last executing test programs: 17m44.813087796s ago: executing program 32 (id=255): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xa}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) r2 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f00000002c0), 0x80400, 0x0) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000084) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) listen(r3, 0x3) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f0000000200)={'ipvs\x00'}, &(0x7f0000000240)=0x1e) ioctl$COMEDI_SETRSUBD(r0, 0x6410) listen(r3, 0x5) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x140, 0x2, 0x3, 0xff, 0x1, 0x2, 0x7ffd, 0x6, 0x8, 0xf, 0x2, 0x10, 0x8000f8, 0x8, 0x4ce, 0x9e9b, 0x8000, 0x402, 0x9, 0x8, 0x4, 0xf, 0xa, 0x9, 0xffa, 0x200000, 0xaf, 0x0, 0x10001fc, 0x0, 0x2]}) 16m38.72108519s ago: executing program 33 (id=923): syz_open_dev$vim2m(&(0x7f0000000200), 0x0, 0x2) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000102c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c002a2b00b160000000000000002000"/28, @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) set_mempolicy_home_node(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000400)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000002c0)={0x0, 0xfb87, 0x800, 0x3, 0x32c}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x15e, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x8, 0x10080000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90b, 0x1, 0x3, 0x3d1, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x1, 0x82, 0x387}}], 0x1, &(0x7f0000000340)={0x2e, 0x50, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xd3, 0x0, 0x0}}, 0x0) syz_emit_vhci(&(0x7f00000015c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x1, 0xc9, 0x4, 0x9, "2e44de24e9b355fb"}}}, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) 15m22.533049647s ago: executing program 34 (id=1239): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x36140, 0x2) ioctl$SNDRV_PCM_IOCTL_REWIND(r0, 0x40084146, &(0x7f0000000100)=0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=0x0], 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91", 0x1}], 0x1}}], 0x1, 0x2090) close(0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x4000000) preadv(r2, &(0x7f0000000400)=[{&(0x7f0000000140)=""/176, 0xb0}], 0x1, 0x6, 0x1) syz_open_dev$evdev(&(0x7f0000000080), 0xe, 0xc100) 15m11.695650658s ago: executing program 35 (id=1228): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000043c0)={0x2, 0x7fffffff, {0xffffffffffffffff}, {}, 0x8001, 0x1}) r1 = socket(0x2, 0x2, 0x1) write(r1, 0x0, 0x53) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e24, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000003a80)=[{{&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0}}], 0x1, 0x20000020) write$binfmt_script(r2, &(0x7f00000005c0)={'#! ', './file0'}, 0xb) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x204480, 0x12) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x100, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xcc, 0x2, [@TCA_MATCHALL_ACT={0xc8, 0x2, [@m_sample={0xc4, 0x19, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x2, 0x7, 0x4, 0x8, 0x5}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xfffffff7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x3, 0x7c, 0x3, 0x8, 0x30}}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x4, 0x424, 0x10000000, 0x4c14, 0x6}}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x800}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x32}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x45}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}]}, {0x28, 0x6, "6243e89479a6739a9b8a7137bd2e6c7f3590e32b0595c155b1b5019177d8b9f79efaeb90"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}}]}, 0x100}}, 0x0) sendto$packet(r4, &(0x7f0000000400)="444cb979696195e756b9fa608b1ebc4756c20fac7d4c76157da5701d025666278565b9beda29f425f9479ec73834a9152a6824503e6c919354f2f8e95d2d285577e0da6e5cd838759fddb52b52dcfdd420df6b13a67c2d9c57d17ca1fef8237a5b48dac3bf9c0a252d4f6c84518f7dba07be62bc70725c902b86937b3821ebdfe619b2a88f915eff80beebf099482ba1bd537e50f0e7d70e3575a97ec8bf9e77be72a26d531545b9722c88de0291e1c33f5df20721c5ef0afad42d12130b7fd4ef57443522128895c0154f502e0ad0bd71ba594ccfab9633e725771c923d495ccfe10c9b049b856329c39865bc1073ab2c6f5bf54a1d", 0xf6, 0x8100, &(0x7f0000000500)={0x11, 0xf6, r7, 0x1, 0xc2, 0x6, @broadcast}, 0x14) umount2(&(0x7f00000001c0)='./file0\x00', 0x2) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@local, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000006c0)={[{@redirect_dir_on}, {@verity_require}, {@uuid_on}, {@uuid_auto}], [{@euid_eq={'euid', 0x3d, r8}}, {@dont_hash}, {@obj_user={'obj_user', 0x3d, '/\xe5\x92\\\xdf+[%+\xef@:'}}, {@appraise}], 0x2f}) 14m53.546098868s ago: executing program 36 (id=1231): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:05.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/rescan\x00', 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) move_mount(0xffffffffffffffff, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', r0, &(0x7f00000000c0)='./sys\x00', 0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r3) ioctl$TUNSETTXFILTER(r2, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r3, @ANYRES32=r2]) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r6, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r5, 0x1, 0xd8}, 0x14) write(r1, &(0x7f0000000300)='1\x00', 0x1) 14m41.884687212s ago: executing program 37 (id=1233): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x400000000002, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x34, r3, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]]}, 0x34}}, 0x40) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000640)='usbip-vudc.0', 0xc) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="f543ff7a00"/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB="03000700030000000000000000ffffffff00"/28], 0x50) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) read$rfkill(r7, &(0x7f0000000280), 0x8) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001380)=""/261, 0x105}], 0x1}, 0x1f00) close(r9) sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0x100000009, &(0x7f0000000380)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r8, {0x7, 0x1f, 0x0, 0x10408, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e040923201084f55b65230b1320747b19e546438b36b1a2a116b4fcdb138ac57df9a72dea64b86a5bd791920fd2f7a5624112ccdbc0c22db10eac0a129ebc675005b9ebbb660516378120b58c7dd16a65f6d95c9bd445a1724f523f9b4713c7f15ef0bf4219ae21fb09c3f104deed48f8b8889f84fd96b84095fb3f1abc9dbb8ee79df1066674d07cd9927144e1a2dac2b565771c003f55e8274c846a8dee0d74fda436a9f842"], 0x7) 