last executing test programs: 3m12.524462477s ago: executing program 3 (id=220): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000100)={0x0, 0x4, 0x4, 0x81, 0xe, "0000aef800001000"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xd) ioctl$TIOCOUTQ(r0, 0x5411, &(0x7f0000003240)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x103802) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x189482) close(0x3) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x400) ioctl$FE_READ_SNR(r2, 0x80026f48, &(0x7f00000004c0)) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) fstatfs(r1, &(0x7f0000000040)=""/173) 3m11.67515343s ago: executing program 3 (id=229): r0 = add_key(&(0x7f0000000280)='.request_key_auth\x00', &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000240)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYRESDEC=r0]) chdir(&(0x7f0000000100)='./file0\x00') syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r1, &(0x7f00000000c0)='R', 0x1) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioprio_get$uid(0x3, 0x0) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents64(r3, &(0x7f0000000000)=""/166, 0xfb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r4, 0x1, 0x3b, 0x0, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) 3m10.815249443s ago: executing program 3 (id=233): sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d80000001e0081054e81f782db4cb9040a1d080006007c095dd2086518000a800000000003600e1208000f0000000406a80016c008", 0x35}], 0x1}, 0x0) (async) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000300)={0x60, 0x0, &(0x7f000007c000/0x4000)=nil, &(0x7f0000839000/0x1000)=nil, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x57}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x24, 0x10, 0x1, 0x70bd26, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xe}, {0x4, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24004002}, 0x0) (async) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r1, 0x0, 0x0) (async, rerun: 32) setreuid(r1, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) (async, rerun: 32) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) sendmsg$NL80211_CMD_SET_PMK(r2, 0x0, 0x50) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r4, 0x1, 0x4, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x7, 0x5, 0x7, 0x1, 0x5, 0x4ec9, 0x1]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000800}, 0x80) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), r2) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x84, r6, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x2c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x87}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1b}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7c}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xfff8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1000}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x4040000) 3m10.610818796s ago: executing program 3 (id=234): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x820061, &(0x7f00000001c0)=ANY=[@ANYBLOB='nr_inodes=8(\x00']) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1d2) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) write(r1, &(0x7f0000000000)="41000200010001", 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4402000010000100faffff9f00010000e0000002000000000000000000000000ac1414aa000000000000000000000000000107964e2300090000000033000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 3m10.554886527s ago: executing program 3 (id=235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000001c0)={0x3b, &(0x7f0000000140)=[{0x19, '\x00', @st={0x4, [{0x0, @uvalue=0x1}, {0x0, @uvalue=0xfffffffffffffffd}, {0x3, @uvalue=0xb}, {0x0, @svalue=0xd83a}]}}]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x3}}, 0x20) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fcd000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0xffffffffffffffa9}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000045b45011c8c377fe00"}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c9cb860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b103006bb18000ffc00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 3m10.506020878s ago: executing program 3 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 3m10.482387325s ago: executing program 32 (id=236): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000018110000", @ANYRES32=r0, @ANYRESDEC=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x24, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0x404f444) r4 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000001300)=[{0x18, 0x110, 0x1, '\x00'}, {0x10, 0x110, 0xb}], 0x28}, 0xfc40) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f00000003c0)="79933ba8190000e5ffa53b00008f", 0x0, 0x8001, 0x503, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff80fe}, 0x50) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) 1m41.773891976s ago: executing program 2 (id=1208): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0\x00', 0x0, 0x18f881, 0x0) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) (async) r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r3) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900", [0x80000, 0x2000000000001]}}) openat(r2, &(0x7f00000000c0)='./file0/../file0\x00', 0xa000, 0x2) faccessat(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x0) (async) faccessat(r0, &(0x7f0000000080)='./file0/../file0\x00', 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) 1m41.662959345s ago: executing program 2 (id=1210): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6(0xa, 0x2, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='xfs\x00', 0x8080, &(0x7f00000001c0)='discard') setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) socket$inet6(0xa, 0x2, 0x0) (async) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='xfs\x00', 0x8080, &(0x7f00000001c0)='discard') (async) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) (async) bind$inet6(r2, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) (async) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000700)="580000001500add427323b472545b45602117fffffff81000e220e2280007f000001e801000500000000003ac7100003ffffffffd3daffffffffffe7ee000000deff000000ddbd57cff2ffe293a2afebd998c88d5d6b3710", 0x58}], 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x3, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) (async) 1m40.494396584s ago: executing program 2 (id=1213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r0, &(0x7f0000000480)={@void, @void, @eth={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x6, 0x0, 0x6}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x14, 0xa8, 0x0, 0x8, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @multicast1}}}}}}, 0x26) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r4, 0x4) ioctl$VIDIOC_G_AUDOUT(r4, 0x80345631, &(0x7f0000000000)) r5 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xffeffffc}, {0x16}]}, 0x10) sendto$inet6(r5, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000040)={{0x4, 0x3, 0x1, 0x1ff, 'syz1\x00', 0x8}, 0x1, [0x10000, 0x6, 0xffffffffffffff91, 0x5, 0x3, 0x8, 0x10, 0xffffffffffff0408, 0x10001, 0x40, 0x8, 0x8, 0x5, 0x2, 0x25a7, 0xfff, 0x7, 0x5, 0x40, 0x5, 0x6, 0x7fffffffffffffff, 0x100000000, 0x1, 0x8da, 0x100000001, 0x3, 0x30, 0xf, 0x0, 0x3ff, 0x7, 0x40, 0xce8, 0xa, 0x7fffffffffffffff, 0xc, 0x7f, 0x0, 0x0, 0x7ff, 0x401, 0x7ff, 0x0, 0xfffffffffffffff9, 0x8000, 0x5, 0xfa08, 0x8, 0x1, 0x5, 0x9, 0x7000000, 0x5, 0x7, 0x4e, 0x8, 0x3, 0x10001, 0x2, 0x6, 0x3, 0x9, 0xa4d, 0x9, 0xfffffffffffffffa, 0x3, 0x100000000, 0x1, 0x7, 0x7, 0x1, 0x4, 0x3, 0x4, 0x9f7, 0xffffffff, 0x3, 0x7ff, 0x81, 0x0, 0x0, 0xffff, 0x7, 0x9, 0x6, 0x7, 0x80000001, 0x3, 0x9, 0xffff, 0x9, 0x6, 0x2, 0x114, 0xfffffffffffffffa, 0x8000000000000001, 0x2, 0x80, 0x4, 0x4, 0x3, 0x1, 0x4, 0x5, 0x3, 0x1, 0x5, 0x0, 0x5, 0x7, 0x2, 0x8, 0x3, 0x2, 0x9, 0x80000001, 0xa8, 0x69a5, 0x5, 0x1, 0x5, 0x1, 0x1, 0xf660, 0xfffffffffffffff1, 0xffffffffffffff7f, 0x10]}) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x26000, 0x1000, &(0x7f000000a000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000580), 0x101080, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_RUN(r9, 0xae80, 0x0) 1m39.514183606s ago: executing program 2 (id=1233): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x2, 0x1}, 0x6) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x98d486, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c0002800500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0x2, 0x1}, 0x6) (async) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) (async) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) (async) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) (async) mount$bpf(0x200000000000, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x98d486, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) (async) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00'/20, @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800b00010067656e65766500000c0002800500040001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) 1m39.510398404s ago: executing program 2 (id=1234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r8, 0x4008550c, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'batadv_slave_0\x00', 0x2000}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 1m39.352619581s ago: executing program 2 (id=1235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x16, @val=@tcx={@void, @value=r3}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltfilter={0x44, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0xfff1}, {0xd, 0x9}, {0x5, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8188}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48841}, 0x20000000) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x8480, 0x0) ioctl$CDROMVOLREAD(r4, 0x5313, &(0x7f0000000200)) 1m39.329179222s ago: executing program 33 (id=1235): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bridge_slave_1\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r3, r2, 0x25, 0x16, @val=@tcx={@void, @value=r3}}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=@deltfilter={0x44, 0x2d, 0x400, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x2, 0xfff1}, {0xd, 0x9}, {0x5, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_DIVISOR={0x8, 0x8, 0x8188}]}}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x48841}, 0x20000000) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000100), 0x8480, 0x0) ioctl$CDROMVOLREAD(r4, 0x5313, &(0x7f0000000200)) 1m35.043663611s ago: executing program 5 (id=1269): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x101200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2e) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x36}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000080)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b800000100265d7aeabbc900bbc9000f30300f272d9d53bf0000c4b9e16dc30101220f01c3", 0xfffffffffffffdab}], 0x33, 0x14, 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f0000000100)={0x81, 0x0, 0x3}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m32.013148058s ago: executing program 5 (id=1278): syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20380, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x9a, &(0x7f0000000280)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x1, 0x6, 0x30, 0x9, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x2, 0x6, 0x0, 0x9, {{0xa, 0x24, 0x6, 0x0, 0x0, "681a274870"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0xd6, 0x2, 0x9c}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x2}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x1, 0x8, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x3}, @dmm={0x7, 0x24, 0x14, 0x3, 0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x9, 0x1, 0x41b}, @mbim={0xc, 0x24, 0x1b, 0x8, 0xfffc, 0x9, 0xe9, 0x9, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x22, 0xf6, 0x6}}], {{0x9, 0x5, 0x82, 0x2, 0x10, 0xe, 0x0, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x8, 0x3, 0x4}}}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x6, 0x6, 0x7, 0xff, 0x6}, 0xc, &(0x7f0000000240)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x1c, 0x3, 0xc, 0x4}]}, 0x6, [{0x102, &(0x7f00000014c0)=@string={0x102, 0x3, "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"}}, {0xdf, &(0x7f0000001600)=@string={0xdf, 0x3, "476d7a8e203f53af82873f837112e4f4eae453665b102988ee8117e1c3a88079d5201d1223b340ee7744a827ecbba38b7e88cf15910c68ecb6bd5ffcb80566e0f982d057d5b240532e6677f6e1a7a687a3fa8ec0a546c8c7e8164e802d6b82ffaa8f6d63ba9ca60b64e1098c1b97fe0bf6f82fae433dbdd9192a1821132cb7af868a8e6aba1a2f111ec62d4feb49ca7b6eae54530207fdddf9771029f6e8722baa6813cbd0c1b20c0c495fe3c9d3df433b5d631af8805572b6820eb0ecba86bbf854c5674f03c407daf77726866075332d25bcb7b1dc22a6f429a7a1b5"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x44f}}, {0x3e, &(0x7f0000000440)=@string={0x3e, 0x3, "4ff4d787bbf4a79ce8c8788d29f092d8e70c9459b5e173f104fe3d5fc9551a634d9fcecef01c0f378f942aaaaacefa939a1ef8f983d82d7203390585"}}, {0x32, &(0x7f0000000400)=@string={0x32, 0x3, "36cfac916b047c3dac5b5c271f127ee9fc96cd9d4b20906202cf6830a2f5ec48d75facf05029cdb723ca7649201f7054"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x40a}}]}) readv(r0, &(0x7f0000003500)=[{&(0x7f00000000c0)=""/112, 0x70}, {&(0x7f00000004c0)=""/4096, 0x1000}], 0x2) r1 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r1, 0x3e, &(0x7f0000000040)={0xd, 0x6, 0x10001}, 0x0) 1m29.704277337s ago: executing program 5 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket(0x1f, 0x3, 0x1ff) connect$pppl2tp(r1, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r2, 0x2, 0x2, 0x4, 0x2, {0xa, 0x4e21, 0x1, @private2, 0x94}}}, 0x3a) (async) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8c4}, 0x800) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x40110) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), r3) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01072bbd74000000000005"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r5) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000003c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r6, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xe}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xcc800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c00"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) (async) socket$inet6_sctp(0xa, 0x1, 0x84) 1m29.703099143s ago: executing program 5 (id=1300): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket(0x27, 0x1, 0x80000001) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @multicast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) select(0x2a, 0x0, &(0x7f0000000340), &(0x7f0000001900), &(0x7f0000000440)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000007b00), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000007e40)={0x0, 0x0, &(0x7f0000007e00)={&(0x7f0000007b40)={0x24, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x80) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp(0xa, 0x2, 0x3a) rt_sigprocmask(0x2, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x1) ioctl$KVM_SET_SIGNAL_MASK(r10, 0x4004ae8b, &(0x7f0000000100)={0x8, '\x00\x00\x00\x00\x00\x00\x00\x00'}) ioctl$KVM_RUN(r10, 0xae80, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x6, &(0x7f0000000040)="91", 0x1) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=@newlink={0x94, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40406}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xffffa5a4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x5e35}, @IFLA_GRE_LINK={0x8}]}}}, @IFLA_MAP={0x24, 0xe, {0x6, 0x4, 0x7f, 0x7b3e, 0x4, 0xe}}, @IFLA_IFALIASn={0x4}, @IFLA_PROTO_DOWN={0x5, 0x27, 0xe}]}, 0x94}, 0x1, 0x0, 0x0, 0x40400}, 0x0) close(r5) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x3fd}, @generic={0x0, 0x8, "d588380003c1"}]}}}}}}, 0x4e) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r1, 0x40089413, &(0x7f0000000100)=0xffffffffffffffff) 1m28.482707447s ago: executing program 5 (id=1314): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r5, 0x710, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_STA_EXT_CAPABILITY={0x40, 0xac, "a084e10a050f5e07e351c61e1b743f92a7a40e0d7cc2754222fba56fbd81ed99fb0329595f896e930d93e688d3670b5e2048c97cacac427534575ac8"}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4004091) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="c069ac26", @ANYRES16=r2, @ANYBLOB="01002cbd701004000000050000000600010005000000080009000200000008000b000300000008000c00a80a000005001300c7000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1m28.4244898s ago: executing program 5 (id=1316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000004300070125bd7000fcdbdf42027c0000040045800800018004001c80e515523835c16226e47437175c962a47889c06010af44a7e28a3ce6ab3285a77c16913e778c25d6aa2e4deb6e4c102a533b722c74fa776c414274152fde90fb84dfcac15d7e3a2d813486e29f67919dc74b0430b3def82608c6d22741b5a7049838dec0395ea60f93cf88d77c83ee8cfbc59b589a8622e716d2c99d9f65e7719d251e705fcb489281daf8d6ddaeff14356b2c0974f8e111b62d76870c4aa1d79b9a8"], 0x20}}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r1, &(0x7f0000000000), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x35c14c44, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x100}}, 0x50) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) (async) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0xee00) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) 1m13.4416092s ago: executing program 34 (id=1316): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000004300070125bd7000fcdbdf42027c0000040045800800018004001c80e515523835c16226e47437175c962a47889c06010af44a7e28a3ce6ab3285a77c16913e778c25d6aa2e4deb6e4c102a533b722c74fa776c414274152fde90fb84dfcac15d7e3a2d813486e29f67919dc74b0430b3def82608c6d22741b5a7049838dec0395ea60f93cf88d77c83ee8cfbc59b589a8622e716d2c99d9f65e7719d251e705fcb489281daf8d6ddaeff14356b2c0974f8e111b62d76870c4aa1d79b9a8"], 0x20}}, 0xc000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r1, &(0x7f0000000000), 0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) write$char_usb(r2, 0x0, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000380), 0xd, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r4, 0xc0405602, &(0x7f00000000c0)={0x1c, 0x1, 0x0, "6040a7190200002000000000000000ff1057e31e94000000000000000006ff00", 0x42303159}) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x0, 0x35c14c44, 0x0, 0x8, 0x3, 0x0, 0x0, 0x0, 0x100}}, 0x50) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) r7 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r7, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) (async) setsockopt$inet6_IPV6_HOPOPTS(r7, 0x29, 0x36, &(0x7f0000000100)=ANY=[], 0x8) (async) r8 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0xee00) recvmmsg(r7, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) 1m9.924065961s ago: executing program 0 (id=1528): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x1d, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x547a}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1000000}}, @jmp={0x5, 0x1, 0x0, 0x9, 0x9, 0xffffffffffffffe0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='GPL\x00', 0x3ff, 0x85, &(0x7f0000000500)=""/133, 0x41000, 0x4, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000005c0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000600)={0x0, 0x3, 0x1, 0x9}, 0x10, 0x1dbf0, 0xffffffffffffffff, 0x1, &(0x7f0000000640)=[0x1, 0x1, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000680)=[{0x3, 0x5, 0xe, 0x4}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x11, '\x00', 0x0, @fallback=0x5, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x112, 0xe, 0x0, &(0x7f0000000080)) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'bond_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 1m9.822678337s ago: executing program 0 (id=1529): r0 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r0, 0xc01064c1, &(0x7f0000000080)) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffa000/0x4000)=nil) 1m9.821544097s ago: executing program 0 (id=1530): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x14, r1, 0x1, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40004) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000080)={0x4c, r3, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '+-\xff\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (async) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6000a95e03006a4fd7c94c7c4dc13ae70000", @ANYRES16=r3, @ANYBLOB="000029bd7000fcdbdf250800000014000600fe80000000000000000000000000001408000c000300000008000c000300000014000600fe8000000000000000000000000000aa1400060000000000000000000000ffffac141419"], 0x60}, 0x1, 0x0, 0x0, 0x801}, 0x48) (async, rerun: 32) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 32) r7 = socket$kcm(0x21, 0x2, 0x2) (rerun: 32) sendmsg$kcm(r7, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000000), 0xfea7) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r8, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000100000001dcdf250100000008000100", @ANYRES32=r9, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="8ff23dcdf6ee84babae6ea3a4c08536a1c998f2a54bb576fe46c81bf40db409e5933be2fad43ee7910e62902d17ea1acd791a68143191d07f8b1781675130842c39ac561e765b36d49ae926af6cd02fb948e2c18ece7b3df0e31ecae6b8637b9f254df9a6c5130a482e49362dc008546d305638ce7858ec9007815fc986f9172552ec41761fbcc2b2c28702e6b572c61237ecb53abd9a23a0cc3bbc1666c2ae96cfd91ba9e12228d1e79a7ee01090000000000000000000000f37b938a16f30d361eb8cade4eceda6b27f8e09364db8f3fd1"], 0x5c}, 0x1, 0x400000000000000}, 0x40810) (async) waitid(0x0, 0x0, &(0x7f0000000240), 0x41000004, &(0x7f0000000040)) 1m9.704084867s ago: executing program 0 (id=1531): r0 = msgget$private(0x0, 0x790) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$kcm(0x11, 0xa, 0x300) recvmsg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) (async) umount2(&(0x7f0000000100)='./file0\x00', 0x4) (async) r3 = fanotify_init(0x20, 0x1000) (async) r4 = fcntl$dupfd(r1, 0x406, r1) fanotify_mark(r3, 0x1, 0x40000019, r4, 0x0) (async) read$FUSE(r4, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r4, &(0x7f0000000440)={0x130, 0xffffffffffffffda, r5, {0x7, 0x8, 0x0, '\x00', {0x80, 0x6, 0x0, 0x8, 0xee00, r6, 0x2000, '\x00', 0xffffffffffffffff, 0x6, 0x7, 0x12928860, {0x0, 0x1000}, {0x5, 0x101}, {0x7fffffff, 0x5}, {0x0, 0x1}, 0x1000, 0x7, 0x7, 0x7}}}, 0x130) (async) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, r6, 0x20, 0x88}, 0x0, 0x0, 0x7, 0x2, 0x2, 0x9, 0x313, 0x4, 0x7a0, 0x1000, 0x0, 0xffffffffffffffff}) (async) r7 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r9 = syz_open_dev$video4linux(&(0x7f0000000400), 0x7, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r9, 0xc0085666, &(0x7f0000000080)={0x2, 0x4}) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x5, 0x2}, {0x0, 0x4}}}, 0x24}}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r8, {}, {0xffff, 0xa}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xb, [0x5, 0xf, 0x10, 0x3, 0x2, 0x5, 0x0, 0x0, 0x4, 0xb, 0xe, 0xb, 0x4, 0xf, 0x5, 0xd], 0x1, [0x0, 0x1, 0x0, 0x3c3, 0x7f, 0x442, 0x2, 0x6, 0x9, 0x1000, 0x4, 0x3, 0xfff8, 0x5, 0xa, 0x3dd], [0x2, 0x7, 0x5, 0xfffa, 0xf, 0x1, 0x7, 0x40, 0x7, 0x4, 0x7, 0x7f, 0x5f94, 0x2, 0x9, 0xf46]}}]}}]}, 0x8c}}, 0x0) (async) r13 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_FIOGETOWN(r13, 0x8903, &(0x7f0000000000)) 1m9.703750456s ago: executing program 0 (id=1532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040), &(0x7f0000000100)=0x4) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000600)) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x184, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x12, 