f10bd65de57c1fa7d5a17e77b12e348bd3019092ef548c5249694168dd24df8a7318eccd779da4f547e9f162f484eb3ab9f5bd196f6b68656725d2624b61d09f73586753a1fb7eeb1721973f8e15522487f1dd1412b0f4846801d1abbfe53b755f15047981b162a1de04d52b4d4762ac877e4d718619e8cdba16df688fe95bdc9a1ee99c21004ba7e72985752d89d6892a4169296703fde314457f014ed89c129a4c83b5bee0bb93cb69a83313442837bc03679ee317cf8d1b908b70fae1b1461a398f310ac073642f954ab39e0eda329a94a5c12cf262ca4a25831dbc10aecf83d9d54776c379c230bb488cd6c9295bc31cfab61eb9b5486726f5c854db8aad2642d4468643f3bc8b25cdc9fda7aad04b06b61b185868a44acd46a0bd8debc1e431f19aeddfa3d0e480949bd361f6c988744acafae954c140192306c3066e8e434f70e8cd67b65a59923d166a95ca5e0515e2059e1f1aa9a74bfd49e4e37638bfa6b6117b790c4ec7f536d046c38f8ab6eedac1713bcb8860a18cac43e9add3c68c3ce5d17fbf76e966afcd3ed7795540650e093d39926f5e3719156baa54307b4f5e934f24951b3644a7657e798525d3f1207b28527a5bcdeb33e296c6c0e9e1757941ddd24a0d15c9a21918514a3143ef3fc2e775345ea10aeba6767686e9cfa646da377e88fd759a33ff20c9b258fd37d063d02fe22f090c5e324b507cd3bc42248a7abb2c7d0b1b85ecb5a67bf53a2f25d139ea523808678942e1588fd677df161b67b563a446a2cc69d9126fbf308258a13fcd6f53d92d9947311e3de4fa5acd7c2684d9eb3b4feb024e05bbf090836d92e30b68df6a7619542c9acbbb69dc73c781bdc7ef4b25c2af77186f493a5038a56508cc56b7085e13f4264e02a2a3bb515e15301371520481302f2367c883a5ac503ae4269cbbc8fb2f0f77ecaea7b8af04bc24aa90f677a72bbecfdb225864714344a8fd1c07ef664abaefe53bd76ba12c8bf45860a316812af87348682ee7005ac6a00523f4313102742ee5502d8c61c3321d1b872780192f4d00b12b38d0aedd34619c42f49b81d7bddc4ca481ed8f448bc3ad98b13f7176748838d623e007a24948480e978b80ce67ec952eca613091ad4f81cd521b2851bb8b2a6b1da0420eca80aecac9c0887988e1f29906c9ce65b990a00f22ba6f115a7a0001f511ec35dbcd401130173fded8b2e23365caf3d6d7c8f404383f16fcd76b17c220f88c1fe96211bd92c5803c63d9537a2ceb258508d9b1d74ca43174eaefd677ed6db63bb3d7712c9558c7879fbe67b7396c721407953db9dad13291f96d7d0290ad56cf1f65ccf58d3f5b8ba1f78f81d86ae0ea50926ff352d73629da44a6d31598dcdcf81355faed4f5a6ad8cc39d4a414b97f193c896bd3c270097cc96e4a5e36ca9a56a27c52a03decc4837d7b008acc1fd2724f97e0e9591afb5de3af3ec5fc16e1bee79098cc94d638375d69ae5065bedaed575e11b1b0a4d1189830856e8d48a6c50bf18cb9f8919fd8a55ad0b2f7d8c096c7f549fec8e1522be0de2a69699afe47e899ac6d5405c08e2e374326808ba76259d85b971dcce55aceed11583603dd280fd15c8e7b206e8bade3f6d83c6041838ea8b489fb9f92ab220ad5d3cd2af3f45cb2df7094d550b2cfea314469943a159e12c01897a7cc42904eeb24cc507e7ce7ffb4d22efdcd5cb5d75975582e14960fb0f2b83cb774faea32dfba7ed0e8b6a749785166cb5c77dde7498f67f7f20d0b85a7fe6e7f8a8e3f95bd795165f36440d84434cef17f81697816030e3a86bf003272ca4868ab935fa0d465fb10637a706c9fd04fa4d4eb421e87aa6628a1d6174833af4dbfceab7fc5989550c0847bf27a5243e3b318fffde95d11cf507bc4e092180dd228df9f89d193a160d50c223309eae580a09f2e78855f17f8ad25c1f5814becdfca7948c7045b242e22d5efab676fe717eb34d2f0fcb77289c8b12caadd2377b7ccdcfab61900971b4a2ac132587174117428739ebb109fa133e483956bd499dfa530cbb3d1df42309f6f0755b043d85776807f25c3b4b518a2274671eb38f3e82ad4397377f85201771877a7cc43b838791a4d4d655ecadf03d8c1687e961c83dbb64c4d54d4b745a3abca7e381a00c6f51f48f6f7ce29ec656d89a1fab216675febedfe6b08c35add5aeb8cf6c0b226d309a222e1783e45e560f6ea64bf7706787f199116341f874321b52b1135830ab8979ae5546aad4ecfdac0045d4d15b4ed2fe26e484793db6aa61d40333355fa96ac5d1b8a5b5fc033475cba14f344007bfd82deb64b5c2eda6c0d528e4de0c21802d6b27554c0e2090f2c4ebd19208ce904cc02756b44bb2f8ebc1d37961c0957a4815487cbf76fdbe1f2b77b563a5663a00952c92579399f7acc1d41d9289ea0345f02f6f760ced802c8e0b14760a43dd04e6c371ceab9f5cb3617cd7ab31457b6821c6a4f34b243fba61f5c553e58ca253d5723382cf5d3f8357347ee2af2d48d86367f993e4b80b849dd3f50b2a89338af97e11b9a796ae2548856cce01334bca0c558e160f16e74699c7eaefd699acdf4d5019bf70f2d9c083f62b5254262f05c01dba59b1779502d3ad310a3039447d730a2cebb1242331a9849921c07336e985a844c55ce6129a650b3fd7cbda52a0cfdf0ef566f24adb8c959e442e9d5663fa16561b185cfb18355863d9b9f91c3829c4b0ba580668402a7a100fcd4a4e901b660863a9537f46e4f36446945e8f62e53e8282ccd7cfe14fca161d7daf592188eb2e11e275f616f4e692db8f318e8fb635d1a2582a3c8ad3050995f4cd810c04b23aaa6b26a2276133b443280f0526c9b1c016a7fdc052eff91d167b2813ec4f868c2da5fd9568da148e0ced0229f415716c1caddba880efa2017a82829125e734b96333da0b15340c149b50be86e3017bdaae3d80ae51c35df37e67684e81b5933cc7bfbe7ef0486d57e3901f9ae3eb1d592eb3fc244ce6555d3d69922dd3dcefecbba207fcbd5144a5ff97bf2216c046348a633284db59c10662350c7484ced762f353cd01a971c88d0eabb68eef856d585e8f5a684dc948b094754362ba8d606f85a755a27895ff5b6b4ea0387574afdf362a43b5535a2838b3f00f24612b9ae47e95f15d8b828efe56152d77871cfda0e0ff9936db3fe9c49f0d0f5ef9b71b81efd2e92d0166a4970254950a51235b66866d5402740adaa584e892572a6f46714704660cfbcaa56cc27cb538a908d1ee2fc7adaa674ce7a717f6e0481a2374f768fa3df8368bf4281bce6f9777f958f36502908d7c921ba745d0cc16b8a9a67f15c26d4b005788b1e90b19cc13f3e925fc14ef31d624c7500710d8f80e5bd4b14dd6bf70c210db6077c69d2d1751fe999442502d3542be12b732e3793e6c5e5c33a15a792ea344b0ed0be1ebb1d4e896e3e62d8d85afad2ae134dabc4f0d3fc719c6245d3bfafa42f0cdc9c0d5c4ba5c20b9da975bfd2f211bee8589ce1dc9652c2c3cee2a5e8a00049e42afe4403a905b60e0dcda1120d32ce36b91719d6308c93dfaa16c23a3b37e88194778be77d5e9e64b39477b76b4644ca32525b73bcf1fd9dc9af7776f2149e368053c58e1c93e1ec4575cb5e0b2da61d5e6b19436f3c095cdb4af4ddfc3364975700e5ff5275f9336b8cb3b959a1cd94f6b9c3a33f35e9ba4b7fea0466edf54e5e2e06a79bd170392c02b09749f3d111ef60baa8016dbf9ba581beab2c43d094add0d7fb7e16f198f3050641255f30a57c3045c1b51dd6e5d65613167596365b9c67aaa36fc89c44fbc4c8c96c328554a63a15511b04692651dd5e30780caf0dfce976c665e7b05fa6143914837bc82fb9d9dc5a1660e28a697e8a0a32eb8db109c5a045243d86ea11847fb64ec450112d77ecba32de418629a4ea2ae3f7ed3625b26def5c19813a6386ab4e43838c1fad3d4e92dfd7d3f98b3cf46d6e20304851899c59661e9639f3ff52fa023114907d930d74d605f3f7c5fd9ebb446d807e96cf3bf3517e369dc98f489026ec035a86f3719e1e50a48c0381f7fd2a7eea1d3a09ef7a0ba50b2ae28c2c955db4761ac005226ebc0c18d108e8ac066371be249b80eed88afee799411a50381cacb2d5164f0827720eb9d11b5cc548c2e145291dfbc5d4f70646dfbca077ce8ad3a3f8c627021295cbef70f5013c53e8fce32116e678a7b1dc535d43b429d330e9193f8de1a6c1da4353a86bc722ef1cffe59a012ff9c5f45b85e55ebdaa6b36a519c544ef8a86095e522d7dfbb9cac41e826fcc4bc676297141195f839ebcd8f64599fb15856960f97bc70d2336507d5060282d0988f354eb757c6f4b0ee77e2c0889e5336633ac28e2651c98e7f2fa4c163f8fc196b6798c1400c46710abed12a33a95afa56c7fe55de0b48cc984c80f6d98d212daeefdbcb457217b3962436e481d70967cab6b0943d5da59021ea9fbebf66e86943e029ef95d46d347b834098e1c8fb4c35d15945bc2e336f74c6c80430ad5fc4f5b9c6b41245ecf151eea90763ce3e09e050ae1c0925fa7a5ddbb7f210226cdcf9ee406041b73a5988646b90ed382d08e7a147078f9de025f5617017ec70f65dd25d7ccdb47ad7209474f4ca461ca46f0afe3cb405c3b72d320016d01b62def93fa4fa5a34df145c526fc497329a9e29ce17a929893f7beb417c88804418271dbeb51115821db4737b9cc467f190209649f543675defbf95640d20cdd124e85788b703213f4e99b4f36b74b5d44b67b7bc995ba133da4ae92f3a3db49c9ec039e0285001fc16760da0d07552e1ad621a4bac6d0b6409316e8a78273b79aa70df0e3ca024336d42c530550be8c68897bfa6a44f595bf5be48f8b25b48825ebcba815db4b3124522bc71e3970dbcafd479a6dab40f745a655cc3f9dd5aeb046d25baaaa160ba21f8b3c0292329ae107483c8caafcd70d041facfbf705dda95370a91879fc0ab9132e3b7b02cad69417178c4f34909df7a373bacb289476c25c901be7b52aabfdfcb3415ef3a565c7de2f0128c63e16984e2e98ad23e06b890f22894ebeceefdb472192e501e2c791232933b52ea4b9c4e9fe3654b8b1e08048fbcf58fada1cd49ca6658ce6ecd12102d90c81eac26090efa36514553abb298f7cf1a43bd6d473c1436b6be9e87445de726cfffb00c72de49db0585d677d5b245e15f9a53b4c258ba2fd67d38afd9ccd0d409c0bad675fcfbc1f4e5166fd1b29203274f758f55a266b8f7c9ec8ef1dd4913727fa392ce6b11baf902ea708adddd836982a609718c1dfb810aee6f21e47c27dc6b4eeebe5fc21aae6fe7d2908679c873e2aa45a1ee14cd7e10586216d5e17cdbfacd4bfedf00b7ba7fc46d4ac90667329ba76b4fcc6b991a55c9ed159a2fb9525c975bc0aa4a291fdde14a78b95adcde52fcb5a893ee7b4df6631b3ed5a9d9d9ebe36c7cedea777a9e67faad7f7004f0a820aeb6636f24685a15d12abc639aab2233b36584670c667f9e7a3fe1195d35b268d1052d5b4c9625dc963640c2c5e6c37d36acc31755b34f3ee2af7b7ba5dbe105322a3741c567c9edd817f6488fe69301b19481fe2e2cf74b19d4b224598b0ce1fa151fa1ef3d69aaeaab397a5eac72e0b969a09b85e3258e891db207393bc281afa93468b29b7e55cc2decf8292fc68e1a02b2faa873a846680992b37a548c8f724c0125027faa58be5b2836206cc34c063b50270d7fc968dab0d38072ca90bdef91119b72ab417d811d2f32bd41e6ab2bc5b5293f92f7a0a4f172bfea5403cd418db95e1a4232f78f6afd3d13978e206d85fa9ebe2abe444db065d03b6169bc9f0dbfc19237a74bd13c1ef844f839b20018fdaf1be6f1a171f6f3ce2205fdcce38330b88ceba0c5eae812e12be99993d265f806e61ec42c9527287967a1c3b27afb1edc35a5d17bb7f4d20ea708c62c9170ba2ab710f2d7f5dca7b33e0f9434cf0b6ee846fc8bc45d39f252ec682732fb090f46032491155d83a30894a259e037e57de7523481bcc2d704d8d728fbdf048df30f7e4861f62b8e63de47b3838b5062ccd2c125bc581024ea76bd4b1f53057f37d329f7861a2a70fd3b6d6fe252a1b892192ed75c585ab809f702e27e237c4aa2dc947585c2086eeaa29c3ff7e02cb7d3a0aa3a8156d2897daa9c45a2e28ba14fd40c8a3a058805e4b5b10641c3c25b9ab80cce83206b13a1e2bc362eb5ab7e0e677c01fc0486aa32862ad0afa4f1cc8496b961a0eec71c26ad107ead599d8ddd59d85adceb3ea442efcf8ed64f4c66547344dc81ef5b6ac102434395203f58d59656d41dcc192774d70f4f2964e304efde831126d402a240325e603347aa43626b5eb69b0", 0x2000, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x90, 0x0, 0x7fffe, {0x5, 0xfffffffffffffffd, 0x8001, 0x0, 0x0, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x20, 0xc000, 0x1, r2, 0xee01, 0x0, 0x9}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0xfffffffffffffffc, 0x0, {0x7, 0x2d, 0x0, 0xffffffff80821100, 0x0, 0xf, 0x0, 0xfdffffff, 0x0, 0x0, 0x10, 0x200000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) (async) close_range(r3, 0xffffffffffffffff, 0x0) 28.730086353s ago: executing program 2 (id=2712): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x933, 0xffffffffffffffff) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc1) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x4, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cdaec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad7481d8cc1bea8dc978402a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8b06c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a80000000201010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0xa8}}, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x501ac0, 0x0) mmap$dsp(&(0x7f0000b31000/0x1000)=nil, 0x1000, 0x3000007, 0x11, r6, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000005040), 0x44600, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mlock2(&(0x7f0000160000/0x4000)=nil, 0x4000, 0x1) r7 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x2c4401, 0x0) r8 = ioctl$USERFAULTFD_IOC_NEW(r7, 0xaa00) ioctl$UFFDIO_COPY(r8, 0xc028aa03, &(0x7f0000000080)={&(0x7f000030e000/0x1000)=nil, &(0x7f00008d3000/0x1000)=nil, 0x1000, 0x3}) r9 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$TIOCMSET(r7, 0x5418, &(0x7f0000000040)=0x3) 28.519795422s ago: executing program 2 (id=2715): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000040)=0x4, 0x4) getsockopt$WPAN_SECURITY_LEVEL(r1, 0x0, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x80, 0x0, 0x3, 0xf, {{0x26, 0x4, 0x3, 0x9, 0x98, 0x67, 0x0, 0x7c, 0x4, 0x0, @private=0xa010102, @broadcast, {[@timestamp_addr={0x44, 0x54, 0xa0, 0x1, 0x9, [{@multicast2, 0xffffffff}, {@rand_addr=0x64010100, 0x6}, {@broadcast, 0x7}, {@multicast1, 0xc342}, {@local, 0x92e}, {@rand_addr=0x64010101, 0x9}, {@remote, 0x3}, {@rand_addr=0x64010100, 0x7}, {@rand_addr=0x64010102, 0x1000}, {@private=0xa010100, 0xf07}]}, @end, @generic={0x44, 0xd, "7754feab965d6c797856dd"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0xcf, [@dev={0xac, 0x14, 0x14, 0x34}, @remote, @rand_addr=0x64010101, @local, @broadcast, @multicast1]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) getsockname$packet(r1, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=@ipv4_delroute={0x5c, 0x19, 0x200, 0x70bd2d, 0x25dfdbfe, {0x2, 0x20, 0x0, 0x1, 0xfc, 0x2, 0xfe, 0x9, 0x800}, [@RTA_DST={0x8, 0x1, @remote}, @RTA_OIF={0x8, 0x4, r2}, @RTA_MULTIPATH={0xc, 0x9, {0x100, 0x18, 0x2}}, @RTA_MULTIPATH={0xc, 0x9, {0x3640, 0x2e, 0x6, r3}}, @RTA_OIF={0x8, 0x4, r4}, @RTA_DPORT={0x6, 0x1d, 0x4e24}, @RTA_NH_ID={0x8, 0x1e, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x24004054) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={0x0}, &(0x7f0000000440)=0xc) capset(&(0x7f0000000480)={0x20080522, r5}, &(0x7f00000004c0)={0x1, 0x1, 0x8, 0x8, 0x21be, 0xd0}) tee(r0, r1, 0x9, 0xc) syz_io_uring_setup(0x126a, &(0x7f0000000500)={0x0, 0x7f28, 0x8, 0x2, 0x131, 0x0, r1}, &(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) syz_ublk_setup_io_uring(0x1d33, &(0x7f0000000640)={0x0, 0xa495, 0x10000, 0x1, 0x349}, &(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) r8 = syz_io_uring_setup(0x3994, &(0x7f0000000780)={0x0, 0xe43e, 0x2f240, 0x3, 0x21e, 0x0, r0}, &(0x7f0000000800), &(0x7f0000000840), &(0x7f0000000880)=0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) ioctl$UBLK_U_CMD_GET_PARAMS(r1, 0x80207509, &(0x7f0000000940)={0x0, 0xffff, 0x70, &(0x7f00000008c0)={0x70}}) syz_io_uring_submit(r6, r7, r9, &(0x7f0000000a40)=@IORING_OP_URING_CMD128=@ublk_cmd_sqes=@ublk_get_params_sqe={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0x80207509, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, r10, '\x00', {r11, 0xffff, 0x70, &(0x7f00000009c0)={0x70}}}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r12, 0x8983, &(0x7f0000000b00)={0x1, 'wg2\x00'}) tee(r0, r13, 0xc43e, 0x8) mkdirat(r1, &(0x7f0000000b40)='./file0\x00', 0x0) r14 = fsmount(r0, 0x0, 0x1) ioctl$FICLONE(r14, 0x40049409, r0) syz_ublk_setup_io_uring(0x6, &(0x7f0000000b80)={0x0, 0x3b22, 0x20000, 0x1, 0x32e, 0x0, r8}, &(0x7f0000000c00), &(0x7f0000000c40), &(0x7f0000000c80)) capset(&(0x7f0000000cc0)={0x20080522, r5}, &(0x7f0000000d00)={0xfffffffa, 0x2, 0x3, 0x0, 0x1, 0x5}) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000d40)) r15 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000d80), r15) ioctl$BTRFS_IOC_SET_FEATURES(r8, 0x40309439, &(0x7f0000000dc0)={0x1, 0x2, 0xe}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000e00)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_GET_HW_INFO(r14, 0x3b8a, &(0x7f0000000f40)={0x28, 0x0, r16, 0xb8, &(0x7f0000000e80)=""/184}) 28.070921983s ago: executing program 2 (id=2722): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000002500)="00112233445566778899aabb08004500001c0000001a40110000", 0x1a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 27.950101554s ago: executing program 35 (id=2722): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000002500)="00112233445566778899aabb08004500001c0000001a40110000", 0x1a, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 12.900004558s ago: executing program 7 (id=2909): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000002500)="00112233445566778899aabb08004500001c0000000040110000", 0x5c8, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 12.846935754s ago: executing program 7 (id=2912): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="01000000080000000400000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0xfffffc01, 0x0, r0}, 0x48) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x5}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r7, 0x0) r8 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, r7, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r11 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r11, r10, &(0x7f0000000540)={0x0, 0xfa81, 0x0, 0x0, 0x28e, 0x0, r3}, &(0x7f0000000880)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb8c3, 0x1, 0x2, 0x1af, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddca, 0x2, 0x0, 0x330, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766c, 0x8, 0x0, 0x2db, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x4, 0x0, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r11, 0xc0107524, 0x0, 0x0, 0x0, 0x1, {0x10}, 0x0, r9, '\x00', {0x2, 0xb55, 0x0, 0x0}}, &(0x7f0000001fc0)) ioctl$FS_IOC_GETFLAGS(r12, 0x80086601, &(0x7f0000000180)) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x0, @broadcast, 0x4e24, 0x3, 'lc\x00', 0x10, 0x458f, 0x29}, 0x2c) syz_emit_vhci(&(0x7f00000015c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x1, 0xc9, 0x4, 0x9, "2e44de24e9b355fb"}}}, 0x10) 12.783863162s ago: executing program 7 (id=2914): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) readv(r3, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000180)="14", 0x1}], 0x1) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="020f00459befef395abbd30000000000030005000000000002004e23ffffffff00000000000000000800120000000100000000000000000006000000000000000000000000000000ff020000000000000000000000000001fc020000000000000000000000000000030006000000000002000000e00000010000000000000000"], 0x80}}, 0x0) read$FUSE(r2, &(0x7f0000001300)={0x2020}, 0x2020) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000240)="3e66366466420f388152ea65d38aa6e67fa6420f0666b89d000f00d8c4820993a46b5c1e0000660f231cb8010000000f01d942c1d20d2e653ef623b805000000b9feffffff0f01d9", 0x48}], 0x1, 0x18, 0x0, 0x0) write$P9_RLERRORu(r2, &(0x7f0000000240)=ANY=[], 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r8, 0x6, 0x2c, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r2, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0xffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) r11 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r11, 0x0, 0x0) sendmsg$802154_raw(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x841}, 0x4000041) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r6, 0x40189429, &(0x7f00000001c0)={0x1, 0x3, 0x5b0d}) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000440)={&(0x7f000004a000/0x1000)=nil, &(0x7f00001ae000/0x1000)=nil, 0x1000, 0x1}) 12.430029505s ago: executing program 7 (id=2917): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}}, 0x4084) socketpair(0xb, 0x800, 0x400, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x63, 0x4) 12.329863912s ago: executing program 7 (id=2920): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f00000003c0)={0xa, 0x2, 0x2}) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r2, 0x40049366, 0x0) write(r1, &(0x7f0000000180)='8086 1', 