13m45.981613193s ago: executing program 38 (id=1292): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32=r1, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r2], 0x24}}, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x200, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r5}, @CGW_SRC_IF={0x8, 0x9, r6}]}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xffff}, {0xffff}, {0x1, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x14, 0x8084}, 0x0) 13m38.025687981s ago: executing program 39 (id=1335): mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f0000000000)='qnx4\x00', 0x3174990, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)="c5", 0x1) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffffff}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(0xffffffffffffffff, 0xc0205866, &(0x7f0000000300)={&(0x7f00000000c0)=0x4, 0xaa161fec, &(0x7f0000000100), &(0x7f0000000280)}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000015000100000000000000ff00fe8800000000000000000000800000010000000000000000000000000000000000040000000000000000b10000000000", @ANYRES32, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\f\x00\b'], 0x68}}, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="04090300c80079e2123878ac5756d9d09f41"], 0x6) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text16={0x10, 0x0}], 0x1, 0x6d, 0x0, 0x0) r7 = ioctl$KVM_GET_STATS_FD_vm(r5, 0xaece) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r7, 0x4068aea3, &(0x7f0000000580)={0xdb, 0x0, 0x4}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000000)={r10, 0x5, 0xdee, 0x369f, 0x7, 0xffff3d6b}, 0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000340)=ANY=[@ANYRES32=r10, @ANYBLOB="f9ff03000a00fc0a35a131aec87caa7c5306e14208dfd68efa507d898e599dd7e3c2ae4811559d"], 0xe) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xfffffffffffffe3f}) modify_ldt$read(0x0, &(0x7f0000000480)=""/206, 0xce) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f0000000240)=0x2000) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0x10, 0x0, 0x8, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff, 0x1, '\x00', 0x0, 0x4e05e626}) r11 = socket$inet6(0xa, 0x1, 0x100) close(r11) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7, 0x2}}, './file0\x00'}) 12m48.929080859s ago: executing program 40 (id=1564): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x3af7912e, 0xffffffff}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, 0x0) r3 = syz_open_dev$loop(&(0x7f0000000180), 0x75d, 0x8e080) sendfile(r3, r3, 0x0, 0x24002de8) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) ftruncate(r4, 0x7000000) r5 = dup(r4) preadv2(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000200)='cdg', 0x3) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) read$FUSE(r6, &(0x7f0000000140)={0x2020}, 0x2020) mmap$xdp(&(0x7f0000872000/0x3000)=nil, 0x3000, 0x2000004, 0x810, r2, 0x80000000) ptrace(0x10, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0xd) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) r8 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000000), 0x35c, 0x0) 10m8.28538423s ago: executing program 41 (id=2659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x1, 0x2b, 0x41, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, "11f3305280f125e6e11a9314b296b53b5d25867c0a8c27b6478984da4eb57d56be4ee0efb45c215a64d718cb6f"}}, 0x4f) 6m44.386878234s ago: executing program 42 (id=4213): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x3}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x1}]}}, &(0x7f0000000240)=""/246, 0x52, 0xf6, 0x1}, 0x28) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f0000000c00)='tcp\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x1ed) rmdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac1.usb0\x00') write(r3, &(0x7f0000000e00)='ipv4\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)='127.0.0.1\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') 4m48.192509574s ago: executing program 43 (id=5653): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) mount(&(0x7f0000000140)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='virtiofs\x00', 0x200000, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) r3 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r3, 0x0, 0x0, 0x1001f0) (async) lseek(r3, 0x0, 0x4) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r4, @in={{0x2, 0x4e22, @empty}}, 0x8000000c, 0x3, 0x8, 0x9, 0xf3, 0x6, 0x8}, &(0x7f0000000140)=0x9c) setns(0xc9, 0x0) r5 = socket(0x8, 0x800, 0x3) getsockname$packet(r5, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={r4, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r8, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x8c2, 0x0, 0x7}]}) (async) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=0x0, @ANYBLOB="25000000a4f15726ecc478beaa30dd5615f1a2b2c98e246af13cd3601aeb88a83939b8c5a9e6a0a4d4f03310107cf6af2238c89f908d21723c4f2081f15e9a1ed7a9ccf99080fb6edd914e94312aa513e8b607039af1cd999e698748c56a573a0ba926656c13e405657272857d3c53429cfd42aa2439b2827b3fe937883f64785340b720e6376bc7f2f83f6c0592fb88c6ad76890c12dc4bfa010861968a11013ecb0950badda5788aebe59526d419a1d169bfc42b0d9918b22ac0a732fcd62d3d4f26f4ba245f068e48b68b2cb9e1c8f5737f3320e1dffabe78952d93e2db86c757b0c491d61a8df45df16dfca414969ce1"], 0x8) (async) r9 = getpid() process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r9, 0xb3, &(0x7f00000001c0)=""/4) 4m9.862653083s ago: executing program 44 (id=6050): syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x2, 0x40040) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000600)={0x0, 0x38, &(0x7f00000005c0)="37d5c0abe6afbdfefb4f915ca475b3ba74d4bd4a7b022a54cf58410c7d1e04381611666564c5a2ca0a5221bc00bb60e5ed7e9cad2fcf1b75"}) writev(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)='y', 0x1}], 0x1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000640)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x7ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x2}, 0x50) ioctl$FS_IOC_GETVERSION(r2, 0x80087601, &(0x7f00000006c0)) syz_usb_connect$printer(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7, 0x40, 0x7, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0xee, 0xfa, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x7, 0xd}}]}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x6, 0xff, 0x37, 0x8, 0x83}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x41e}}, {0xb7, &(0x7f0000000140)=@string={0xb7, 0x3, "97dd0db09ecc532ea9fcd4bec28fbf65d2629c948f410b2da2c439d4cc8162af3c60f62ebb7a79eb7d4d61f2081592f34a7e7fe5490ec095298e8ff969b4bb4fbfd082f3e828f7f7e6e9af38872bce5205c75d1a6a24ac1762aeab627b89f851c5a1c44e4dfb5e2c837c39e16dfc88614dd988a6b5ed618ecb958a9b3ea28ffeec186c4d706fc9ceffec623f2c19ce74c2815604caa5a37568c3bb2fb3a64f040f7a44a5a4043fee40a306f65a11011affed01a183"}}, {0x7a, &(0x7f0000000280)=@string={0x7a, 