0x0, 0x1, [@generic="d09178d2da3477ec73a38ffffcd82caf103bc848f7ff22290bd6c0375f437b167f431ad24706d7263978db87dbaa159b0fdec8e129e835688cf370555aa8c6dffe261622b114299d6f"]}, @nested={0x11f, 0x6, 0x0, 0x1, [@typed={0x109, 0x0, 0x0, 0x0, @binary="7ec7ba67da011673ff1ab09e525585242784f25a94b9c1a68abdaf9f8add1006a67b4d693c1288f571c5170a818b005fdb1329cbfdf218310f40d1f304d996dc626d41898d87422f8bbb41206c39321b335fc70c9286ebdbb773955fe26f7c912cd9171c6d320a539fa594287d65bcb8b52f24e49a1ba39633cd52f1c1bf2930116650533617839f03127338b37b0d07242de37293ea67a40f2a4cd4cc5063766dac6d2766fe27e39a9154f81b08f957567d5997ae2ac9132fb043e493299254b85d88c6c24bbbd025319996e97994723530e334584477d2eb82c28b60bf2ff5b963ee93a2d8b0c02aeb1ab1e8f02d332611e22b66a6e906836600"/261}, @generic="d83bea4ae74b4d194feb3f8d8b6dcf"]}]}, 0x184}}, 0x0) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x6, @none, 0x9, 0x2}, 0xe) 1m9.333684628s ago: executing program 0 (id=1534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xb, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r1, 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00004cd000/0x1000)=nil, 0x1000}}) syz_clone(0x40080020, 0x0, 0x0, 0x0, 0x0, 0x0) 1m9.264111292s ago: executing program 35 (id=1534): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f00000000c0)=0xb, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000240)="8a", 0x1, 0x8d1, &(0x7f0000000080)={0xa, 0x3, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9}, 0x1c) listen(r1, 0x1) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) r4 = shmget$private(0x0, 0x800000, 0x54003f00, &(0x7f0000800000/0x800000)=nil) shmat(r4, &(0x7f0000000000/0x4000)=nil, 0xbbdccba4532b703b) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x300}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f00004cd000/0x1000)=nil, 0x1000}}) syz_clone(0x40080020, 0x0, 0x0, 0x0, 0x0, 0x0) 1m6.852710187s ago: executing program 7 (id=1562): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r2 = dup(r1) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="7f454c4606ff78b3050000000000000002003e00cd000000c9030000000000004000000000000000ea0200000000000002000100050038000101"], 0x178) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32=r4, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000083, 0x0, 0x8001}]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000380)={0x1, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000) 1m6.713083301s ago: executing program 7 (id=1566): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000140)={0x80, 0x6, 0x303, 0x4, 0x31, 0xfffe, 0x0}) r1 = syz_open_dev$vbi(&(0x7f0000002080), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000002180)={0x5, @raw_data="c1a21ddfb318c2836cfd949038aa7bc75a2f9c13072c603a03b4841d8fe98ad10de911e9cbc86b7cb651f219c89725f226b63d564da1bc6f019b2dd0f38a570ef8d4dbff6c5b1a459a39bc672e08bd6c93c5b41fb7a10026422bf146785806e191787aa8254247b7272378b20f575fe93bf88ab80d88c5e2848aa38b11b936d9208e8cf5b431d6b29ef220e38f2324d80b54468ec244f85480ef5291b18ce48c5651e6cd8bbbbca2c748c4eb3cc5645c4ffe944e1465d85aeb8894bf15db71eb4d4eb61996670a84"}) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000009c0)=@urb_type_iso={0x0, {0x0, 0x1}, 0xc, 0x10402e1cefa424f4, &(0x7f0000000740)="e933d6834f9736be4af1d7a25ae4bf5eb70e4aae5247ef6c182c9525c59bb7962f253a290376c1ea5dffe4b61e92405f05687f5f302cdd4f3f601670050d511e7067edcf4e9fe3f1ed95f24b8866326f92c337b8f8aabc4548c8e6baa50e29a2f6910fda26ddf782fd117100473cb4e3f2f15372e3b70210faf503de3df089bc555514c180032667aa95d6abd5a191c974506899c167040bf3b5c6eb13414630244b8517a1e08e20ee3bb5ff6ced221da6fdcd1515ab63796b88596fd9b4d13932f847561e2df593f87789843dd24e9adc5501b5289f0b59f92db068205500859cad9d483ade0fcbb247762c8b8fccbf651670be55a650cd041e8a627a", 0xfd, 0x122dc000, 0x3, 0x71, 0x8, 0x401, &(0x7f0000000840)="86a475098c797521d475cc59c05dc492427ba229941263356752c3b045a5e6274cd81f6679728be9ad016d063ebf4bacac6fafb32d29b5ef69f952768494e84ff6", [{0x9, 0x100, 0x7}, {0x2, 0x5, 0x8}, {0x5, 0x8, 0xa}, {0x5, 0x87a4, 0x1ff}, {0x1, 0xf, 0x4}, {0xc1b7, 0x8001, 0x2}, {0x6, 0x9, 0x7}, {0x80, 0x6, 0x8}, {0x1, 0x3, 0x68533632}, {0xc, 0x58c, 0xd20a}, {0x5, 0x0, 0x6}, {0x1, 0x7, 0x677b}, {0x9, 0x7f, 0x401}, {0x8, 0x1, 0x5}, {0x8000, 0x1ff, 0x7}, {0xf, 0x69a9, 0xffffd8c8}, {0x7, 0x8, 0xffffffff}, {0x6, 0x0, 0x5}, {0x4, 0x24, 0x5}, {0x7, 0x80, 0xfffff6bc}, {0x3, 0x1, 0x80000000}, {0x2c, 0xffffffff, 0x4ab3}, {0x7, 0x8c4f, 0x297fbe93}, {0x1, 0xff, 0x2}, {0x6, 0x80000001, 0x334f}, {0xffffff81, 0x81, 0x4}, {0x1, 0x10000, 0x2}, {0x4, 0x6, 0x3}, {0x80000000, 0x2, 0x9}, {0x1, 0xf5, 0xf}, {0x9, 0x0, 0x7}, {0x8, 0x322c, 0x400}, {0x1, 0x1, 0x632}, {0x8, 0x7fff, 0x9}, {0x2, 0x44dfba42, 0x80}, {0x8, 0x2, 0x4}, {0x0, 0x5, 0x1}, {0x3, 0x3, 0x6}, {0x5, 0xacc51d58, 0x6f86}, {0x401, 0xaa, 0x81}, {0x8, 0x0, 0x4}, {0x7, 0x4, 0x8}, {0x101, 0xffffffff, 0x80000000}, {0xe7b, 0x6}, {0x9, 0x4, 0x35f}, {0x9, 0x9, 0x6}, {0x9, 0x1, 0x6}, {0x29ef, 0x0, 0x3}, {0xfffffffc, 0x3, 0x8}, {0xd74c, 0xe, 0x3}, {0x4, 0xd, 0x3}, {0x40, 0x2, 0x5}, {0x9, 0x8, 0xfffffffe}, {0x4, 0x64fa}, {0x9, 0x2, 0x9}, {0x1ff, 0x0, 0x64b4}, {0x0, 0x8, 0x775}, {0x9, 0xd2c, 0x3}, {0x8, 0x61b, 0x7}, {0x8001, 0xc, 0x4}, {0xc, 0x9, 0x4}, {0x5b7, 0x1, 0x7}, {0x9, 0x1, 0x4}, {0x2, 0xb227}, {0x5, 0x200, 0xfff}, {0x3, 0x4, 0xbcb}, {0x6, 0x0, 0xffff7fff}, {0x4, 0x6, 0x1}, {0xe3, 0x9, 0x3}, {0xa3, 0xfffff26b, 0x4}, {0x0, 0x0, 0x9}, {0x2, 0x8, 0xffffffff}, {0xf94e, 0x3, 0x2}, {0x4, 0x800, 0x1}, {0xcd2, 0x7fffffff, 0x6}, {0xff, 0x81, 0xffff0001}, {0x4c3, 0x8}, {0x7, 0x9, 0x1}, {0x100, 0x0, 0xb}, {0x9, 0x2b, 0xffffffff}, {0xff, 0x8, 0x6c}, {0x5, 0x8, 0x5}, {0x736c, 0xa012, 0x4}, {0xdb9d, 0xfffffff6, 0x9}, {0xffff65d7, 0xa, 0x8}, {0x401, 0xb7, 0xf407}, {0x4, 0x6, 0x2}, {0x385c00, 0x83, 0x6}, {0xf, 0x5, 0x4}, {0x7, 0x5, 0x6}, {0x9, 0x3, 0x7}, {0x5, 0xfffffff8, 0x1000}, {0x7a, 0x4, 0x9}, {0x5, 0x3, 0xffff7fff}, {0x1, 0x2, 0x8}, {0x7, 0xfc83, 0x5}, {0x2, 0x1, 0x7ff}, {0x7, 0x101, 0x3fffc00}, {0x0, 0x12, 0x2}, {0x8000, 0x5, 0x1}, {0xfb7, 0x9, 0x3}, {0x3, 0x1ff, 0x3}, {0xf, 0x2, 0x8}, {0x200, 0x9, 0x80}, {0xa, 0x4, 0x2}, {0xffffffff, 0x10000, 0xe}, {0x1c9, 0xbf, 0x6}, {0x5, 0x80000000, 0x3}, {0xffffffff, 0x9, 0x80000000}, {0x2, 0xfffffff9, 0x6}, {0x7326, 0x10000, 0x4}, {0xb, 0x6, 0x3}, {0xff, 0xffffffff, 0x401}]}) r2 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000540)={0x0, &(0x7f0000000180)}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a2c0000180a05000000000000000000020001000c0005400400000000000002090000000000000300000a000000000000000000000000000000abcb79d410bbcd79e5d01d8201b521e188bf62274e8276b5c0d997275f9844fff2f1f106e5470118dc3d3823ef91c913625d5efb752bf609000000000000007a83"], 0x54}, 0x1, 0x0, 0x0, 0x4044054}, 0x880) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000980), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000180)=0xffffffff) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000580)) 1m6.633283741s ago: executing program 7 (id=1568): r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x13, r0, 0x81000000) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="6b00000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000240012800c0001006d6163766c616e00140002800800030001000000080001001000000008000500", @ANYRES32=r3, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000b40)={0x2, @win={{0xd, 0x401, 0x3ff, 0x7ff}, 0x0, 0x401, 0x0, 0x3, 0x0, 0x2}}) r5 = socket$netlink(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x8, 0x24, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0x40000000, 0x3, 0x2]}}) 1m6.47956613s ago: executing program 7 (id=1571): r0 = socket$nl_route(0x10, 0x3, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f00000008c0)='.\x00', &(0x7f0000000900)='erofs\x00', 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800010000000000000000973c20000a002000fe000000000400000800170001000000"], 0x24}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000140)={0x1c, 0x2ea, 0x0, 'queue1\x00', 0x8}) 1m6.479237758s ago: executing program 7 (id=1572): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_80211_inject_frame(0x0, 0x0, 0x1a) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x29, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) ioctl$sock_netdev_private(r6, 0x8914, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) poll(&(0x7f00000000c0)=[{r5, 0x700}, {r0, 0x4000}], 0x2, 0x1) r7 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0xfffffffffffffffe, 0x10043, 0x2000004, 0x3, 0x2004cb, 0x0, 0x4, 0xd2, 0x2, 0x9, 0x4000000000003, 0x0, 0x7], 0x41000, 0x2202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xb, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x40, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xd, 0x5, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xdddd1000, 0xdddd1000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x56}, {0x200000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xb0, 0x9}, {0xffff2000, 0x30}, {0x8000000, 0x7}, 0x80000028, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r5, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x2) truncate(&(0x7f0000000140)='./file0/file1\x00', 0xe2) 1m5.700208159s ago: executing program 7 (id=1583): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000300)={0x0, 0xe283}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0023000000bf2000000000000016001000071b48013d030100000000000702000000b0ff80bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000010000000095000000000000004d9bd591d5681c3e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x2) ioctl$TIOCSSOFTCAR(r6, 0x5412, &(0x7f0000000540)=0x13) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r8, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/137, 0x89}], 0x1}, 0x585}], 0x1, 0x100, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "3f669e76f4a4cb63b8bed51f0d192ac64013bf7ce86e341c3c4023ab0284c750", "7a6419e195178434853a3e9b1a944eaa61a5241fa8ecdbefd94b3b70919cb924", "046fed1109542c0adf35ad7318fc6dc1d4212ea4e435b8f7b89db292aa416b43", "16892c77c7349da2ee91ff0f0000e4b2f530a4bf4fbd158b6ec757f84da86657", "509dce72017823ba712dae662e4a38488ef40b0cff0ee40e4b1ef8bb86a2b9e3", "44dfa4c216a462b788788b70", 0x1, 0x1, 0xbe5d, 0x8, 0x80000000}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f00000000c0)='rdma') (async, rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x6, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x7, r10, r11, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) quotactl_fd$Q_SETQUOTA(r5, 0x0, r10, &(0x7f0000000440)={0x1, 0x5, 0x259b, 0xfffffffffffffff8, 0x6, 0xffffffff, 0xffffffff00000001, 0x8, 0xffff}) 50.707509877s ago: executing program 36 (id=1583): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r2, 0x4010942a, &(0x7f0000000300)={0x0, 0xe283}) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r4, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='netdevsim0\x00'}) (async) splice(r2, 0x0, r1, 0x0, 0xffffffffffff8000, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0023000000bf2000000000000016001000071b48013d030100000000000702000000b0ff80bc26100000000000bf6720000000000016020000000000016702000007000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000010000000095000000000000004d9bd591d5681c3e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf5fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async) ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000002c0)=0x2) ioctl$TIOCSSOFTCAR(r6, 0x5412, &(0x7f0000000540)=0x13) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) (async) recvmmsg(r8, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000380)=""/137, 0x89}], 0x1}, 0x585}], 0x1, 0x100, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000180)={'erspan0\x00', &(0x7f0000000740)=@ethtool_drvinfo={0x3, "3f669e76f4a4cb63b8bed51f0d192ac64013bf7ce86e341c3c4023ab0284c750", "7a6419e195178434853a3e9b1a944eaa61a5241fa8ecdbefd94b3b70919cb924", "046fed1109542c0adf35ad7318fc6dc1d4212ea4e435b8f7b89db292aa416b43", "16892c77c7349da2ee91ff0f0000e4b2f530a4bf4fbd158b6ec757f84da86657", "509dce72017823ba712dae662e4a38488ef40b0cff0ee40e4b1ef8bb86a2b9e3", "44dfa4c216a462b788788b70", 0x1, 0x1, 0xbe5d, 0x8, 0x80000000}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async, rerun: 32) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='cifs\x00', 0x0, &(0x7f00000000c0)='rdma') (async, rerun: 32) r9 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r9, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) read$FUSE(r9, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r9, &(0x7f0000004180)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0x6, 0xfffffffffffffffd, 0x6, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0x1, 0x0, 0xffffffff, 0x120, 0x2000, 0x7, r10, r11, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) quotactl_fd$Q_SETQUOTA(r5, 0x0, r10, &(0x7f0000000440)={0x1, 0x5, 0x259b, 0xfffffffffffffff8, 0x6, 0xffffffff, 0xffffffff00000001, 0x8, 0xffff}) 2.892767613s ago: executing program 1 (id=2310): r0 = fsopen(&(0x7f0000000100)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000130001"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) (async) bind$l2tp(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) (async) r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000000)) io_uring_enter(r3, 0x54, 0x4, 0xf, 0x0, 0x18) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r6, 0x401054d5, &(0x7f00000001c0)={0x2, &(0x7f0000000040)=[{0x30, 0x80, 0x5, 0xfffff018}, {0x6, 0x0, 0x0, 0x5387cf8b}]}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000016c0)=[{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000002840)="280ce463ff42ce3a03b10f47905117", 0xf}], 0x1, 0x0, 0x0, 0x20008081}], 0x1, 0x40800) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) (async) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000b40)={0x4bc, 0x1, 0x5, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0xc8b6}, 0x76, 0x1, 0x2, 0x3, 0x3, 'syz0\x00', "359b79af39a453092ee31066b8583693d1d6952303b3f450ccafdaa2afed8e3d", "517557f23457f4169de701bd42ffbc3a7970f43db986fc75dedef3324657ea1e", [{0x6, 0x9}, {0x8, 0x1, {0x2, 0x5}}, {0x3, 0x9, {0xa6e91f33dbdfc076, 0xaff}}, {0x4, 0x0, {0x0, 0xf7}}, {0x3361, 0x7, {0x1, 0xa9}}, {0x9, 0x5, {0x1, 0xfffd}}, {0x8001, 0x7ff, {0x1, 0x3}}, {0x5, 0xc, {0x2, 0x1}}, {0x5, 0x4, {0x0, 0x3}}, {0x1, 0x5, {0x3, 0x1}}, {0xfff7, 0x6, {0x3}}, {0x8001, 0x2, {0x3, 0x794}}, {0xb27, 0x81, {0x0, 0x9}}, {0xa73a, 0x6, {0x3, 0x7}}, {0x1, 0x81, {0x1, 0xa0ce}}, {0x3, 0x4, {0x2, 0x45bd8000}}, {0xe, 0x5, {0x2, 0x6}}, {0x86f3, 0x6, {0x2, 0x756d279a}}, {0x7, 0x3, {0x1, 0x8}}, {0x3e02, 0x6, {0x1, 0x1ff}}, {0x80, 0x9e, {0x0, 0x7}}, {0x1, 0x8, {0x3, 0xd2}}, {0x3, 0x1, {0x2, 0x7}}, {0xfffd, 0x40, {0x2, 0x4}}, {0x5, 0xc, {0x3, 0x5c}}, {0x41, 0x5, {0x3, 0x9}}, {0x8, 0x2, {0x0, 0xb}}, {0x1ee0, 0xa, {0x3, 0x952}}, {0x8, 0xc, {0x2, 0x401}}, {0x400, 0x5, {0x3, 0x7b9c}}, {0xa, 0x3}, {0x7, 0x3, {0x1, 0x10002}}, {0x1, 0x400, {0x2, 0x3}}, {0x4, 0xb, {0x1, 0x1e4}}, {0x9, 0x1ff, {0x1, 0x1}}, {0x4, 0x686d, {0x0, 0x2}}, {0x8, 0x7, {0x3, 0x3}}, {0x3ff, 0x3, {0x1}}, {0x4, 0x5, {0x2}}, {0x2, 0x2, {0x4cc257f97e0b9d68, 0x7}}]}}}, {{0x254, 0x1, {{0x2, 0x56}, 0x8, 0x5, 0xfff8, 0x6, 0x1a, 'syz0\x00', "db5091586749c8dc86d9beffe92b52a11ae5d45993a2c7f0281f887dfd115835", "1c6068ac28a345ef45223d2095cef73b3334cba005d6c2fdf29e6825f5f1be72", [{0x3b5e, 0x2, {0x3, 0x5}}, {0x8fd5, 0x0, {0x0, 0x7fffffff}}, {0x8, 0x1, {0x0, 0x7fffffff}}, {0x6, 0xe, {0x0, 0x3}}, {0x30, 0x79, {0x2, 0x2e28c078}}, {0x8, 0x7f, {0x2, 0x1}}, {0x3, 0xf001, {0x0, 0x3}}, {0x2, 0x7f, {0x2, 0x2}}, {0x5, 0x8, {0x3, 0x1}}, {0x8, 0x1, {0x1, 0x101}}, {0x3, 0x9, {0x1}}, {0x3, 0x414, {0x0, 0xb}}, {0x25, 0x1, {0x2, 0xffff8d98}}, {0xe, 0xa, {0x2, 0x8}}, {0xffff, 0xfffd, {0x1, 0x8}}, {0xc48, 0xfffd, {0x1, 0x2}}, {0x1, 0x4, {0x2, 0xf}}, {0x7f, 0x0, {0x2}}, {0x3, 0xce, {0x3, 0x7ff}}, {0x4, 0x2, {0x3, 0x2f832e6b}}, {0x1000, 0x3ff, {0x2}}, {0x7f, 0x5, {0x1, 0x3}}, {0x2, 0xe48, {0x2, 0x7fff}}, {0x2, 0x7, {0x3, 0x4}}, {0x200, 0xfffd, {0x2, 0x40}}, {0x6, 0x8, {0x0, 0x7}}, {0x16d, 0x8, {0x0, 0xd0}}, {0x0, 0xf3, {0x3, 0x9}}, {0x8, 0x0, {0x3, 0x74}}, {0x7, 0x1, {0x3, 0x5}}, {0x6, 0x2, {0x2, 0x59}}, {0x9220, 0x0, {0x1, 0x3}}, {0x1, 0x7, {0x1, 0xe7}}, {0x9, 0x8, {0x0, 0x19f8}}, {0xea, 0x2, {0x2, 0x10001}}, {0x9, 0x8001, {0x1, 0x101}}, {0xb6, 0x6498, {0x1, 0x80000000}}, {0x9, 0x1, {0x3, 0x5}}, {0x10, 0xfff, {0x1, 0x8}}, {0xfff6, 0x8, {0x3, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x4040}, 0x20000018) (async) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.358208444s ago: executing program 1 (id=2319): r0 = socket$inet6(0xa, 0x6, 0x9) sendto$inet6(r0, &(0x7f0000000000)="55e8d8e13eafbad55ba9e326c45b21177918da2ef5e977632701fd2aab235b529b756144ba708127b1547b961414867f678c927675eece382174892cb4e0630114cb2431c1d6c7187519e0533b319f9773ee631828380a754afb020c7d12ed975badf3480e65c6007c0e5164b7772bd10dd5280c7b79e7972680cce2fedb67b832", 0x81, 0x10, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r2) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7040fddbdf250300305206000e"], 0x1c}, 0x1, 0x0, 0x0, 0x20004090}, 0x8040) 2.255782355s ago: executing program 1 (id=2320): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) (async, rerun: 32) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async, rerun: 32) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x0, 0x0, 0xe, 0x1}, @enum]}}, 0x0, 0x32}, 0x20) (async, rerun: 32) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async, rerun: 32) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) socket$kcm(0x11, 0xa, 0x300) (async, rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) syz_emit_ethernet(0x33, &(0x7f00000001c0)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x100, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x11, 0x0, @opaque="c0e90236d9e21c57b6"}}}}}, 0x0) (async, rerun: 32) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='scalable', 0xfffd) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 2.255309648s ago: executing program 1 (id=2321): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) (async) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netpci0\x00', 0x0}) (async) statx(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x200, 0xbff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x0, 0x4e20, 0x400, 0xa, 0x20, 0x20, 0x0, r2, r3}, {0x1, 0x4, 0xffff, 0x0, 0x5, 0x1000, 0x48, 0xf}, {0x3e3, 0x6, 0x6, 0x9}, 0x6, 0x6e6bba, 0x2, 0x0, 0x1, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d5, 0x3c}, 0xa, @in=@rand_addr=0x64010102, 0x3503, 0x4, 0x0, 0x2, 0xffffffff, 0x887, 0xc5f1}}, 0xe8) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r5}, &(0x7f0000000140), &(0x7f0000000280)=r4}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf980000000000000d080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 2.193003692s ago: executing program 1 (id=2322): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x400, &(0x7f0000000040)={[{@uuid_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_PASTESEL(r0, 0x4bfb, &(0x7f00000010c0)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x80100, 0x0) 2.19228095s ago: executing program 1 (id=2325): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='sched\x00') ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.210763886s ago: executing program 4 (id=2338): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="140000f224000000000300"/20, 0x14}], 0x1}, 0x0) 1.072935781s ago: executing program 4 (id=2339): syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp=@remove_addr={0x1e, 0x91, 0x2, 0x0, "5922ef63dde1079a8da9d0150b14b8903280907e74a583beee77af67d1bbd7396988f9aa1d636de6ef3c0a0731115163553914933c232d7bd9ea1fa32f04683bb525f5a9b5c2dc75ebef37e7d9e2a196e9cd7c58d613d62084a69fae248c0e98de4c0cd48e0468ba9cfe6a12ada31bbc5fa5fc0da8cb427f8f5c3072a18dceb95cc28e26808ef7844b42303676ae"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x6, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) 1.068778524s ago: executing program 4 (id=2340): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000a00), 0x2, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f00000001c0)={0x9, {0x85b2, 0x7, 0x3dd, 0x3}}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10) (async, rerun: 64) ioctl$OCFS2_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x1, 0x1, 0xfffffffffffffff8, 0xf, 0x2, 0x7}) (rerun: 64) 983.015446ms ago: executing program 4 (id=2341): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newnexthop={0x2c, 0x68, 0x1, 0x70bd2d, 0x7ffffffc, {}, [@NHA_GROUP={0x14, 0x2, [{0x1, 0x4}, {0x2, 0x7}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40004) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000040)=[{0x2, 0x1, 0x0, {0xb, 0xf, 0x2}}, {0x100, 0x0, 0x0, {0x8, 0x74, 0x2}}, {0xb30, 0x0, 0x0, {0x6, 0x911b, 0x1}}, {0x9d, 0x0, 0x0, {0x6, 0x2, 0x2}}, {0x7f, 0x2, 0x0, {0x2, 0x3}}, {0x7, 0x1, 0x0, {0x25b2, 0x400, 0x1}}, {0x4, 0x2, 0x0, {0x88d, 0x9, 0x2}}, {0xa, 0x0, 0x0, {0xa37, 0xe, 0x1}}, {0x9, 0x2, 0x0, {0x5, 0xfffffffa, 0x2}}], 0x9, 0x20, 0x6, 0x667}) 912.414128ms ago: executing program 4 (id=2344): r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, 0x3ed, 0x200, 0x70bd2b, 0x25dfdbff, "7b7ab84d"}, 0x14}, 0x1, 0x0, 0x0, 0x4044080}, 0x8000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat2(0xffffffffffffffff, 0x0, 0x0, 0x68) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) sendto$inet(r2, &(0x7f0000000080)="7802dcbdfa02a5bf65ffdc0143bb72736631a0f0719a235574e4fa056116acc0b10eb3b603372a7fe930c9b44fbd977ea4", 0x27, 0x4040010, 0x0, 0xc) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='lp', 0x2) recvfrom$inet(r1, &(0x7f0000000040)=""/13, 0xfc69, 0x720, 0x0, 0xfffffffffffffd25) 522.190294ms ago: executing program 8 (id=2346): mkdirat(0xffffffffffffff9c, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000080)=ANY=[], 0x40) (async) setsockopt$inet6_opts(r1, 0x29, 0x36, 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x3, 0x80, 0x2f2, 0x6, 0x4, 0xc, 0x1, 0x7}, &(0x7f0000000740)={0x1, 0x8, 0x7, 0x9, 0x95, 0x7, 0xfffffffffffffff1, 0xfffffffffffffffa}, &(0x7f0000000780)={0xd37, 0x80000000, 0x6aa3, 0x7, 0x7, 0x8, 0xa, 0x14b}, &(0x7f00000007c0)={0x0, 0x3938700}, &(0x7f0000000840)={&(0x7f0000000800)={[0x6]}, 0x8}) (async) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)="c59154d428c5da9aa37d8863e02fc69239c401b742e121cc3caaa54c832fcd0bef78f5b5410df6405c566068ef308265a579c1cb863fed1570b0a034480916ff73a1b227774f5f5f467e602aeeebe8d23a4a642bffa5815ea7cc95ab21313545a8b511abadc2b8d44ffcdde73d54dac6a797905fcb4ce3ff20f7e8a1a2f9d3487a84fc0a6d77a2501038972d98f64e55a5d803d1f91bb5bca9178dc99edb71f944eaae75347400138320a8a3115b26110070a92a7ea402f2caf98a74aab64c3f2d9fc05f0eebe95e8ead3e7d95a30dc81c07b8ef56ce00", 0xd7}, {&(0x7f0000000200)="43a97a793270a11a599aac1fffb412b8c20ab14e0d7f62b2b97c553eab4f4a1c505ccd480796c8d6d2cc46e1ab578501120fec6aa769789e28f6a5d6b51660069d537489b01492661ce95ed86e2a9cc18d00b574ec335dbb9ce7d071ff14d3a38b12f8d279efe4811efb7426b3cd78c2a90c33235ef0641c6ebe98310798fbdd744e0f9be057cb9fc6fe177fd8832b3ad8e3f108c1ece31cddef46b571b15ea9b20dae89a9938583121e271f46112458aa8e86f806727a72", 0xb8}, {&(0x7f00000002c0)="a03ce83a39915cbab86d380785", 0xd}, {&(0x7f0000000300)="b566d52a64cf54559b1dbdce47fa835835e8823d964dc3806adb2904612d7072a508fd756e3a9e086802c148ba1ce1181ad40db8cb7645a2450e7131d77eeacc55fd4801d109a0b59483a0f8f1510082028f8c4c9aff57f417c6ff69ca8be65470a000ebe598b6319e4b141e55", 0x6d}], 0x4, &(0x7f0000000400)=[{0x50, 0x114, 0x4, "b8db9aef14f07537270bf9b65eb8338e07125ea4160edad8b855a66d38f4a890231eb706aa0d4932bd747cd05836ca867076ea3b423b315e1ca6bebd87fa2381"}, {0x90, 0x112, 0x7, "d62e1a1bcd5608e0394b152ed1865b12bf13b064d9d11ffd3df5cd08bf11a23e31ee4f0c474e995e1535b7c1c58cf3989cf87a132d9a48cd6c0083679b637f48a28ba7836bb1372fee140ea1c010f0868ae1c573e0f3a8461009377e1a7e8a175b3083c095c0f8bd55a529f55e0fdd97dcb17d4645c48959bb6ae4464f"}, {0x98, 