0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x31}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd8}}, 0x0) 12.248610951s ago: executing program 7 (id=2922): r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, &(0x7f0000002500)="00112233445566778899aabb08004500001c0000000040110000", 0x5cc, 0x0, &(0x7f0000000540)={0x11, 0x0, 0x2}, 0x14) 3.856853s ago: executing program 4 (id=2978): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x121800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x3, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000280)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x3, 0x0, 0x2004cb, 0xffffffffeffffffe, 0x4, 0x9, 0x4, 0x0, 0x3, 0x2, 0x7fffffff], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xfec00000, 0x0, 0x0, 0x8, 0x10, 0x0, 0x2, 0x0, 0x8, 0x9, 0xf}, {0x80a0000, 0x0, 0xc, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8e, 0x7}, {0xe000, 0x5000, 0xc, 0xff, 0x4, 0x4, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfc}, {0xe000, 0xf000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x8, 0x0, 0x6, 0x3}, {0xeeee8000, 0xffff1000, 0x9, 0x0, 0xe, 0x8, 0x0, 0x2, 0x0, 0x3d, 0x83}, {0x0, 0x60000, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x5}, {0xd000, 0x0, 0xa, 0xfe, 0x0, 0x0, 0x3}, {0x2, 0x2000, 0x0, 0x0, 0x0, 0x1, 0xfd, 0xca, 0x26, 0x0, 0x0, 0xfd}, {0x80a0000}, {0x7000, 0x9fa}, 0xddf8ffdb, 0x0, 0x10000, 0x50, 0x0, 0x0, 0x0, [0x0, 0x0, 0x1]}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@arm64={0x40, 0x5, 0xa, '\x00', 0x3ff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x8c, r3, 0x2, 0x70bd29, 0x25dfdbfd, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xc000}, {0x8, 0x13, 0xfffffff8}, {0x5}}, {@pci={{0x8}, {0xffffff92}}, {0x8, 0xb, 0x105}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x10}, {0x5}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) r4 = socket(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'hsr0\x00', 0x0}) madvise(&(0x7f0000338000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) munlockall() sendto$packet(r4, &(0x7f0000000200)="01154e000100445588fb000088fb", 0xe, 0x804, &(0x7f0000000040)={0x11, 0xf8, r5, 0x0, 0x0, 0x0}, 0x14) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f0000000180)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB="ba87"]) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7}, @NFTA_REJECT_TYPE={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) pread64(r7, &(0x7f0000000340)=""/170, 0xaa, 0x5) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2, 0x2}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r8, @in={{0x2, 0x4e21, @rand_addr=0x64010100}}, 0x8, 0x7fff, 0x8, 0x1fe6, 0x1, 0x3d3a8000, 0x7}, &(0x7f0000000300)=0x9c) pipe2(&(0x7f0000000140), 0x0) 3.587175398s ago: executing program 4 (id=2981): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='\n', 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x4, 0x6, 0xfffa}, 0x1d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x5c, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe661, 0x7fff, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x406, 0x3, 0x2, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0x1000, 0xfffffffc, 0x43, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x1, 0x0, 0xfffffffe, 0x8, 0x4, 0xfff, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x4008, 0x9, 0x6, 0xb, 0xa, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x2, 0x3, 0x9, 0x48c93690, 0x41, 0x400004], [0x6, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0x5, 0x1005, 0x0, 0x1f0, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0xfffffff9, 0x6, 0xac8, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x0, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x2, 0x1, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x80000000, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x4, 0x2, 0xffff, 0x6, 0x1, 0x10080, 0x6, 0x8, 0x30b1d693, 0x5a2b, 0xc, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x1, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x403000) 3.529818583s ago: executing program 4 (id=2982): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00030200806e020383ba59f629077486e1011fd462788e23da1c9933064fa1fd30529d65d564dd49f7b1bf6216071deaee78b87940015f75c7f8130eb19efb7e356a31e1fd7ff4d05c0f90c2dbd05e290bcaa36b84fa11e8ed35078d0c2dd6aebd074eb6ffe51dd6e1702959bbc39f98893f358a21159e68737b61ad3865bddb57ac5f4811a614ba88358bb4ed785284008b29b0"], 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) 2.109109494s ago: executing program 3 (id=2990): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x4) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x100) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./file0/file1\x00', 0x10b) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) rmdir(&(0x7f0000000200)='./file0/file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200004, 0x200004, 0x3}) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 2.01983025s ago: executing program 3 (id=2991): unshare(0x60000000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x9, 0x802, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x400}]}, 0x24}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000000900", @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000058000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000004240004800c00010000000000000000010c0002000000000000000001080004000000000014000000120a0100000000000000000002000000140000001100010000000000000000000200000a"], 0xbc}}, 0x0) 1.779950263s ago: executing program 3 (id=2992): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') exit(0xffff) pread64(r0, 0x0, 0x0, 0x3) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0xffff, 0x40000043, 0x34565348, 0x4, 0xffffffff, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3, 0x0, r2}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r6, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 880.074168ms ago: executing program 3 (id=2993): set_tid_address(&(0x7f0000000180)) (async) r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) lseek(r0, 0x8000001000000001, 0x3) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) (async) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/net', 0x0, 0x4) getdents(r2, &(0x7f0000000140)=""/80, 0x50) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040)="31c7ff1967ed4dd0e77cc30ec531bb5444fc39cfb60a8aacc596fbaf3c10360ba2186e8cc9c12ddcd649f9668b66389866e3d9eaace363dc7100602d9886ff6529f08921a15b714d5ddb0bf33d407332b037205c8c6f5f6f3d5bda20f34b2a0a08ed155c1dd53cfe68651417ac8d3da0f06b3bc671685a9ae742cb859b20ad7993b5", 0x82) (async) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/kernel/mm/ksm/sleep_millisecs\x00', 0x4001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000200)=0x6) read$dsp(0xffffffffffffffff, &(0x7f00000000c0)=""/102, 0x66) write$dsp(0xffffffffffffffff, &(0x7f0000002000)='`', 0x88020) (async) write(r4, &(0x7f0000000400)='0\n', 0x2) (async) r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x78, 0x0, 0x0) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000a000000050005000a0000000900022ed6f6763000000000050001000700000005000400000000000c000780080011400000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x5c}}, 0x0) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c005001c2603600e1208000f0000000401a8001600a4000140000000007fffffffb94dcf5c0461c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x20004000) (async) set_tid_address(&(0x7f00000001c0)) (async) r10 = syz_open_dev$tty1(0xc, 0x4, 0x4) writev(r10, &(0x7f00000006c0)=[{&(0x7f0000000700)="54c7130eaf1ca3dedb9d55558fd16dbda7d6738c0e2b86", 0x17}], 0x1) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0xfffffffffffffef0, 0x0, 0x1, 0x2}, 0x28) 879.757059ms ago: executing program 3 (id=2994): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_V'}]}}}]}, 0xfd12}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000007000000000000000000009c0001000000000095"], &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000008000000001"], 0x50) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000280)={r1, &(0x7f0000000240)}, 0x20) modify_ldt$write(0x1, &(0x7f00000001c0)={0xfa, 0xffffffffdfffe7ff, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setregs(0xd, r2, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r2, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0xff07, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) 639.872022ms ago: executing program 6 (id=2995): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f00000004c0)="0d000300010001", 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000007000000140008"], 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r7, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x9}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x1}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x8000000000000001}, @L2TP_ATTR_CONN_ID={0x8}]}, 0x44}}, 0x800) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r3}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_VERSION={0x5, 0x6, 0x5a}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 539.284426ms ago: executing program 6 (id=2996): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd26, 0x25dfdbfc, {0x60, 0x0, 0x0, r1, {0x0, 0xfff0}, {0xffff, 0xffff}, {0x14, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xffffffc0, 0x7, 0x1}}}}]}, 0x40}}, 0x0) mount$afs(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0xc804, &(0x7f0000000500)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') chroot(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') umount2(&(0x7f0000000000)='./file0\x00', 0x1) 538.460769ms ago: executing program 4 (id=2997): unshare(0x8040480) (async) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x0, 0x5002) (async, rerun: 64) ioctl$EXT4_IOC_MIGRATE(r1, 0xff08) (rerun: 64) 458.262631ms ago: executing program 6 (id=2998): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81500400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r2, 0x208, 0x70bd2a, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x80000000, 0x800, 0x8, 0x1ff}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000010) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x34, r0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc0}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 458.048241ms ago: executing program 4 (id=2999): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53}, 0x20) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xc}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x20004084) (async) syz_emit_ethernet(0x13e, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0], 0x0) 457.770593ms ago: executing program 6 (id=3000): socket$inet6_sctp(0xa, 0x1, 0x84) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x4000000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000f80)={@map, 0x24, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x101, 0x0, 0x0, 0xa, 0x60, 0x80, 0x2, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x4, 0xfffffffffffffe00, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000012) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 389.288413ms ago: executing program 4 (id=3001): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') exit(0xffff) pread64(r0, 0x0, 0x0, 0x3) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0xffff, 0x40000043, 0x34565348, 0x4, 0xffffffff, 0xfffffff3, 0xc, 0xfeedcafe, 0x2, 0x6, 0x2, 0x1}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r3, 0x0, r2}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r4, r6, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) syz_emit_ethernet(0x15, &(0x7f00000003c0)={@remote, @empty, @val={@void, {0x8100, 0x5, 0x1, 0x4}}, {@x25={0x805, {0x1, 0x6, 0xf3}}}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r9, {}, {0x0, 0xfff2}, {0xfff3}}}, 0x24}}, 0x0) 386.156204ms ago: executing program 6 (id=3002): r0 = fsopen(&(0x7f0000000200)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0), 0x6, 0x180) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000000100)={0x5, [[0x7, 0xb, 0x8, 0x5, 0xffff6b4c, 0x0, 0x5, 0x2bdd], [0xffff, 0x0, 0x9, 0x72c4, 0x8e, 0x0, 0x7, 0x6], [0x298f, 0x200, 0x4e, 0x7, 0x6, 0x6, 0x80, 0x1]], '\x00', [{0x70, 0x8, 0x1}, {0xd414232, 0x7, 0x1}, {0x8, 0xce86, 0x1, 0x1, 0x1}, {0x1, 0xd3, 0x0, 0x0, 0x0, 0x1}, {0x65e, 0x768c, 0x1, 0x1, 0x1}, {0x0, 0x4, 0x1, 0x0, 0x1}, {0x1, 0x9, 0x1}, {0x7, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x3, 0x1aa52a6c, 0x1, 0x0, 0x1}, {0x3, 0x7, 0x1}, {0x0, 0xfec2, 0x0, 0x1}, {0x0, 0x4c}], '\x00', 0x9}) mount(&(0x7f0000000040)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='ufs\x00', 0x204009, 0x0) 307.147225ms ago: executing program 6 (id=3003): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000080)={0x32, @loopback, 0x4e20, 0x0, 'rr\x00', 0x1, 0xa7e, 0x1a}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 0s ago: executing program 3 (id=3004): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x1c, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4040810) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@getqdisc={0x38, 0x26, 0x8, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x6, 0xd}, {0x10, 0x2}, {0x7, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$unix(0x1, 0x1, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r8) socket(0x10, 0x803, 0x0) (async) r9 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_BT_VOICE(r9, 0x112, 0xb, &(0x7f0000000400), 0x2) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000080), 0x4) (async) setsockopt$sock_int(r11, 0x1, 0x5, &(0x7f0000000080), 0x4) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0x2c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xf, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x3, 0x4, 0x32, 0xfffffbff}, 0x80}}]}, {0x4}, {0x2c, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) r12 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x59}], 0x1}, 0x4011) (async) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r2, 0x3c}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000540)='\'', 0x59}], 0x1}, 0x4011) kernel console output (not intermixed with test programs): 7 using dummy_hcd [ 243.626970][T12293] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x3 has invalid wMaxPacketSize 0 [ 243.631774][T12293] usb 10-1: config 0 interface 0 has no altsetting 0 [ 243.638243][T12293] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 243.641981][T12293] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 243.645428][T12293] usb 10-1: Product: syz [ 243.647292][T12293] usb 10-1: Manufacturer: syz [ 243.649381][T12293] usb 10-1: SerialNumber: syz [ 243.655347][ T42] kauditd_printk_skb: 108 callbacks suppressed [ 243.655363][ T42] audit: type=1800 audit(2000000312.088:3137): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=221127 res=0 errno=0 [ 243.666626][ T42] audit: type=1800 audit(2000000312.088:3138): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=221159 res=0 errno=0 [ 243.675574][ T42] audit: type=1800 audit(2000000312.088:3139): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=221134 res=0 errno=0 [ 243.684186][ T42] audit: type=1800 audit(2000000312.088:3140): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=221135 res=0 errno=0 [ 243.693343][ T42] audit: type=1800 audit(2000000312.088:3141): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=221156 res=0 errno=0 [ 243.702369][ T42] audit: type=1800 audit(2000000312.088:3142): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=221157 res=0 errno=0 [ 243.711184][ T42] audit: type=1800 audit(2000000312.088:3143): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=221136 res=0 errno=0 [ 243.720127][ T42] audit: type=1800 audit(2000000312.088:3144): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=221158 res=0 errno=0 [ 243.760320][ T60] usb 9-1: USB disconnect, device number 19 [ 243.835516][ T42] audit: type=1800 audit(2000000312.268:3145): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 243.927892][ T42] audit: type=1800 audit(2000000312.358:3146): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 243.965273][T14062] lo speed is unknown, defaulting to 1000 [ 244.050815][T14067] netlink: 'syz.4.2228': attribute type 5 has an invalid length. [ 244.112007][ T50] usb 7-1: USB disconnect, device number 28 [ 244.153410][ T6503] usb 8-1: USB disconnect, device number 36 [ 244.207899][T14078] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 244.263393][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2230'. [ 245.187651][T14095] 9pnet_virtio: no channels available for device syz [ 245.586842][T14107] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 245.645748][T14107] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2241'. [ 245.916307][T14125] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 245.918802][T14125] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2248'. [ 245.921841][T14125] netlink: 'syz.4.2248': attribute type 1 has an invalid length. [ 246.204037][T14134] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 246.248654][ T60] usb 10-1: USB disconnect, device number 7 [ 246.359834][T14140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.491904][T14149] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2255'. [ 246.583687][T14152] program syz.5.2258 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 246.594622][T14156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2260'. [ 246.599645][T14156] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2260'. [ 246.637085][T14156] tipc: Enabling of bearer rejected, failed to enable media [ 246.734513][T14163] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 246.750190][T14163] tmpfs: Invalid uid '0x00000000ffffffff' [ 246.755288][T14163] netlink: 'syz.4.2262': attribute type 2 has an invalid length. [ 246.760690][T14163] netlink: 'syz.4.2262': attribute type 2 has an invalid length. [ 246.776636][T14175] openvswitch: netlink: IP tunnel dst address not specified [ 246.779714][T14175] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.899956][T14183] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 