0x3, "085a16ce331ec13dbd1d734eb77ef5e643c3d82f8b55cd1c174b5cb6d480bfc373257cb1d620db96d7041c2ab3437e0b1a1d6fa130e5287927d511a2bd6344e3c76dc79a3e1aff37fcd414886b36bc801aaceece38fbfcfbf3e31837235fb9e706a7b060f947fcf06e917180a4a2cef95cdaca5d1f020a08"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x402b}}, {0x4c, &(0x7f0000000340)=@string={0x4c, 0x3, "93f36a7f324a18be8b91892008c47aa27f44eb3723ecd69a403169db811a3ac27ac5db41c576597ea501cf0116ad066d6539f6eb2abab9972c1c56a42f793c7b59b808456ba0156b8ab3"}}, {0x9c, &(0x7f0000000400)=@string={0x9c, 0x3, "566d7a3f29925fcd6dbd1c1afdf60098c5200ff6000dd571a69adf5513edeadbefdfd79441f74729246f3ca3a260ce6ccf593f35a1a9f4deef8235b59082193105a799353e305916255496b11293466145321d79385b0954440322b47b4aca3dbced9ef33c8e5414828cb527acaacd7fcfa091f694a19b55b42f8ce1b4d46ad746fc5352f3df362db99478247fe2807b403e3a395cf51faf82e9"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x125f}}]}) 3m47.045406917s ago: executing program 5 (id=6543): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r0, 0xa) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cifs\x00', 0x0, &(0x7f0000000300)='source=//127.0.0.1/share,user=root,pass=root,port=445,vers=3.0\x00') r1 = accept(r0, 0x0, 0x0) write(r1, &(0x7f0000000500)="00000080fe534d4240000000000000000000010001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000041000100000300000000000000000000000000000000000000000000000010000000100000001000000000000000000000000000000000008000000000000000", 0x88) 3m46.946262878s ago: executing program 5 (id=6544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000002", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX], 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1000, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000165c73d9c98bb6dc9e76d4386707efcc042b0c12fac5db17e004d727726074a25306f8e8d84c358b1934aba7ef6c7b5272f1694bb93c660b5024249f53c6d65e7966188aaf2c74967c9ff257832753c4422629cee4bf788921b9f3b73689277765ad65c5a92a309b8ec5d1e69c727742259be29bc86443ea6313e68ffcc343f06dead1fb0af6dff506f8d1d34ae735b7166a2c9c4179af1b6bbb60779facf592cb3ffb18ac08189c7474b54b07015be26649870b548afa002c244b0f40610ec4d85ba4e38ebb96ec1a31aecd55b707f806b0fa50822842116646a4d309e57a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="10000000040000000800000002", @ANYRESHEX, @ANYRESDEC, @ANYRESHEX], 0x48) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r1, 0x0, 0x19, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x40, r3, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1000, 0x5b}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0xf}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004041}, 0x4) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0d00000004000000040000000c00000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000000000000000000000000000165c73d9c98bb6dc9e76d4386707efcc042b0c12fac5db17e004d727726074a25306f8e8d84c358b1934aba7ef6c7b5272f1694bb93c660b5024249f53c6d65e7966188aaf2c74967c9ff257832753c4422629cee4bf788921b9f3b73689277765ad65c5a92a309b8ec5d1e69c727742259be29bc86443ea6313e68ffcc343f06dead1fb0af6dff506f8d1d34ae735b7166a2c9c4179af1b6bbb60779facf592cb3ffb18ac08189c7474b54b07015be26649870b548afa002c244b0f40610ec4d85ba4e38ebb96ec1a31aecd55b707f806b0fa50822842116646a4d309e57a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) 3m46.945957714s ago: executing program 5 (id=6545): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000140)={0x5c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x40, 0x33, @action={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x7}}, @sp_mp_confirm={0xf, 0x2, {0x68, @default, {}, @void, @val={0x2d, 0x1a, {0xc, 0x0, 0x5, 0x0, {0x20000000400, 0x3, 0x0, 0x1}, 0x300, 0x1, 0x7}}}}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc0}, 0xf00000000000000) 3m46.943945919s ago: executing program 5 (id=6547): syz_emit_ethernet(0x3b6, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0) creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) process_vm_readv(0xffffffffffffffff, &(0x7f00000018c0)=[{&(0x7f0000000340)=""/160, 0xa0}], 0x1, &(0x7f0000001dc0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_linger(r3, 0x1, 0x3d, &(0x7f0000000080)={0x0, 0x300}, 0x8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x10000}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001340)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb}, {}, {0xfff2, 0xd}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x6417}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x24004840) mount(&(0x7f0000000080)=@sr0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) lsetxattr(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000200)='syzkaller0\x00', 0xb, 0x2) write(r5, &(0x7f0000000f00)='file0', 0x5) 3m46.776415124s ago: executing program 5 (id=6550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010002d5600000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000de6100001800128008000100677470000c0002800800023f", @ANYBLOB='\b'], 0x40}}, 0x2006004) 3m46.531296783s ago: executing program 45 (id=6551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x34}}, 0x0) (async, rerun: 32) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r3, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x24}}, 0x4) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x0, 0xcdc0, 0x400, 0x3, 0x2}, &(0x7f0000000340)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc40a, 0x8000, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac8a, 0x8000, 0x0, 0x239}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcbf7, 0x80, 0x2, 0x212}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d1b, 0x8000, 0x0, 0x2d8}, 0xffffffffffffffff}], 0x4, &(0x7f0000002500)={0x2e, 0x10, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x5}, 0x0, 0x0, '\x00', {0x2, 0x673, 0x0, &(0x7f0000001500)=@buf_1k="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"}}, &(0x7f0000002580)) io_uring_register$IORING_REGISTER_PBUF_RING(r6, 0x16, &(0x7f00000027c0)={&(0x7f0000003000)={[{&(0x7f00000025c0)="78e3af20edd403fd359b0677454e0a5c139b3575e835ab2d3c51b53fcd431188a9e8a499192ca67932b903fed55c79f18224ac8b5a8c82ebb533a1da4cdbd3f7db53827338599e0d86bbe4f848", 0x4d}, {&(0x7f0000002640)="dac9719ab75d60678b5713f711ca36f7362fc0a241a0b4b4d8a689535f5b0e925ab68c56ab4387bb0cedb99928718aeffad91f4606505ed7942006453d754ea1c4a5282b7d5df90dc5a4350430b8e82ed20f7da1e7b6674790f26ef88fb008f213577a166ffceb8c77c4701e0d3abe1f9a4425279fdf83424098af8c2581b686ffdd39ee3b192d95b69851377b21b5083a8104bfe951ffe21141a5bdd26b8d393937ded338f2a709a09c3000c18414368cfe349407cfdbecb752de426e1204985839f6cdf791", 