0x110, 0x7ff, "11a75f8f9aa77c278dc88ba6678674831613adf53e11b31b29c66f13f40a8b56626bfa7659426d7ede79b4dfb4a6e369ce2fca9f6d3459ac5693def8a83269f0657a2d7ad08573e8ce594ee7a1bf7ea3cb21929ac206f57bb7565b4aa074f6b2f95866831942c5d8efffa0593cbdcce79ac133712b922965f073c2a9af966d39892c"}, {0xc8, 0x112, 0x800, "e14e64e8d7bbd23bd0fff2716c01c0a291fd51c97093d10a74b821d3d02a42c3c011e3ad796bd1c016f68d5c9781ec337ad405fb60dbe9731b28fa5647496ac8b7087240487aa301f94776c5e151d03a5db7c268e031282d13c1eeb606d3b3e8180466c981a0ec96d69e4e2bef17c3d12a95a4a51dd7abb3c7a929a23982bf162d6d573c0b2fe4ef4399e45c10862abfbb5c0553aafab8be7b8f442d289c8367af9454d8d9351462ab6f3f2733d0c1cdc1b87786fa"}, {0x98, 0x88, 0x10, "6739664c361b8619f789c74ba0e824c10d2f17bb92f2b71dbc7a2121e631f4e496b3e53efe3a4be011ec0d543951bd2d6c05fbb1d226ca21a03c302b9d449eab5daec054bcad8e13976278c892965acbf0283ca12c623f74c5a783958ab8c74c9f468486e510a162aa82a74447157e06fc4341c920298e47111a0e16881870a647801b7fa13067"}], 0x2d8}, 0x20004840) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="1400000016000b63d25a80648c2587b821", 0x11}, {&(0x7f00000003c0)="e26248", 0x3}], 0x2}, 0x440c0) 423.309526ms ago: executing program 8 (id=2347): mkdir(&(0x7f00000020c0)='./file0\x00', 0x46) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000214010028bd7000fedbdf2505005400fce70000080001"], 0x20}, 0x1, 0x0, 0x0, 0x4000050}, 0x80d4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x0, 0xfc}], 0x0, 0x0, 0x0}) mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='huge=']) 420.741049ms ago: executing program 8 (id=2349): timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) (async) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) (async) creat(&(0x7f0000000080)='./file0\x00', 0x2b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, 0x0) (async) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f00000004c0)={'pcl812\x00', [0x100, 0xf, 0xd0, 0x2, 0x4, 0x100, 0x3, 0x20000000, 0x8, 0xb, 0x0, 0x7, 0x1, 0x401, 0x10001, 0x1, 0x9, 0x8, 0xfe9, 0x401, 0x0, 0x2, 0x7, 0x9, 0x48, 0x9, 0x7, 0x6a77, 0x5, 0x20007, 0x8]}) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001080)=[@text64={0x40, &(0x7f0000000080)="c4417d290ddada01ca48b8a9884315c2c245040f23c00f21f835000002000f23f8c4a2e0f3db0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x50}], 0x1, 0x11, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="16000000", @ANYRES16=0x0, @ANYBLOB="010027bd7000fbdbdf2525000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 279.665973ms ago: executing program 6 (id=2350): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000c80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='veno', 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 131.843315ms ago: executing program 6 (id=2351): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x6a) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x0, 0x168}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x40000) 131.06343ms ago: executing program 8 (id=2352): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000054e000/0x400000)=nil) r1 = userfaultfd(0x80001) syz_clone(0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={0x4000000, {0x2, 0x4e20, @private=0xa0100fe}, {0x2, 0x0, @private=0xa010102}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0xc}) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) syz_open_procfs(0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='&\x00'], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) r3 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r3, 0x0, 0x0, 0x8000}) 130.842631ms ago: executing program 6 (id=2353): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="170000001500add427323b472545b4562d117fffffff81", 0x17}], 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c0000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000000140)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4db, @local, 0x3}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) 129.077966ms ago: executing program 8 (id=2354): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="5c00000002060500000000000000000001000000120003006269746d61facfe13f6b57ffbaffd92a78703a69702c6d616300000005000400000000000900020073797a3000000000100007800c00018008000140ac1414aa05000400020000000500040003000000"], 0x5c}, 0x1, 0x0, 0x0, 0x1}, 0x15) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000300)={{0x0, 0x2, 0x3}}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f00000000c0)={0x0, 0xffff, 0x0, 0x0, 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000200001c00128009000100766c616e000000000c0002800600012101000000080001"], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[@routing={0x0, 0x0, 0x0, 0x0, 0x31}]}}}}}, 0x0) r7 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(r4, r6, 0x7, r5, &(0x7f00000004c0)={r7, r3, 0x6}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x3) fcntl$addseals(r0, 0x409, 0x3) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_SET_FPU(r10, 0x41a0ae8d, &(0x7f0000000500)={'\x00', 0x0, 0x10, 0x8d, 0x0, 0x5, 0x58000, 0x6800, '\x00', 0x401}) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/warn_count', 0x101040, 0x2a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000400)={'geneve0\x00'}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001"], 0x30}}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000040)={0x3, 0x2, 0x0, 0x0, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="28000000100003042abd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="c0e901000000000008001c00", @ANYRES32=r11, @ANYBLOB="2e8d3bffb16124cc9d29569c9f6d79be472ea222432055799c65468915a1cdbe85ef32f41aed8d0450f4aa8400859adb5612a8ee196eecbe43820f49cafa805a1d67bf650614250a1dc2c2682bb0bf42bc8579efb8b392b323d8366057278becab1629534aaca98f6ecf8c3b7fa62faa72f16241d9966de6a96bf65aac7a75811b888c5a8feb6773226c1c2286b41ecac092fcf0d53c4c241317c951c396cc53b0b2"], 0x28}, 0x1, 0x2000000000000000}, 0x0) 128.365139ms ago: executing program 6 (id=2355): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x18, 0x0, 0x1, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x2f, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000340)='\xcd\xd4\xdc\x8b\'\x00\xb9\x11JX\xc2\x0eP\va\x84\xcb\xa0\xa1r\xab\xd2\xaf\x81\xfd\x14M\xf4\x844z\xc8\xf8x\xa5&v\xe1\x12\xbb\x95\xae u\x1b\xeb\x11\xed\x9a\x83n\xc30L \a\xa7\xf6\xeb\xcb+\xa0\xc8\xb8eo\xb8\x89\xfaWy2\xee\x88\xab\xfb\f \x88\x95C_\r!\xd4\xc2\xa5c\xc6\x1f\x95\x83\x04\xa5\xeb\xa16\xba\a\xe7', &(0x7f0000000780)='&\b\x1a\x16\xd7\xd3K\x18YquL\xf1y\x14\x96:\xfco3\xe2\a\b\xd0\xe3\xd9\x1c!\x8f\xca\x9b\xaf\xc1\xeb\xe4\xde\xbb7O\xf1O\xb8\x05_\x11\x04\a\x82\x1c7h\xfbU\x03T\xf4\xc1\xe2\xd1\xcd<\f\x8bOHb#\x9d\x192\x9aAX\xa2\'\xd8\xb2U\xdbb\xba\xa9C\x8a/\x8d\xdb\x96\xed;A\x8aX\xc4\x14\xb0\x90\xfa4\x16\xdb\xb7\xd8\x05\xb42\x01\xb7\xa1S@\t\xb8.d\x9bT\f\xfa\xbe\xd5qT\xb6\x1e\xcc\xed\xa1\x8c\xa2\x0e\xda\x0fSk\x86\xe7W\xc5\x95\xf6\xda\x8f\xadRt\x9c\xed\xe97\x9dk\x8b\xb8\xc4+l>\x05\xdeJ\xd6\xe9\xb3g\xc050q\x82LL\xe9\xd6\x0e\xd7\x12\xf8\x8f\x1e\x9fj\x0f/\xc7\x91U\xcd\xb0k\x10\xa3#6a\t\xb9\xd3\xbe\xbc\x1f\xfd@\xdd\xb6\x02UJ\xb6\x90\x98\xbed\x1e\xfa\x81 \x0fh?\xb0G\xd2\xa0:$`a\xfd\t\xed\x9aF\\\xdd\xe6*\x1bR;\xe8D\x95\x12uw\xdc8\x06\xfel\xd6\xc7\xc0\xd9)J^\x1b\x14\v\xfc\x9d\xc8\xa1\x89C\xdcH\xb2\x03\x9a\x18\xd93\xd4\xda\x9d\x94\x18\x15\xc54\x8bf\x01\xff\xd1\\\xa6\xdb\xa6\x83\xdc\xcf\xbf\xf1p\xec\x82\xf3\x01\x88\xd4\x87\x02\xf1\xb0[\xbf\x1cr\xc3_1\xd6\xb3Z\xaa\xd7\x81L\xc2{\xfeuIk\xa7\x15\x15', 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x3260024, &(0x7f00000000c0)={'trans=virtio,', {[{@version_u}]}}) 128.022782ms ago: executing program 6 (id=2356): socket$inet(0xa, 0x801, 0x84) (async) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = socket(0x21, 0x2, 0xa) r3 = io_uring_setup(0x177f, &(0x7f0000000140)={0x0, 0xfffffffe, 0x1000, 0x0, 0x42b4}) close_range(r2, r3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, &(0x7f00000001c0)=0xfeca) accept4(r0, 0x0, 0x0, 0x0) (async) r4 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r4, &(0x7f0000000100)='x', 0x1, 0x20000000, 0x0, 0x0) (async) sendto$inet6(r4, &(0x7f0000000100)='x', 0x1, 0x20000000, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1408000010000161b22d9d00000000000500000a28000000000a030000000500000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900430073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}]}) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0c00070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0xc6) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc440000000c0a010100000000000000000a0c00070900020073797a31000000000900010073797a310000000018000380140000800800034000000002050006400600000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0xc6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c0000002500090122bd7008f9ffffff830000000800030047000000d8f8e703b76d8e52564f170bb8f18fddbbf6d7b29e40db6bd7eea583adee7c76178c79c27be1c4fd478e53b4cc98596b39c61ac7c8da5ff5c20d6effdb5d0616be87f9a44d99424698ff433748082705291b333cc324f4f4bf398467f811288cc6c8dfb364e549024d1bdb8d567ad41fc552e8f41440eb93b2f2ef05bd5eaea4fe81b1626e31bd38f83dd401b6167c075b845b08d9b75f59905c095d4a1604a910e0551964c822f78c110c116846c96e56938dc420bafbafa9871f7f0ebfdecd10131f68551beb62abe8"], 0x1c}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 630.876Āµs ago: executing program 4 (id=2357): r0 = socket(0x1e, 0x4, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000040)={0x0, 0x0}) move_pages(r4, 0x1, &(0x7f0000000740)=[&(0x7f00007c7000/0x3000)=nil], 0x0, 0x0, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="84010000100001000000000010000000ff010000000000000000000000000001000000000000000000000000000000010003ffff4e2410000a00000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/329], 0x184}}, 0x8044000) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@acquire={0x174, 0x17, 0x1, 0x0, 0x0, {{@in6=@private0}, @in6=@remote, {@in=@remote, @in6=@private0}, {{@in6=@private2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @tmpl={0x44, 0x5, [{{@in=@loopback, 0x0, 0x3c}, 0x0, @in6=@private2}]}]}, 0x174}}, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x7813, 0x3, 0x1, 0x81, 0xa726, 0x801, 0x1}, 0x1c) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bind$tipc(r0, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES64=r8], 0x38}}, 0x4000000) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x2c, 0x18, 0x1, 0x0, 0x25dfdbfe, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x2, 0x1, 0x1}, 0x2, 0x7, 0x0, 0x0, "b90316a140a9f4f2"}, 0x7}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x64044050}, 0x0) sendmsg$DEVLINK_CMD_RATE_DEL(r9, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x9c, r7, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_vif\x00') ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) pread64(r10, &(0x7f0000000140)=""/106, 0x6a, 0x1000007) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000340)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x2}}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000080)={0x41424344}, 0x1, 0x0) write$tun(r10, &(0x7f0000000500)={@val={0x0, 0x4305}, @void, @ipv6=@tcp={0xe, 0x6, "8404c9", 0x1b2, 0x6, 0x1, @loopback, @dev={0xfe, 0x80, '\x00', 0x15}, {[@dstopts={0x3a, 0x24, '\x00', [@enc_lim={0x4, 0x1, 0x4b}, @generic={0x2, 0xec, "654bf1a09f182ebfe4e8f134476fd2d32f822854a70cc063f4d8df0af8c38bbd347fe98a0f27d604a88266f3fc1504d36f045bbe6f52baa6ddd8579acf8103e7b9e8624e3187bc6337ad2555f4bda9140551b8632242351f8516c8ee98e2086f6d1b10b902cbf793104a3ef589434c6e966ecf38d9845525c0cd22fa826c7553b5a593832d4060ed50101a3cf20e8c4f2acebb20381e6b3b7d7429c7d0c52e959279caaff414ea0d8bde1dd377c585d95023ee2a5dc21a8640c031879c4a8c9142b6f49c791fa23885c6b54bc04c264596b840142f695bcc9d89682d92af0e8ca714a27348a69089c5a540c1"}, @ra={0x5, 0x2, 0x7fff}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @calipso={0x7, 0x18, {0x2, 0x4, 0xea, 0x7, [0x4, 0x9]}}, @pad1, @pad1]}, @fragment={0x94, 0x0, 0x8, 0x1, 0x0, 0x19, 0x68}, @routing={0x3a, 0x6, 0x1, 0x2, 0x0, [@local, @rand_addr=' \x01\x00', @mcast1]}, @hopopts={0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xa}]}], {{0x4e24, 0x4e22, r11, r12, 0x1, 0x0, 0xb, 0x10, 0x9, 0x0, 0x3, {[@window={0x3, 0x3, 0x4}, @md5sig={0x13, 0x12, "aa9d0f05cb9e60ca717f4d56e75e54d7"}, @fastopen={0x22, 0x3, 'Q'}]}}, {"5df79e4c245a"}}}}}, 0x1de) 391.186Āµs ago: executing program 6 (id=2358): prctl$PR_SET_SECUREBITS(0x1c, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x29) r0 = getuid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080)=0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x16001, &(0x7f00000000c0)={[{@verity_on}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_off}], [{@euid_lt={'euid<', r0}}, {@euid_gt={'euid>', r1}}, {@subj_user={'subj_user', 0x3d, '\\\xe4+^\\'}}]}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x44000, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000180), 0x4) r3 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_USERNS(r3, 0xb701, 0x0) stat(&(0x7f0000000240)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x2300, 0x20, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0, 0x0}, &(0x7f0000000540)=0xc) getresgid(&(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) read$FUSE(0xffffffffffffffff, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fstat(r2, &(0x7f0000002680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='system.posix_acl_default\x00', &(0x7f00000027c0)={{}, {0x1, 0x5}, [{0x2, 0x4, r1}, {0x2, 0x1, r0}, {0x2, 0x0, r4}], {0x4, 0x6}, [{0x8, 0x4, r5}, {0x8, 0x2, r6}, {0x8, 0x6, r7}, {0x8, 0x0, r8}, {0x8, 0x6, r9}, {0x8, 0x4, r10}, {0x8, 0x6, r11}], {0x10, 0x3}, {0x20, 0x5}}, 0x74, 0x4) pipe2$9p(&(0x7f0000002840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$P9_RLINK(r12, &(0x7f0000002880)={0x7, 0x47, 0x2}, 0x7) r13 = syz_open_dev$vcsn(&(0x7f00000028c0), 0x81, 0x424002) ioctl$BSG_GET_VERSION_NUM(r13, 0x2282, &(0x7f0000002900)) syz_open_dev$vcsu(&(0x7f0000002940), 0x3, 0x200400) prctl$PR_SET_SECUREBITS(0x1c, 0x33) prctl$PR_SET_SECUREBITS(0x1c, 0x18) ioctl$VHOST_VDPA_GET_DEVICE_ID(r12, 0x8004af70, &(0x7f0000002980)) prctl$PR_SET_SECUREBITS(0x1c, 0x15) close(r3) ppoll(&(0x7f0000002a00)=[{0xffffffffffffffff, 0x4000}, {r13, 0x4111}, {r12, 0x2000}], 0x3, &(0x7f0000002a40)={0x77359400}, &(0x7f0000002a80)={[0x6]}, 0x8) 0s ago: executing program 8 (id=2359): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) (async) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x2042, 0x19d) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) fanotify_init(0xf00, 0x1000) (async) r1 = fanotify_init(0xf00, 0x1000) fanotify_mark(r1, 0x105, 0x10000839, r0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) readv(r1, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000140)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) (async) sendmsg$can_bcm(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000080)={0x5, 0x830, 0x0, {0x77359400}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x2b, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x20000000) close(r2) (async) close(r2) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') kernel console output (not intermixed with test programs): 10-1:1.0: nonzero urb status received: -71 [ 200.279822][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 200.281833][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 200.283862][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 200.285901][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 200.287914][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 200.289967][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 200.291981][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 200.635610][T11851] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 200.640930][T11852] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 200.674155][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 200.674170][ T40] audit: type=1400 audit(1781172584.152:34137): avc: denied { setopt } for pid=11850 comm="syz.1.1590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 200.763249][ T1484] IPVS: starting estimator thread 0... [ 200.798043][ T40] audit: type=1400 audit(1781172584.272:34138): avc: denied { create } for pid=11860 comm="syz.6.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 200.798542][T11861] netlink: 'syz.6.1592': attribute type 7 has an invalid length. [ 200.806588][T11861] netlink: 'syz.6.1592': attribute type 8 has an invalid length. [ 200.809466][T11861] netlink: 'syz.6.1592': attribute type 7 has an invalid length. [ 200.814910][T11861] netlink: 208784 bytes leftover after parsing attributes in process `syz.6.1592'. [ 200.870132][T11858] IPVS: using max 42 ests per chain, 100800 per kthread [ 200.928244][T11879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1596'. [ 201.028134][ T40] audit: type=1400 audit(1781172584.502:34139): avc: denied { bind } for pid=11882 comm="syz.6.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 201.028177][T11883] CUSE: unknown device info "" [ 201.036171][T11883] CUSE: zero length info key specified [ 201.039500][T11883] fuse: Unknown parameter 'f]' [ 201.080476][ T5746] Bluetooth: hci4: command 0x041b tx timeout [ 202.039932][ T5746] Bluetooth: hci1: command tx timeout [ 202.065338][T11912] xt_l2tp: v2 doesn't support IP mode [ 202.103366][T11915] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1607'. [ 202.401998][ T40] audit: type=1400 audit(1781172585.882:34140): avc: denied { getopt } for pid=11941 comm="syz.4.1616" lport=53517 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 202.405287][T11944] netlink: 'syz.4.1616': attribute type 1 has an invalid length. [ 202.416334][T11944] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 202.429958][ T5820] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 202.609878][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 202.610687][T11951] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1617'. [ 202.613260][ T5820] usb 6-1: config 0 has an invalid interface number: 119 but max is 0 [ 202.616844][ T5820] usb 6-1: config 0 has no interface number 0 [ 202.618775][ T5820] usb 6-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 202.622110][ T5820] usb 6-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 202.625533][ T5820] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 115, changing to 7 [ 202.628885][ T5820] usb 6-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 25972, setting to 1024 [ 202.632325][ T5820] usb 6-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 202.638401][ T5820] usb 6-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 202.641302][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.643803][ T5820] usb 6-1: Product: syz [ 202.645181][ T5820] usb 6-1: Manufacturer: syz [ 202.646662][ T5820] usb 6-1: SerialNumber: syz [ 202.650058][ T5820] usb 6-1: config 0 descriptor?? [ 202.656090][ T5820] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.119/input/input35 [ 202.868366][ T5820] usb 6-1: USB disconnect, device number 28 [ 202.872664][ T1352] hid-generic 0005:0007:0007.0007: item fetching failed at offset 0/2 [ 202.881134][ T1352] hid-generic 0005:0007:0007.0007: probe with driver hid-generic failed with error -22 [ 203.098954][T11954] x_tables: duplicate underflow at hook 3 [ 203.159943][ T5746] Bluetooth: hci4: command 0x041b tx timeout [ 204.346794][T12003] afs: Unknown parameter 'ļĄ' [ 204.347407][ T40] audit: type=1400 audit(1781172587.822:34141): avc: denied { getopt } for pid=12004 comm="syz.4.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 204.384072][T12007] netlink: 'syz.4.1634': attribute type 23 has an invalid length. [ 204.397647][T12009] nbd: couldn't find a device at index -2146435068 [ 204.549420][T12026] overlayfs: failed lookup in lower (newroot/301, name='file0', err=-40): overlapping layers [ 204.845718][T12040] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=12040 comm=syz.1.1642 [ 204.889552][T12042] overlayfs: failed to resolve './cgroup': -2 [ 204.901431][ T40] audit: type=1400 audit(1781172588.382:34142): avc: denied { mount } for pid=12041 comm="syz.6.1645" name="/" dev="rpc_pipefs" ino=51666 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 204.908611][ T40] audit: type=1400 audit(1781172588.382:34143): avc: denied { unmount } for pid=12041 comm="syz.6.1645" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 205.135244][T12054] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 205.259801][ C1] wdm_int_callback: 28759 callbacks suppressed [ 205.259829][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.263798][ C1] wdm_int_callback: 28759 callbacks suppressed [ 205.263806][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.267726][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.269791][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.271988][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.274035][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.276214][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.278313][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.281383][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.283419][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.285569][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.287608][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.290782][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.292810][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.294888][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.296908][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.299037][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.301073][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.303170][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 205.305206][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 205.403411][T12062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1652'. [ 205.690370][ T1352] usb 11-1: new full-speed USB device number 3 using dummy_hcd [ 205.772946][T12074] netlink: del zone limit has 4 unknown bytes [ 205.797423][ T1484] usb 10-1: USB disconnect, device number 4 [ 205.840268][ T39] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 205.874233][ T1352] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 205.878884][ T1352] usb 11-1: New USB device found, idVendor=056a, idProduct=00d3, bcdDevice= 0.00 [ 205.883481][ T1352] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.889550][ T1352] usb 11-1: config 0 descriptor?? [ 205.892065][ T8644] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.896577][T12068] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 206.008664][ T8644] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.012490][ T39] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 206.017430][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 206.021463][ T39] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 206.026748][ T39] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 206.029475][ T39] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.032275][ T39] usb 6-1: Product: syz [ 206.033870][ T39] usb 6-1: Manufacturer: syz [ 206.035294][ T39] usb 6-1: SerialNumber: syz [ 206.038167][ T39] usb 6-1: config 0 descriptor?? [ 206.040777][T12070] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 206.101642][ T39] rc_core: IR keymap rc-streamzap not found [ 206.103273][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.103525][ T39] Registered IR keymap rc-empty [ 206.104681][ T8644] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.107746][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.114382][ T39] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 