246.946500][T14183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2266'. [ 247.035000][ T50] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 247.044504][T14185] loop4: detected capacity change from 0 to 7 [ 247.094146][ T5113] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.098900][ T5113] buffer_io_error: 2 callbacks suppressed [ 247.098916][ T5113] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.107832][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.115012][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.118568][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.122810][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.127054][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.131143][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.134690][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.138953][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.142422][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.146830][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.150419][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.154588][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.158303][T14185] ldm_validate_partition_table(): Disk read failed. [ 247.161229][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.165428][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.168924][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.173045][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.179236][T14185] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 247.182721][T14185] Buffer I/O error on dev loop4, logical block 0, async page read [ 247.185964][T14185] Dev loop4: unable to read RDB block 0 [ 247.187895][T14185] loop4: unable to read partition table [ 247.189997][T14185] loop4: partition table beyond EOD, truncated [ 247.192073][T14185] loop_reread_partitions: partition scan of loop4 (dgCj̖P=!MX %` [ 247.192073][T14185] ) failed (rc=-5) [ 247.194961][ T50] usb 8-1: Using ep0 maxpacket: 16 [ 247.203663][ T50] usb 8-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 247.209116][ T50] usb 8-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 247.216681][ T50] usb 8-1: config 1 interface 0 has no altsetting 0 [ 247.220558][ T50] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 247.223563][ T50] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.226586][ T50] usb 8-1: Product: syz [ 247.227921][ T50] usb 8-1: Manufacturer: syz [ 247.229410][ T50] usb 8-1: SerialNumber: syz [ 247.301558][T14188] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2268'. [ 247.329689][T14191] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2269'. [ 247.451801][T14199] Context (ID=0x0) not attached to queue pair (handle=0x0:0x9) [ 247.925348][T14227] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 247.977320][T12293] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 248.020950][T14234] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 248.135032][T12293] usb 9-1: Using ep0 maxpacket: 8 [ 248.140840][T12293] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 248.148926][T12293] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.152943][T12293] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.157045][T12293] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.160505][T14239] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 248.161131][T12293] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.169685][T12293] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.173446][T12293] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.270392][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2287'. [ 249.041302][ T42] kauditd_printk_skb: 160 callbacks suppressed [ 249.041320][ T42] audit: type=1800 audit(2000000317.468:3307): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 249.071517][ T42] audit: type=1800 audit(2000000317.498:3308): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 249.090584][ T42] audit: type=1800 audit(2000000317.518:3309): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 249.287579][ T42] audit: type=1800 audit(2000000317.718:3310): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 249.379548][T14264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 249.412195][ T60] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 249.498854][ T42] audit: type=1800 audit(2000000317.928:3311): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 249.531694][T14268] ip_tables: iptables: counters copy to user failed while replacing table [ 249.537329][ T42] audit: type=1400 audit(2000000317.968:3312): avc: denied { connect } for pid=14267 comm="syz.2.2294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 249.552709][T14268] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 249.556053][ T42] audit: type=1800 audit(2000000317.988:3313): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=223121 res=0 errno=0 [ 249.556457][ T60] usb 10-1: device descriptor read/64, error -71 [ 249.587860][ T42] audit: type=1800 audit(2000000318.018:3314): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 249.600017][ T42] audit: type=1800 audit(2000000318.028:3315): pid=14270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2295" name="idVendor" dev="configfs" ino=51847 res=0 errno=0 [ 249.608889][ T42] audit: type=1800 audit(2000000318.028:3316): pid=14270 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.2295" name="idProduct" dev="configfs" ino=51848 res=0 errno=0 [ 249.773825][ T1360] usb 8-1: USB disconnect, device number 37 [ 249.814966][ T60] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 249.956050][ T60] usb 10-1: device descriptor read/64, error -71 [ 250.065269][ T60] usb usb10-port1: attempt power cycle [ 250.114956][ T1360] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 250.264993][ T1360] usb 8-1: Using ep0 maxpacket: 8 [ 250.268325][ T1360] usb 8-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 250.272096][ T1360] usb 8-1: config 1 interface 0 has no altsetting 0 [ 250.275916][ T1360] usb 8-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 250.278927][ T1360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.281456][ T1360] usb 8-1: Product: syz [ 250.282874][ T1360] usb 8-1: Manufacturer: syz [ 250.284402][ T1360] usb 8-1: SerialNumber: syz [ 250.414965][ T60] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 250.435810][ T60] usb 10-1: device descriptor read/8, error -71 [ 250.685062][ T60] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 250.715649][ T60] usb 10-1: device descriptor read/8, error -71 [ 250.752539][ T29] usb 9-1: USB disconnect, device number 20 [ 250.825328][ T60] usb usb10-port1: unable to enumerate USB device [ 250.825345][T14280] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 250.917597][T14280] __nla_validate_parse: 1 callbacks suppressed [ 250.917611][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2299'. [ 251.833016][T14289] fuse: Unknown parameter '0x000000000000000400000000000000000004' [ 252.449045][T14310] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 252.564469][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2308'. [ 252.728455][T14322] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2312'. [ 252.775074][ T29] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 252.820773][ T9] usb 8-1: USB disconnect, device number 38 [ 252.844177][T14326] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2314'. [ 252.937154][ T29] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 252.940682][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 is Bulk; changing to Interrupt [ 252.945286][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.949394][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B is Bulk; changing to Interrupt [ 252.953809][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.959990][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.964105][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.039773][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2315'. [ 253.273338][T14337] comedi comedi3: pcl818: I/O base address not correctly aligned [ 253.301011][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2317'. [ 253.304624][T14337] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2317'. [ 253.308610][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2317'. [ 253.312306][T14337] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2317'. [ 253.316005][T14337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2317'. [ 253.614604][T14346] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.722337][T14351] netlink: 'syz.4.2321': attribute type 1 has an invalid length. [ 253.833351][T14358] ieee802154 phy0 wpan0: encryption failed: -22 [ 253.855399][T14351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14351 comm=syz.4.2321 [ 253.868717][T14351] bridge2: entered promiscuous mode [ 253.892320][T14351] bond2: (slave bridge2): making interface the new active one [ 253.901472][T14366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=14366 comm=syz.3.2324 [ 253.910526][T14351] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 253.988116][T14378] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 254.049531][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 254.049578][ T42] audit: type=1800 audit(2000000322.478:3383): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 254.051226][T14382] /dev/sg0: Can't lookup blockdev [ 254.064724][ T42] audit: type=1400 audit(2000000322.488:3384): avc: denied { write } for pid=14383 comm="syz.3.2329" name="functions" dev="configfs" ino=14856 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.074483][T14387] Mass Storage Function, version: 2009/09/11 [ 254.081858][T14387] LUN: removable file: (no medium) [ 254.090169][ T42] audit: type=1400 audit(2000000322.518:3385): avc: denied { write } for pid=14383 comm="syz.3.2329" name="mass_storage.0" dev="configfs" ino=53544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.110197][T14387] LUN: removable file: (no medium) [ 254.114546][ T42] audit: type=1400 audit(2000000322.538:3386): avc: denied { write } for pid=14383 comm="syz.3.2329" name="mass_storage.0" dev="configfs" ino=53544 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 254.132810][ T42] audit: type=1800 audit(2000000322.548:3387): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 254.170018][ T42] audit: type=1800 audit(2000000322.598:3388): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 254.187288][ T42] audit: type=1800 audit(2000000322.618:3389): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 254.205386][ T42] audit: type=1800 audit(2000000322.628:3390): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2332" name="driver_override" dev="sysfs" ino=3627 res=0 errno=0 [ 254.225405][ T42] audit: type=1800 audit(2000000322.648:3391): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=224399 res=0 errno=0 [ 254.371694][ T42] audit: type=1800 audit(2000000322.798:3392): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2332" name="bind" dev="sysfs" ino=28018 res=0 errno=0 [ 254.392848][T14395] oxu210hp-hcd QEMU0002:00: error -ENXIO: IRQ index 0 not found [ 255.221640][T14430] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 255.544069][ T6503] usb 10-1: USB disconnect, device number 12 [ 255.656921][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.659696][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.791310][T14450] overlayfs: failed to resolve './file2': -2 [ 255.895129][ T9] usb 8-1: new full-speed USB device number 39 using dummy_hcd [ 256.048134][ T9] usb 8-1: config 0 has no interfaces? [ 256.057232][ T9] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 256.067067][ T9] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 256.073408][ T9] usb 8-1: Product: syz [ 256.077596][ T9] usb 8-1: SerialNumber: syz [ 256.236800][T14490] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 疽m%AAZZI % [ 256.283034][T14498] 9pnet_virtio: no channels available for device syz [ 256.496892][T14507] __nla_validate_parse: 5 callbacks suppressed [ 256.496902][T14507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2369'. [ 256.502610][T14507] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2369'. [ 256.577153][ T9] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 256.704985][ T9] usb 10-1: device descriptor read/64, error -71 [ 256.946267][ T9] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 257.075230][ T9] usb 10-1: device descriptor read/64, error -71 [ 257.187359][ T9] usb usb10-port1: attempt power cycle [ 257.326481][T14554] fuse: Bad value for 'fd' [ 257.535069][ T9] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 257.556742][ T9] usb 10-1: device descriptor read/8, error -71 [ 257.709286][T14564] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2387'. [ 257.764087][T14572] lo speed is unknown, defaulting to 1000 [ 257.795000][ T9] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 257.816708][ T9] usb 10-1: device descriptor read/8, error -71 [ 257.873581][T14574] 9pnet_virtio: no channels available for device syz [ 257.925284][ T9] usb usb10-port1: unable to enumerate USB device [ 258.029870][T14578] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 258.580993][ T9] usb 8-1: USB disconnect, device number 39 [ 258.843901][T14587] netlink: 'syz.4.2394': attribute type 1 has an invalid length. [ 258.862487][T14587] bond4: entered promiscuous mode [ 258.864488][T14587] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.873975][T14587] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 258.878261][T14587] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 258.881563][T14587] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 258.885384][T14587] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 258.959977][T14593] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 258.965080][T14593] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 258.977218][T14593] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 259.057619][ T42] kauditd_printk_skb: 97 callbacks suppressed [ 259.057631][ T42] audit: type=1800 audit(2000000327.488:3490): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 259.113299][ T42] audit: type=1800 audit(2000000327.538:3491): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 259.146788][ T42] audit: type=1800 audit(2000000327.578:3492): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 259.164350][T14611] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.193464][ T42] audit: type=1800 audit(2000000327.618:3493): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 259.223363][ T42] audit: type=1800 audit(2000000327.638:3494): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 259.224723][T14615] netlink: 'syz.2.2404': attribute type 21 has an invalid length. [ 259.234413][T14615] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2404'. [ 259.265003][ T5529] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 259.282062][ T42] audit: type=1800 audit(2000000327.708:3495): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 259.358903][ T42] audit: type=1800 audit(2000000327.788:3496): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 259.370058][ T42] audit: type=1800 audit(2000000327.798:3497): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 259.374477][T14621] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2407'. [ 259.445198][ T5529] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 259.452523][ T5529] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.454185][ T42] audit: type=1800 audit(2000000327.878:3498): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 259.460034][ T5529] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.476197][T14625] protocol 0000 is buggy, dev veth0_vlan [ 259.476969][ T5529] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.482101][T14625] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2408'. [ 259.494447][ T5529] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.500079][ T5529] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.504094][ T5529] usb 8-1: Manufacturer: syz [ 259.521942][ T42] audit: type=1800 audit(2000000327.948:3499): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=226485 res=0 errno=0 [ 260.008161][T14656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2418'. [ 260.096306][T14659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2419'. [ 260.129659][T14661] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 260.186599][T14665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.191483][T14665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.220259][T14665] xt_l2tp: v2 doesn't support IP mode [ 260.263139][T14670] syzkaller0: entered promiscuous mode [ 260.265868][T14670] syzkaller0: entered allmulticast mode [ 260.377818][T14673] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 260.425567][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 260.429806][T14673] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2424'. [ 260.554974][ T9] usb 9-1: device descriptor read/64, error -71 [ 260.807835][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 260.816853][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2426'. [ 260.945031][ T9] usb 9-1: device descriptor read/64, error -71 [ 261.055572][ T9] usb usb9-port1: attempt power cycle [ 261.173396][T14696] iommufd_mock iommufd_mock1: Adding to iommu group 9 [ 261.395003][ T9] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 261.420027][ T9] usb 9-1: device descriptor read/8, error -71 [ 261.457380][T14722] fuse: Bad value for 'user_id' [ 261.461599][T14722] fuse: Bad value for 'user_id' [ 261.655457][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 261.664518][T14734] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 261.675819][ T9] usb 9-1: device descriptor read/8, error -71 [ 261.712523][T14734] __nla_validate_parse: 1 callbacks suppressed [ 261.712537][T14734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2438'. [ 261.785624][ T9] usb usb9-port1: unable to enumerate