0xc6}, {&(0x7f0000002740)="750602c924f0e0c336594beb11a9ef06a912d9032321d815d26581fc3434b940ca27b5dfdf337010b4c8d9ca0747182db46fcc68d793b8900f3f3c3c2cce6f2a74e0e4feba391e11795e7851af406ae1fb8cabfeb1739d5d93008e04644d727c0d9e57673fae6638", 0x68, 0x2}]}, 0x3, 0x2, 0x1}, 0x1) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) r8 = socket(0x10, 0x3, 0x0) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x80) (async) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f00000013c0)={0x14, r7, 0x205, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x8) (async) sendmsg$IPVS_CMD_DEL_DAEMON(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xf8, r7, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4a5ad43a}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x10000}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x1f}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_bond\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x9}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x788}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffc}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x3}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x24, r1, 0x3, 0x70bd2d, 0x0, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'eth', 0x3a, 'lo\x00'}}]}]}, 0x24}}, 0x4044844) 3m46.486076995s ago: executing program 5 (id=6554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x5}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xfffffff0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 3m46.397937417s ago: executing program 46 (id=6554): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x5}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000680)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0xfffffff0, 0x1, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}}], 0x0, 0x0, 0x0}) 3m7.001894635s ago: executing program 8 (id=6991): madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x66) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r0, 0x3811a000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000005, 0x38011, r0, 0x3811a000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0xa0) write(r1, &(0x7f0000000100)='measure func=FILE_CHECK obj_type=u', 0x22) r2 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000b24000/0x1000)=nil, 0x7ffffffa, 0x0, 0x0, 0x6, 0x0, 0x2, 0x44, 0x18}) 3m6.895985356s ago: executing program 8 (id=6994): syz_emit_ethernet(0x13f, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100e4ff86dd604dd30801050601fc020000000000000000000000000000fc00000000000000000000400100000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002fffe9078000045310431848d9346405cada678e0e14308eeda74111aa28f398e592b931be8db154a5c76ee9bbe4ba55d0ad26cf219dcf935c73af53089e0ccb653856bebf83a0e0eeb288f5c1fa58c796a8d2bcb3f8bcec36fa9721868a91e1eb91f90b6e25ced485a4e683cfe61980ba4e8d0b4b0764641eeb5f2933bba01fbff75b1c7940f81430d6fb401a53605fdb2968c9fbaab29fc4395b4ab5dc716ce586a3ad39926e891ffd0074bb6dba41533c74d24b6b27282c1d661bcc9dfce158676ffb43c1dd0a042869584d47b5bed61cb7fd435d89696964596789ca0a1bbc4f9c398a0c67daf22051a605f55000000000000000000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x2800, 0x3) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x2800, 0x3) ioctl$XFS_IOC_START_COMMIT(r0, 0x929, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000080)={r2, 0x1, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000000)={r2, 0x1, 0x6, @random="2716157f3354"}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @val=@netfilter={0x5, 0x0, 0x9}}, 0x20) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x0, @val=@netfilter={0x5, 0x0, 0x9}}, 0x20) 3m6.826297535s ago: executing program 8 (id=6996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0100001a00130700000000ffdbdf25fe8000000000000000000000000000bbfe880000000000000000000000000101000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="06"], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x4a014) 3m6.825998862s ago: executing program 8 (id=6997): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3f) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) close(r2) write(r3, &(0x7f0000000100)='md0', 0x3) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)="b82ca8", 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x2080}]}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10}}, 0xb0}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)="373a30110f47b4b6566b5f6700bfa9df7989689bc76d83f36d2e9b4040bac15648b5bb234bbe73afe7c5c4247bc4249552a4e06b0810bed3f93db4bbb8eac2d6514691df971b9b7940cc752f1c47f79d", 0x50) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000040)=0x680, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000005000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000003900)=""/151, 0x97}, {&(0x7f0000000440)=""/84, 0x54}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0xb91b}], 0x4, 0x0, 0x0) 3m6.684213515s ago: executing program 8 (id=6999): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) execveat$binfmt(0xffffffffffffffff, r0, &(0x7f0000006280)={[&(0x7f0000006240)='-!*']}, &(0x7f0000006200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) newfstatat(0xffffffffffffff9c, &(0x7f0000008fc0)='./file1\x00', &(0x7f0000009000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f0000009a00)="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", 0x2000, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x90, 0x0, 0x103, {0x1000006, 0x2, 0x0, 0xc9, 0x4, 0xe4, {0x40, 0x7, 0xffffffffffff826c, 0x0, 0x1005002, 0x0, 0x800, 0x81, 0x3, 0x2000, 0x75, r6, r7, 0xacd, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000009640)='./file0\x00', &(0x7f0000009680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r10, 0x0) r11 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1000000, &(0x7f0000008340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r11, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r11, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r11, &(0x7f0000000040)={0x50, 0x0, r12, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r11, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x195e, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xfffffec9, 0xb, 0xa, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r11, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r13, r14, 0x1, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f00000003c0)="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", 0x2000, &(0x7f0000009940)={&(0x7f00000023c0)={0x50, 0x0, 0x1, {0x7, 0x2d, 0x6, 0x40100000, 0x2, 0xcaf5, 0xb5, 0x4, 0x0, 0x0, 0x20, 0x2}}, &(0x7f0000002440)={0x18, 0x0, 0x4}, &(0x7f0000002480)={0x18, 0x0, 0x0, {0x1}}, &(0x7f00000024c0)={0x18, 