206.118316][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.118659][ T39] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input36 [ 206.122528][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.127636][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.129791][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.131947][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.134116][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.136304][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.138451][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.141660][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.143827][ T1352] wacom 0003:056A:00D3.0008: unknown main item tag 0x0 [ 206.149538][ T1352] wacom 0003:056A:00D3.0008: Unknown device_type for 'HID 056a:00d3'. Assuming pen. [ 206.156288][ T1352] wacom 0003:056A:00D3.0008: hidraw1: USB HID v7f.fd Device [HID 056a:00d3] on usb-dummy_hcd.6-1/input0 [ 206.161396][ T1352] input: Wacom Bamboo 2FG 6x8 Pen as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/0003:056A:00D3.0008/input/input37 [ 206.218090][ T8644] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.263748][T12070] bond6: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 206.269141][T12070] bond6 (unregistering): Released all slaves [ 206.300406][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 206.303174][T12098] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1655'. [ 206.344095][ T1484] usb 6-1: USB disconnect, device number 29 [ 206.388201][ T8644] bridge_slave_1: left allmulticast mode [ 206.390079][ T8644] bridge_slave_1: left promiscuous mode [ 206.391984][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.400442][ T8644] bridge_slave_0: left allmulticast mode [ 206.402852][ T8644] bridge_slave_0: left promiscuous mode [ 206.405386][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.516313][T12068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.520006][T12068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.530713][ T5820] usb 11-1: USB disconnect, device number 3 [ 206.570715][ T8644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.577004][ T8644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.582239][ T8644] bond0 (unregistering): Released all slaves [ 206.659600][ T40] audit: type=1400 audit(1781172590.132:34144): avc: denied { write } for pid=12101 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.724162][ T40] audit: type=1400 audit(1781172590.202:34145): avc: denied { write } for pid=12104 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.763323][ T5446] 8021q: adding VLAN 0 to HW filter on device eth10 [ 206.865180][ T40] audit: type=1400 audit(1781172590.342:34146): avc: denied { write } for pid=12107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.915285][ T40] audit: type=1400 audit(1781172590.392:34147): avc: denied { execute } for pid=12110 comm="syz.1.1663" path="/456/file0/cpu.stat" dev="overlay" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 206.929479][ T40] audit: type=1400 audit(1781172590.412:34148): avc: denied { write } for pid=12114 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.003885][T12120] trusted_key: encrypted_key: insufficient parameters specified [ 207.007283][ T5446] 8021q: adding VLAN 0 to HW filter on device eth11 [ 207.069432][ T40] audit: type=1400 audit(1781172590.542:34149): avc: denied { write } for pid=12126 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.094232][ T8644] hsr_slave_0: left promiscuous mode [ 207.098740][ T8644] hsr_slave_1: left promiscuous mode [ 207.103829][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.106961][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.113039][ T8644] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.117827][ T8644] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.125642][ T40] audit: type=1400 audit(1781172590.602:34150): avc: denied { write } for pid=12134 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.144793][ T8644] veth1_macvtap: left promiscuous mode [ 207.148825][ T8644] veth0_macvtap: left promiscuous mode [ 207.153736][ T8644] veth1_vlan: left promiscuous mode [ 207.156163][ T8644] veth0_vlan: left promiscuous mode [ 207.239885][ T1352] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 207.255067][ T40] audit: type=1400 audit(1781172590.732:34151): avc: denied { write } for pid=12138 comm="syz.4.1668" path="socket:[53449]" dev="sockfs" ino=53449 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 207.316937][ T8644] team0 (unregistering): Port device team_slave_1 removed [ 207.323707][ T8644] team0 (unregistering): Port device team_slave_0 removed [ 207.395492][ T5446] 8021q: adding VLAN 0 to HW filter on device eth12 [ 207.398561][T12139] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1668'. [ 207.402799][T12139] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1668'. [ 207.406651][T12140] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1668'. [ 207.410776][T12140] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1668'. [ 207.440759][ T1352] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.443974][ T1352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.447266][ T1352] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.450536][ T1352] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.455527][ T1352] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.458279][ T1352] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.462455][ T1352] usb 6-1: Manufacturer: syz [ 207.465291][ T1352] usb 6-1: config 0 descriptor?? [ 207.518184][ T40] audit: type=1400 audit(1781172590.992:34152): avc: denied { write } for pid=12149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.558247][ T40] audit: type=1400 audit(1781172591.032:34153): avc: denied { write } for pid=12152 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.603187][ T5446] 8021q: adding VLAN 0 to HW filter on device eth13 [ 207.694913][ T1352] appleir 0003:05AC:8243.0009: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 207.725135][ T1352] usb 6-1: USB disconnect, device number 30 [ 207.803293][T12169] fido_id[12169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb6/report_descriptor': No such file or directory [ 207.966156][T12185] (syz.4.1677,12185,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 207.969254][T12185] (syz.4.1677,12185,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 207.971788][T12185] (syz.4.1677,12185,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 207.974579][T12185] (syz.4.1677,12185,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 208.452481][T12195] pim6reg99999999: entered allmulticast mode [ 208.576388][T12214] openvswitch: netlink: Flow key attribute not present in set flow. [ 208.824664][T12221] ip_vti0: entered promiscuous mode [ 208.826787][T12221] ip_vti0: entered allmulticast mode [ 209.038140][T12233] xfrm1: entered allmulticast mode [ 209.269863][ T1484] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 209.315754][T12252] netlink: 'syz.6.1696': attribute type 1 has an invalid length. [ 209.329298][T12252] 8021q: adding VLAN 0 to HW filter on device bond2 [ 209.333574][T12253] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1696'. [ 209.336368][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1696'. [ 209.347594][T12252] veth3: entered promiscuous mode [ 209.351896][T12252] bond2: (slave veth3): Enslaving as an active interface with a down link [ 209.429830][ T1484] usb 6-1: Using ep0 maxpacket: 32 [ 209.432644][ T1484] usb 6-1: config 1 interface 0 altsetting 12 bulk endpoint 0x82 has invalid maxpacket 1024 [ 209.435839][ T1484] usb 6-1: config 1 interface 0 has no altsetting 0 [ 209.439279][ T1484] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 209.442101][ T1484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.444559][ T1484] usb 6-1: SerialNumber: Š§ [ 209.447822][T12231] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 209.592172][T12258] QAT: failed to copy from user cfg_data. [ 209.856198][ T1484] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 31 if 0 alt 12 proto 3 vid 0x0525 pid 0xA4A8 [ 209.861169][ T1484] usb 6-1: USB disconnect, device number 31 [ 209.865467][ T1484] usblp0: removed [ 210.564688][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059cf2400: rx timeout, send abort [ 210.607759][T12312] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 210.896571][ T1484] libceph: connect (1)[c::]:6789 error -101 [ 210.904029][ T1484] libceph: mon0 (1)[c::]:6789 connect error [ 210.988920][T12321] ceph: No mds server is up or the cluster is laggy [ 211.027715][T12321] netlink: 'syz.4.1706': attribute type 1 has an invalid length. [ 211.070267][ C0] vcan0: j1939_tp_rxtimer: 0xffff888059cf2400: abort rx timeout. Force session deactivation [ 211.423956][T12338] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.429848][ T6140] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 211.430886][T12338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.441295][T12338] wireguard: wg2: Could not create IPv6 socket [ 211.444319][T12338] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 211.579824][ T6140] usb 11-1: Using ep0 maxpacket: 8 [ 211.583306][ T6140] usb 11-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 211.586292][ T6140] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.592456][ T6140] pvrusb2: Hardware description: Terratec Grabster AV400 [ 211.594994][ T6140] pvrusb2: ********** [ 211.596486][ T6140] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 211.599849][ T6140] pvrusb2: Important functionality might not be entirely working. [ 211.602198][ T6140] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 211.605679][ T6140] pvrusb2: ********** [ 211.794020][ T2511] pvrusb2: Invalid write control endpoint [ 211.844624][ T2511] pvrusb2: Invalid write control endpoint [ 211.846473][ T2511] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 211.849300][ T2511] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 211.851753][ T2511] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 211.854821][ T2511] pvrusb2: Device being rendered inoperable [ 211.857266][ T2511] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 211.859520][ T2511] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 211.864082][ T2511] pvrusb2: Attached sub-driver cx25840 [ 211.868204][ T2511] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.871452][ T2511] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 212.001011][ T10] usb 11-1: USB disconnect, device number 4 [ 212.124822][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 212.124838][ T40] audit: type=1400 audit(1781172595.602:34164): avc: denied { bind } for pid=12357 comm="syz.4.1717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 212.126269][T12358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1717'. [ 212.138537][T12358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.267620][ T40] audit: type=1400 audit(1781172595.742:34165): avc: denied { accept } for pid=12365 comm="syz.4.1720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 212.293841][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.297680][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.312263][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.316635][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.323929][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.436695][T12376] netlink: 'syz.4.1723': attribute type 4 has an invalid length. [ 212.443060][T12376] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1723'. [ 212.486588][ T40] audit: type=1400 audit(1781172595.962:34166): avc: denied { ioctl } for pid=12375 comm="syz.4.1723" path="socket:[53918]" dev="sockfs" ino=53918 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 212.552129][T12387] netlink: 'syz.4.1724': attribute type 4 has an invalid length. [ 212.685239][T12367] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.688502][T12367] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.692026][T12367] bridge_slave_0: entered allmulticast mode [ 212.696009][T12367] bridge_slave_0: entered promiscuous mode [ 212.700452][T12367] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.702788][T12367] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.705085][T12367] bridge_slave_1: entered allmulticast mode [ 212.707741][T12367] bridge_slave_1: entered promiscuous mode [ 212.724515][T12367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.728870][T12367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.744095][T12367] team0: Port device team_slave_0 added [ 212.747339][T12367] team0: Port device team_slave_1 added [ 212.760283][T12367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.762684][T12367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.770754][T12367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.775170][T12367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.777367][T12367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.786572][T12367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.808554][T12367] hsr_slave_0: entered promiscuous mode [ 212.810929][T12367] hsr_slave_1: entered promiscuous mode [ 212.812937][T12367] debugfs: 'hsr0' already exists in 'hsr' [ 212.814685][T12367] Cannot create hsr debugfs directory [ 212.957543][T12367] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 212.963548][T12367] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 212.967148][T12367] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 212.973206][T12367] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 212.975858][T12367] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 212.980578][T12367] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 212.983184][T12367] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 212.987137][T12367] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 213.045843][T12367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.057603][T12367] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.063152][ T122] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.065893][ T122] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.073110][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.075367][T10323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.305078][T12367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.427602][T12367] veth0_vlan: entered promiscuous mode [ 213.433888][T12367] veth1_vlan: entered promiscuous mode [ 213.446892][T12367] veth0_macvtap: entered promiscuous mode [ 213.454566][T12367] veth1_macvtap: entered promiscuous mode [ 213.462799][T12367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.468914][T12367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.484355][ T8644] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.487012][ T8644] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.492336][ T8644] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.495592][ T8644] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.562731][ T122] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.573949][ T122] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.616928][T12428] tmpfs: Unknown parameter 'S'' [ 213.617251][ T8642] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.621936][ T8642] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.671385][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1718'. [ 213.750057][T12438] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 213.791940][ T5820] IPVS: starting estimator thread 0... [ 213.794274][T12443] IPVS: set_ctl: invalid protocol: 44 100.1.1.5:20265 [ 213.796782][T12443] IPVS: lc: FWM 3 0x00000003 - no destination available [ 213.803543][T12443] IPVS: set_ctl: invalid protocol: 4 224.0.0.2:20000 [ 213.879981][T12444] IPVS: using max 42 ests per chain, 100800 per kthread [ 214.282408][ T40] audit: type=1326 audit(1781172597.762:34167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.290005][ T40] audit: type=1326 audit(1781172597.762:34168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.296986][ T40] audit: type=1326 audit(1781172597.762:34169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.305920][ T40] audit: type=1326 audit(1781172597.762:34170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.321127][ T40] audit: type=1326 audit(1781172597.762:34171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.328864][ T40] audit: type=1326 audit(1781172597.762:34172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.329865][ T50] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 214.332393][T12457] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 214.337052][ T40] audit: type=1326 audit(1781172597.762:34173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 214.369895][ T5746] Bluetooth: hci0: command tx timeout [ 214.509824][ T50] usb 13-1: Using ep0 maxpacket: 8 [ 214.516248][ T50] usb 13-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 214.519130][ T50] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.525444][ T50] usb 13-1: Product: syz [ 214.526844][ T50] usb 13-1: Manufacturer: syz [ 214.528326][ T50] usb 13-1: SerialNumber: syz [ 214.533389][ T50] usb 13-1: config 0 descriptor?? [ 214.635741][T12474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 214.658700][T12475] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1740'. [ 215.404325][T12492] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12492 comm=syz.6.1744 [ 215.563742][ T50] dvb_usb_rtl28xxu 13-1:0.0: chip type detection failed -110 [ 215.566864][ T50] dvb_usb_rtl28xxu 13-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 216.050872][ T39] usb 13-1: USB disconnect, device number 2 [ 216.439856][ T5746] Bluetooth: hci0: command tx timeout [ 216.666056][T12495] fuse: Bad value for 'fd' [ 216.999946][T12488] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 217.002122][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 217.129860][ T40] kauditd_printk_skb: 29047 callbacks suppressed [ 217.129873][ T40] audit: type=1326 audit(1781172600.602:63221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.139116][ T40] audit: type=1326 audit(1781172600.612:63222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.146868][ T40] audit: type=1326 audit(1781172600.612:63223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.156101][ T40] audit: type=1326 audit(1781172600.612:63224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.164494][ T40] audit: type=1326 audit(1781172600.612:63225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.171595][ T40] audit: type=1326 audit(1781172600.612:63226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.178519][ T40] audit: type=1326 audit(1781172600.612:63227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.185469][ T40] audit: type=1326 audit(1781172600.612:63228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.193419][ T40] audit: type=1326 audit(1781172600.612:63229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.200560][ T40] audit: type=1326 audit(1781172600.612:63230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12452 comm="syz.4.1733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x50000 [ 217.396601][T12502] gretap1: entered promiscuous mode [ 217.398620][T12502] batman_adv: batadv0: Adding interface: gretap1 [ 217.400901][T12502] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.408569][T12502] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 217.801527][T12488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 217.803098][T12484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 217.803597][T12488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 217.810424][T12488] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 217.844110][T12488] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 217.849966][T12488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 217.852020][T12488] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 217.858289][T12488] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 217.928602][T12514] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1751'. [ 217.932666][T12514] syz_tun: entered promiscuous mode [ 217.942045][T12514] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1751'. [ 218.165636][T12552] netlink: 'syz.6.1764': attribute type 39 has an invalid length. [ 218.205095][T12562] overlayfs: failed to resolve './bus/file0': -2 [ 218.212912][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.219914][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.233231][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.301386][T12573] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 218.304092][T12573] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 218.317824][T12573] vhci_hcd vhci_hcd.0: Device attached [ 218.326970][T12573] xt_ecn: cannot match TCP bits for non-tcp packets [ 218.329423][T12577] vhci_hcd: cannot find a urb of seqnum 2146388617 max seqnum 0 [ 218.335402][ T8642] vhci_hcd vhci_hcd.4: stop threads [ 218.339596][ T8642] vhci_hcd vhci_hcd.4: release socket [ 218.348036][ T8642] vhci_hcd vhci_hcd.4: disconnect device [ 218.415921][ T1484] xfrm0 speed is unknown, defaulting to 1000 [ 218.422949][T12555] infiniband syz0: set active [ 218.426692][T12555] infiniband syz0: added xfrm0 [ 218.459002][T12555] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 218.463881][T12555] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 218.467319][T12591] netlink: 'syz.6.1772': attribute type 62 has an invalid length. [ 218.469069][T12555] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 218.495172][T12555] RDS/IB: syz0: added [ 218.496752][T12555] smc: adding ib device syz0 with port count 1 [ 218.498762][T12555] smc: ib device syz0 port 1 has no pnetid [ 218.502537][ T6140] xfrm0 speed is unknown, defaulting to 1000 [ 218.511477][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.635648][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.745610][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.786754][T12609] gfs2: not a GFS2 filesystem [ 218.837117][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.937865][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 218.969925][ T10] usb 6-1: new low-speed USB device number 32 using dummy_hcd [ 219.080191][ T5746] Bluetooth: hci4: command 0x041b tx timeout [ 219.130087][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 219.131574][T12555] xfrm0 speed is unknown, defaulting to 1000 [ 219.142781][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1784'. [ 219.145485][T12640] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1784'. [ 219.259884][ T10] usb 6-1: new low-speed USB device number 33 using dummy_hcd [ 219.302695][T12643] nbd: socks must be embedded in a SOCK_ITEM attr [ 219.310234][T12643] gtp0: entered allmulticast mode [ 219.345288][T12647] ata1.00: invalid multi_count 128 ignored [ 219.407250][T12652] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 219.420306][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 219.422338][ T10] usb usb6-port1: attempt power cycle [ 219.555774][T12665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12665 comm=syz.4.1792 [ 219.559558][T12665] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12665 comm=syz.4.1792 [ 219.567412][T12665] netlink: 'syz.4.1792': attribute type 50 has an invalid length. [ 219.763173][ T10] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 219.791215][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 219.809725][ T5746] Bluetooth: unknown link type 128 [ 219.815636][T12699] loop2: detected capacity change from 0 to 1 [ 219.822954][T12699] Dev loop2: unable to read RDB block 1 [ 219.824660][T12699] loop2: AHDI p1 p2 p3 [ 219.826001][T12699] loop2: partition table partially beyond EOD, truncated [ 219.828889][T12699] loop2: p1 start 1601398130 is beyond EOD, truncated [ 219.831555][T12699] loop2: p2 start 1702059890 is beyond EOD, truncated [ 219.837454][T12699] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1800'. [ 219.842237][T12698] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1800'. [ 219.848657][T12699] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 219.880094][ T6574] Bluetooth: hci0: command 0x0419 tx timeout [ 219.881993][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 219.919821][ T10] usb 6-1: new low-speed USB device number 35 using dummy_hcd [ 219.930977][T12714] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1805'. [ 219.940841][ T10] usb 6-1: Invalid ep0 maxpacket: 16 [ 219.942741][ T10] usb usb6-port1: unable to enumerate USB device [ 220.193487][T12743] netlink: 'syz.4.1812': attribute type 21 has an invalid length. [ 220.196861][T12743] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1812'. [ 220.202513][T12743] netlink: 'syz.4.1812': attribute type 4 has an invalid length. [ 220.205620][T12743] netlink: 'syz.4.1812': attribute type 5 has an invalid length. [ 220.208322][T12743] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1812'. [ 220.226634][T12738] TCP: TCP_TX_DELAY enabled [ 220.385125][T12758] 0x00000000c835-0x000000020635 : "" [ 220.387670][T12758] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x137cb [ 220.408236][T12758] ftl_cs: FTL header corrupt! [ 220.769860][ T50] usb 13-1: new full-speed USB device number 3 using dummy_hcd [ 220.850064][T10323] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.953536][ T50] usb 13-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.956898][ T50] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 220.960123][ T50] usb 13-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 220.963075][ T50] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.967610][ T50] usb 13-1: config 0 descriptor?? [ 220.971553][ T50] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 220.973995][ T50] dvb-usb: bulk message failed: -22 (3/0) [ 220.977748][ T50] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 220.981190][ T50] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 220.983691][ T50] usb 13-1: media controller created [ 220.988217][ T50] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 221.006316][ T50] dvb-usb: bulk message failed: -22 (6/0) [ 221.008346][ T50] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 221.013704][ T50] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.8/usb13/13-1/input/input41 [ 221.021562][ T50] dvb-usb: schedule remote query interval to 150 msecs. [ 221.024446][ T50] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 221.171980][T12768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.178300][T12768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.194486][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 221.198190][ T50] dvb-usb: error while querying for an remote control event. [ 221.265114][T12777] IPv6: NLM_F_CREATE should be specified when creating new route [ 221.292243][T12781] sg_write: data in/out 63015/14 bytes for SCSI command 0x0-- guessing data in; [ 221.292243][T12781] program syz.8.1818 not setting count and/or reply_len properly [ 221.359946][ T50] dvb-usb: bulk message failed: -22 (1/0) [ 221.370887][ T50] dvb-usb: error while querying for an remote control event. [ 221.463920][T12788] 9p: Could not find request transport: p2000.u [ 221.541497][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 221.543354][ T6140] dvb-usb: error while querying for an remote control event. [ 221.623059][T12802] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1828'. [ 221.720570][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 221.723032][ T6140] dvb-usb: error while querying for an remote control event. [ 221.752655][T12812] binder: BINDER_SET_CONTEXT_MGR already set [ 221.758618][T12812] binder: 12811:12812 ioctl 4018620d 200000004a80 returned -16 [ 221.881280][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 221.885092][ T6140] dvb-usb: error while querying for an remote control event. [ 221.889933][ T5746] Bluetooth: hci3: command 0x0c1a tx timeout [ 221.960043][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 221.960112][ T6574] Bluetooth: hci0: command 0x0419 tx timeout [ 222.040007][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 222.042031][ T6140] dvb-usb: error while querying for an remote control event. [ 222.211725][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 222.213605][ T6140] dvb-usb: error while querying for an remote control event. [ 222.369818][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 222.371668][ T6140] dvb-usb: error while querying for an remote control event. [ 222.530555][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 222.533144][ T6140] dvb-usb: error while querying for an remote control event. [ 222.611232][ T40] kauditd_printk_skb: 643 callbacks suppressed [ 222.611243][ T40] audit: type=1400 audit(1781172606.092:63874): avc: denied { write } for pid=12826 comm="syz.6.1836" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 222.612237][T12827] random: crng reseeded on system resumption [ 222.689835][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 222.691712][ T6140] dvb-usb: error while querying for an remote control event. [ 222.745368][ T40] audit: type=1400 audit(1781172606.222:63875): avc: denied { ioctl } for pid=12826 comm="syz.6.1836" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3313 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 222.749655][T12839] dlm: plock device version mismatch: kernel (1.2.0), user (4128776.4294967295.4194312) [ 222.758210][T12839] "syz.4.1839" (12839) uses obsolete ecb(arc4) skcipher [ 222.860440][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 222.865065][ T6140] dvb-usb: error while querying for an remote control event. [ 223.019817][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 223.021983][ T6140] dvb-usb: error while querying for an remote control event. [ 223.119880][ T10] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 223.179824][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 223.184775][ T6140] dvb-usb: error while querying for an remote control event. [ 223.280425][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 223.285553][ T10] usb 6-1: config 3 has an invalid interface number: 20 but max is 0 [ 223.288749][ T10] usb 6-1: config 3 has no interface number 0 [ 223.291455][ T10] usb 6-1: config 3 interface 20 has no altsetting 0 [ 223.296043][ T10] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 223.299853][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.303107][ T10] usb 6-1: Product: syz [ 223.304812][ T10] usb 6-1: Manufacturer: syz [ 223.306726][ T10] usb 6-1: SerialNumber: syz [ 223.340358][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 223.342754][ T6140] dvb-usb: error while querying for an remote control event. [ 223.466519][T12857] __nla_validate_parse: 1 callbacks suppressed [ 223.466530][T12857] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1847'. [ 223.500004][ T6140] dvb-usb: bulk message failed: -22 (1/0) [ 223.501883][ T6140] dvb-usb: error while querying for an remote control event. [ 223.516215][T12852] loop5: detected capacity change from 0 to 7 [ 223.522302][T12852] Dev loop5: unable to read RDB block 7 [ 223.525147][T12852] loop5: AHDI p1 p3 p4 [ 223.527002][T12852] loop5: partition table partially beyond EOD, truncated [ 223.536303][T12852] loop5: p1 start 1818582900 is beyond EOD, truncated [ 223.539240][T12852] loop5: p3 start 719360596 is beyond EOD, truncated [ 223.595263][ T6140] usb 13-1: USB disconnect, device number 3 [ 223.626259][ T6140] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 223.642499][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:3.20/input/input42 [ 223.654120][ T5127] bcm5974 6-1:3.20: could not read from device [ 223.660734][ T5127] bcm5974 6-1:3.20: could not read from device [ 223.662239][ T10] usb 6-1: USB disconnect, device number 36 [ 223.842035][T12870] netlink: 'syz.8.1851': attribute type 3 has an invalid length. [ 224.040466][ T5746] Bluetooth: hci1: command 0x0c1a tx timeout [ 224.051342][ T5746] Bluetooth: hci0: command 0x0419 tx timeout [ 224.256237][T12888] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1856'. [ 224.375830][T12902] input: syz0 as /devices/virtual/input/input43 [ 224.416404][T12907] netlink: 'syz.1.1860': attribute type 1 has an invalid length. [ 224.432671][T12907] 8021q: adding VLAN 0 to HW filter on device bond6 [ 224.457062][T12907] veth9: entered promiscuous mode [ 224.463975][T12907] bond6: (slave veth9): Enslaving as an active interface with a down link [ 224.473665][T12907] bond6: (slave vlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 224.608672][T12915] tmpfs: Unknown parameter 'no' [ 224.799921][ T1484] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 224.952188][ T1484] usb 6-1: Using ep0 maxpacket: 8 [ 224.956425][ T1484] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 224.959593][ T1484] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.964802][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 224.969111][ T1484] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 224.973904][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 224.977381][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 224.981270][ T1484] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 224.985310][ T1484] usb 6-1: config 168 interface 0 has no altsetting 0 [ 224.988235][ T1484] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 224.991398][ T1484] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 224.995996][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.001768][ T1484] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.005407][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.008756][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.012774][ T1484] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.016816][ T1484] usb 6-1: config 168 interface 0 has no altsetting 0 [ 225.019624][ T1484] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 225.022396][ T1484] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 225.025753][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 225.029203][ T1484] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 225.032913][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 225.036327][ T1484] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 225.039966][ T1484] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 225.043988][ T1484] usb 6-1: config 168 interface 0 has no altsetting 0 [ 225.048239][ T1484] usb 6-1: string descriptor 0 read error: -22 [ 225.050872][ T1484] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 225.054430][ T1484] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.065959][ T1484] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 225.712624][ T40] audit: type=1400 audit(1781172609.192:63876): avc: denied { append } for pid=12931 comm="syz.6.1869" name="ptp0" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 225.779118][T12937] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1870'. [ 225.812515][T12939] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.1871'. [ 225.818362][T12939] veth0_to_bond: default FDB implementation only supports local addresses [ 225.909636][ T40] audit: type=1400 audit(1781172609.382:63877): avc: denied { bind } for pid=12945 comm="syz.4.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 225.970999][ T40] audit: type=1400 audit(1781172609.452:63878): avc: denied { listen } for pid=12945 comm="syz.4.1873" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 225.989596][ T40] audit: type=1400 audit(1781172609.462:63879): avc: denied { map } for pid=12945 comm="syz.4.1873" path="/proc/1243/fdinfo" dev="proc" ino=58800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 226.004991][ T40] audit: type=1400 audit(1781172609.462:63880): avc: denied { execute } for pid=12945 comm="syz.4.1873" path="/proc/1243/fdinfo" dev="proc" ino=58800 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 226.014239][ T40] audit: type=1400 audit(1781172609.482:63881): avc: denied { read } for pid=12953 comm="syz.6.1876" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 226.052721][T12958] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1877'. [ 226.055613][T12958] netlink: 'syz.6.1877': attribute type 2 has an invalid length. [ 226.129845][ T5746] Bluetooth: hci0: command 0x0419 tx timeout [ 226.307066][ T40] audit: type=1400 audit(1781172609.782:63882): avc: denied { write } for pid=12969 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.374712][ T40] audit: type=1400 audit(1781172609.852:63883): avc: denied { write } for pid=12976 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.375212][T12978] Bluetooth: MGMT ver 1.23 [ 226.427356][ T5446] veth0_macvtap: left promiscuous mode [ 226.584227][T12925] kexec: Could not allocate control_code_buffer [ 226.652196][T12996] MPI: mpi too large (16392 bits) [ 226.713569][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1886'. [ 226.842553][T13012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=258 sclass=netlink_route_socket pid=13012 comm=syz.8.1891 [ 226.908499][T13020] veth0_to_team: entered promiscuous mode [ 226.919182][T13020] gretap0: entered promiscuous mode [ 226.920463][T13010] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 226.922658][T13020] debugfs: 'hsr1' already exists in 'hsr' [ 226.927858][T13020] Cannot create hsr debugfs directory [ 227.009237][T13027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59 sclass=netlink_route_socket pid=13027 comm=syz.4.1893 [ 227.015033][T13027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=13027 comm=syz.4.1893 [ 227.019201][T13027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=13027 comm=syz.4.1893 [ 227.023124][T13027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=13027 comm=syz.4.1893 [ 227.027000][T13027] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=13027 comm=syz.4.1893 [ 227.322478][ T50] usb 6-1: USB disconnect, device number 37 [ 227.417510][T13054] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 227.427661][T13054] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.1899'. [ 227.775643][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 227.775660][ T40] audit: type=1400 audit(1781172611.252:63891): avc: denied { setopt } for pid=13070 comm="syz.6.1906" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 227.901997][T13082] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1910'. [ 227.991470][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1909'. [ 227.994843][T13083] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 227.999350][T13083] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 228.072728][ T40] audit: type=1400 audit(1781172611.552:63892): avc: denied { append } for pid=13094 comm="syz.4.1912" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 228.187232][T13102] syzkaller0: entered promiscuous mode [ 228.188907][T13102] syzkaller0: entered allmulticast mode [ 228.199953][ T5746] Bluetooth: hci0: command 0x0419 tx timeout [ 228.223554][T13102] tipc: Started in network mode [ 228.225174][T13102] tipc: Node identity 566f16baf0ea, cluster identity 4711 [ 228.227525][T13102] tipc: Enabled bearer , priority 0 [ 228.232773][T13101] tipc: Resetting bearer [ 228.243275][T13101] tipc: Disabling bearer [ 228.457173][T13115] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1920'. [ 228.701766][T13132] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 228.805604][T13136] netlink: 'syz.1.1927': attribute type 13 has an invalid length. [ 228.807999][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 228.811338][T13136] netlink: 'syz.1.1927': attribute type 13 has an invalid length. [ 228.813771][T13136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1927'. [ 228.940805][T13145] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1929'. [ 229.060390][T13156] bond4: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 229.064213][T13156] bond4 (unregistering): Released all slaves [ 229.078885][T13160] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1934'. [ 229.082734][T13161] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1933'. [ 229.107487][T13163] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1935'. [ 229.113366][T13149] syzkaller0: entered promiscuous mode [ 229.115176][T13149] syzkaller0: entered allmulticast mode [ 229.171912][T13166] syzkaller1: entered promiscuous mode [ 229.173605][T13166] syzkaller1: entered allmulticast mode [ 229.183876][ T40] audit: type=1401 audit(1781172612.662:63893): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 229.236328][ T40] audit: type=1400 audit(1781172612.712:63894): avc: denied { write } for pid=13169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.296681][ T40] audit: type=1400 audit(1781172612.772:63895): avc: denied { write } for pid=13177 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.326162][ T40] audit: type=1400 audit(1781172612.802:63896): avc: denied { map } for pid=13171 comm="syz.4.1937" path="socket:[60424]" dev="sockfs" ino=60424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.331014][T13173] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 229.339288][ T40] audit: type=1400 audit(1781172612.802:63897): avc: denied { read accept } for pid=13171 comm="syz.4.1937" path="socket:[60424]" dev="sockfs" ino=60424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 229.392143][ T40] audit: type=1326 audit(1781172612.872:63898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13186 comm="syz.8.1939" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f015df9ce59 code=0x0 [ 229.415419][ T40] audit: type=1400 audit(1781172612.892:63899): avc: denied { write } for pid=13185 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.458339][ T40] audit: type=1400 audit(1781172612.932:63900): avc: denied { write } for pid=13193 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 229.464210][ T10] libceph: connect (1)[c::]:6789 error -99 [ 229.471487][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 229.524883][T13206] netlink: 'syz.4.1942': attribute type 1 has an invalid length. [ 229.554019][T13194] ceph: No mds server is up or the cluster is laggy [ 229.557336][T13206] 8021q: adding VLAN 0 to HW filter on device bond4 [ 229.637324][T13206] bond4: (slave veth3): Enslaving as an active interface with a down link [ 229.647439][T13213] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 229.649665][T13213] bond4: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 229.760944][T13225] netlink: 1047 bytes leftover after parsing attributes in process `syz.6.1947'. [ 229.763839][T13225] veth0_to_bond: default FDB implementation only supports local addresses [ 229.769475][T13225] gtp1: entered allmulticast mode [ 229.869897][ T10] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 229.896970][T13235] netlink: zone id is out of range [ 229.915148][T13235] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1950'. [ 230.019886][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 230.023552][ T10] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 230.027088][ T10] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 230.031343][ T10] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 230.034795][ T10] usb 6-1: config 250 has no interface number 0 [ 230.037455][ T10] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 230.043211][ T10] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 230.047373][ T10] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 230.052638][ T10] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 230.056877][ T10] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 230.062460][ T10] usb 6-1: config 250 interface 228 has no altsetting 0 [ 230.067213][ T10] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 230.071234][ T10] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 230.074606][ T10] usb 6-1: Product: syz [ 230.076478][ T10] usb 6-1: SerialNumber: syz [ 230.085529][ T10] hub 6-1:250.228: bad descriptor, ignoring hub [ 230.088176][ T10] hub 6-1:250.228: probe with driver hub failed with error -5 [ 230.299256][ T10] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 38 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 230.407730][T13256] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 230.683424][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1955'. [ 230.699100][T13270] overlayfs: failed lookup in lower (newroot/149, name='file2', err=-40): overlapping layers [ 230.827364][T13277] netlink: 'syz.4.1962': attribute type 3 has an invalid length. [ 230.846391][T13279] create_pit_timer: 26 callbacks suppressed [ 230.846401][T13279] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 230.863127][T13279] kvm: pic: level sensitive irq not supported [ 230.863696][T13279] kvm: pic: non byte read [ 230.873003][T13284] Bluetooth: MGMT ver 1.23 [ 230.874628][T13284] Bluetooth: hci1: too big key_count value 36871 [ 230.944924][T13215] usb 6-1: reset high-speed USB device number 38 using dummy_hcd [ 231.096765][ T5746] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 231.099651][T13298] netlink: 'syz.4.1968': attribute type 3 has an invalid length. [ 231.104117][T13298] netlink: 'syz.4.1968': attribute type 1 has an invalid length. [ 231.106492][T13298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1968'. [ 231.345284][T13257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.349052][T13257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.353590][T13316] binder_alloc: binder_alloc_mmap_handler: 13315 200000ffd000-200001000000 already mapped failed -16 [ 231.362340][T13316] binder_alloc: 13315: binder_alloc_buf, no vma [ 231.720104][ T1484] usb 6-1: USB disconnect, device number 38 [ 231.724310][ T1484] usblp0: removed [ 231.793408][T13345] loop2: detected capacity change from 0 to 14 [ 231.797365][T13345] Dev loop2: unable to read RDB block 14 [ 231.799910][T13345] loop2: AHDI p1 p2 p3 [ 231.801703][T13345] loop2: partition table partially beyond EOD, truncated [ 231.805035][T13345] loop2: p1 start 1601398130 is beyond EOD, truncated [ 231.807937][T13345] loop2: p2 start 1702059890 is beyond EOD, truncated [ 232.600299][ T50] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 232.749834][ T50] usb 13-1: Using ep0 maxpacket: 16 [ 232.753014][ T50] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 232.758586][ T50] usb 13-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 232.763860][ T50] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.767008][ T50] usb 13-1: Product: syz [ 232.768620][ T50] usb 13-1: Manufacturer: syz [ 232.770973][ T50] usb 13-1: SerialNumber: syz [ 232.774373][ T50] usb 13-1: config 0 descriptor?? [ 232.778749][ T50] em28xx 13-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 232.782209][ T50] em28xx 13-1:0.0: DVB interface 0 found: bulk [ 232.913649][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 232.913660][ T40] audit: type=1400 audit(1781172616.392:63909): avc: denied { setopt } for pid=13386 comm="syz.6.1996" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 233.295640][ T40] audit: type=1400 audit(1781172616.772:63910): avc: denied { setopt } for pid=13404 comm="syz.6.2002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 233.382300][ T50] em28xx 13-1:0.0: unknown em28xx chip ID (0) [ 233.795610][ T50] em28xx 13-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 233.802700][ T50] em28xx 13-1:0.0: board has no eeprom [ 233.815260][T13427] __nla_validate_parse: 9 callbacks