USB device [ 262.036493][T12293] usb 8-1: USB disconnect, device number 40 [ 262.353923][T14743] netlink: 'syz.5.2441': attribute type 1 has an invalid length. [ 262.357067][T14743] netlink: 220 bytes leftover after parsing attributes in process `syz.5.2441'. [ 262.385022][T12293] usb 8-1: new full-speed USB device number 41 using dummy_hcd [ 262.522813][T14752] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2443'. [ 262.568426][T12293] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x8 has invalid wMaxPacketSize 0 [ 262.574071][T12293] usb 8-1: config 0 interface 0 has no altsetting 0 [ 262.580837][T12293] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 262.583945][T12293] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 262.587407][T12293] usb 8-1: Product: syz [ 262.589102][T12293] usb 8-1: Manufacturer: syz [ 262.591046][T12293] usb 8-1: SerialNumber: syz [ 262.725149][ T9] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 262.857329][T14763] FAULT_INJECTION: forcing a failure. [ 262.857329][T14763] name failslab, interval 1, probability 0, space 0, times 0 [ 262.862504][T14763] CPU: 3 UID: 0 PID: 14763 Comm: syz.2.2447 Not tainted syzkaller #0 PREEMPT(full) [ 262.862526][T14763] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 262.862536][T14763] Call Trace: [ 262.862543][T14763] [ 262.862551][T14763] dump_stack_lvl+0x100/0x190 [ 262.862588][T14763] should_fail_ex.cold+0x5/0xa [ 262.862609][T14763] should_failslab+0xc2/0x120 [ 262.862629][T14763] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 262.862647][T14763] ? __alloc_skb+0x5b7/0x710 [ 262.862672][T14763] ? __alloc_skb+0x140/0x710 [ 262.862699][T14763] __alloc_skb+0x140/0x710 [ 262.862718][T14763] ? __alloc_skb+0x5b7/0x710 [ 262.862736][T14763] ? __pfx___alloc_skb+0x10/0x10 [ 262.862758][T14763] ? find_held_lock+0x2b/0x80 [ 262.862773][T14763] ? is_bpf_text_address+0x8a/0x1a0 [ 262.862794][T14763] ? is_bpf_text_address+0x8a/0x1a0 [ 262.862817][T14763] alloc_skb_with_frags+0xdd/0x760 [ 262.862846][T14763] sock_alloc_send_pskb+0x801/0x980 [ 262.862866][T14763] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 262.862900][T14763] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 262.862919][T14763] ? find_held_lock+0x2b/0x80 [ 262.862933][T14763] ? dev_get_by_index+0x180/0x380 [ 262.862953][T14763] ? dev_get_by_index+0x180/0x380 [ 262.862977][T14763] packet_sendmsg+0x1eda/0x5100 [ 262.862999][T14763] ? avc_has_perm_noaudit+0x2e0/0x3b0 [ 262.863026][T14763] ? sock_has_perm+0x25a/0x2f0 [ 262.863047][T14763] ? __pfx_sock_has_perm+0x10/0x10 [ 262.863074][T14763] ? __pfx_packet_sendmsg+0x10/0x10 [ 262.863094][T14763] ? __might_fault+0xc5/0x140 [ 262.863115][T14763] ? selinux_socket_sendmsg+0x198/0x2f0 [ 262.863141][T14763] __sys_sendto+0x48b/0x4e0 [ 262.863160][T14763] ? __pfx_packet_sendmsg+0x10/0x10 [ 262.863180][T14763] ? __pfx___sys_sendto+0x10/0x10 [ 262.863205][T14763] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.863234][T14763] ? ksys_write+0x1ac/0x250 [ 262.863250][T14763] ? __pfx_ksys_write+0x10/0x10 [ 262.863266][T14763] __x64_sys_sendto+0xe0/0x1c0 [ 262.863280][T14763] ? do_syscall_64+0x90/0x870 [ 262.863293][T14763] ? lockdep_hardirqs_on+0x78/0x100 [ 262.863306][T14763] do_syscall_64+0x115/0x870 [ 262.863319][T14763] ? clear_bhb_loop+0x40/0x90 [ 262.863332][T14763] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.863343][T14763] RIP: 0033:0x7f21d639e0d9 [ 262.863354][T14763] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.863365][T14763] RSP: 002b:00007f21d7183028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 262.863385][T14763] RAX: ffffffffffffffda RBX: 00007f21d6625fa0 RCX: 00007f21d639e0d9 [ 262.863392][T14763] RDX: 000000000000001a RSI: 0000200000002500 RDI: 0000000000000003 [ 262.863398][T14763] RBP: 00007f21d7183090 R08: 0000200000000540 R09: 0000000000000014 [ 262.863405][T14763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.863411][T14763] R13: 00007f21d6626038 R14: 00007f21d6625fa0 R15: 00007ffc6fb4bb48 [ 262.863436][T14763] [ 262.874991][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 262.989801][ T9] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 262.993185][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.997303][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 263.001245][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.005470][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.010280][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 263.013868][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.275643][T14775] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 263.308519][T14778] 8021q: VLANs not supported on ip6_vti0 [ 263.334423][T14780] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2451'. [ 263.776744][T14787] xt_CT: No such helper "pptp" [ 264.073579][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 264.073592][ T42] audit: type=1800 audit(2000000332.498:3580): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 264.221202][ T42] audit: type=1800 audit(2000000332.648:3581): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 264.236484][T14794] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2456'. [ 264.241159][T14794] netlink: 'syz.2.2456': attribute type 4 has an invalid length. [ 264.243671][T14794] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2456'. [ 264.266981][ T42] audit: type=1800 audit(2000000332.698:3582): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 264.282199][T14796] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=7 sclass=netlink_xfrm_socket pid=14796 comm=syz.2.2457 [ 264.291135][ T42] audit: type=1800 audit(2000000332.718:3583): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=227262 res=0 errno=0 [ 264.299183][ T42] audit: type=1800 audit(2000000332.718:3584): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="type" dev="sysfs" ino=227266 res=0 errno=0 [ 264.441861][ T42] audit: type=1800 audit(2000000332.868:3585): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 264.468995][ T42] audit: type=1800 audit(2000000332.898:3586): pid=14788 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.2454" name="/" dev="fuse" ino=1 res=0 errno=0 [ 264.504937][ T42] audit: type=1800 audit(2000000332.928:3587): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 264.561394][ T42] audit: type=1800 audit(2000000332.988:3588): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 264.583258][ T42] audit: type=1800 audit(2000000333.008:3589): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 264.593177][T14808] tipc: Can't bind to reserved service type 2 [ 264.779912][T14817] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 264.800276][T14820] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2464'. [ 264.810822][T14820] tipc: Started in network mode [ 264.812765][T14820] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 264.822447][T14820] tipc: Enabled bearer , priority 10 [ 264.832800][T14817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2463'. [ 265.057777][T14829] netlink: 'syz.4.2466': attribute type 10 has an invalid length. [ 265.071802][ T6503] usb 8-1: USB disconnect, device number 41 [ 265.258756][T10161] Bluetooth: hci3: Frame reassembly failed (-84) [ 265.270972][T10161] Bluetooth: hci3: Frame reassembly failed (-84) [ 265.273680][T10161] Bluetooth: hci3: Frame reassembly failed (-84) [ 265.490855][ T9] usb 10-1: USB disconnect, device number 17 [ 265.608260][T14858] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 265.647960][T14858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2475'. [ 265.813948][T14868] loop4: detected capacity change from 0 to 2640 [ 265.815188][ T9] tipc: Node number set to 1 [ 265.818829][T14868] buffer_io_error: 5 callbacks suppressed [ 265.818844][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.825027][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.828581][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.832201][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.836278][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.838982][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.841559][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.844090][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.846833][T14868] ldm_validate_partition_table(): Disk read failed. [ 265.849668][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.854587][T14868] Buffer I/O error on dev loop4, logical block 0, async page read [ 265.858548][T14868] Dev loop4: unable to read RDB block 0 [ 265.862006][T14868] loop4: unable to read partition table [ 265.865104][T14868] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 265.883811][ T5150] ldm_validate_partition_table(): Disk read failed. [ 265.886227][ T5150] Dev loop4: unable to read RDB block 0 [ 265.888294][ T5150] loop4: unable to read partition table [ 266.104378][T14885] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 266.304125][T14898] BIDI support in bsg has been removed. [ 266.382647][T14900] netlink: 'syz.4.2486': attribute type 10 has an invalid length. [ 266.397485][T14900] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.401571][T14900] bond0: (slave team0): Enslaving as an active interface with an up link [ 266.569742][T14862] nvme_tcp: queue 0: failed to receive icresp, error -4 [ 266.712710][T14910] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.811105][T14915] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 266.815148][T14915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=14915 comm=syz.2.2492 [ 266.835042][T12293] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 266.984236][T14925] erspan0: mtu less than device minimum [ 266.995536][T14925] overlay: Bad value for 'redirect_dir' [ 267.001981][T12293] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 267.006482][T12293] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.009972][T12293] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.013034][T12293] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 267.018230][T12293] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 267.018256][T12293] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 267.018273][T12293] usb 9-1: Manufacturer: syz [ 267.072895][T14930] netlink: 'syz.5.2497': attribute type 1 has an invalid length. [ 267.112590][T14930] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.191519][T14940] binder: BINDER_SET_CONTEXT_MGR already set [ 267.193389][T14940] binder: 14939:14940 ioctl 4018620d 200000004a80 returned -16 [ 267.196056][T14940] binder: 14939:14940 ioctl c0306201 2000000004c0 returned -22 [ 267.204496][T14941] netlink: 'syz.5.2497': attribute type 10 has an invalid length. [ 267.208204][T14941] __nla_validate_parse: 1 callbacks suppressed [ 267.208215][T14941] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2497'. [ 267.213577][T14941] dummy0: entered promiscuous mode [ 267.252271][T14943] binder: BINDER_SET_CONTEXT_MGR already set [ 267.254436][T14943] binder: 14939:14943 ioctl 4018620d 200000000100 returned -16 [ 267.255022][ T5755] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 267.372995][T14950] tmpfs: Unknown parameter 'usrquotde'EJa' [ 267.404512][T14953] iommufd_mock iommufd_mock0: Adding to iommu group 5 [ 267.511151][T14965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2502'. [ 267.930647][T14981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2510'. [ 268.295895][ T60] IPVS: starting estimator thread 0... [ 268.299403][T15001] IPVS: fo: SCTP 172.20.20.187:0 - no destination available [ 268.302799][T15001] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:21 [ 268.307976][T15001] IPVS: set_ctl: invalid protocol: 92 224.0.0.2:21 [ 268.349466][T15008] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2518'. [ 268.364819][T15007] geneve2: entered promiscuous mode [ 268.366932][T15007] geneve2: entered allmulticast mode [ 268.384988][T15003] IPVS: using max 45 ests per chain, 108000 per kthread [ 268.385261][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.395291][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.400389][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.405739][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 268.406100][T15015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2514'. [ 268.554949][T15022] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 268.570891][T15022] cramfs: wrong magic [ 269.297746][ T42] kauditd_printk_skb: 80 callbacks suppressed [ 269.297762][ T42] audit: type=1800 audit(2000000337.728:3670): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 269.368185][ T42] audit: type=1800 audit(2000000337.798:3671): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 269.398367][ T42] audit: type=1800 audit(2000000337.828:3672): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 269.399282][T15030] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15030 comm=syz.2.2523 [ 269.419383][T15030] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.2523'. [ 269.423306][T15030] veth0_to_bond: default FDB implementation only supports local addresses [ 269.446280][ T42] audit: type=1800 audit(2000000337.878:3673): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 269.489922][ T42] audit: type=1800 audit(2000000337.918:3674): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16870 res=0 errno=0 [ 269.507615][ T42] audit: type=1800 audit(2000000337.938:3675): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 269.522717][T15037] fuse: Unknown parameter '000000000000000000000040x0000000000000004' [ 269.536054][ T42] audit: type=1804 audit(2000000337.958:3676): pid=15037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.5.2527" name="/newroot/125/file0" dev="tmpfs" ino=704 res=1 errno=0 [ 269.541056][T15037] uhci_hcd 0000:00:1d.0: remove, state 4 [ 269.546379][ T42] audit: type=1800 audit(2000000337.968:3677): pid=15037 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2527" name="remove" dev="sysfs" ino=3148 res=0 errno=0 [ 269.552225][T15037] usb usb1: USB disconnect, device number 1 [ 269.592508][ T42] audit: type=1800 audit(2000000338.018:3678): pid=15043 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.2527" name="rescan" dev="sysfs" ino=1106 res=0 errno=0 [ 269.596986][ T6503] usb 9-1: USB disconnect, device number 25 [ 269.640760][ T42] audit: type=1800 audit(2000000338.068:3679): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 269.659397][T15037] uhci_hcd 0000:00:1d.0: USB bus 1 deregistered [ 269.788581][T15043] pci 0000:00:05.0: [1af4:1009] type 00 class 0x000200 conventional PCI endpoint [ 269.799405][T15043] pci 0000:00:05.0: BAR 0 [io 0xc0c0-0xc0df] [ 269.801717][T15043] pci 0000:00:05.0: BAR 1 [mem 0xfeaf6000-0xfeaf6fff] [ 269.804727][T15043] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref] [ 269.837138][T15043] pci 0000:00:05.0: Adding to iommu group 5 [ 269.860646][T15043] pci 0000:00:1d.0: [8086:2934] type 00 class 0x0c0300 conventional PCI endpoint [ 269.860914][T15048] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2529'. [ 269.869087][T15043] pci 0000:00:1d.0: BAR 4 [io 0xc0e0-0xc0ff] [ 269.880167][T15043] pci 0000:00:1d.0: Adding to iommu group 7 [ 269.889815][T15043] pci 0000:00:05.0: BAR 4 [mem 0x380800008000-0x38080000bfff 64bit pref]: assigned [ 269.895205][T15043] pci 0000:00:05.0: BAR 1 [mem 0x80000000-0x80000fff]: assigned [ 269.899473][T15043] pci 0000:00:05.0: BAR 0 [io 0x2000-0x201f]: assigned [ 269.902766][T15043] pci 0000:00:1d.0: BAR 4 [io 0x2020-0x203f]: assigned [ 270.070100][T15043] pci 0000:00:1d.0: quirk_usb_early_handoff+0x0/0x1360 took 69875 usecs [ 270.127977][T15043] uhci_hcd 0000:00:1d.0: UHCI Host Controller [ 270.173335][T15043] uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 1 [ 270.182211][T15043] uhci_hcd 0000:00:1d.0: detected 2 ports [ 270.196162][T15043] uhci_hcd 0000:00:1d.0: irq 16, io port 0x00002020 [ 270.208752][T15043] usb usb1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 270.215456][T15043] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 270.219077][T15043] usb usb1: Product: UHCI Host Controller [ 270.221135][T15043] usb usb1: Manufacturer: Linux syzkaller uhci_hcd [ 270.223537][T15043] usb usb1: SerialNumber: 0000:00:1d.0 [ 270.344134][T15070] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 270.413122][T15075] x_tables: duplicate underflow at hook 3 [ 270.443240][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 270.603369][T15088] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2539'. [ 271.823647][ T5745] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 271.834784][ T5745] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 271.842110][ T5745] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 271.847749][ T5745] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 271.851687][ T5745] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 271.859516][T15114] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 271.969755][T15114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2548'. [ 272.083225][T15112] lo speed is unknown, defaulting to 1000 [ 272.244295][T15112] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.247053][T15112] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.249452][T15112] bridge_slave_0: entered allmulticast mode [ 272.252968][T15112] bridge_slave_0: entered promiscuous mode [ 272.256463][T15112] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.259195][T15112] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.261722][T15112] bridge_slave_1: entered allmulticast mode [ 272.264452][T15112] bridge_slave_1: entered promiscuous mode [ 272.290581][T15112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.296613][T15112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.315773][T15112] team0: Port device team_slave_0 added [ 272.318985][T15112] team0: Port device team_slave_1 added [ 