0x0, 0x7}, &(0x7f0000002500)={0x18, 0x0, 0x3, {0x7dd}}, &(0x7f00000025c0)={0x28, 0x0, 0x3, {{0xf01, 0x80}}}, &(0x7f0000002600)={0x60, 0xfffffffffffffffe, 0x8, {{0xb, 0x1, 0x1, 0x7, 0x40, 0x40, 0x0, 0x7f}}}, &(0x7f0000002680)={0x18, 0x0, 0xff, {0x9}}, &(0x7f00000026c0)=ANY=[@ANYBLOB="11004e2f7e4cd14a0959000000000000e7"], &(0x7f0000002700)={0x20, 0xfffffffffffffff5, 0x2, {0x0, 0x2}}, &(0x7f0000002840)={0x78, 0xfffffffffffffffe, 0x7, {0x400, 0x4f, 0x0, {0x6, 0x1, 0x2, 0x0, 0x9, 0xdc5, 0x3c9, 0x8, 0x0, 0x1000, 0x1, 0x0, 0x0, 0x101, 0x7f}}}, &(0x7f0000002980)={0x90, 0x0, 0x7, {0x5, 0x2, 0xaec, 0xe97, 0xffff, 0x6, {0x3, 0x401, 0xfffffffffffffff1, 0x3, 0x5, 0x6, 0x2, 0x732, 0x8, 0x4000, 0x7, 0x0, 0x0, 0x7f, 0x24}}}, &(0x7f0000002a40)={0x28, 0xa8fe4b20efbd941, 0x5, [{0x2, 0x3, 0x0, 0xe0e6}]}, &(0x7f00000083c0)=ANY=[@ANYBLOB="a80500000000000003000000000000000400000000000000010000000000000019bc000000000000610700000000000005000000030000000200000000000000010000000100000007000000000000000500000000000000000001000000000009000000000000000200000000000000000400000040000003000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000008000000000000000600000000000000008000000000000001000000000000002a000000000000000300000000000000030000000000000009000000000000000400000000000000800d00000600000006000000000000000000010000000000d10b000000000000a0080000000000000000000000000000060000000000000035ffffff07000000050000000040000001000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00040000ff03000000000000010000000000000009000000000000000700000006000000ae27273a24239200000000000000000001000000000000000600000000000000ffff0000000000009b000000000000800400000000000000010000000000000002000000000000000700000000000000ffffffffffffffff00040000000000002a0f000003000000ff01000000c0000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000000e01f000000000300000000000000faffffffffffffff03000000060000002d212a000000000001000000000000000200000000000000090000000000000005000000000000000400000008000000010000000000000000010000000000000000000000020000080000000000000001000000000000000000000000000000050000009f000000010000000080000090000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="bf06000002000000000000000400000000000000010000000000000002000000010100005b2d0000000000000600000000000000020000000000000007000000000000009c0000000000000073050000090000000500000000000000400000000000000001000000000000000400000000000000040000000000000005000000000000000500000008000000070700000040000008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="080000000000001000000000010000000000000006000000000000000700000000000080295b922d285d5b000400000000000000010000000000000001800000000000000200000000000000cb0000000000000006000000000000000300000000000000c0ffffffffffffff0d00000000000000fcffffffffffffff010000000000000005000000060000000500000000a0000009000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="070000000300000000000000030000000000000093d6000000000000010000000600000021000000000000000200000000000000010000000000000000f0ffffffffffff07000000000000000600000003000000010000000000000000000000000000009708000000000000030000000000000009000000000000000b0000000000000001010000954c0000018000000060000005000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="04000000ffffffff000000000500000000000000060000000000000001000000070000002600000000000000040000000000000002000000000000000500000000000000080000000000000003000000070000000100000000000000ffffff7f00000000060000000000000093000000000000000100000000000000010000000000000008000000040000000700000000c0000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="05000000000600010000000100000001000004000000000000000000000000030000000000000003000000000000000900000000000000a80e0000000002000000000000003f0000000000000000000100000000000600000000000000010000000000000045050000000000000100000004000000020000000040fbff549f000000000000000000000000000000888f777393631c122c08306d0be24a60d441f958acda31b36b09f36e0d4f00aba964c7b124d99eb7e69d66d4d6fa747ed79c89fff748e85938dbc4911784a83c245c1f9572034fe63faf6d0331df23054535eac77d34", @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="2d0c000008000000000000000100000000000000010000000000008000000000291bdd35"], &(0x7f0000009700)={0xa0, 0xfffffffffffffffe, 0x4, {{0x6, 0x2, 0x1, 0x2, 0x4, 0x10, {0x0, 0xfffffffffffffffd, 0x10, 0x6, 0x400000000025, 0x3, 0x4, 0x3d666b4, 0x8, 0x4000, 0x5, r6, r8, 0xd, 0x6}}, {0x0, 0xc}}}, &(0x7f00000097c0)={0x20, 0x0, 0x2, {0x6, 0x0, 0x1ff, 0x80000000}}, &(0x7f0000009800)={0x130, 0x0, 0x1000, {0x80000001, 0xe71c, 0x0, '\x00', {0x200, 0x5, 0x9, 0x5, r10, r14, 0xf000, '\x00', 0x9, 0x7, 0xe1, 0x1, {0xb, 0x8}, {0xb, 0x9}, {0x8, 0x3}, {0x9, 0xfffffff8}, 0x4, 0x7, 0x2}}}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) 3m6.415749326s ago: executing program 8 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010002d5600000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000de6100001800128008000100677470000c00028008000200", @ANYBLOB='\b'], 0x40}, 0xf4240}, 0x2006004) 3m6.331622421s ago: executing program 47 (id=7004): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000010002d5600000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="41000000de6100001800128008000100677470000c00028008000200", @ANYBLOB='\b'], 0x40}, 0xf4240}, 0x2006004) 1m59.710629623s ago: executing program 9 (id=7452): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x100) syz_io_uring_setup(0x24d6, &(0x7f0000000280)={0x0, 0xe976, 0x20000, 0x2, 0x22}, &(0x7f0000000300)=0x0, &(0x7f0000000340), &(0x7f0000000440)) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xf, 0x0, 0x40010, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0xd34, &(0x7f0000000480)={0x0, 0x3bf5, 0x120a, 0x2, 0x240}, &(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/delete_device\x00', 0x1, 0x0) write$binfmt_elf64(r3, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0xbd, 0x44, 0x5, 0xff, 0x2, 0x3e, 0x6, 0x2e4, 0x40, 0x1aa, 0x784, 0x7fff, 0x38, 0x1, 0xf, 0x7, 0x9}, [{0x4, 0x86c, 0x5, 0x9, 0x80000001, 0xb, 0x46e, 0xfffffffffffffffc}]}, 0x78) pipe2(&(0x7f00000005c0)={0xffffffffffffffff}, 0x800) syz_io_uring_submit(r0, r1, r2, &(0x7f0000000600)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x9, 0xd, 0x1, {0x0, 0x0, r4}}) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r4) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x111) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r5}, './file1\x00'}) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000003480)={0x2020}, 0x2020) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) r8 = userfaultfd(0x80801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000000c0)) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 1m59.401980814s ago: executing program 9 (id=7454): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1fe) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x80301, 0x1) 1m57.95173525s ago: executing program 9 (id=7462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8, 0x1000000}}}, 0xb8}}, 0x0) 1m57.700800641s ago: executing program 9 (id=7464): r0 = fsopen(&(0x7f0000000140)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source\x00', &(0x7f00000004c0)='//1#7.0.0.1/\xcb7\xcc\b\\\xd0\xe4\x85\xaf\xbb\x97yshare\x00$kV\xd6c\xa5\x19%\xe53\xefV5q\\\xb2.