suppressed [ 233.815276][T13427] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2008'. [ 233.897117][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2009'. [ 233.957106][T13433] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.139954][ T39] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 234.299977][ T39] usb 9-1: Using ep0 maxpacket: 8 [ 234.304193][ T39] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.308289][ T39] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 234.312020][ T39] usb 9-1: config 1 has no interface number 0 [ 234.314624][ T39] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 234.321274][ T39] usb 9-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 234.324926][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.328187][ T39] usb 9-1: Product: syz [ 234.330160][ T39] usb 9-1: Manufacturer: syz [ 234.332097][ T39] usb 9-1: SerialNumber: syz [ 234.487471][T13440] vlan4: entered promiscuous mode [ 234.489206][T13440] hsr0: entered promiscuous mode [ 234.491562][T13440] vlan4: entered allmulticast mode [ 234.493593][T13440] hsr0: entered allmulticast mode [ 234.495434][T13440] hsr_slave_0: entered allmulticast mode [ 234.653643][T13446] xfrm0 speed is unknown, defaulting to 1000 [ 234.922613][T13365] em28xx 13-1:0.0: failed to get i2c transfer status from bridge register (error=-5) [ 234.944722][ T39] usb 9-1: USB disconnect, device number 27 [ 234.980826][ T50] em28xx 13-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 234.983931][ T50] em28xx 13-1:0.0: dvb set to bulk mode. [ 234.995377][ T1352] em28xx 13-1:0.0: Binding DVB extension [ 235.027446][ T50] usb 13-1: USB disconnect, device number 4 [ 235.037788][ T50] em28xx 13-1:0.0: Disconnecting em28xx [ 235.081851][ T1352] em28xx 13-1:0.0: Registering input extension [ 235.084794][ T50] em28xx 13-1:0.0: Closing input extension [ 235.109094][ T50] em28xx 13-1:0.0: Freeing device [ 235.169925][ T5746] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 235.174574][ T5746] Bluetooth: hci3: Injecting HCI hardware error event [ 235.179734][ T5746] Bluetooth: hci3: hardware error 0x00 [ 235.379971][ T39] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 235.559949][ T39] usb 9-1: Using ep0 maxpacket: 32 [ 235.564637][ T39] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 235.571220][ T39] usb 9-1: New USB device found, idVendor=0582, idProduct=015b, bcdDevice= 0.40 [ 235.575115][ T39] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.578373][ T39] usb 9-1: Product: syz [ 235.580383][ T39] usb 9-1: Manufacturer: Šˆ [ 235.582330][ T39] usb 9-1: SerialNumber: syz [ 235.801499][T13461] tipc: Cannot configure node identity twice [ 235.803971][T13461] tipc: Cannot configure node identity twice [ 235.808015][T13461] sg_read: process 483 (syz.6.2018) changed security contexts after opening file descriptor, this is not allowed. [ 235.854025][T13464] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 235.858209][T13464] IPv6: NLM_F_CREATE should be set when creating new route [ 235.860563][T13464] IPv6: NLM_F_CREATE should be set when creating new route [ 235.862776][T13464] IPv6: NLM_F_CREATE should be set when creating new route [ 235.866237][T13464] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2019'. [ 235.912622][T13467] netlink: 212348 bytes leftover after parsing attributes in process `syz.6.2020'. [ 235.993007][ T39] usb 9-1: unit 5 not found! [ 235.994603][ T39] usb 9-1: unit 9 not found! [ 236.014636][T13475] tipc: Started in network mode [ 236.020266][T13475] tipc: Node identity 8a53bf318ac7, cluster identity 4711 [ 236.029067][T13475] tipc: Enabled bearer , priority 0 [ 236.033726][T13475] syzkaller0: entered promiscuous mode [ 236.036024][T13475] syzkaller0: entered allmulticast mode [ 236.043778][ T39] usb 9-1: USB disconnect, device number 28 [ 236.058240][T13475] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 236.082721][ T8127] udevd[8127]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 236.122630][T13475] tipc: Resetting bearer [ 236.127101][T13474] tipc: Resetting bearer [ 236.142120][T13474] tipc: Disabling bearer [ 236.247240][T13483] netlink: 'syz.8.2025': attribute type 1 has an invalid length. [ 236.270688][ T5839] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 236.302518][T13486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2027'. [ 236.369346][T13494] fuse: Bad value for 'rootmode' [ 236.426329][T13497] binder: binder_mmap: 13493 200000ffa000-200000ffd000 bad vm_flags failed -1 [ 236.616630][ T40] audit: type=1400 audit(1781172620.092:63911): avc: denied { getopt } for pid=13498 comm="syz.8.2031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 237.242241][ T5746] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 237.303151][ T40] audit: type=1400 audit(1781172620.782:63912): avc: denied { write } for pid=13519 comm="syz.4.2039" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 237.339352][T13528] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2041'. [ 237.342845][T13528] netlink: 5 bytes leftover after parsing attributes in process `syz.8.2041'. [ 237.345538][T13528] openvswitch: netlink: IP tunnel attribute has 1026 unknown bytes. [ 237.353854][T13531] fuse: Unknown parameter '' [ 237.417426][T13539] overlayfs: failed to resolve './bus': -2 [ 237.438620][ T40] audit: type=1400 audit(1781172620.912:63913): avc: denied { listen } for pid=13534 comm="syz.8.2043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 237.667370][ T40] audit: type=1400 audit(1781172621.142:63914): avc: denied { write } for pid=13557 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.731051][ T40] audit: type=1400 audit(1781172621.212:63915): avc: denied { write } for pid=13562 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.740185][T13559] Invalid source name [ 237.742081][T13559] UBIFS error (pid: 13559): cannot open "ubifs", error -22 [ 237.768115][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2050'. [ 237.816293][T13571] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2051'. [ 237.832923][T13573] xt_hashlimit: invalid rate [ 237.942160][ T40] audit: type=1400 audit(1781172621.422:63916): avc: denied { read } for pid=13577 comm="syz.1.2053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 237.994803][T13580] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2053'. [ 238.135371][ T40] audit: type=1400 audit(1781172621.612:63917): avc: denied { write } for pid=13583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.189983][ T40] audit: type=1400 audit(1781172621.662:63918): avc: denied { write } for pid=13586 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 238.324159][ T40] audit: type=1400 audit(1781172621.802:63919): avc: denied { write } for pid=13599 comm="syz.1.2058" name="/" dev="9p" ino=75786237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 238.479971][ T5830] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 238.528513][T13610] binder: 13609:13610 ioctl c0306201 200000000440 returned -14 [ 238.559047][ T40] audit: type=1400 audit(1781172622.032:63920): avc: denied { cmd } for pid=13613 comm="syz.1.2063" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 238.641403][ T5830] usb 11-1: Using ep0 maxpacket: 8 [ 238.644314][ T5830] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 238.646706][ T5830] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 238.649496][ T5830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 238.652449][ T5830] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 238.655331][ T5830] usb 11-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.659017][ T5830] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 238.661998][ T5830] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.796294][T13624] qnx4: no qnx4 filesystem (no root dir). [ 238.871676][ T5830] usb 11-1: usb_control_msg returned -32 [ 238.873992][ T5830] usbtmc 11-1:16.0: can't read capabilities [ 239.329442][T13646] bond0: (slave sit0): refused to change device type [ 239.332484][T13647] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2073'. [ 239.561906][T13653] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2076'. [ 239.936985][ T1484] usb 11-1: USB disconnect, device number 5 [ 240.391690][T13675] xfrm0 speed is unknown, defaulting to 1000 [ 240.392136][ T40] audit: type=1400 audit(1781172623.872:63921): avc: denied { connect } for pid=13623 comm="syz.1.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 240.444425][T13683] syzkaller0: entered promiscuous mode [ 240.446398][T13683] syzkaller0: entered allmulticast mode [ 240.658405][ T5142] pmem0: [POWERTEC] [ 240.707356][T13701] SELinux: unknown common [ 240.708910][T13701] SELinux: failed to load policy [ 240.834539][T13720] macvlan0: entered promiscuous mode [ 241.257431][ T40] audit: type=1400 audit(1781172624.732:63922): avc: denied { create } for pid=13737 comm="syz.1.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 241.268558][T13740] netlink: 'syz.6.2102': attribute type 61 has an invalid length. [ 241.349217][T13746] block nbd1: Cannot use ioctl interface on a netlink controlled device. [ 241.542259][ T40] audit: type=1400 audit(1781172625.022:63923): avc: denied { connect } for pid=13755 comm="syz.4.2107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 241.685443][T13777] cgroup: Unknown subsys name 'cpuset' [ 241.753289][T13765] pmem0: [POWERTEC] [ 241.814599][T13780] openvswitch: netlink: IP tunnel dst address not specified [ 244.351511][T13747] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.408642][T13802] vlan0: entered promiscuous mode [ 244.454597][T13806] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2121'. [ 244.472750][ T40] audit: type=1400 audit(1781172627.952:63924): avc: denied { name_bind } for pid=13807 comm="syz.4.2124" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 244.498777][T13810] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2122'. [ 244.527966][T13810] netlink: 'syz.1.2122': attribute type 2 has an invalid length. [ 244.531214][T13810] netlink: 'syz.1.2122': attribute type 8 has an invalid length. [ 244.534454][T13810] netlink: 'syz.1.2122': attribute type 9 has an invalid length. [ 244.537667][T13810] netlink: 'syz.1.2122': attribute type 10 has an invalid length. [ 244.839957][ T1484] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 244.910218][ T5820] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 244.989891][ T1484] usb 6-1: Using ep0 maxpacket: 8 [ 244.993819][ T1484] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 244.997282][ T1484] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 245.001393][ T1484] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 245.005415][ T1484] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.009482][ T1484] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.014904][ T1484] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 245.018708][ T1484] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.059971][ T5820] usb 9-1: Using ep0 maxpacket: 32 [ 245.067584][ T5820] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.071971][ T5820] usb 9-1: config 0 has no interfaces? [ 245.077007][ T5820] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 245.081066][ T5820] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.084476][ T5820] usb 9-1: Product: syz [ 245.086319][ T5820] usb 9-1: Manufacturer: syz [ 245.088207][ T5820] usb 9-1: SerialNumber: syz [ 245.093799][ T5820] usb 9-1: config 0 descriptor?? [ 245.227544][ T1484] usb 6-1: usb_control_msg returned -32 [ 245.230395][ T1484] usbtmc 6-1:16.0: can't read capabilities [ 245.366696][ T40] audit: type=1400 audit(1781172628.842:63925): avc: denied { mounton } for pid=13828 comm="syz.6.2130" path="/file0" dev="ramfs" ino=65572 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 245.382320][ T40] audit: type=1400 audit(1781172628.862:63926): avc: denied { execute } for pid=13832 comm="syz.8.2131" path="/dev/audio" dev="devtmpfs" ino=1317 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 245.400419][T13825] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 245.407562][T13825] exFAT-fs (nullb0): invalid boot record signature [ 245.410565][T13825] exFAT-fs (nullb0): failed to read boot sector [ 245.413106][T13825] exFAT-fs (nullb0): failed to recognize exfat type [ 245.417946][ T5886] usb 9-1: USB disconnect, device number 29 [ 245.434150][T13838] netlink: 'syz.8.2132': attribute type 2 has an invalid length. [ 245.437537][T13838] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2132'. [ 245.491368][T13840] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2133'. [ 245.530649][T13844] comedi comedi3: comedi_config --init_data is deprecated [ 245.668896][T13858] tmpfs: Unknown parameter 'quota„„<ŲlõÖŒ/}zŅJ³¹*y¬;CCʀ' [ 246.078529][ T40] audit: type=1400 audit(1781172629.552:63927): avc: denied { write } for pid=13879 comm="syz.4.2145" name="/" dev="configfs" ino=3161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 246.523875][T13909] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 246.935729][T13926] program syz.4.2159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.309131][T13938] syzkaller0: entered promiscuous mode [ 247.311508][T13938] syzkaller0: entered allmulticast mode [ 247.612745][ T5886] usb 6-1: USB disconnect, device number 39 [ 247.678699][ T40] audit: type=1400 audit(1781172631.152:63928): avc: denied { remount } for pid=13949 comm="syz.6.2168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 247.725691][T13958] netlink: 228 bytes leftover after parsing attributes in process `syz.1.2170'. [ 247.739412][ T40] audit: type=1400 audit(1781172631.212:63929): avc: denied { watch watch_reads } for pid=13959 comm="syz.6.2169" path="pipe:[66705]" dev="pipefs" ino=66705 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 247.770419][T13962] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2171'. [ 247.956083][T13972] syzkaller0: entered promiscuous mode [ 247.959456][T13972] syzkaller0: entered allmulticast mode [ 248.032046][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2175'. [ 248.159913][T13982] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=13982 comm=syz.4.2175 [ 248.992890][ T40] audit: type=1326 audit(1781172632.472:63930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.4.2181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x7ffc0000 [ 249.000396][ T40] audit: type=1326 audit(1781172632.472:63931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.4.2181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x7ffc0000 [ 249.008660][ T40] audit: type=1326 audit(1781172632.472:63932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.4.2181" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f483319ce59 code=0x7ffc0000 [ 249.017422][ T40] audit: type=1326 audit(1781172632.472:63933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13995 comm="syz.4.2181" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x7ffc0000 [ 249.621376][T14021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2187'. [ 249.681219][ T1484] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 249.741048][T14023] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 249.746149][T14023] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14023 comm=syz.8.2188 [ 249.830068][ T1484] usb 9-1: Using ep0 maxpacket: 8 [ 249.834592][ T1484] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 249.837544][ T1484] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.841958][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.845494][ T1484] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.850406][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.854930][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.859479][ T1484] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.864970][ T1484] usb 9-1: config 168 interface 0 has no altsetting 0 [ 249.869833][ T1484] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 249.873046][ T1484] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.879117][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.884181][ T1484] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.889040][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.893480][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.897229][ T1484] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.901671][ T1484] usb 9-1: config 168 interface 0 has no altsetting 0 [ 249.906081][ T1484] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 249.908564][ T1484] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 249.912166][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 249.915712][ T1484] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 249.919511][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 249.923143][ T1484] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 249.926739][ T1484] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 249.931335][ T1484] usb 9-1: config 168 interface 0 has no altsetting 0 [ 249.935793][ T1484] usb 9-1: string descriptor 0 read error: -22 [ 249.937783][ T1484] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 249.940915][ T1484] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.951578][ T1484] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 250.216198][ T1484] usb 9-1: USB disconnect, device number 30 [ 250.459876][T14033] nbd4: detected capacity change from 0 to 63 [ 250.467707][T14034] block nbd4: NBD_DISCONNECT [ 250.478105][T14034] block nbd4: Disconnected due to user request. [ 250.481710][T14034] block nbd4: shutting down sockets [ 250.481768][ T8127] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.489482][ T8127] buffer_io_error: 6 callbacks suppressed [ 250.489524][ T8127] Buffer I/O error on dev nbd4, logical block 1, async page read [ 250.512739][ C0] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.516460][ C0] Buffer I/O error on dev nbd4, logical block 0, async page read [ 250.521880][ T1306] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 2 prio class 2 [ 250.526583][T14032] block nbd4: NBD_DISCONNECT [ 250.526817][T14032] block nbd4: Send disconnect failed -32 [ 250.528871][ T1306] Buffer I/O error on dev nbd4, logical block 2, async page read [ 250.534540][ T1306] Buffer I/O error on dev nbd4, logical block 3, async page read [ 250.539928][ T8127] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.544023][ T8127] Buffer I/O error on dev nbd4, logical block 0, async page read [ 250.546635][ T8127] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.549484][ T8127] Buffer I/O error on dev nbd4, logical block 1, async page read [ 250.552202][ T8127] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.555712][ T8127] Buffer I/O error on dev nbd4, logical block 2, async page read [ 250.558745][ T8127] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.562313][ T8127] Buffer I/O error on dev nbd4, logical block 3, async page read [ 250.565362][ T8127] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.568852][ T8127] Buffer I/O error on dev nbd4, logical block 0, async page read [ 250.572045][ T8127] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.575531][ T8127] Buffer I/O error on dev nbd4, logical block 1, async page read [ 250.578605][ T8127] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 250.588556][ T8127] ldm_validate_partition_table(): Disk read failed. [ 250.593205][ T8127] Dev nbd4: unable to read RDB block 0 [ 250.596686][ T8127] nbd4: unable to read partition table [ 250.606832][ T8127] ldm_validate_partition_table(): Disk read failed. [ 250.609951][ T8127] Dev nbd4: unable to read RDB block 0 [ 250.612639][ T8127] nbd4: unable to read partition table [ 250.720010][ T5886] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 250.850006][ T5886] usb 13-1: device descriptor read/64, error -71 [ 250.952103][T14051] netlink: 'syz.4.2197': attribute type 7 has an invalid length. [ 250.956111][T14051] netlink: 'syz.4.2197': attribute type 8 has an invalid length. [ 251.100713][ T5886] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 251.131043][ T1484] usb 11-1: new high-speed USB device number 6 using dummy_hcd [ 251.151563][T14056] sysfs: cannot create duplicate filename '/class/ieee80211/1łą^!’’' [ 251.156580][T14056] CPU: 0 UID: 0 PID: 14056 Comm: syz.4.