272.333629][T15112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.335879][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.343747][T15112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.351416][T15112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.353595][T15112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.361522][T15112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.380286][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.384530][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.393766][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.394317][T15112] hsr_slave_0: entered promiscuous mode [ 272.397075][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.399217][T15112] hsr_slave_1: entered promiscuous mode [ 272.401573][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.402734][T15112] debugfs: 'hsr0' already exists in 'hsr' [ 272.406227][T15112] Cannot create hsr debugfs directory [ 272.595356][T15112] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.685983][T15136] lo speed is unknown, defaulting to 1000 [ 272.893201][T15112] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.028803][T15112] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.116944][T15136] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.119389][T15136] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.121785][T15136] bridge_slave_0: entered allmulticast mode [ 273.124730][T15136] bridge_slave_0: entered promiscuous mode [ 273.128696][T15136] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.131199][T15136] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.133581][T15136] bridge_slave_1: entered allmulticast mode [ 273.136775][T15136] bridge_slave_1: entered promiscuous mode [ 273.157879][T15136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.162791][T15136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.231079][T15112] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.242613][T15136] team0: Port device team_slave_0 added [ 273.246760][T15136] team0: Port device team_slave_1 added [ 273.249786][T15175] random: crng reseeded on system resumption [ 273.262681][T15168] lo speed is unknown, defaulting to 1000 [ 273.283296][T15136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.285690][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.293817][T15136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.301243][T15136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.303535][T15136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 273.314928][T15136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.391115][T15136] hsr_slave_0: entered promiscuous mode [ 273.394326][T15136] hsr_slave_1: entered promiscuous mode [ 273.397520][T15136] debugfs: 'hsr0' already exists in 'hsr' [ 273.399724][T15136] Cannot create hsr debugfs directory [ 273.628957][T15112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.639511][T15112] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.643087][T15112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.662358][T15112] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.666340][T15188] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 273.669910][T15112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.678441][T15112] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.682406][T15112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.690077][T15112] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.782142][T15199] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2561'. [ 273.826015][T15136] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 273.831599][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.835692][T15136] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 273.841191][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.847141][T15136] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 273.852182][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.859714][T15136] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 273.869758][T15136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.895082][ T5755] Bluetooth: hci3: command tx timeout [ 273.898480][T15112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.932608][T15112] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.949324][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.952449][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.976659][T11791] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.979661][T11791] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.069797][T15136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.083807][T15136] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.116673][ T1168] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.119899][ T1168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.132556][T10153] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.135677][T10153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.160637][T15213] (NULL device *): [drm] The number of encoders must be between 1 and 31 [ 274.319102][ T42] kauditd_printk_skb: 616 callbacks suppressed [ 274.319114][ T42] audit: type=1800 audit(2000000342.748:4296): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 274.432248][T15112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.460107][ T5755] Bluetooth: hci1: command tx timeout [ 274.492820][T15136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.500834][ T42] audit: type=1800 audit(2000000342.928:4297): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 274.509826][T15112] veth0_vlan: entered promiscuous mode [ 274.541171][ T42] audit: type=1800 audit(2000000342.968:4298): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 274.561787][T15112] veth1_vlan: entered promiscuous mode [ 274.572250][T15241] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2566'. [ 274.584175][T15239] netlink: 268 bytes leftover after parsing attributes in process `syz.4.2567'. [ 274.584251][T15240] netlink: 'syz.4.2567': attribute type 3 has an invalid length. [ 274.586056][T15241] netlink: 108 bytes leftover after parsing attributes in process `syz.3.2566'. [ 274.586077][T15241] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2566'. [ 274.600181][T15240] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2567'. [ 274.603173][T15112] veth0_macvtap: entered promiscuous mode [ 274.616504][T15112] veth1_macvtap: entered promiscuous mode [ 274.629362][T15112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.650685][T15112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.662581][ T42] audit: type=1800 audit(2000000343.088:4299): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 274.736967][ T5793] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.748813][ T42] audit: type=1800 audit(2000000343.168:4300): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242315 res=0 errno=0 [ 274.831712][ T42] audit: type=1800 audit(2000000343.258:4301): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 274.835236][ T5793] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.843628][ T5793] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.875490][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.899265][T11791] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.901099][ T42] audit: type=1800 audit(2000000343.328:4302): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 274.905129][T11791] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.911993][ T42] audit: type=1800 audit(2000000343.338:4303): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=242441 res=0 errno=0 [ 274.929787][T11791] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.933044][T11791] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.943868][T15136] veth0_vlan: entered promiscuous mode [ 274.951285][T15136] veth1_vlan: entered promiscuous mode [ 274.971849][T15136] veth0_macvtap: entered promiscuous mode [ 274.977011][T15136] veth1_macvtap: entered promiscuous mode [ 274.991438][T15136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.999527][T15136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.012835][ T42] audit: type=1800 audit(2000000343.438:4304): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 275.024054][T15255] netlink: 'syz.4.2575': attribute type 1 has an invalid length. [ 275.044446][T15255] bond5: entered promiscuous mode [ 275.047505][T15255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 275.054230][ T42] audit: type=1800 audit(2000000343.478:4305): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 275.097040][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.113294][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.151047][T10161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.153725][T10161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.168022][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.171193][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.196194][T10161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.201028][T10161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.297272][T15269] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(0) [ 275.387915][T15277] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 275.428746][T15277] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2572'. [ 275.571210][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 275.598679][T15295] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2580'. [ 275.645666][T15295] bridge0: port 4(team_slave_1) entered disabled state [ 275.654061][T15295] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.657396][T15295] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.895460][T15314] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 275.900229][T15314] SELinux: failed to load policy [ 275.972734][T15320] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2586'. [ 275.975191][ T5755] Bluetooth: hci3: command tx timeout [ 276.240230][T15333] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 276.422526][T15339] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 276.537360][ T5755] Bluetooth: hci1: command tx timeout [ 276.622349][T15345] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 276.628324][T15345] syzkaller1: entered promiscuous mode [ 276.630140][T15345] syzkaller1: entered allmulticast mode [ 276.634424][T15345] xt_TCPMSS: Only works on TCP SYN packets [ 276.732228][T15358] openvswitch: netlink: IP tunnel dst address not specified [ 276.740860][T15358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 276.777557][T15360] key id 000004d2 not found [ 276.834932][ T6746] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 276.990039][ T6746] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 276.999379][ T6746] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 277.005558][ T6746] usb 7-1: Product: syz [ 277.006736][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 277.006987][ T6746] usb 7-1: Manufacturer: syz [ 277.007001][ T6746] usb 7-1: SerialNumber: syz [ 277.152318][T15377] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 277.643444][T15403] netlink: 'syz.3.2611': attribute type 1 has an invalid length. [ 277.780387][T15411] loop8: detected capacity change from 0 to 4194304 [ 277.880570][T15411] Dev loop8: unable to read RDB block 8 [ 277.882518][T15411] loop8: unable to read partition table [ 277.884521][T15411] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 277.894236][T15410] Dev loop8: unable to read RDB block 8 [ 277.897379][T15410] loop8: unable to read partition table [ 277.901652][T15410] loop_reread_partitions: partition scan of loop8 (被x ) failed (rc=-5) [ 278.050779][T15431] bond3: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 278.054991][ T5755] Bluetooth: hci3: command tx timeout [ 278.478615][T15458] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 278.625142][ T5755] Bluetooth: hci1: command tx timeout [ 278.877050][T15464] can: request_module (can-proto-0) failed. [ 278.879306][T15464] binder: 15463:15464 ioctl c0306201 200000000040 returned -22 [ 279.343737][ T42] kauditd_printk_skb: 85 callbacks suppressed [ 279.343754][ T42] audit: type=1800 audit(2000000347.768:4391): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244052 res=0 errno=0 [ 279.619739][ T5835] usb 7-1: USB disconnect, device number 29 [ 279.637412][ T42] audit: type=1800 audit(2000000348.068:4392): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 279.674918][ T42] audit: type=1800 audit(2000000348.098:4393): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 279.846253][ T42] audit: type=1800 audit(2000000348.278:4394): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 279.868951][ T42] audit: type=1800 audit(2000000348.298:4395): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244071 res=0 errno=0 [ 279.887896][ T42] audit: type=1800 audit(2000000348.318:4396): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=244082 res=0 errno=0 [ 279.899069][T15480] team0: entered allmulticast mode [ 279.899949][T11791] Bluetooth: hci5: received HCILL_GO_TO_SLEEP_ACK in state 1 [ 279.901497][T15480] team_slave_0: entered allmulticast mode [ 279.907796][ T42] audit: type=1800 audit(2000000348.338:4397): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16483 res=0 errno=0 [ 279.926726][T15482] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15482 comm=syz.2.2633 [ 279.932556][T15482] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.932884][T11791] Bluetooth: hci5: Frame reassembly failed (-84) [ 279.937764][T11791] Bluetooth: hci5: Frame reassembly failed (-84) [ 279.991291][T15483] program syz.2.2633 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 280.145033][ T5745] Bluetooth: hci3: command tx timeout [ 280.189582][ T42] audit: type=1800 audit(2000000348.618:4398): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 280.210696][ T42] audit: type=1400 audit(2000000348.638:4399): avc: denied { write } for pid=15484 comm="syz.6.2634" name="uncompressed" dev="configfs" ino=51865 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.218349][ T42] audit: type=1400 audit(2000000348.638:4400): avc: denied { write } for pid=15484 comm="syz.6.2634" name="u" dev="configfs" ino=60993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 280.575169][T15492] __nla_validate_parse: 5 callbacks suppressed [ 280.575180][T15492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2637'. [ 280.694956][ T5745] Bluetooth: hci1: command tx timeout [ 280.773584][T15503] netlink: 'syz.2.2639': attribute type 16 has an invalid length. [ 280.776758][T15503] netlink: 'syz.2.2639': attribute type 3 has an invalid length. [ 280.779703][T15503] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2639'. [ 281.338238][T15511] binder: 15510:15511 ioctl 80186e82 2000000004c0 returned -22 [ 281.348215][T15511] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.471482][T15535] 9pnet_virtio: no channels available for device syz [ 281.596580][T15540] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2649'. [ 281.663070][T15543] overlayfs: invalid origin (0000) [ 281.677505][T15545] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2648'. [ 281.679596][T15543] openvswitch: netlink: nsh attr 60 is out of range max 3 [ 281.682677][T15545] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 281.740811][T15545] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 281.788953][T15552] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2652'. [ 281.850823][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2654'. [ 281.853822][T15556] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2654'. [ 281.902537][ T5755] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 281.943956][T15560] netlink: 'syz.6.2656': attribute type 39 has an invalid length. [ 281.971202][T15560] hsr_slave_0 (unregistering): left promiscuous mode [ 282.045065][ T6746] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 282.218636][ T6746] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 282.222170][ T6746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.225849][ T6746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.228940][ T6746] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 282.234435][ T6746] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 282.238386][ T6746] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 282.240969][ T6746] usb 9-1: Manufacturer: syz [ 282.276848][T15582] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2660'. [ 282.305072][ T5755] Bluetooth: hci3: command tx timeout [ 282.648566][T15604] vmw_vmci 0000:00:03.0: Using capabilities 0x1c [ 282.649976][T15608] syzkaller0: entered promiscuous mode [ 282.651915][T15604] vmw_vmci 0000:00:03.0: VMCI device unable to register notification bitmap with PPN 0xffffd [ 282.652577][T15608] syzkaller0: entered allmulticast mode [ 282.663468][T15608] fuse: Bad value for 'group_id' [ 282.666494][T15608] fuse: Bad value for 'group_id' [ 282.814292][T15612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.816891][T15612] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 282.849311][T15612] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 282.862351][T15612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.865121][T15612] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 282.879221][T15612] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 282.993846][T15624] netlink: NAT attribute has 5 unknown bytes [ 282.996364][T15624] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 283.020054][T15626] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 283.197412][T15640] binder: BINDER_SET_CONTEXT_MGR already set [ 283.203835][T15640] binder: 15639:15640 ioctl 4018620d 200000000100 returned -16 [ 283.209946][T15640] binder: BINDER_SET_CONTEXT_MGR already set [ 283.213646][T15640] binder: 15639:15640 ioctl 4018620d 200000000100 returned -16 [ 283.213670][T15643] binder: BINDER_SET_CONTEXT_MGR already set [ 283.221817][T15643] binder: 15639:15643 ioctl 4018620d 200000004a80 returned -16 [ 283.526055][ T5529] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 283.678515][ T5529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.682950][ T5529] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.686948][ T5529] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 