\x86\xd4\xaa\xcd\x05\xc6Z\x12\xb6R?\xee1\xc5\x80~~h\x95\xbd\xdf\xb2\xe1\x1fK>\xe2\x17\xb6F{\xb9\xd9\x00\x00\x00\x01\xf5+x\n\x1c\x06\xc9\xe1\xd9\xed\x9d3\t\xaa\x93\xcf\x1d\xb0\x02\xc3#\xd4>\x9b\x81/\x8e\v\xd5\xa2\x02_\xfc\x1b\xa7\xe7\x1e\xe4w', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='ip\x00', &(0x7f0000000240)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xe0b, 0x0, 0x0, 0x0, 0x800000}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x54}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m57.538787959s ago: executing program 9 (id=7465): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, "0000000000000000e8030000000000000000001f00000000"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 1m57.46137618s ago: executing program 9 (id=7466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x6000809) sendfile(r0, r6, 0x0, 0x7ffff004) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa45ee61dadd81916c1d0180c2", @ANYBLOB="2756830c96bb4f2542a49f5385ad7064e3c72ec5abf814d26397a32ec86cd8a1ad394c1358dd94d8746c4780a2f1a7d73e025418cfc561c0383c968a1679e3cdd258ffa8ffc98e1739990f1e48d502e0e870ce5f58e00333f0f7a6eddbec5cb236eed2af9a1312a7b03ed33a136d3a9d5198cb2b", @ANYRES32=r4, @ANYRESHEX=r5, @ANYRES16, @ANYRES64=0x0, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRESDEC=r6], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xbd, 0x3, 0x6, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0x9, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 1m57.458905758s ago: executing program 2 (id=7467): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) iopl(0x3) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r4, &(0x7f00000021c0), &(0x7f00000022c0)=""/136}, 0x20) r5 = dup(r3) write$UHID_INPUT(r5, &(0x7f0000001040)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="815032cc493e4bfc06f7ffffffffffffff0000000035e8109d3900000500"], 0x38}}, 0x40800) r6 = syz_clone3(&(0x7f0000000080)={0x2140000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x2a, 0x0, &(0x7f0000000340)=[0x0], 0x1}, 0x58) close_range(r1, r1, 0x200000000000000) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r7 = getpgid(r6) fcntl$setownex(r4, 0xf, &(0x7f0000000240)={0x1, r7}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000380)={'batadv0\x00', 0x0}) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', r8, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x0, 0x4, 0x0, 0x3}, 0xa) writev(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000008925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) 1m57.08898333s ago: executing program 2 (id=7471): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="4300000002"], 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x2, 0x4}, 0x6) 1m57.001049183s ago: executing program 2 (id=7472): pipe2(&(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c000280100004800c000100ff010000f9ffffff0600010000000000100003800c600100010000004903000008000500", @ANYRES32=r0, @ANYBLOB="140003"], 0x78}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 1m56.741246715s ago: executing program 2 (id=7473): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000001b40)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/206, 0xce, 0x1, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, 0x0, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000940)={0x344, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_TESTDATA={0xd1, 0x45, "b4bc2fad26d61346a3e0ca49a0241dc33a80c7cae19fe4565471258b69a846825555f0792a64b7d2bf1edfa99bb9591e9f2065524747626f9689b7830d47a8122a909ef97f27a0a8b02e6dde74745883443982f4fe34247c592d39666416957a6ed7976ad9d2b7d9957dab6f5b6d7adcea9d20e0dfbc5dbef394b647196a81cba7d609a3309538b2a42d0353016e64879c9e32b1712f104119798581118552cd1872434c1b4383c8ea0f9e601a9de42be55c51a75dc370a6b5ab7fa23690853e22a5474692253854811502a8a1"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x9f, 0x45, "b35fbf8ca2b1dd4180b9b146a197182c028b53cc24044762d83a27088fa3c6033910b3130da4dbd9a5051ab69404e6a3e30c35aec73ccabe14b937aee1e41a301246c0f881bd3a18cb19588a7d09c8105724310c7cd851444bd2a9828f05b2854be35b1e8a7400fae07128d08b4b19557504260eb98f2db147593e6997670fd7ba82a75381227a384b8e9bc2e20656bd09c6739ad1fff0d7081d1d"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "62908e9978c2d1a384f7389af194f2bf13e1590fe257aced6b4c5e167f051b267e55408f58207c2e3fa2bbfdac42c408b14ad8f8a2eb271071d4c411d4e9144cd80a703554e93f2a57922a4c4c4ca4ef1307a7057d04fc4a477392a71142c85833d23e811bab996012bba3a08899f4a3549165a6094e5ef71ab067a1d73d1bf80c60cfa0a4e88b94b72d2dd43d111104e978d5fc83fe693a21ea160d8fb985411359f7aae2119de76de848722afc12f59b56f89f84354b3bbc16d34eb1449320eef70e3df9738c94dfaf0db92df73745581e20c5065b384941e2ce1756b8437ffd7df3a694"}, @NL80211_ATTR_TESTDATA={0x93, 0x45, "827476bd511982c305ef25ad33918727c2c1aba4d66e0bb0a270a0d1f42295e1320a89111678b28aad7e485dc47133309c98897f69ad63cf02250c974f2ede9b8b06653b27cb6140dbb1eb90d113bbba9e2b417ced1642ddbcf728297a3d2cbf8d010ff60c8b9229c9462ab97b33445de92bc4bba47ed949db94a636c8e19211f8dee16cad7237c2b7b6c795e72a95"}, @NL80211_ATTR_TESTDATA={0x23, 0x45, "9ca3989774fb211256d93d0952b57e9bb2bda67137bc158d200afa52d88474"}]}, 0x344}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028006000340000100000600014000170000140000001100010000000000000000000000000a1de2fa39eb403a7bf74a2240a55dbfcff62ca5ea6555"], 0xd8}}, 0xc400) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) 1m56.630499112s ago: executing program 2 (id=7474): r0 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000003640), 0x2, 0x0) readv(r0, &(0x7f0000003780)=[{&(0x7f00000036c0)=""/155, 0x9b}], 0x1) mount$9p_fd(0x0, 0x0, 0x0, 0x4a404, &(0x7f0000000040)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@access_client}, {@nodevmap}, {@cache_readahead}, {@noxattr}, {@nodevmap}], [{@seclabel}]}}) setitimer(0x2, &(0x7f0000000040)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_int(r1, 0x107, 0x11, 0x0, &(0x7f00000000c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b685b431c70ea948259c4c869b4fc8db714e4b94bdae214fa68a051d4dca7d2647bec1fc89398d2b9000f224891060017c4700de60beac671e8e8f00cb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c59005cff414ed55b0d18a9d446935fb332bb593ee341ab59016f81860324b800c00000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4ac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a0000000000002248950b000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r4], 