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.156605][T14056] Tainted: [L]=SOFTLOCKUP [ 251.156611][T14056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.156622][T14056] Call Trace: [ 251.156628][T14056] [ 251.156635][T14056] dump_stack_lvl+0x100/0x190 [ 251.156667][T14056] sysfs_warn_dup.cold+0x1c/0x28 [ 251.156695][T14056] sysfs_do_create_link_sd+0x113/0x140 [ 251.156719][T14056] sysfs_create_link+0x61/0xc0 [ 251.156740][T14056] device_add+0x675/0x1950 [ 251.156770][T14056] ? __pfx_device_add+0x10/0x10 [ 251.156796][T14056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.156818][T14056] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 251.156850][T14056] wiphy_register+0x1edd/0x2d90 [ 251.156868][T14056] ? __rtnl_unlock+0xb9/0xf0 [ 251.156894][T14056] ? __pfx_wiphy_register+0x10/0x10 [ 251.156914][T14056] ? __asan_memset+0x23/0x50 [ 251.156939][T14056] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 251.156974][T14056] ieee80211_register_hw+0x3055/0x4570 [ 251.157012][T14056] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 251.157036][T14056] ? __pfx___debug_object_init+0x10/0x10 [ 251.157061][T14056] ? find_held_lock+0x2b/0x80 [ 251.157079][T14056] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.157099][T14056] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 251.157124][T14056] ? __hrtimer_setup+0x208/0x330 [ 251.157151][T14056] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 251.157188][T14056] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 251.157210][T14056] ? __asan_memcpy+0x3c/0x60 [ 251.157237][T14056] hwsim_new_radio_nl+0xc5f/0x1370 [ 251.157256][T14056] ? rcu_is_watching+0x12/0xc0 [ 251.157282][T14056] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.157308][T14056] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 251.157334][T14056] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 251.157364][T14056] genl_family_rcv_msg_doit+0x214/0x300 [ 251.157390][T14056] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.157422][T14056] ? bpf_lsm_capable+0x9/0x10 [ 251.157439][T14056] ? security_capable+0x80/0x260 [ 251.157462][T14056] ? ns_capable+0xd2/0xf0 [ 251.157487][T14056] genl_rcv_msg+0x560/0x800 [ 251.157514][T14056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.157538][T14056] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.157566][T14056] netlink_rcv_skb+0x159/0x420 [ 251.157587][T14056] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.157611][T14056] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.157643][T14056] ? netlink_deliver_tap+0x1ae/0xcc0 [ 251.157672][T14056] genl_rcv+0x28/0x40 [ 251.157714][T14056] netlink_unicast+0x585/0x850 [ 251.157739][T14056] ? __pfx_netlink_unicast+0x10/0x10 [ 251.157768][T14056] netlink_sendmsg+0x8b0/0xda0 [ 251.157793][T14056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.157815][T14056] ? __might_fault+0xa0/0x140 [ 251.157849][T14056] ____sys_sendmsg+0x9e1/0xb70 [ 251.157869][T14056] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.157891][T14056] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.157916][T14056] ? __pfx_futex_wake_mark+0x10/0x10 [ 251.157938][T14056] ___sys_sendmsg+0x190/0x1e0 [ 251.157961][T14056] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.158014][T14056] __sys_sendmsg+0x170/0x220 [ 251.158040][T14056] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.158065][T14056] ? __x64_sys_futex+0x34f/0x4d0 [ 251.158098][T14056] ? rcu_is_watching+0x12/0xc0 [ 251.158126][T14056] do_syscall_64+0x115/0x870 [ 251.158147][T14056] ? clear_bhb_loop+0x40/0x90 [ 251.158167][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.158185][T14056] RIP: 0033:0x7f483319ce59 [ 251.158199][T14056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.158215][T14056] RSP: 002b:00007f48340b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.158232][T14056] RAX: ffffffffffffffda RBX: 00007f4833415fa0 RCX: 00007f483319ce59 [ 251.158243][T14056] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 251.158253][T14056] RBP: 00007f4833232d6f R08: 0000000000000000 R09: 0000000000000000 [ 251.158263][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.158272][T14056] R13: 00007f4833416038 R14: 00007f4833415fa0 R15: 00007ffeb876da18 [ 251.158297][T14056] [ 251.239975][ T5886] usb 13-1: device descriptor read/64, error -71 [ 251.318988][T14059] sysfs: cannot create duplicate filename '/class/ieee80211/1łą^!’’' [ 251.322092][T14059] CPU: 1 UID: 0 PID: 14059 Comm: syz.4.2198 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.322109][T14059] Tainted: [L]=SOFTLOCKUP [ 251.322113][T14059] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 251.322119][T14059] Call Trace: [ 251.322123][T14059] [ 251.322127][T14059] dump_stack_lvl+0x100/0x190 [ 251.322146][T14059] sysfs_warn_dup.cold+0x1c/0x28 [ 251.322163][T14059] sysfs_do_create_link_sd+0x113/0x140 [ 251.322179][T14059] sysfs_create_link+0x61/0xc0 [ 251.322193][T14059] device_add+0x675/0x1950 [ 251.322214][T14059] ? __pfx_device_add+0x10/0x10 [ 251.322255][T14059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.322274][T14059] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 251.322303][T14059] wiphy_register+0x1edd/0x2d90 [ 251.322321][T14059] ? __rtnl_unlock+0xb9/0xf0 [ 251.322343][T14059] ? __pfx_wiphy_register+0x10/0x10 [ 251.322361][T14059] ? __asan_memset+0x23/0x50 [ 251.322384][T14059] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 251.322416][T14059] ieee80211_register_hw+0x3055/0x4570 [ 251.322450][T14059] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 251.322472][T14059] ? __pfx___debug_object_init+0x10/0x10 [ 251.322495][T14059] ? find_held_lock+0x2b/0x80 [ 251.322512][T14059] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.322531][T14059] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 251.322553][T14059] ? __hrtimer_setup+0x208/0x330 [ 251.322576][T14059] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 251.322608][T14059] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 251.322634][T14059] ? __asan_memcpy+0x3c/0x60 [ 251.322660][T14059] hwsim_new_radio_nl+0xc5f/0x1370 [ 251.322678][T14059] ? rcu_is_watching+0x12/0xc0 [ 251.322702][T14059] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.322726][T14059] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 251.322749][T14059] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 251.322776][T14059] genl_family_rcv_msg_doit+0x214/0x300 [ 251.322800][T14059] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.322841][T14059] ? bpf_lsm_capable+0x9/0x10 [ 251.322858][T14059] ? security_capable+0x80/0x260 [ 251.322879][T14059] ? ns_capable+0xd2/0xf0 [ 251.322903][T14059] genl_rcv_msg+0x560/0x800 [ 251.322927][T14059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.322953][T14059] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.322980][T14059] netlink_rcv_skb+0x159/0x420 [ 251.322999][T14059] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.323021][T14059] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.323049][T14059] ? netlink_deliver_tap+0x1ae/0xcc0 [ 251.323071][T14059] genl_rcv+0x28/0x40 [ 251.323090][T14059] netlink_unicast+0x585/0x850 [ 251.323113][T14059] ? __pfx_netlink_unicast+0x10/0x10 [ 251.323139][T14059] netlink_sendmsg+0x8b0/0xda0 [ 251.323163][T14059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.323181][T14059] ? __might_fault+0xa0/0x140 [ 251.323212][T14059] ____sys_sendmsg+0x9e1/0xb70 [ 251.323229][T14059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.323251][T14059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.323276][T14059] ? __pfx_futex_wake_mark+0x10/0x10 [ 251.323296][T14059] ___sys_sendmsg+0x190/0x1e0 [ 251.323318][T14059] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.323365][T14059] __sys_sendmsg+0x170/0x220 [ 251.323390][T14059] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.323414][T14059] ? __x64_sys_futex+0x34f/0x4d0 [ 251.323446][T14059] ? rcu_is_watching+0x12/0xc0 [ 251.323472][T14059] do_syscall_64+0x115/0x870 [ 251.323492][T14059] ? clear_bhb_loop+0x40/0x90 [ 251.323512][T14059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.323528][T14059] RIP: 0033:0x7f483319ce59 [ 251.323543][T14059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.323558][T14059] RSP: 002b:00007f4834097028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.323572][T14059] RAX: ffffffffffffffda RBX: 00007f4833416090 RCX: 00007f483319ce59 [ 251.323582][T14059] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 251.323592][T14059] RBP: 00007f4833232d6f R08: 0000000000000000 R09: 0000000000000000 [ 251.323601][T14059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.323609][T14059] R13: 00007f4833416128 R14: 00007f4833416090 R15: 00007ffeb876da18 [ 251.323636][T14059] [ 251.473438][ T5886] usb usb13-port1: attempt power cycle [ 251.475837][ T1484] usb 11-1: Using ep0 maxpacket: 32 [ 251.479641][ T1484] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.484616][ T1484] usb 11-1: config 0 has no interfaces? [ 251.488027][ T1484] usb 11-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 251.490970][ T1484] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.493423][ T1484] usb 11-1: Product: syz [ 251.494781][ T1484] usb 11-1: Manufacturer: syz [ 251.496235][ T1484] usb 11-1: SerialNumber: syz [ 251.498900][ T1484] usb 11-1: config 0 descriptor?? [ 251.661773][T14075] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 251.691895][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 251.691946][ T40] audit: type=1326 audit(1781172635.172:63947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14069 comm="syz.4.2202" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f483319ce59 code=0x0 [ 251.822432][ T5886] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 251.840864][ T5886] usb 13-1: device descriptor read/8, error -71 [ 252.080088][ T5886] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 252.100661][ T5886] usb 13-1: device descriptor read/8, error -71 [ 252.212436][ T5886] usb usb13-port1: unable to enumerate USB device [ 252.887065][T14110] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2212'. [ 252.998283][T14117] Device name not specified. [ 252.998283][T14117] [ 253.012368][T14117] lo speed is unknown, defaulting to 1000 [ 253.015773][T14117] lo speed is unknown, defaulting to 1000 [ 253.019371][T14117] lo speed is unknown, defaulting to 1000 [ 253.126566][T14122] xfrm0 speed is unknown, defaulting to 1000 [ 253.285617][T14117] infiniband sz1: set down [ 253.290657][T14117] infiniband sz1: added lo [ 253.298581][ T5830] lo speed is unknown, defaulting to 1000 [ 253.306179][T14117] smbdirect: ib_dev[sz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 253.312888][T14117] smbdirect: ib_dev[sz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 253.319721][T14117] smbdirect: ib_dev[sz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 253.384504][T14120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2215'. [ 253.393768][T14117] RDS/IB: sz1: added [ 253.395268][T14117] smc: adding ib device sz1 with port count 1 [ 253.397265][T14117] smc: ib device sz1 port 1 has no pnetid [ 253.403367][ T1484] lo speed is unknown, defaulting to 1000 [ 253.410429][T14117] lo speed is unknown, defaulting to 1000 [ 253.546944][T14117] lo speed is unknown, defaulting to 1000 [ 253.685603][T14117] lo speed is unknown, defaulting to 1000 [ 253.800901][T14117] lo speed is unknown, defaulting to 1000 [ 253.811123][ T1484] usb 11-1: USB disconnect, device number 6 [ 253.967346][T14117] lo speed is unknown, defaulting to 1000 [ 254.028407][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2221'. [ 254.031740][T14142] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2221'. [ 254.078041][T14117] lo speed is unknown, defaulting to 1000 [ 254.181481][ T50] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 254.202082][T14117] lo speed is unknown, defaulting to 1000 [ 254.269841][ T1484] usb 11-1: new high-speed USB device number 7 using dummy_hcd [ 254.332018][ T50] usb 6-1: Using ep0 maxpacket: 32 [ 254.337426][ T50] usb 6-1: too many configurations: 17, using maximum allowed: 8 [ 254.345676][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.348372][ T50] usb 6-1: config 0 has no interface number 0 [ 254.365478][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.368198][ T50] usb 6-1: config 0 has no interface number 0 [ 254.382580][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.390296][ T50] usb 6-1: config 0 has no interface number 0 [ 254.399619][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.406503][ T50] usb 6-1: config 0 has no interface number 0 [ 254.417250][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.421313][ T50] usb 6-1: config 0 has no interface number 0 [ 254.424982][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.427869][ T50] usb 6-1: config 0 has no interface number 0 [ 254.431639][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.434255][ T50] usb 6-1: config 0 has no interface number 0 [ 254.439902][ T1484] usb 11-1: Using ep0 maxpacket: 32 [ 254.442450][ T50] usb 6-1: config 0 has an invalid interface number: 2 but max is 0 [ 254.443250][ T1484] usb 11-1: config index 0 descriptor too short (expected 156, got 27) [ 254.445105][ T50] usb 6-1: config 0 has no interface number 0 [ 254.448564][ T1484] usb 11-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 254.449070][T14152] netlink: 'syz.4.2224': attribute type 11 has an invalid length. [ 254.449090][T14152] netlink: 199788 bytes leftover after parsing attributes in process `syz.4.2224'. [ 254.455490][ T50] usb 6-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 254.459253][ T1484] usb 11-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 254.461393][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.461488][ T50] usb 6-1: Product: syz [ 254.465528][ T1484] usb 11-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 254.467620][ T50] usb 6-1: Manufacturer: syz [ 254.468883][ T1484] usb 11-1: config 0 interface 0 has no altsetting 0 [ 254.473515][ T50] usb 6-1: SerialNumber: syz [ 254.476138][ T1484] usb 11-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 254.480911][ T1484] usb 11-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 254.483710][ T1484] usb 11-1: Product: syz [ 254.485077][ T1484] usb 11-1: Manufacturer: syz [ 254.486659][ T1484] usb 11-1: SerialNumber: syz [ 254.504014][ T1484] usb 11-1: config 0 descriptor?? [ 254.518922][ T1484] ldusb 11-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 254.520935][ T50] usb 6-1: config 0 descriptor?? [ 254.529199][ T1484] ldusb 11-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 254.547571][ T50] etas_es58x 6-1:0.2: Starting syz syz (Serial Number syz) [ 254.579636][ T40] audit: type=1400 audit(1781172638.052:63948): avc: denied { mounton } for pid=14153 comm="syz.4.2225" path="/489/file0" dev="rpc_pipefs" ino=67076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 254.725215][ T1484] usb 11-1: USB disconnect, device number 7 [ 254.727125][ C1] ldusb 11-1:0.0: usb_submit_urb failed (-19) [ 254.739585][ T1484] ldusb 11-1:0.0: LD USB Device #0 now disconnected [ 254.929541][T14140] ldusb: No device or device unplugged -19 [ 255.152524][ T50] etas_es58x 6-1:0.2: could not retrieve the product info string [ 255.243543][T14171] input: syz1 as /devices/virtual/input/input48 [ 255.364769][ T50] usb 6-1: USB disconnect, device number 40 [ 255.392548][T14185] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2232'. [ 255.396538][T14185] netem: unknown loss type 13 [ 255.401733][ T50] etas_es58x 6-1:0.2: Disconnecting syz syz [ 255.404349][T14185] netem: change failed [ 255.463538][T14189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2233'. [ 255.502839][ T40] audit: type=1400 audit(1781172638.982:63949): avc: denied { write } for pid=14192 comm="syz.6.2236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 255.517743][T14194] loop5: detected capacity change from 0 to 7 [ 255.520896][T14194] Dev loop5: unable to read RDB block 7 [ 255.522935][T14194] loop5: AHDI p1 [ 255.525407][T14194] loop5: partition table partially beyond EOD, truncated [ 255.744649][ T40] audit: type=1326 audit(1781172639.222:63950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.1.2239" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff653d9ce59 code=0x0 [ 255.793031][ T40] audit: type=1400 audit(1781172639.272:63951): avc: denied { write } for pid=14209 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 255.928232][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2247'. [ 255.933897][ T40] audit: type=1400 audit(1781172639.412:63952): avc: denied { write } for pid=14234 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.013247][T14250] netlink: 'syz.6.2248': attribute type 1 has an invalid length. [ 256.015855][T14250] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.019356][T14250] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2248'. [ 256.037645][ T40] audit: type=1400 audit(1781172639.512:63953): avc: denied { write } for pid=14249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.098924][ T40] audit: type=1400 audit(1781172639.572:63954): avc: denied { write } for pid=14257 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 256.108912][T14256] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 256.178104][ T40] audit: type=1400 audit(1781172639.652:63955): avc: denied { write } for pid=14268 comm="syz.6.2253" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 256.194122][T14274] fuse: Unknown parameter '' [ 256.194279][T14271] overlayfs: failed lookup in lower (newroot/222, name='file0', err=-40): overlapping layers [ 256.244831][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2255'. [ 256.253501][T14276] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2255'. [ 256.671130][T14307] xfrm0 speed is unknown, defaulting to 1000 [ 256.804396][T14307] lo speed is unknown, defaulting to 1000 [ 257.004913][T14315] IPv6: Can't replace route, no match found [ 257.061359][ T40] audit: type=1400 audit(1781172640.542:63956): avc: denied { create } for pid=14317 comm="syz.8.2265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 257.079493][T14318] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2265'. [ 257.740499][T14349] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 257.828512][T14358] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2278'. [ 257.870384][T14360] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 257.877427][T14360] batman_adv: batadv0: Adding interface: gretap1 [ 257.880287][T14360] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 257.888501][T14360] batman_adv: batadv0: Interface activated: gretap1 [ 258.484744][T14386] MINIX-fs: blocksize too small for device [ 258.495968][T14383] veth11: entered promiscuous mode [ 258.676464][T14396] program syz.8.2290 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 258.743628][T14399] EXT4-fs (sr0): VFS: Can't find ext4 filesystem [ 259.053424][T14421] Invalid argument reading file caps for ./file0 [ 259.063143][ T40] audit: type=1400 audit(1781172642.532:63957): avc: denied { append } for pid=14422 comm="syz.4.2296" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.075168][ T40] audit: type=1400 audit(1781172642.542:63958): avc: denied { map } for pid=14422 comm="syz.4.2296" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.088897][ T40] audit: type=1400 audit(1781172642.542:63959): avc: denied { write execute } for pid=14422 comm="syz.4.2296" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 259.187317][ T40] audit: type=1400 audit(1781172642.662:63960): avc: denied { getopt } for pid=14420 comm="syz.6.2295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 259.222626][T14421] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2295'. [ 259.247235][ T40] audit: type=1400 audit(1781172642.722:63961): avc: denied { name_bind 0x1000000 } for pid=14420 comm="syz.6.2295" path="socket:[68828]" dev="sockfs" ino=68828 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 259.856594][T14466] xt_time: unknown flags 0xc [ 259.926247][ T40] audit: type=1400 audit(1781172643.402:63962): avc: denied { setattr } for pid=14465 comm="syz.1.2307" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 259.979491][T14476] [U]  [ 260.008635][T14476] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2309'. [ 260.078685][ T40] audit: type=1400 audit(1781172643.552:63963): avc: denied { write } for pid=14478 comm="syz.1.2310" name="/" dev="ocfs2_dlmfs" ino=68380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.124198][T14480] pimreg: entered allmulticast mode [ 260.250257][T14493] loop5: detected capacity change from 0 to 7 [ 260.250988][T14492] tipc: Enabled bearer , priority 0 [ 260.254789][T14493] Dev loop5: unable to read RDB block 7 [ 260.255054][T14492] syzkaller0: entered promiscuous mode [ 260.258659][T14493] loop5: AHDI p2 p4 [ 260.258857][T14492] syzkaller0: entered allmulticast mode [ 260.261437][T14493] loop5: partition table partially beyond EOD, truncated [ 260.265179][T14493] loop5: p4 start 254 is beyond EOD, truncated [ 260.267721][ T5746] Bluetooth: hci4: unexpected event for opcode 0x203c [ 260.273662][T14492] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 260.276693][ T40] audit: type=1400 audit(1781172643.752:63964): avc: denied { write } for pid=14491 comm="syz.4.2315" name="/" dev="9p" ino=75786237 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 260.303460][T14492] tipc: Resetting bearer [ 260.306501][T14490] tipc: Resetting bearer [ 260.324232][T14490] tipc: Disabling bearer [ 260.364116][T14496] bond2: entered promiscuous mode [ 260.455613][ T40] audit: type=1400 audit(1781172643.932:63965): avc: denied { write } for pid=14498 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.516481][T14504] gtp0: entered promiscuous mode [ 260.518585][T14504] gtp0: entered allmulticast mode [ 260.523956][T14504] team0: Device gtp0 is of different type [ 260.712629][T14531] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 260.747210][T14533] __nla_validate_parse: 1 callbacks suppressed [ 260.747221][T14533] netlink: 4376 bytes leftover after parsing attributes in process `syz.6.2323'. [ 260.758168][T14533] netlink: 4376 bytes leftover after parsing attributes in process `syz.6.2323'. [ 260.815354][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 260.847035][T14544] bridge3: entered promiscuous mode [ 260.855349][T14544] bridge3: entered allmulticast mode [ 260.860472][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 260.883798][T14544] bridge4: entered promiscuous mode [ 260.888004][T14544] bridge4: entered allmulticast mode [ 260.891326][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 260.905735][T14544] bridge5: entered promiscuous mode [ 260.907443][T14544] bridge5: entered allmulticast mode [ 260.909306][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 260.917730][T14544] bridge6: entered promiscuous mode [ 260.921518][T14544] bridge6: entered allmulticast mode [ 260.923366][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 260.937853][T14544] bridge7: entered promiscuous mode [ 260.958895][T14544] bridge7: entered allmulticast mode [ 260.971213][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 261.041293][T14544] bridge8: entered promiscuous mode [ 261.043029][T14544] bridge8: entered allmulticast mode [ 261.044852][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 261.051286][T14544] bridge9: entered promiscuous mode [ 261.052953][T14544] bridge9: entered allmulticast mode [ 261.052975][T14563] block nbd8: NBD_DISCONNECT [ 261.054736][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2327'. [ 261.058032][T14544] bridge10: entered promiscuous mode [ 261.067757][T14544] bridge10: entered allmulticast mode [ 261.092564][T14544] bridge11: entered promiscuous mode [ 261.094385][T14544] bridge11: entered allmulticast mode [ 261.102205][T14544] bridge12: entered promiscuous mode [ 261.103957][T14544] bridge12: entered allmulticast mode [ 261.110917][T14544] bridge13: entered promiscuous mode [ 261.112664][T14544] bridge13: entered allmulticast mode [ 261.125518][T14544] bridge14: entered promiscuous mode [ 261.127297][T14544] bridge14: entered allmulticast mode [ 261.133986][T14544] bridge15: entered promiscuous mode [ 261.135705][T14544] bridge15: entered allmulticast mode [ 261.144222][T14544] bridge16: entered promiscuous mode [ 261.145917][T14544] bridge16: entered allmulticast mode [ 261.166533][T14544] bridge17: entered promiscuous mode [ 261.166706][ T6574] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.169312][T14544] bridge17: entered allmulticast mode [ 261.175049][ T6574] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.177998][ T6574] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.184379][ T6574] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 261.187657][ T6574] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 261.253271][T14544] bridge18: entered promiscuous mode [ 261.254919][T14544] bridge18: entered allmulticast mode [ 261.263900][T14544] bridge19: entered promiscuous mode [ 261.272529][T14544] bridge19: entered allmulticast mode [ 261.286959][T14544] bridge20: entered promiscuous mode [ 261.288693][T14544] bridge20: entered allmulticast mode [ 261.294521][T14544] bridge21: entered promiscuous mode [ 261.296597][T14544] bridge21: entered allmulticast mode [ 261.328498][T14580] netlink: 'syz.8.2336': attribute type 13 has an invalid length. [ 261.375719][T14544] bridge22: entered promiscuous mode [ 261.377615][T14544] bridge22: entered allmulticast mode [ 261.437446][T14583] binder: 14579:14583 ioctl c0306201 200000000140 returned -22 [ 261.448956][T14544] bridge23: entered promiscuous mode [ 261.451473][T14544] bridge23: entered allmulticast mode [ 261.456936][T14544] bridge24: entered promiscuous mode [ 261.458673][T14544] bridge24: entered allmulticast mode [ 261.468236][T14544] bridge25: entered promiscuous mode [ 261.470064][T14544] bridge25: entered allmulticast mode [ 261.476001][T14544] bridge26: entered promiscuous mode [ 261.477745][T14544] bridge26: entered allmulticast mode [ 261.483863][T14544] bridge27: entered promiscuous mode [ 261.485717][T14544] bridge27: entered allmulticast mode [ 261.495192][T14544] bridge28: entered promiscuous mode [ 261.496939][T14544] bridge28: entered allmulticast mode [ 261.509512][T14544] bridge29: entered promiscuous mode [ 261.511522][T14544] bridge29: entered allmulticast mode [ 261.517046][T14544] bridge30: entered promiscuous mode [ 261.518857][T14544] bridge30: entered allmulticast mode [ 261.524622][T14544] bridge31: entered promiscuous mode [ 261.526399][T14544] bridge31: entered allmulticast mode [ 261.539150][T14544] bridge32: entered promiscuous mode [ 261.540975][T14544] bridge32: entered allmulticast mode [ 261.546570][T14544] bridge33: entered promiscuous mode [ 261.548278][T14544] bridge33: entered allmulticast mode [ 261.554070][T14544] bridge34: entered promiscuous mode [ 261.555782][T14544] bridge34: entered allmulticast mode [ 261.570751][T14544] bridge35: entered promiscuous mode [ 261.572460][T14544] bridge35: entered allmulticast mode [ 261.583167][T14544] bridge36: entered promiscuous mode [ 261.584888][T14544] bridge36: entered allmulticast mode [ 261.590675][T14544] bridge37: entered promiscuous mode [ 261.592518][T14544] bridge37: entered allmulticast mode [ 261.597768][T14544] bridge38: entered promiscuous mode [ 261.599392][T14544] bridge38: entered allmulticast mode [ 261.607114][T14544] bridge39: entered promiscuous mode [ 261.609249][T14544] bridge39: entered allmulticast mode [ 261.614975][T14544] bridge40: entered promiscuous mode [ 261.616833][T14544] bridge40: entered allmulticast mode [ 261.622469][T14544] bridge41: entered promiscuous mode [ 261.624411][T14544] bridge41: entered allmulticast mode [ 261.629614][T14544] bridge42: entered promiscuous mode [ 261.631709][T14544] bridge42: entered allmulticast mode [ 261.637083][T14544] bridge43: entered promiscuous mode [ 261.638779][T14544] bridge43: entered allmulticast mode [ 261.644306][T14544] bridge44: entered promiscuous mode [ 261.646021][T14544] bridge44: entered allmulticast mode [ 261.682262][T14568] xfrm0 speed is unknown, defaulting to 1000 [ 261.785139][T14568] lo speed is unknown, defaulting to 1000 [ 262.039919][T14568] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.042659][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.045297][T14568] bridge_slave_0: entered allmulticast mode [ 262.048347][T14568] bridge_slave_0: entered promiscuous mode [ 262.052709][T14568] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.055387][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.057881][T14568] bridge_slave_1: entered allmulticast mode [ 262.062007][T14568] bridge_slave_1: entered promiscuous mode [ 262.064731][T14616] overlay: ./bus is not a directory [ 262.091542][T14568] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.096499][T14568] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.123050][T14568] team0: Port device team_slave_0 added [ 262.127891][T14568] team0: Port device team_slave_1 added [ 262.150173][T14568] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.152915][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.163199][T14568] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.168889][T14568] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.171784][T14568] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 262.182075][T14568] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.220636][T14568] hsr_slave_0: entered promiscuous mode [ 262.223813][T14568] hsr_slave_1: entered promiscuous mode [ 262.226782][T14568] debugfs: 'hsr0' already exists in 'hsr' [ 262.229129][T14568] Cannot create hsr debugfs directory [ 262.394576][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 262.394592][ T40] audit: type=1400 audit(1781172645.872:63974): avc: denied { create } for pid=14618 comm="syz.6.2345" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 262.487889][T14626] tmpfs: Bad value for 'huge' [ 262.681884][T14639] 8021q: adding VLAN 0 to HW filter on device bond4 [ 262.822170][T14655] overlayfs: workdir and upperdir must be separate subtrees [ 262.825286][T14656] overlayfs: workdir and upperdir must be separate subtrees [ 262.967692][T14568] [ 262.968524][T14568] ====================================================== [ 262.970725][T14568] WARNING: possible circular locking dependency detected [ 262.973095][T14568] syzkaller #0 Tainted: G L [ 262.975119][T14568] ------------------------------------------------------ [ 262.977567][T14568] syz-executor/14568 is trying to acquire lock: [ 262.979622][T14568] ffffffff8e9b1de0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x4b/0x6f0 [ 262.980185][ T40] audit: type=1400 audit(1781172646.452:63975): avc: denied { write } for pid=5694 comm="syz-executor" path="pipe:[3044]" dev="pipefs" ino=3044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 262.982971][T14568] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 262.982971][T14568] but task is already holding lock: [ 262.982979][T14568] ffff88805867a530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbc0 [ 262.983038][T14568] [ 262.983038][T14568] which lock already depends on the new lock. [ 262.983038][T14568] [ 262.983044][T14568] [ 262.983044][T14568] the existing dependency chain (in reverse order) is: [ 262.983051][T14568] [ 262.983051][T14568] -> #7 (&idev->mc_lock){+.+.}-{4:4}: [ 263.003631][T14568] __mutex_lock+0x1a4/0x1b10 [ 263.005601][T14568] __ipv6_dev_mc_inc+0x53/0xbc0 [ 263.007251][T14568] __ipv6_sock_mc_join+0x5b8/0x8e0 [ 263.009412][T14568] ipv6_mcast_join_leave+0x1f9/0x220 [ 263.011343][T14568] do_ipv6_setsockopt+0x271b/0x44b0 [ 263.013102][T14568] ipv6_setsockopt+0xcb/0x170 [ 263.014719][T14568] tcp_setsockopt+0xa7/0x100 [ 263.016292][T14568] do_sock_setsockopt+0xf3/0x1d0 [ 263.017964][T14568] __sys_setsockopt+0x195/0x220 [ 263.019620][T14568] __x64_sys_setsockopt+0xbd/0x160 [ 263.021586][T14568] do_syscall_64+0x115/0x870 [ 263.023216][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.025191][T14568] [ 263.025191][T14568] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 263.027550][T14568] lock_sock_nested+0x41/0xf0 [ 263.029142][T14568] inet_shutdown+0x67/0x410 [ 263.030756][T14568] nbd_mark_nsock_dead+0xae/0x5c0 [ 263.032876][T14568] recv_work+0x5fb/0x8c0 [ 263.034364][T14568] process_one_work+0xa0e/0x1980 [ 263.036026][T14568] worker_thread+0x5ef/0xe50 [ 263.037594][T14568] kthread+0x370/0x450 [ 263.039010][T14568] ret_from_fork+0x72b/0xd50 [ 263.040616][T14568] ret_from_fork_asm+0x1a/0x30 [ 263.042274][T14568] [ 263.042274][T14568] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 263.044608][T14568] __mutex_lock+0x1a4/0x1b10 [ 263.046192][T14568] nbd_queue_rq+0x428/0x1080 [ 263.047775][T14568] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 263.049641][T14568] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 263.051831][T14568] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 263.053816][T14568] blk_mq_run_hw_queue+0x23c/0x670 [ 263.055532][T14568] blk_mq_dispatch_list+0x51d/0x1360 [ 263.057319][T14568] blk_mq_flush_plug_list+0x130/0x600 [ 263.059137][T14568] __blk_flush_plug+0x2c4/0x4b0 [ 263.060837][T14568] __submit_bio+0x584/0x6c0 [ 263.062385][T14568] submit_bio_noacct_nocheck+0x543/0xbf0 [ 263.064275][T14568] submit_bio_noacct+0xd18/0x2000 [ 263.065985][T14568] submit_bh_wbc+0x681/0x890 [ 263.067550][T14568] block_read_full_folio+0x264/0x8e0 [ 263.069331][T14568] filemap_read_folio+0xfc/0x3b0 [ 263.071054][T14568] do_read_cache_folio+0x2d7/0x6b0 [ 263.072761][T14568] read_part_sector+0xd1/0x370 [ 263.074341][T14568] adfspart_check_ICS+0x91/0x7d0 [ 263.075959][T14568] bdev_disk_changed+0x7a3/0x1250 [ 263.077558][T14568] blkdev_get_whole+0x187/0x290 [ 263.079155][T14568] bdev_open+0x2c7/0xe40 [ 263.080572][T14568] blkdev_open+0x34e/0x4f0 [ 263.082122][T14568] do_dentry_open+0x6ab/0x14d0 [ 263.083709][T14568] vfs_open+0x82/0x3f0 [ 263.085076][T14568] path_openat+0x208c/0x31a0 [ 263.086612][T14568] do_file_open+0x20e/0x430 [ 263.088068][T14568] do_sys_openat2+0x10d/0x1e0 [ 263.089584][T14568] __x64_sys_openat+0x12d/0x210 [ 263.091213][T14568] do_syscall_64+0x115/0x870 [ 263.092737][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.094711][T14568] [ 263.094711][T14568] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 263.096891][T14568] __mutex_lock+0x1a4/0x1b10 [ 263.098431][T14568] nbd_queue_rq+0xba/0x1080 [ 263.100129][T14568] blk_mq_dispatch_rq_list+0x422/0x1e70 [ 263.102308][T14568] __blk_mq_sched_dispatch_requests+0xcea/0x1620 [ 263.104668][T14568] blk_mq_sched_dispatch_requests+0xd7/0x1c0 [ 263.107172][T14568] blk_mq_run_hw_queue+0x23c/0x670 [ 263.109388][T14568] blk_mq_dispatch_list+0x51d/0x1360 [ 263.111686][T14568] blk_mq_flush_plug_list+0x130/0x600 [ 263.114025][T14568] __blk_flush_plug+0x2c4/0x4b0 [ 263.116165][T14568] __submit_bio+0x584/0x6c0 [ 263.118193][T14568] submit_bio_noacct_nocheck+0x543/0xbf0 [ 263.120628][T14568] submit_bio_noacct+0xd18/0x2000 [ 263.122768][T14568] submit_bh_wbc+0x681/0x890 [ 263.124320][T14568] block_read_full_folio+0x264/0x8e0 [ 263.126149][T14568] filemap_read_folio+0xfc/0x3b0 [ 263.127982][T14568] do_read_cache_folio+0x2d7/0x6b0 [ 263.129843][T14568] read_part_sector+0xd1/0x370 [ 263.131617][T14568] adfspart_check_ICS+0x91/0x7d0 [ 263.133343][T14568] bdev_disk_changed+0x7a3/0x1250 [ 263.135045][T14568] blkdev_get_whole+0x187/0x290 [ 263.136658][T14568] bdev_open+0x2c7/0xe40 [ 263.138234][T14568] blkdev_open+0x34e/0x4f0 [ 263.140229][T14568] do_dentry_open+0x6ab/0x14d0 [ 263.142412][T14568] vfs_open+0x82/0x3f0 [ 263.144284][T14568] path_openat+0x208c/0x31a0 [ 263.146305][T14568] do_file_open+0x20e/0x430 [ 263.148255][T14568] do_sys_openat2+0x10d/0x1e0 [ 263.150321][T14568] __x64_sys_openat+0x12d/0x210 [ 263.152429][T14568] do_syscall_64+0x115/0x870 [ 263.154496][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.156960][T14568] [ 263.156960][T14568] -> #3 (set->srcu){.+.+}-{0:0}: [ 263.159656][T14568] __synchronize_srcu+0xa2/0x300 [ 263.161747][T14568] blk_mq_quiesce_queue+0x149/0x1c0 [ 263.164025][T14568] elevator_switch+0x17b/0x7e0 [ 263.165654][T14568] elevator_change+0x352/0x530 [ 263.167317][T14568] elevator_set_default+0x29e/0x360 [ 263.169225][T14568] blk_register_queue+0x48e/0x630 [ 263.171446][T14568] __add_disk+0x73f/0xe40 [ 263.173470][T14568] add_disk_fwnode+0x118/0x5c0 [ 263.175655][T14568] nbd_dev_add+0x77a/0xb10 [ 263.177686][T14568] nbd_init+0x291/0x2b0 [ 263.179637][T14568] do_one_initcall+0x121/0x750 [ 263.181869][T14568] kernel_init_freeable+0x6ea/0x7b0 [ 263.184175][T14568] kernel_init+0x1f/0x1e0 [ 263.185714][T14568] ret_from_fork+0x72b/0xd50 [ 263.187489][T14568] ret_from_fork_asm+0x1a/0x30 [ 263.189284][T14568] [ 263.189284][T14568] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 263.192420][T14568] __mutex_lock+0x1a4/0x1b10 [ 263.194543][T14568] elevator_change+0x1bc/0x530 [ 263.196753][T14568] elevator_set_none+0x92/0xf0 [ 263.198968][T14568] blk_mq_update_nr_hw_queues+0x4c1/0x15f0 [ 263.201492][T14568] nbd_start_device+0x1a6/0xbd0 [ 263.203200][T14568] nbd_genl_connect+0xff2/0x1a40 [ 263.204856][T14568] genl_family_rcv_msg_doit+0x214/0x300 [ 263.206663][T14568] genl_rcv_msg+0x560/0x800 [ 263.208149][T14568] netlink_rcv_skb+0x159/0x420 [ 263.209829][T14568] genl_rcv+0x28/0x40 [ 263.211402][T14568] netlink_unicast+0x585/0x850 [ 263.213357][T14568] netlink_sendmsg+0x8b0/0xda0 [ 263.214986][T14568] ____sys_sendmsg+0x9e1/0xb70 [ 263.216597][T14568] ___sys_sendmsg+0x190/0x1e0 [ 263.218222][T14568] __sys_sendmsg+0x170/0x220 [ 263.219986][T14568] do_syscall_64+0x115/0x870 [ 263.221610][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.223612][T14568] [ 263.223612][T14568] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 263.226170][T14568] blk_alloc_queue+0x610/0x790 [ 263.227733][T14568] blk_mq_alloc_queue+0x174/0x290 [ 263.229368][T14568] __blk_mq_alloc_disk+0x29/0x120 [ 263.231165][T14568] nbd_dev_add+0x492/0xb10 [ 263.232671][T14568] nbd_init+0x291/0x2b0 [ 263.234161][T14568] do_one_initcall+0x121/0x750 [ 263.235707][T14568] kernel_init_freeable+0x6ea/0x7b0 [ 263.237346][T14568] kernel_init+0x1f/0x1e0 [ 263.238850][T14568] ret_from_fork+0x72b/0xd50 [ 263.240475][T14568] ret_from_fork_asm+0x1a/0x30 [ 263.242132][T14568] [ 263.242132][T14568] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 263.244249][T14568] __lock_acquire+0x14b8/0x2630 [ 263.245875][T14568] lock_acquire+0x1b1/0x370 [ 263.247409][T14568] fs_reclaim_acquire+0xc4/0x100 [ 263.249061][T14568] __kmalloc_cache_noprof+0x4b/0x6f0 [ 263.250906][T14568] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 263.252922][T14568] ipv6_add_dev+0xb78/0x1520 [ 263.254509][T14568] addrconf_notify+0x5db/0x1ba0 [ 263.256184][T14568] notifier_call_chain+0x99/0x400 [ 263.257903][T14568] call_netdevice_notifiers_info+0xbe/0x110 [ 263.260160][T14568] register_netdevice+0x18fe/0x24b0 [ 263.262474][T14568] nsim_create+0xc8d/0x1420 [ 263.264055][T14568] __nsim_dev_port_add+0x3ba/0x8f0 [ 263.265777][T14568] nsim_drv_probe+0xeb7/0x14b0 [ 263.267390][T14568] really_probe+0x241/0xa60 [ 263.268931][T14568] __driver_probe_device+0x22e/0x480 [ 263.270754][T14568] driver_probe_device+0x4c/0x1b0 [ 263.272722][T14568] __device_attach_driver+0x1df/0x340 [ 263.274538][T14568] bus_for_each_drv+0x159/0x1e0 [ 263.276101][T14568] __device_attach+0x1e4/0x4d0 [ 263.277909][T14568] device_initial_probe+0xaf/0xd0 [ 263.280057][ T5746] Bluetooth: hci5: command tx timeout [ 263.282207][T14568] bus_probe_device+0x64/0x160 [ 263.282230][T14568] device_add+0x1210/0x1950 [ 263.282254][T14568] new_device_store+0x40b/0x700 [ 263.282275][T14568] bus_attr_store+0x74/0xb0 [ 263.282290][T14568] sysfs_kf_write+0xf2/0x150 [ 263.282308][T14568] kernfs_fop_write_iter+0x3e0/0x5f0 [ 263.294713][T14568] vfs_write+0x6ac/0x1070 [ 263.296733][T14568] ksys_write+0x12a/0x250 [ 263.298755][T14568] do_syscall_64+0x115/0x870 [ 263.300861][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.303498][T14568] [ 263.303498][T14568] other info that might help us debug this: [ 263.303498][T14568] [ 263.307491][T14568] Chain exists of: [ 263.307491][T14568] fs_reclaim --> sk_lock-AF_INET6 --> &idev->mc_lock [ 263.307491][T14568] [ 263.312339][T14568] Possible unsafe locking scenario: [ 263.312339][T14568] [ 263.315361][T14568] CPU0 CPU1 [ 263.317555][T14568] ---- ---- [ 263.319734][T14568] lock(&idev->mc_lock); [ 263.321537][T14568] lock(sk_lock-AF_INET6); [ 263.324381][T14568] lock(&idev->mc_lock); [ 263.327159][T14568] lock(fs_reclaim); [ 263.328805][T14568] [ 263.328805][T14568] *** DEADLOCK *** [ 263.328805][T14568] [ 263.332024][T14568] 9 locks held by syz-executor/14568: [ 263.334220][T14568] #0: ffff88802c458410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 263.337840][T14568] #1: ffff888026b66880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 263.341160][T14568] #2: ffff88802b7683c8 (kn->active#58){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 263.345016][T14568] #3: ffffffff8fb84c00 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700 [ 263.348958][T14568] #4: ffff88802c41b128 (&dev->mutex){....}-{4:4}, at: __device_attach+0x7e/0x4d0 [ 263.352465][T14568] #5: ffff888022e6b258 (&devlink->lock_key#10){+.+.}-{4:4}, at: nsim_drv_probe+0xd4/0x14b0 [ 263.356334][T14568] #6: ffffffff90603de0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x998/0x1420 [ 263.359760][T14568] #7: ffff8880488d0dc8 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: register_netdevice+0x18de/0x24b0 [ 263.363927][T14568] #8: ffff88805867a530 (&idev->mc_lock){+.+.}-{4:4}, at: __ipv6_dev_mc_inc+0x53/0xbc0 [ 263.367602][T14568] [ 263.367602][T14568] stack backtrace: [ 263.369877][T14568] CPU: 0 UID: 0 PID: 14568 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 263.369894][T14568] Tainted: [L]=SOFTLOCKUP [ 263.369898][T14568] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.369904][T14568] Call Trace: [ 263.369909][T14568] [ 263.369913][T14568] dump_stack_lvl+0x100/0x190 [ 263.369928][T14568] print_circular_bug.cold+0x178/0x1c7 [ 263.369946][T14568] check_noncircular+0x146/0x160 [ 263.369960][T14568] __lock_acquire+0x14b8/0x2630 [ 263.369973][T14568] ? __ipv6_dev_mc_inc+0x53/0xbc0 [ 263.369990][T14568] ? __lock_acquire+0x4a5/0x2630 [ 263.370003][T14568] lock_acquire+0x1b1/0x370 [ 263.370016][T14568] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 263.370033][T14568] fs_reclaim_acquire+0xc4/0x100 [ 263.370045][T14568] ? __kmalloc_cache_noprof+0x4b/0x6f0 [ 263.370060][T14568] __kmalloc_cache_noprof+0x4b/0x6f0 [ 263.370075][T14568] ? __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 263.370094][T14568] __ipv6_dev_mc_inc+0x2f1/0xbc0 [ 263.370112][T14568] ipv6_add_dev+0xb78/0x1520 [ 263.370125][T14568] addrconf_notify+0x5db/0x1ba0 [ 263.370141][T14568] ? __pfx_tls_dev_event+0x10/0x10 [ 263.370152][T14568] ? __pfx_addrconf_notify+0x10/0x10 [ 263.370168][T14568] ? ip6mr_device_event+0x1c4/0x230 [ 263.370184][T14568] notifier_call_chain+0x99/0x400 [ 263.370197][T14568] call_netdevice_notifiers_info+0xbe/0x110 [ 263.370210][T14568] register_netdevice+0x18fe/0x24b0 [ 263.370221][T14568] ? __pfx_register_netdevice+0x10/0x10 [ 263.370231][T14568] ? debugfs_create_file_full+0x41/0x60 [ 263.370245][T14568] nsim_create+0xc8d/0x1420 [ 263.370261][T14568] __nsim_dev_port_add+0x3ba/0x8f0 [ 263.370279][T14568] ? __pfx___nsim_dev_port_add+0x10/0x10 [ 263.370299][T14568] ? nsim_dev_hwstats_init+0xf5/0x4f0 [ 263.370314][T14568] nsim_drv_probe+0xeb7/0x14b0 [ 263.370325][T14568] ? __pfx_nsim_drv_probe+0x10/0x10 [ 263.370337][T14568] ? kernfs_put+0x3f/0x60 [ 263.370351][T14568] ? sysfs_create_link+0x68/0xc0 [ 263.370365][T14568] ? __pfx_nsim_bus_probe+0x10/0x10 [ 263.370377][T14568] really_probe+0x241/0xa60 [ 263.370393][T14568] __driver_probe_device+0x22e/0x480 [ 263.370408][T14568] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 263.370422][T14568] driver_probe_device+0x4c/0x1b0 [ 263.370437][T14568] __device_attach_driver+0x1df/0x340 [ 263.370454][T14568] ? __pfx___device_attach_driver+0x10/0x10 [ 263.370469][T14568] bus_for_each_drv+0x159/0x1e0 [ 263.370481][T14568] ? __pfx_bus_for_each_drv+0x10/0x10 [ 263.370494][T14568] __device_attach+0x1e4/0x4d0 [ 263.370509][T14568] ? __pfx___device_attach+0x10/0x10 [ 263.370524][T14568] ? do_raw_spin_unlock+0x145/0x1e0 [ 263.370541][T14568] device_initial_probe+0xaf/0xd0 [ 263.370556][T14568] bus_probe_device+0x64/0x160 [ 263.370570][T14568] device_add+0x1210/0x1950 [ 263.370591][T14568] ? __pfx_device_add+0x10/0x10 [ 263.370608][T14568] ? lockdep_init_map_type+0x5c/0x250 [ 263.370621][T14568] ? __init_waitqueue_head+0xca/0x150 [ 263.370638][T14568] new_device_store+0x40b/0x700 [ 263.370651][T14568] ? __pfx_new_device_store+0x10/0x10 [ 263.370665][T14568] ? find_held_lock+0x2b/0x80 [ 263.370673][T14568] ? sysfs_file_kobj+0xe4/0x290 [ 263.370684][T14568] ? sysfs_file_kobj+0xe4/0x290 [ 263.370694][T14568] ? __pfx_new_device_store+0x10/0x10 [ 263.370708][T14568] bus_attr_store+0x74/0xb0 [ 263.370717][T14568] ? __pfx_bus_attr_store+0x10/0x10 [ 263.370728][T14568] sysfs_kf_write+0xf2/0x150 [ 263.370739][T14568] kernfs_fop_write_iter+0x3e0/0x5f0 [ 263.370756][T14568] ? __pfx_sysfs_kf_write+0x10/0x10 [ 263.370768][T14568] vfs_write+0x6ac/0x1070 [ 263.370780][T14568] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 263.370797][T14568] ? __pfx_vfs_write+0x10/0x10 [ 263.370809][T14568] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.370827][T14568] ksys_write+0x12a/0x250 [ 263.370838][T14568] ? __pfx_ksys_write+0x10/0x10 [ 263.370850][T14568] ? rcu_is_watching+0x12/0xc0 [ 263.370866][T14568] do_syscall_64+0x115/0x870 [ 263.370880][T14568] ? clear_bhb_loop+0x40/0x90 [ 263.370892][T14568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.370903][T14568] RIP: 0033:0x7f9f1775d68e [ 263.370912][T14568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 263.370923][T14568] RSP: 002b:00007ffeccb246e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.370932][T14568] RAX: ffffffffffffffda RBX: 00005555872c2500 RCX: 00007f9f1775d68e [ 263.370939][T14568] RDX: 0000000000000003 RSI: 00007ffeccb24770 RDI: 0000000000000005 [ 263.370946][T14568] RBP: 00007f9f17833616 R08: 0000000000000000 R09: 0000000000000000 [ 263.370952][T14568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 263.370958][T14568] R13: 00007ffeccb24770 R14: 00007f9f18544620 R15: 0000000000000003 [ 263.370968][T14568] [ 263.772451][ T59] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.855604][ T59] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.995596][ T59] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.125843][ T59] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.233240][ T59] bridge_slave_1: left allmulticast mode [ 264.235950][ T59] bridge_slave_1: left promiscuous mode [ 264.238224][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.242578][ T59] bridge_slave_0: left allmulticast mode [ 264.244738][ T59] bridge_slave_0: left promiscuous mode [ 264.246937][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.252607][ T59] lo: left allmulticast mode [ 264.381608][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.386266][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.390342][ T59] bond0 (unregistering): Released all slaves [ 264.394846][ T59] bond1 (unregistering): Released all slaves [ 264.401101][ T59] bond2 (unregistering): (slave veth3): Releasing active interface [ 264.405232][ T59] bond2 (unregistering): Released all slaves [ 264.413069][ T59] bond3 (unregistering): Released all slaves [ 264.421531][ T59] bond4 (unregistering): Released all slaves [ 264.488649][ T40] audit: type=1400 audit(1781172647.962:63976): avc: denied { write } for pid=14668 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.495851][ T59] tipc: Left network mode [ 264.521014][ T40] audit: type=1400 audit(1781172648.002:63977): avc: denied { write } for pid=14671 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.543363][ T5446] 8021q: adding VLAN 0 to HW filter on device eth14 [ 264.607829][ T40] audit: type=1400 audit(1781172648.082:63978): avc: denied { write } for pid=14674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.656019][ T40] audit: type=1400 audit(1781172648.132:63979): avc: denied { write } for pid=14677 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.687149][ T5446] 8021q: adding VLAN 0 to HW filter on device eth15 [ 264.738955][ T59] hsr_slave_0: left promiscuous mode [ 264.749431][ T59] hsr_slave_1: left promiscuous mode [ 264.755574][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.757876][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.763758][ T59] veth1_macvtap: left promiscuous mode [ 264.765542][ T59] veth1_vlan: left promiscuous mode [ 264.781811][ T40] audit: type=1400 audit(1781172648.262:63980): avc: denied { write } for pid=14680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.815753][ T40] audit: type=1400 audit(1781172648.292:63981): avc: denied { write } for pid=14683 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.860803][ T59] team0 (unregistering): Port device team_slave_1 removed [ 264.865057][ T59] team0 (unregistering): Port device team_slave_0 removed [ 264.887758][ T5446] 8021q: adding VLAN 0 to HW filter on device eth16 [ 264.935198][ T40] audit: type=1400 audit(1781172648.412:63982): avc: denied { write } for pid=14686 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.963038][ T40] audit: type=1400 audit(1781172648.442:63983): avc: denied { write } for pid=14689 comm="rm" name="hook-state" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.985367][ T5446] 8021q: adding VLAN 0 to HW filter on device eth17 [ 265.352837][ T59] IPVS: stop unused estimator thread 0... [ 265.794030][ T59] bridge_slave_1: left allmulticast mode [ 265.795808][ T59] bridge_slave_1: left promiscuous mode [ 265.797615][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.800775][ T59] bridge_slave_0: left allmulticast mode [ 265.802575][ T59] bridge_slave_0: left promiscuous mode [ 265.804343][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.866729][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.871092][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.874701][ T59] bond0 (unregistering): Released all slaves [ 265.996237][ T5446] 8021q: adding VLAN 0 to HW filter on device eth18 [ 266.059633][ T59] hsr_slave_0: left promiscuous mode [ 266.062493][ T59] hsr_slave_1: left promiscuous mode [ 266.065130][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.068534][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.112317][ T59] team0 (unregistering): Port device team_slave_1 removed [ 266.116784][ T59] team0 (unregistering): Port device team_slave_0 removed [ 266.148568][ T5446] 8021q: adding VLAN 0 to HW filter on device eth19 [ 266.287357][ T5446] 8021q: adding VLAN 0 to HW filter on device eth20 [ 266.425968][ T5446] 8021q: adding VLAN 0 to HW filter on device eth21