283.690585][ T5529] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.054938][T15655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2682'. [ 284.175805][T15671] binder: BINDER_SET_CONTEXT_MGR already set [ 284.178256][T15671] binder: 15670:15671 ioctl 4018620d 200000004a80 returned -16 [ 284.182356][T15671] binder: 15670:15671 ioctl c0306201 2000000004c0 returned -22 [ 284.221594][T15673] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2686'. [ 284.429765][ T42] kauditd_printk_skb: 79 callbacks suppressed [ 284.429783][ T42] audit: type=1800 audit(2000000352.858:4480): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 284.501969][ T42] audit: type=1800 audit(2000000352.928:4481): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 284.576226][ T42] audit: type=1800 audit(2000000353.008:4482): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 284.705012][ T42] audit: type=1800 audit(2000000353.128:4483): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 284.792744][ T42] audit: type=1800 audit(2000000353.218:4484): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 284.832345][ T42] audit: type=1800 audit(2000000353.258:4485): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 284.857096][ T5827] usb 9-1: USB disconnect, device number 26 [ 284.865283][ T5755] Bluetooth: hci3: command 0x0c1a tx timeout [ 284.872240][ T42] audit: type=1800 audit(2000000353.298:4486): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 284.885246][ T42] audit: type=1400 audit(2000000353.308:4487): avc: denied { mounton } for pid=15702 comm="syz.4.2696" path="/syzcgroup/cpu/syz4/memory.limit_in_bytes" dev="cgroup" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 284.895705][ T42] audit: type=1800 audit(2000000353.318:4488): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 284.946129][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 285.015660][ T42] audit: type=1800 audit(2000000353.438:4489): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 285.202899][T15722] netlink: 'syz.6.2702': attribute type 10 has an invalid length. [ 285.269944][T15722] team0: Port device dummy0 added [ 285.625130][ T41] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 285.796661][ T41] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 285.800298][ T41] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.804541][ T41] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.808187][ T41] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 285.813251][ T41] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 285.817355][ T41] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 285.820287][ T41] usb 11-1: Manufacturer: syz [ 285.843235][T15733] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 285.944409][T15733] __nla_validate_parse: 7 callbacks suppressed [ 285.944421][T15733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2705'. [ 286.285576][ T5827] usb 7-1: USB disconnect, device number 30 [ 286.597434][T15761] netlink: 'syz.2.2712': attribute type 11 has an invalid length. [ 286.601110][T15761] netlink: 'syz.2.2712': attribute type 4 has an invalid length. [ 286.604382][T15761] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2712'. [ 286.608964][T15761] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2712'. [ 286.921205][T15772] bond0: entered allmulticast mode [ 286.923445][T15772] bond_slave_0: entered allmulticast mode [ 286.926049][T15772] bond_slave_1: entered allmulticast mode [ 286.928635][T15772] team0: entered allmulticast mode [ 286.930861][T15772] team_slave_0: entered allmulticast mode [ 286.933364][T15772] team_slave_1: entered allmulticast mode [ 287.019333][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 287.050536][T15781] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 287.073162][T15781] netlink: 'syz.4.2719': attribute type 11 has an invalid length. [ 287.232205][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.346987][T15794] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 287.376602][ T5755] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 287.390952][ T5755] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 287.401134][ T5755] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 287.408081][ T5755] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 287.414654][ T5755] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 287.449750][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.562424][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2724'. [ 287.606650][T15820] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 287.613245][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.614193][T15820] netlink: 144 bytes leftover after parsing attributes in process `syz.3.2730'. [ 287.631982][T15820] vhci_hcd vhci_hcd.0: remove, state 4 [ 287.634599][T15820] usb usb38: USB disconnect, device number 1 [ 287.729050][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.730476][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.736841][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.739149][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.742113][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.743812][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.745838][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.747778][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.749460][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.751245][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.753163][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.758549][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.760668][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.763093][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.765268][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.767375][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.769691][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.771712][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.773917][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.776385][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.778417][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.780523][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.782842][ T5820] vhci_hcd vhci_hcd.0: stop threads [ 287.785126][ T5820] vhci_hcd vhci_hcd.0: release socket [ 287.787371][ T5820] vhci_hcd vhci_hcd.0: disconnect device [ 287.790038][T15820] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 287.810975][T15820] vhci_hcd vhci_hcd.0: remove, state 4 [ 287.813493][T15820] usb usb37: USB disconnect, device number 1 [ 287.838787][T15796] lo speed is unknown, defaulting to 1000 [ 287.885821][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.887709][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.895756][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.903291][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.908697][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.910854][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.913171][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.915005][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.921257][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.928373][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.930822][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.933218][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.935943][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.938052][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.940618][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.943587][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.946144][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.948102][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.954993][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.956824][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.958585][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.961505][ T12] vhci_hcd vhci_hcd.0: stop threads [ 287.963735][ T12] vhci_hcd vhci_hcd.0: release socket [ 287.966115][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 287.968093][T15820] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 288.029008][ T13] bridge_slave_1: left allmulticast mode [ 288.031305][ T13] bridge_slave_1: left promiscuous mode [ 288.033897][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.045228][ T13] bridge_slave_0: left allmulticast mode [ 288.049121][ T13] bridge_slave_0: left promiscuous mode [ 288.051538][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.229135][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.257236][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.296932][ T13] bond0 (unregistering): Released all slaves [ 288.310863][ T5452] 8021q: adding VLAN 0 to HW filter on device eth1 [ 288.397070][ T1360] usb 11-1: USB disconnect, device number 2 [ 288.475083][T15858] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 288.523649][T15796] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.538790][T15796] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.551443][T15796] bridge_slave_0: entered allmulticast mode [ 288.559355][T15796] bridge_slave_0: entered promiscuous mode [ 288.634657][T15870] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 288.645890][T15796] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.648953][T15796] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.651608][T15796] bridge_slave_1: entered allmulticast mode [ 288.657822][T15796] bridge_slave_1: entered promiscuous mode [ 288.666518][T15865] syzkaller0: entered promiscuous mode [ 288.668237][T15865] syzkaller0: entered allmulticast mode [ 288.711301][ T5452] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.784490][T15878] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 288.784621][T15880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2739'. [ 288.788425][T15796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.827598][T15796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.070315][T15796] team0: Port device team_slave_0 added [ 289.078347][T15796] team0: Port device team_slave_1 added [ 289.103881][ T13] hsr_slave_0: left promiscuous mode [ 289.104916][ T5755] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.112424][ T13] hsr_slave_1: left promiscuous mode [ 289.119834][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.133779][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.140496][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.143502][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.163706][ T13] veth1_macvtap: left promiscuous mode [ 289.167994][ T13] veth0_macvtap: left promiscuous mode [ 289.170476][ T13] veth1_vlan: left promiscuous mode [ 289.172786][ T13] veth0_vlan: left promiscuous mode [ 289.185154][ T1360] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 289.342842][ T1360] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 289.354717][ T1360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.359785][ T1360] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.368784][ T1360] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 289.382467][ T1360] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 289.390116][ T1360] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 289.396429][ T1360] usb 8-1: Manufacturer: syz [ 289.475902][ T13] team0 (unregistering): Port device team_slave_1 removed [ 289.478539][ T42] kauditd_printk_skb: 99 callbacks suppressed [ 289.478551][ T42] audit: type=1800 audit(2000000357.908:4589): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 289.495098][ T5755] Bluetooth: hci3: command tx timeout [ 289.504088][ T13] team0 (unregistering): Port device team_slave_0 removed [ 289.509310][ T42] audit: type=1800 audit(2000000357.928:4590): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 289.533096][ T42] audit: type=1800 audit(2000000357.958:4591): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 289.545820][T15911] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2750'. [ 289.593181][ T5452] 8021q: adding VLAN 0 to HW filter on device eth7 [ 289.658711][T15796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.661192][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.669356][T15796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.679361][T15796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.681880][T15796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.690148][T15796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.721447][T15796] hsr_slave_0: entered promiscuous mode [ 289.723827][T15796] hsr_slave_1: entered promiscuous mode [ 289.726510][T15796] debugfs: 'hsr0' already exists in 'hsr' [ 289.728381][T15796] Cannot create hsr debugfs directory [ 289.759597][ T42] audit: type=1800 audit(2000000358.188:4592): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 289.818610][ T42] audit: type=1400 audit(2000000358.248:4593): avc: denied { write } for pid=15918 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.830162][ T42] audit: type=1800 audit(2000000358.248:4594): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 289.854755][T15923] macsec0: entered promiscuous mode [ 289.863434][T15923] macsec0: entered allmulticast mode [ 289.866945][T15923] veth1_macvtap: entered allmulticast mode [ 289.889905][ T42] audit: type=1400 audit(2000000358.318:4595): avc: denied { write } for pid=15924 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.948272][ T5452] 8021q: adding VLAN 0 to HW filter on device eth8 [ 289.960244][ T42] audit: type=1800 audit(2000000358.388:4596): pid=15796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="del_device" dev="sysfs" ino=27718 res=0 errno=0 [ 289.969947][ T42] audit: type=1800 audit(2000000358.398:4597): pid=15796 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz-executor" name="new_device" dev="sysfs" ino=27717 res=0 errno=0 [ 289.980863][ T42] audit: type=1800 audit(2000000358.398:4598): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=251282 res=0 errno=0 [ 290.142917][T15796] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 290.158255][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.161638][T15796] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 290.167847][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.175199][T15796] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 290.195645][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.199940][T15796] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 290.206559][T15796] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.289375][T15796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.290995][T15956] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2756'. [ 290.305718][T15796] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.314877][T10161] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.317963][T10161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.337271][T10161] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.340408][T10161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.687775][T15796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.820816][T15993] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2764'. [ 290.824626][T15993] netlink: 'syz.6.2764': attribute type 6 has an invalid length. [ 290.831791][T15993] netlink: 'syz.6.2764': attribute type 5 has an invalid length. [ 290.839206][T15993] netlink: 'syz.6.2764': attribute type 4 has an invalid length. [ 290.866297][T15993] tmpfs: Cannot change global quota limit on remount [ 290.873364][T15796] veth0_vlan: entered promiscuous mode [ 290.879882][T15796] veth1_vlan: entered promiscuous mode [ 290.906572][T15796] veth0_macvtap: entered promiscuous mode [ 290.911108][T15796] veth1_macvtap: entered promiscuous mode [ 290.921192][T15796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.928594][T15796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.037297][ T5848] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.041443][ T5848] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.047881][ T5848] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.052879][ T5848] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.107934][T10153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.111784][T10153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.156940][T10161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.159828][T10161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.348990][T16014] vcan0: tx address claim with different name [ 291.349400][ T9] IPVS: starting estimator thread 0... [ 291.457751][T16023] IPVS: using max 26 ests per chain, 62400 per kthread [ 291.545219][T16020] netlink: 'syz.4.2773': attribute type 49 has an invalid length. [ 291.558184][T16020] bond0: (slave bond_slave_0): Releasing backup interface [ 291.585074][ T5755] Bluetooth: hci3: command tx timeout [ 291.596436][T16020] bond_slave_0: left allmulticast mode [ 291.687254][T16020] bond_slave_0: entered promiscuous mode [ 291.689132][T16020] bond_slave_0: entered allmulticast mode [ 291.815795][ T5827] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 291.942741][ T1360] usb 8-1: USB disconnect, device number 42 [ 291.968230][ T5827] usb 12-1: Using ep0 maxpacket: 8 [ 291.996448][ T5827] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.003687][ T5827] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 292.008861][ T5827] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.044443][T16038] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2776'. [ 292.160866][T16052] fuse: fd is not a fuse device [ 292.871439][ T5827] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 293.027132][ T5827] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 293.043217][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.047894][ T5827] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.054177][ T5827] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 293.061447][ T5827] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 293.066861][ T5827] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 293.070341][ T5827] usb 8-1: Manufacturer: syz [ 293.160773][T16106] netlink: 'syz.4.2796': attribute type 1 has an invalid length. [ 293.182170][T16106] bond6: entered promiscuous mode [ 293.185009][T16106] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.229518][T16106] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.232727][T16106] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 293.236977][T16106] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 293.245573][T16106] bond6: (slave ip6gre1): making interface the new active one [ 293.249327][T16106] ip6gre1: entered promiscuous mode [ 293.255589][T16106] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 293.406919][T16109] SELinux: security_context_str_to_sid (4msevS:"-XF@) failed with errno=-22 [ 293.617092][T16112] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2797'. [ 293.664969][ T5755] Bluetooth: hci3: command tx timeout [ 294.443321][T16121] netlink: 4352 bytes leftover after parsing attributes in process `syz.4.2799'. [ 294.480279][T16123] 9pnet_fd: Insufficient options for proto=fd [ 294.482665][T16123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2800'. [ 294.569567][ T5529] usb 12-1: USB disconnect, device number 2 [ 294.588586][ T42] kauditd_printk_skb: 78 callbacks suppressed [ 294.588603][ T42] audit: type=1800 audit(2000000363.018:4677): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 294.599829][ T42] audit: type=1400 audit(2000000363.028:4678): avc: denied { read write } for pid=16124 comm="syz.7.2801" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 294.602679][T16127] veth1_macvtap: left promiscuous mode [ 294.610891][T16127] macsec0: entered promiscuous mode [ 294.612578][T16127] macsec0: entered allmulticast mode [ 294.613938][ T42] audit: type=1400 audit(2000000363.028:4679): avc: denied { open } for pid=16124 comm="syz.7.2801" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 294.620811][T16127] veth1_macvtap: entered promiscuous mode [ 294.624671][ T42] audit: type=1800 audit(2000000363.028:4680): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 294.628198][T16127] veth1_macvtap: entered allmulticast mode [ 294.636090][ T42] audit: type=1800 audit(2000000363.058:4681): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 294.637918][T16127] macsec0: left promiscuous mode [ 294.646240][T16127] macsec0: left allmulticast mode [ 294.648114][T16127] veth1_macvtap: left allmulticast mode [ 294.670888][T16129] lo speed is unknown, defaulting to 1000 [ 294.701747][ T42] audit: type=1800 audit(2000000363.128:4682): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 294.770162][ T42] audit: type=1326 audit(2000000363.198:4683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.4.2804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42499e0d9 code=0x7ffc0000 [ 294.779266][ T42] audit: type=1326 audit(2000000363.208:4684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.4.2804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42499e0d9 code=0x7ffc0000 [ 294.787909][ T42] audit: type=1326 audit(2000000363.208:4685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.4.2804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42499e0d9 code=0x7ffc0000 [ 294.797247][ T42] audit: type=1326 audit(2000000363.208:4686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16131 comm="syz.4.2804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb42499e0d9 code=0x7ffc0000 [ 295.001754][T16148] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 295.116563][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2806'. [ 295.348655][T16164] misc userio: Can't change port extra on an already running userio instance [ 295.638553][ T5835] usb 8-1: USB disconnect, device number 43 [ 295.735356][ T5755] Bluetooth: hci3: command tx timeout [ 295.771378][T16174] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2814'. [ 295.839902][T16178] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 295.858280][T16177] Bluetooth: hci5: Frame reassembly failed (-84) [ 295.861578][T16177] MTD: Couldn't look up './dev/mtdblock0': -2 [ 295.952577][T16183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2819'. [ 295.955652][T16183] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2819'. [ 295.966762][T16183] geneve2: entered promiscuous mode [ 295.968896][T16183] geneve2: entered allmulticast mode [ 296.187960][ T1360] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 296.252936][T16201] overlay: ./bus is not a directory [ 296.347234][T16208] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 296.360931][ T1360] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 296.366299][ T1360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.372561][ T1360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.381795][ T1360] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 296.395275][ T1360] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 296.404371][ T1360] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 296.410636][ T1360] usb 9-1: Manufacturer: syz [ 296.454101][T16208] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2825'. [ 296.688504][T16227] overlayfs: cannot append lower layer [ 296.987449][T16236] openvswitch: netlink: Key 6 has unexpected len 131 expected 2 [ 297.166219][T16241] kAFS: unable to lookup cell 'syz0' [ 297.318985][T16251] CIFS: Attempting to mount //127.0.0.1/test [ 297.379397][T16258] netlink: 'syz.3.2840': attribute type 1 has an invalid length. [ 297.382752][T16258] netlink: 84 bytes leftover after parsing attributes in process `syz.3.2840'. [ 297.386916][T16258] netlink: 'syz.3.2840': attribute type 2 has an invalid length. [ 297.390343][T16258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2840'. [ 297.628425][T16267] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 297.730297][T16267] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2844'. [ 297.895056][ T5745] Bluetooth: hci5: command 0xfc11 tx timeout [ 297.906198][ T5755] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 298.146478][T16251] CIFS: VFS: cifs_mount failed w/return code = -112 [ 298.481914][T16286] efs: Unknown parameter 'discard' [ 298.951883][T11707] usb 9-1: USB disconnect, device number 27 [ 299.102780][T16300] raw_sendmsg: syz.4.2854 forgot to set AF_INET. Fix it! [ 299.246107][T16317] batman_adv: batadv0: Adding interface: dummy0 [ 299.252062][T16320] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 299.252435][T16317] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.326318][T16317] batman_adv: batadv0: Interface activated: dummy0 [ 299.361780][T16340] netlink: 'syz.4.2858': attribute type 10 has an invalid length. [ 299.438096][T16347] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 299.447015][T16338] batadv0: mtu less than device minimum [ 299.457219][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.461441][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.468257][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.471862][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.475527][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.479235][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.482987][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.486680][T16338] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 299.522648][T16340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.538055][T16340] batadv0: entered allmulticast mode [ 299.544647][T16340] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 299.650360][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 299.650376][ T42] audit: type=1800 audit(2000000368.078:4807): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 299.683873][ T42] audit: type=1800 audit(2000000368.098:4808): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 299.717267][ T42] audit: type=1800 audit(2000000368.138:4809): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 299.769422][ T42] audit: type=1800 audit(2000000368.198:4810): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 299.803900][ T42] audit: type=1800 audit(2000000368.228:4811): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 299.830080][T16367] binder: 16366:16367 ioctl c0306201 200000000080 returned -14 [ 299.840780][ T42] audit: type=1800 audit(2000000368.268:4812): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 299.852925][ T42] audit: type=1400 audit(2000000368.278:4813): avc: denied { write } for pid=16362 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.869052][ T42] audit: type=1800 audit(2000000368.288:4814): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 299.891005][T16374] geneve1: entered allmulticast mode [ 299.943585][ T42] audit: type=1800 audit(2000000368.368:4815): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=17128 res=0 errno=0 [ 299.958506][ T42] audit: type=1400 audit(2000000368.388:4816): avc: denied { write } for pid=16378 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.975240][ T5529] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 300.019439][T16397] trusted_key: encrypted_key: insufficient parameters specified [ 300.044215][T16397] ntfs3(nbd7): try to read out of volume at offset 0x0 [ 300.059283][T16399] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 300.128118][ T5529] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 300.135417][ T5529] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.142057][ T5529] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.150005][ T5529] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 300.160660][ T5529] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 300.163654][ T5529] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 300.167382][ T5529] usb 11-1: Manufacturer: syz [ 300.170814][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2870'. [ 300.553804][T16452] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 300.560667][T16453] syzkaller1: entered promiscuous mode [ 300.563034][T16453] syzkaller1: entered allmulticast mode [ 300.615353][T16454] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2884'. [ 300.943744][T16476] erspan0: entered allmulticast mode [ 301.005854][T16473] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.007855][T16473] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 301.009810][T16473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 301.020767][T16473] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 301.215728][T16500] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 301.244183][T16501] lo speed is unknown, defaulting to 1000 [ 301.326887][T16500] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2898'. [ 302.024170][T16529] netlink: 'syz.7.2901': attribute type 12 has an invalid length. [ 302.050702][T16529] XFS (nbd7): SB validate failed with error -5. [ 302.189272][T16546] CIFS: VFS: bad security option: krb5i [ 302.207484][T16546] i2c i2c-0: delete_device: Can't parse I2C address [ 302.239502][T16552] o2cb: Global heartbeat has not been started. [ 302.251756][T16552] o2cb: Cluster check failed. Fix errors before retrying. [ 302.254933][T16552] (syz.4.2908,16552,1):user_dlm_register:674 ERROR: status = -22 [ 302.264688][T16552] (syz.4.2908,16552,1):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "config" [ 302.402295][T16559] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20004 [ 302.435244][T16566] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2913'. [ 302.437269][T16565] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 302.464034][T16566] 8021q: adding VLAN 0 to HW filter on device bond7 [ 302.488615][T16566] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 302.558637][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2911'. [ 302.755154][ T60] usb 11-1: USB disconnect, device number 3 [ 302.800442][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2917'. [ 302.805267][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2917'. [ 302.815679][T16589] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2917'. [ 302.818443][T16589] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2917'. [ 302.997538][T16605] CIFS: Attempting to mount //127.0.0.1/share [ 303.025317][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.028240][ T5749] Bluetooth: hci1: command 0x0c1a tx timeout [ 303.564931][ T6744] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 303.727412][ T6744] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 303.731251][ T6744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.734701][ T6744] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.738750][ T6744] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 303.746486][ T6744] usb 8-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 303.750400][ T6744] usb 8-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 303.753469][ T6744] usb 8-1: Manufacturer: syz [ 303.826990][T16605] CIFS: VFS: cifs_mount failed w/return code = -112 [ 303.925421][T16656] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 304.025898][T16656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2934'. [ 304.029661][T16664] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 304.074926][T16666] netlink: 'syz.4.2936': attribute type 7 has an invalid length. [ 304.084277][T16666] netlink: 'syz.4.2936': attribute type 7 has an invalid length. [ 304.095200][ T5793] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.099226][ T5793] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.102685][ T5793] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.107292][ T5793] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 304.802560][ T42] kauditd_printk_skb: 120 callbacks suppressed [ 304.802572][ T42] audit: type=1800 audit(2000000373.228:4937): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 304.817520][ T42] audit: type=1800 audit(2000000373.248:4938): pid=12261 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=26036 res=0 errno=0 [ 304.831259][ T42] audit: type=1800 audit(2000000373.258:4939): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 304.883563][ T42] audit: type=1800 audit(2000000373.308:4940): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 305.095198][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 305.218166][ T42] audit: type=1800 audit(2000000373.648:4941): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 305.610941][ T42] audit: type=1800 audit(2000000374.038:4942): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 305.632908][ T42] audit: type=1800 audit(2000000374.058:4943): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 305.656171][ T42] audit: type=1800 audit(2000000374.078:4944): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 305.666628][ T42] audit: type=1800 audit(2000000374.098:4945): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256431 res=0 errno=0 [ 305.679233][ T42] audit: type=1800 audit(2000000374.108:4946): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256450 res=0 errno=0 [ 305.804978][T16711] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 305.895756][T16711] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2948'. [ 306.015079][ T1360] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 306.174995][ T1360] usb 9-1: Using ep0 maxpacket: 8 [ 306.180484][ T1360] usb 9-1: New USB device found, idVendor=04b4, idProduct=931b, bcdDevice= 0.40 [ 306.183395][ T1360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.186037][ T1360] usb 9-1: Product: syz [ 306.187588][ T1360] usb 9-1: Manufacturer: syz [ 306.189045][ T1360] usb 9-1: SerialNumber: syz [ 306.338092][ T41] usb 8-1: USB disconnect, device number 44 [ 306.660429][T16720] ffs_data_put(): freeing [ 306.685068][ T41] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 306.845373][ T41] usb 8-1: Using ep0 maxpacket: 32 [ 306.849894][ T41] usb 8-1: unable to get BOS descriptor or descriptor too short [ 306.859089][ T41] usb 8-1: string descriptor 0 read error: -22 [ 306.862292][ T41] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 306.866512][ T41] usb 8-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 306.939963][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2952'. [ 306.943795][T16726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2952'. [ 307.040063][T16729] syz.6.2953 (16729): attempted to duplicate a private mapping with mremap. This is not supported. [ 307.185035][ T5745] Bluetooth: hci3: command 0x0c1a tx timeout [ 308.000703][T16736] geneve2: entered promiscuous mode [ 308.002516][T16736] geneve2: entered allmulticast mode [ 308.304991][ T9] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 308.468259][ T9] usb 11-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 308.472719][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.477291][ T9] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.481258][ T9] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 308.487908][ T9] usb 11-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 308.491724][ T9] usb 11-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 308.495166][ T9] usb 11-1: Manufacturer: syz [ 308.766201][ T41] usb 9-1: USB disconnect, device number 28 [ 308.846574][T16741] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 308.938259][T16741] __nla_validate_parse: 1 callbacks suppressed [ 308.938271][T16741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2958'. [ 309.379191][ T41] usb 8-1: USB disconnect, device number 45 [ 309.823789][ T42] kauditd_printk_skb: 45 callbacks suppressed [ 309.823801][ T42] audit: type=1800 audit(2000000378.248:4992): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 309.892107][ T42] audit: type=1800 audit(2000000378.318:4993): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 309.914667][T16755] netlink: 'syz.4.2962': attribute type 14 has an invalid length. [ 309.942462][ T42] audit: type=1800 audit(2000000378.368:4994): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 309.994922][ T42] audit: type=1800 audit(2000000378.418:4995): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 310.022864][ T42] audit: type=1800 audit(2000000378.448:4996): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 310.150962][ T42] audit: type=1800 audit(2000000378.578:4997): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 310.213764][T16763] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 310.307311][ T42] audit: type=1800 audit(2000000378.738:4998): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 310.375146][T16767] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 310.378886][ T42] audit: type=1800 audit(2000000378.808:4999): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=256938 res=0 errno=0 [ 310.411280][ T42] audit: type=1800 audit(2000000378.838:5000): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 310.450886][ T42] audit: type=1800 audit(2000000378.878:5001): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 310.478455][T16767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2968'. [ 310.514790][T16778] xt_recent: Unsupported userspace flags (000000b2) [ 310.529697][T16778] tc action pedit offset must be on 32 bit boundaries [ 310.688554][T16780] net_ratelimit: 12 callbacks suppressed [ 310.688573][T16780] ip_tables: iptables: counters copy to user failed while replacing table [ 311.082715][ T5835] usb 11-1: USB disconnect, device number 4 [ 311.353372][T16813] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 311.440007][T16815] debugfs: Bad value for 'uid' [ 311.442178][T16815] debugfs: Bad value for 'uid' [ 311.755143][ T5835] usb 11-1: new full-speed USB device number 5 using dummy_hcd [ 311.915072][ T60] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 311.916901][ T5835] usb 11-1: not running at top speed; connect to a high speed hub [ 311.921992][ T5835] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 311.927356][ T5835] usb 11-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 311.930297][ T5835] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.984811][T16826] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 312.073452][T16826] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2983'. [ 312.077050][ T60] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 312.080485][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.083887][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.087082][ T60] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 312.091917][ T60] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 312.094738][ T60] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 312.099282][ T60] usb 9-1: Manufacturer: syz [ 312.826772][T16832] xfrm0: entered allmulticast mode [ 312.828453][T16832] team0: Device xfrm0 is of different type [ 312.902990][T16837] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2986'. [ 312.990281][T16846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2988'. [ 312.993227][T16846] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2988'. [ 313.082908][T16850] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 313.087035][T16850] overlayfs: failed to set xattr on upper [ 313.091262][T16850] overlayfs: ...falling back to redirect_dir=nofollow. [ 313.093978][T16850] overlayfs: ...falling back to index=off. [ 313.097950][T16850] overlayfs: ...falling back to uuid=null. [ 313.106104][T16850] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 313.109111][T16850] overlayfs: failed to set xattr on upper [ 313.111343][T16850] overlayfs: ...falling back to redirect_dir=nofollow. [ 313.113983][T16850] overlayfs: ...falling back to index=off. [ 313.116380][T16850] overlayfs: ...falling back to uuid=null. [ 313.122238][T16850] overlayfs: cleanup of 'bus/work' failed (-13) [ 313.124689][T16850] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only [ 313.128689][T16850] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 313.132847][T16850] overlayfs: failed to get uuid (/file0, err=-95); falling back to uuid=null. [ 313.180785][T16852] lo speed is unknown, defaulting to 1000 [ 313.479516][T16859] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 313.589437][T16862] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 314.530789][ T50] usb 11-1: USB disconnect, device number 5 [ 314.552350][T16875] Bluetooth: MGMT ver 1.23 [ 314.560830][T16875] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2995'. [ 314.675980][ T5835] usb 9-1: USB disconnect, device number 29 [ 314.825812][ T42] kauditd_printk_skb: 52 callbacks suppressed [ 314.825823][ T42] audit: type=1800 audit(2000000001.959:5054): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 314.873077][T16895] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 314.876305][ T42] audit: type=1800 audit(2000000002.009:5055): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 314.896222][ T42] audit: type=1800 audit(2000000002.029:5056): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=258387 res=0 errno=0 [ 314.904328][T16897] IPVS: set_ctl: invalid protocol: 50 127.0.0.1:20000 [ 314.990910][T16895] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3001'. [ 315.177260][ T42] audit: type=1800 audit(2000000002.309:5057): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 315.253419][T16904] [ 315.254224][T16904] ====================================================== [ 315.256472][T16904] WARNING: possible circular locking dependency detected [ 315.259036][T16904] syzkaller #0 Tainted: G L [ 315.261613][T16904] ------------------------------------------------------ [ 315.263885][T16904] syz.3.3004/16904 is trying to acquire lock: [ 315.265845][T16904] ffff88803d02cab0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x5ab/0x2350 [ 315.270123][T16904] [ 315.270123][T16904] but task is already holding lock: [ 315.273081][T16904] ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 315.276327][T16904] [ 315.276327][T16904] which lock already depends on the new lock. [ 315.276327][T16904] [ 315.280478][T16904] [ 315.280478][T16904] the existing dependency chain (in reverse order) is: [ 315.284146][T16904] [ 315.284146][T16904] -> #4 (cb_lock){++++}-{4:4}: [ 315.287031][T16904] lock_acquire+0x1b9/0x370 [ 315.289108][T16904] down_read+0x99/0x4c0 [ 315.291097][T16904] genl_release+0x7e/0x1d0 [ 315.293171][T16904] netlink_release+0x1058/0x1ff0 [ 315.295342][T16904] __sock_release+0xb3/0x260 [ 315.297306][T16904] sock_close+0x1c/0x30 [ 315.298921][T16904] __fput+0x3ff/0xb50 [ 315.300367][T16904] fput_close_sync+0x118/0x250 [ 315.302026][T16904] __x64_sys_close+0x8b/0x120 [ 315.303845][T16904] do_syscall_64+0x115/0x870 [ 315.306028][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.308478][T16904] [ 315.308478][T16904] -> #3 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}: [ 315.311804][T16904] lock_acquire+0x1b9/0x370 [ 315.313866][T16904] down_write+0x8b/0x1f0 [ 315.315683][T16904] __sock_release+0x86/0x260 [ 315.317468][T16904] sock_close+0x1c/0x30 [ 315.318958][T16904] __fput+0x3ff/0xb50 [ 315.320388][T16904] __fput_sync+0xd4/0x100 [ 315.322136][T16904] nvme_tcp_alloc_queue.isra.0+0xd53/0x1750 [ 315.324534][T16904] nvme_tcp_configure_admin_queue+0x26/0x4d0 [ 315.327013][T16904] nvme_tcp_setup_ctrl+0xa4/0xa20 [ 315.329335][T16904] nvme_tcp_create_ctrl+0x975/0xd20 [ 315.331472][T16904] nvmf_dev_write+0x4ee/0xb60 [ 315.333351][T16904] vfs_write+0x2aa/0x1050 [ 315.334858][T16904] ksys_write+0x12a/0x250 [ 315.336493][T16904] do_syscall_64+0x115/0x870 [ 315.338288][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.340537][T16904] [ 315.340537][T16904] -> #2 (nvmf_dev_mutex){+.+.}-{4:4}: [ 315.343717][T16904] lock_acquire+0x1b9/0x370 [ 315.345829][T16904] __mutex_lock+0x1a4/0x1bd0 [ 315.347973][T16904] nvmf_dev_show+0x26/0x210 [ 315.350092][T16904] seq_read_iter+0x32f/0x1270 [ 315.352228][T16904] seq_read+0x344/0x4d0 [ 315.354074][T16904] vfs_read+0x1e4/0xb40 [ 315.356069][T16904] ksys_read+0x12a/0x250 [ 315.358079][T16904] do_syscall_64+0x115/0x870 [ 315.359959][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.361960][T16904] [ 315.361960][T16904] -> #1 (&p->lock){+.+.}-{4:4}: [ 315.364169][T16904] lock_acquire+0x1b9/0x370 [ 315.365768][T16904] __mutex_lock+0x1a4/0x1bd0 [ 315.367422][T16904] seq_read_iter+0xe1/0x1270 [ 315.369554][T16904] kernfs_fop_read_iter+0x46c/0x610 [ 315.371817][T16904] __kernel_read+0x397/0xad0 [ 315.373840][T16904] integrity_kernel_read+0x7e/0xb0 [ 315.375636][T16904] ima_calc_file_hash_tfm+0x25e/0x350 [ 315.377597][T16904] ima_calc_file_hash+0x1e3/0x380 [ 315.379346][T16904] ima_collect_measurement+0x94f/0xb30 [ 315.381252][T16904] process_measurement+0xdfe/0x2350 [ 315.383033][T16904] ima_file_check+0xc3/0x110 [ 315.384635][T16904] security_file_post_open+0xc4/0x210 [ 315.386665][T16904] path_openat+0x985/0x4280 [ 315.388331][T16904] do_file_open+0x20e/0x430 [ 315.389914][T16904] do_sys_openat2+0x10f/0x1e0 [ 315.391537][T16904] __x64_sys_openat+0x12d/0x210 [ 315.393210][T16904] do_syscall_64+0x115/0x870 [ 315.394825][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.396844][T16904] [ 315.396844][T16904] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 315.399546][T16904] check_prev_add+0xeb/0xe60 [ 315.401147][T16904] __lock_acquire+0x136c/0x1a40 [ 315.402862][T16904] lock_acquire+0x1b9/0x370 [ 315.404455][T16904] __mutex_lock+0x1a4/0x1bd0 [ 315.406091][T16904] process_measurement+0x5ab/0x2350 [ 315.407912][T16904] ima_file_check+0xc3/0x110 [ 315.409522][T16904] security_file_post_open+0xc4/0x210 [ 315.411365][T16904] path_openat+0x985/0x4280 [ 315.412937][T16904] do_file_open_root+0x2f6/0x5a0 [ 315.414643][T16904] file_open_root+0x1c6/0x3f0 [ 315.416309][T16904] kernel_read_file_from_path_initns+0x189/0x260 [ 315.418823][T16904] _request_firmware+0x733/0x13c0 [ 315.421119][T16904] request_firmware+0x35/0x50 [ 315.423109][T16904] reg_reload_regdb+0x85/0x460 [ 315.424783][T16904] genl_family_rcv_msg_doit+0x214/0x300 [ 315.426718][T16904] genl_rcv_msg+0x560/0x800 [ 315.428601][T16904] netlink_rcv_skb+0x159/0x420 [ 315.430266][T16904] genl_rcv+0x28/0x40 [ 315.431698][T16904] netlink_unicast+0x585/0x850 [ 315.433355][T16904] netlink_sendmsg+0x8b0/0xda0 [ 315.435004][T16904] ____sys_sendmsg+0xa4d/0xbe0 [ 315.436702][T16904] ___sys_sendmsg+0x190/0x1e0 [ 315.438387][T16904] __sys_sendmsg+0x160/0x210 [ 315.439990][T16904] do_syscall_64+0x115/0x870 [ 315.441615][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.443620][T16904] [ 315.443620][T16904] other info that might help us debug this: [ 315.443620][T16904] [ 315.446776][T16904] Chain exists of: [ 315.446776][T16904] &ima_iint_mutex_key[depth] --> &sb->s_type->i_mutex_key#13 --> cb_lock [ 315.446776][T16904] [ 315.451202][T16904] Possible unsafe locking scenario: [ 315.451202][T16904] [ 315.453564][T16904] CPU0 CPU1 [ 315.455235][T16904] ---- ---- [ 315.456911][T16904] rlock(cb_lock); [ 315.458308][T16904] lock(&sb->s_type->i_mutex_key#13); [ 315.461542][T16904] lock(cb_lock); [ 315.464112][T16904] lock(&ima_iint_mutex_key[depth]); [ 315.466377][T16904] [ 315.466377][T16904] *** DEADLOCK *** [ 315.466377][T16904] [ 315.469382][T16904] 1 lock held by syz.3.3004/16904: [ 315.470997][T16904] #0: ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 315.473814][T16904] [ 315.473814][T16904] stack backtrace: [ 315.475637][T16904] CPU: 1 UID: 0 PID: 16904 Comm: syz.3.3004 Tainted: G L syzkaller #0 PREEMPT(full) [ 315.475654][T16904] Tainted: [L]=SOFTLOCKUP [ 315.475658][T16904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 315.475665][T16904] Call Trace: [ 315.475670][T16904] [ 315.475676][T16904] dump_stack_lvl+0x100/0x190 [ 315.475692][T16904] print_circular_bug.cold+0x178/0x1c7 [ 315.475710][T16904] check_noncircular+0x146/0x160 [ 315.475725][T16904] check_prev_add+0xeb/0xe60 [ 315.475737][T16904] ? kasan_save_stack+0x3f/0x50 [ 315.475750][T16904] __lock_acquire+0x136c/0x1a40 [ 315.475764][T16904] ? netlink_unicast+0x585/0x850 [ 315.475777][T16904] lock_acquire+0x1b9/0x370 [ 315.475789][T16904] ? process_measurement+0x5ab/0x2350 [ 315.475801][T16904] ? __pfx___might_resched+0x10/0x10 [ 315.475815][T16904] __mutex_lock+0x1a4/0x1bd0 [ 315.475829][T16904] ? process_measurement+0x5ab/0x2350 [ 315.475840][T16904] ? process_measurement+0x5ab/0x2350 [ 315.475852][T16904] ? __pfx___mutex_lock+0x10/0x10 [ 315.475865][T16904] ? rcu_is_watching+0x12/0xc0 [ 315.475881][T16904] ? trace_kmem_cache_alloc+0xdd/0x100 [ 315.475895][T16904] ? __kasan_slab_alloc+0x89/0x90 [ 315.475912][T16904] ? process_measurement+0x5ab/0x2350 [ 315.475922][T16904] process_measurement+0x5ab/0x2350 [ 315.475935][T16904] ? find_held_lock+0x2b/0x80 [ 315.475944][T16904] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 315.475957][T16904] ? __pfx_process_measurement+0x10/0x10 [ 315.475970][T16904] ? find_held_lock+0x2b/0x80 [ 315.475979][T16904] ? fscrypt_file_open+0x48f/0x5c0 [ 315.475993][T16904] ? fscrypt_file_open+0x48f/0x5c0 [ 315.476011][T16904] ? __pfx___fsnotify_parent+0x10/0x10 [ 315.476026][T16904] ima_file_check+0xc3/0x110 [ 315.476037][T16904] ? __pfx_ima_file_check+0x10/0x10 [ 315.476048][T16904] ? vfs_open+0x2e3/0x3f0 [ 315.476062][T16904] security_file_post_open+0xc4/0x210 [ 315.476079][T16904] path_openat+0x985/0x4280 [ 315.476093][T16904] ? __pfx_path_openat+0x10/0x10 [ 315.476104][T16904] ? __asan_memcpy+0x3c/0x60 [ 315.476114][T16904] ? do_getname_kernel+0x1be/0x250 [ 315.476127][T16904] do_file_open_root+0x2f6/0x5a0 [ 315.476142][T16904] ? widen_string+0xdb/0x2f0 [ 315.476152][T16904] ? __pfx_do_file_open_root+0x10/0x10 [ 315.476164][T16904] ? check_noncircular+0x97/0x160 [ 315.476179][T16904] ? __lock_acquire+0x49f/0x1a40 [ 315.476192][T16904] ? vsnprintf+0x4c5/0x1300 [ 315.476205][T16904] file_open_root+0x1c6/0x3f0 [ 315.476215][T16904] ? __pfx_file_open_root+0x10/0x10 [ 315.476224][T16904] ? find_held_lock+0x2b/0x80 [ 315.476234][T16904] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 315.476251][T16904] ? kernel_read_file_from_path_initns+0x17a/0x260 [ 315.476269][T16904] kernel_read_file_from_path_initns+0x189/0x260 [ 315.476287][T16904] ? __pfx_kernel_read_file_from_path_initns+0x10/0x10 [ 315.476305][T16904] ? _request_firmware+0x4e1/0x13c0 [ 315.476319][T16904] _request_firmware+0x733/0x13c0 [ 315.476333][T16904] ? __pfx__request_firmware+0x10/0x10 [ 315.476344][T16904] ? __pfx_netdev_run_todo+0x10/0x10 [ 315.476359][T16904] ? rcu_is_watching+0x12/0xc0 [ 315.476375][T16904] ? __kasan_kmalloc+0xaa/0xb0 [ 315.476388][T16904] request_firmware+0x35/0x50 [ 315.476399][T16904] reg_reload_regdb+0x85/0x460 [ 315.476411][T16904] ? __pfx_reg_reload_regdb+0x10/0x10 [ 315.476422][T16904] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 315.476436][T16904] ? nl80211_pre_doit+0x19a/0xae0 [ 315.476449][T16904] genl_family_rcv_msg_doit+0x214/0x300 [ 315.476464][T16904] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 315.476479][T16904] ? bpf_lsm_capable+0x9/0x10 [ 315.476490][T16904] ? security_capable+0x80/0x260 [ 315.476504][T16904] genl_rcv_msg+0x560/0x800 [ 315.476517][T16904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.476530][T16904] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 315.476542][T16904] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 315.476552][T16904] ? __pfx_nl80211_post_doit+0x10/0x10 [ 315.476568][T16904] netlink_rcv_skb+0x159/0x420 [ 315.476579][T16904] ? __pfx_genl_rcv_msg+0x10/0x10 [ 315.476592][T16904] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 315.476605][T16904] ? netlink_deliver_tap+0x1ae/0xcc0 [ 315.476616][T16904] genl_rcv+0x28/0x40 [ 315.476627][T16904] netlink_unicast+0x585/0x850 [ 315.476639][T16904] ? __pfx_netlink_unicast+0x10/0x10 [ 315.476652][T16904] netlink_sendmsg+0x8b0/0xda0 [ 315.476664][T16904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.476675][T16904] ? selinux_socket_sendmsg+0x198/0x2f0 [ 315.476692][T16904] ____sys_sendmsg+0xa4d/0xbe0 [ 315.476709][T16904] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.476721][T16904] ? __pfx_____sys_sendmsg+0x10/0x10 [ 315.476739][T16904] ___sys_sendmsg+0x190/0x1e0 [ 315.476750][T16904] ? __pfx____sys_sendmsg+0x10/0x10 [ 315.476760][T16904] ? __lock_acquire+0x49f/0x1a40 [ 315.476779][T16904] __sys_sendmsg+0x160/0x210 [ 315.476793][T16904] ? __pfx___sys_sendmsg+0x10/0x10 [ 315.476810][T16904] do_syscall_64+0x115/0x870 [ 315.476823][T16904] ? clear_bhb_loop+0x40/0x90 [ 315.476835][T16904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.476846][T16904] RIP: 0033:0x7efd1199e0d9 [ 315.476857][T16904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.476868][T16904] RSP: 002b:00007efd12856028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.476887][T16904] RAX: ffffffffffffffda RBX: 00007efd11c25fa0 RCX: 00007efd1199e0d9 [ 315.476894][T16904] RDX: 0000000004040810 RSI: 0000200000000480 RDI: 0000000000000004 [ 315.476901][T16904] RBP: 00007efd11a35024 R08: 0000000000000000 R09: 0000000000000000 [ 315.476907][T16904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.476913][T16904] R13: 00007efd11c26038 R14: 00007efd11c25fa0 R15: 00007ffce95e48c8 [ 315.476923][T16904] [ 315.644983][T16891] sctp: sctp_close: sk:ffff88805911ca00, timeout:0 [ 315.654595][ T42] audit: type=1400 audit(2000000002.779:5058): avc: denied { firmware_load } for pid=16903 comm="syz.3.3004" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 315.656429][T16891] sctp: sctp_destroy_sock: sk:ffff88805911ca00 [ 315.736472][T16896] sctp: sctp_close: sk:ffff888061630000, timeout:0 [ 315.739140][T16896] sctp: sctp_destroy_sock: sk:ffff888061630000 [ 315.741795][T16896] sctp: sctp_close: sk:ffff8880585af1c0, timeout:0 [ 315.744414][T16896] sctp: sctp_destroy_sock: sk:ffff8880585af1c0 [ 315.777430][ T42] audit: type=1800 audit(2000000002.909:5059): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16741 res=0 errno=0 [ 315.786599][ T42] audit: type=1800 audit(2000000002.919:5060): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16999 res=0 errno=0 [ 315.819201][ T42] audit: type=1800 audit(2000000002.949:5061): pid=5150 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16612 res=0 errno=0 [ 317.096557][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.099483][ T1445] ieee802154 phy1 wpan1: encryption failed: -22