0x64}, 0x1, 0x0, 0x0, 0x4008850}, 0x24000000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000140)=0xffffffffffffffff) fcntl$getflags(r6, 0x40a) setitimer(0x2, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x5c, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r11, 0x40085874, &(0x7f0000000100)={r10, 0x8}) sendmsg$IPCTNL_MSG_CT_DELETE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="dbf5399ce9fdd1a1471ed054e0da92d3d782b4a05a766cf58884b7ffd632dc20a3ca36931b4f9908270abfacb6286b8fa8dfa55f576c6a05bf2c25279d15a01439aca5606099c2558c8c5a57fe40a8d1328073cb8104dc92986244b686466d4f7076ab344489d5c8b6c3e95c2d1a7c7433f44e2a3eb1aaab5226", @ANYRES32=r10, @ANYRES64=r10, @ANYRESOCT=0x0], 0x24}, 0x1, 0x0, 0x0, 0xe2822906287a85d6}, 0x84) 1m55.856867563s ago: executing program 0 (id=7478): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04f5ff0000000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m55.79940557s ago: executing program 0 (id=7479): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000400100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) 1m55.730364081s ago: executing program 0 (id=7480): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x5, 0x6576, 0x109}) (async) mmap(&(0x7f00003e9000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) (async) ioctl$XFS_IOC_ERROR_CLEARALL(r0, 0x40085875) 1m55.653557147s ago: executing program 0 (id=7481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000040a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000000824000180090001006d617371"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1m55.652380453s ago: executing program 6 (id=7482): pipe2(&(0x7f0000000040), 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="780000001000ffff27bd3000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000003c00128009000100766c616e000000002c000280100004800c000100ff010000f9ffffff0600010000000000100003800c8c0100010000004903000008000500", @ANYRES32=r0, @ANYBLOB="140003"], 0x78}, 0x1, 0x0, 0x0, 0x2000c855}, 0x8000002) 1m55.54930015s ago: executing program 6 (id=7483): r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x10000, 0x100) r1 = openat(r0, &(0x7f0000000080)='./file1\x00', 0x42, 0x1ff) r2 = inotify_init1(0x80800) inotify_add_watch(r2, &(0x7f0000000040)='./file1\x00', 0x7f7) r3 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0x2, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000080)={0x7ff, 0x6, 0x9, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000680)={0x0, 0x2}, 0x8) sendto$inet6(r3, &(0x7f0000000140)="9f", 0x1, 0x44005, &(0x7f0000000040)={0xa, 0x4e24, 0x7, @loopback, 0xc5f}, 0x1c) r4 = io_uring_setup(0x2f4f, &(0x7f0000000280)={0x0, 0x10, 0x1, 0x0, 0xfb}) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='&'], 0x10) close_range(r4, 0xffffffffffffffff, 0x0) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r8 = fanotify_init(0x200, 0x2) fanotify_mark(r8, 0x201, 0x40000021, r7, 0x0) fanotify_mark(r8, 0x441, 0x8000001, r7, 0x0) close_range(r2, r1, 0x2) open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) r9 = socket$inet6(0xa, 0x5, 0x0) close(r9) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r9, 0x29, 0x18, &(0x7f0000000040)=0x2402, 0x4) sendmsg$inet6(r9, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0x4e20, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0}, 0x1400c0c0) 1m55.459602291s ago: executing program 0 (id=7484): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockname(r1, 0x0, &(0x7f0000001b40)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = dup3(r2, r0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000840)={@ptr={0x70742a85, 0x1, &(0x7f0000000740)=""/206, 0xce, 0x1, 0x2b}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e26, 0x8, @mcast2, 0xa}, 0x1c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x34, 0x0, 0x101, 0x0, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x4}]}, 0x34}}, 0x20004800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, &(0x7f0000000dc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000940)={0x344, 0x0, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x43}}}}, [@NL80211_ATTR_TESTDATA={0xd1, 0x45, "b4bc2fad26d61346a3e0ca49a0241dc33a80c7cae19fe4565471258b69a846825555f0792a64b7d2bf1edfa99bb9591e9f2065524747626f9689b7830d47a8122a909ef97f27a0a8b02e6dde74745883443982f4fe34247c592d39666416957a6ed7976ad9d2b7d9957dab6f5b6d7adcea9d20e0dfbc5dbef394b647196a81cba7d609a3309538b2a42d0353016e64879c9e32b1712f104119798581118552cd1872434c1b4383c8ea0f9e601a9de42be55c51a75dc370a6b5ab7fa23690853e22a5474692253854811502a8a1"}, @NL80211_ATTR_TESTDATA={0x4}, @NL80211_ATTR_TESTDATA={0x9f, 0x45, "b35fbf8ca2b1dd4180b9b146a197182c028b53cc24044762d83a27088fa3c6033910b3130da4dbd9a5051ab69404e6a3e30c35aec73ccabe14b937aee1e41a301246c0f881bd3a18cb19588a7d09c8105724310c7cd851444bd2a9828f05b2854be35b1e8a7400fae07128d08b4b19557504260eb98f2db147593e6997670fd7ba82a75381227a384b8e9bc2e20656bd09c6739ad1fff0d7081d1d"}, @NL80211_ATTR_TESTDATA={0xe9, 0x45, "62908e9978c2d1a384f7389af194f2bf13e1590fe257aced6b4c5e167f051b267e55408f58207c2e3fa2bbfdac42c408b14ad8f8a2eb271071d4c411d4e9144cd80a703554e93f2a57922a4c4c4ca4ef1307a7057d04fc4a477392a71142c85833d23e811bab996012bba3a08899f4a3549165a6094e5ef71ab067a1d73d1bf80c60cfa0a4e88b94b72d2dd43d111104e978d5fc83fe693a21ea160d8fb985411359f7aae2119de76de848722afc12f59b56f89f84354b3bbc16d34eb1449320eef70e3df9738c94dfaf0db92df73745581e20c5065b384941e2ce1756b8437ffd7df3a694"}, @NL80211_ATTR_TESTDATA={0x93, 0x45, "827476bd511982c305ef25ad33918727c2c1aba4d66e0bb0a270a0d1f42295e1320a89111678b28aad7e485dc47133309c98897f69ad63cf02250c974f2ede9b8b06653b27cb6140dbb1eb90d113bbba9e2b417ced1642ddbcf728297a3d2cbf8d010ff60c8b9229c9462ab97b33445de92bc4bba47ed949db94a636c8e19211f8dee16cad7237c2b7b6c795e72a95"}, @NL80211_ATTR_TESTDATA={0x23, 0x45, "9ca3989774fb211256d93d0952b57e9bb2bda67137bc158d200afa52d88474"}]}, 0x344}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080001400000000108000240378b5ec30900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a300000000028000480240001800a00010071756575650000001400028006000340000100000600014000170000140000001100010000000000000000000000000a1de2fa39eb403a7bf74a2240a55dbfcff62ca5ea6555"], 0xd8}}, 0xf5ff) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r7, 0x0, 0x0) sendmmsg$inet(r7, 0x0, 0x0, 0x0) 1m55.390246609s ago: executing program 0 (id=7485): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000001000014f194e20"], 0xfdef) 1m55.207958883s ago: executing program 6 (id=7486): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="6800000010000104fcffffff8100080000000000", @ANYRES32=0x0, @ANYRESHEX=r0, @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) 1m55.099076267s ago: executing program 6 (id=7487): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8, 0x3000000}}}, 0xb8}}, 0x0) 1m55.098846886s ago: executing program 6 (id=7488): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xe, 0x1, 'connbytes\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x1c, 0x3, "0000000000000000e8030000000000000000000000000002"}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x100}}, 0x0) 1m54.788805839s ago: executing program 6 (id=7489): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000500)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a44000000020a0500000000000000000007e200040900010073797a30000000000c9810400000000000000004080002400000000208000240000000020800024000000003140000001100010000000000000000000300000a"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r7, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000140)=@known='system.posix_acl_default\x00') sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 1m49.195202696s ago: executing program 2 (id=7490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000001000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1m20.675557399s ago: executing program 48 (id=7466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x45e00644091d70c8}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x8000) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='sit0\x00', 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r6, 0x6000809) sendfile(r0, r6, 0x0, 0x7ffff004) syz_emit_ethernet(0x4a, &(0x7f00000005c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa45ee61dadd81916c1d0180c2", @ANYBLOB="2756830c96bb4f2542a49f5385ad7064e3c72ec5abf814d26397a32ec86cd8a1ad394c1358dd94d8746c4780a2f1a7d73e025418cfc561c0383c968a1679e3cdd258ffa8ffc98e1739990f1e48d502e0e870ce5f58e00333f0f7a6eddbec5cb236eed2af9a1312a7b03ed33a136d3a9d5198cb2b", @ANYRES32=r4, @ANYRESHEX=r5, @ANYRES16, @ANYRES64=0x0, @ANYRES16=r6, @ANYRESDEC=0x0, @ANYRESDEC=r6], 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[@code={0xa, 0x72, {"b8010000000f01d966ba2000b047eeb9800000c00f3235000400000f30410f01f80fc77dd1c744240200000000c744240600000000c482f2f7500048b83c000000000000000f23d8420f210035000000e00f23f8e999b90000c48285bce4f3dfcd"}}], 0x72}) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000040)) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000280)=[@code={0xa, 0x58, {"d3576ecf420f01b8a93a0b0f66baf80cb81c372e8cef66bafc0c66b8e3af66ef450f0017c441ad6a122ef2470f00d2c46335786d000b440f20c03502000000440f22c0400fdef2"}}], 0x58}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_PIT(r8, 0x8048ae66, &(0x7f00000002c0)={[{0x7, 0xc003, 0x7, 0x5, 0x2, 0x12, 0x7, 0xd, 0xbd, 0x3, 0x6, 0x8, 0x201}, {0x804, 0x1, 0x4, 0x45, 0x7, 0x9, 0x2, 0x3, 0x1f, 0x13, 0x4, 0x7b, 0x20e}, {0xfffffffe, 0x15, 0x18, 0x34, 0x8, 0xfd, 0x3, 0x84, 0x0, 0x4, 0x4, 0x7, 0x1}], 0xfaffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000140)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000500)={[0x7f, 0x88, 0x0, 0x40, 0x4, 0x0, 0x2004cb, 0x1, 0xfffffd, 0x20000000000068ff, 0x5, 0x745, 0x8, 0x3, 0x0, 0x9], 0x1, 0x202}) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) 36.072186319s ago: executing program 49 (id=7485): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaabb86dd6d002000001011ff00000000000100070000000000000000ff0200000000000000000000001000014f194e20"], 0xfdef) 33.610379782s ago: executing program 50 (id=7489): socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/uuid\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='46618451-8636-4076-a006-25816b8ff40c', 0x24) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000500)='cdg', 0x3) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000000000000000000000000500000a44000000020a0500000000000000000007e200040900010073797a30000000000c9810400000000000000004080002400000000208000240000000020800024000000003140000001100010000000000000000000300000a"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000a00)={0x3, &(0x7f0000000940)=[{0x20, 0x7f, 0x6, 0xfffff010}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0xb, 0xa1, 0x1000}]}, 0x10) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40043, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x42) fcntl$setlease(r7, 0x400, 0x0) fremovexattr(r6, &(0x7f0000000140)=@known='system.posix_acl_default\x00') sendmmsg$inet(r4, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 33.535482573s ago: executing program 51 (id=7490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000001000000000200000058000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.38309217s ago: executing program 3 (id=7850): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x17c, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@private=0xa010101, 0x0, 0x0, 0x4e21}, {@in=@broadcast, 0x0, 0x33}, @in6=@remote, {}, {0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x40000, 0x10000}, 0x0, 0x0, 0xa}, [@algo_auth={0x89, 0x1, {{'sha256\x00'}, 0x208, "a9d2bef95a4d26c618abe6c962b582cf72b7b4e665b9f2e35a455c315dc31664a7f666e087997bbc7c595538e71494ebf8926f58ae3e07675b41af9fe1b3a7bec8"}}]}, 0x17c}}, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x88, 0x2c, 0xf3f, 0x70bd2b, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xffe0, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_EMATCHES={0x54, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x48, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x44, 0x1, 0x0, 0x0, {{0x8, 0x7, 0x6}, {{0x1, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7fff, 0x7, 0x7}, {{0x2, 0x1}, {0x4, 0x1}}}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0xffff, 0x3, 0xb}, {0x6, 0x2, 0x7, 0x5}}}]}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) 2.138404134s ago: executing program 3 (id=7856): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x19}, 0xe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78628dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) (fail_nth: 4) 2.080115837s ago: executing program 3 (id=7859): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000140)=""/238, 0xee}], 0x1, 0xffffffff, 0x20000003) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaad8be17d192210800458e00330064000007069078ac1414bbac1414bb4e224e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="505e0002907800d95379de972ee80fa150fcf3"], 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote}}}, 0x108) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000200)={0x5, &(0x7f0000000140)="f33d798579380449c70c1eed439a3266517063ac2200aee25a5de1b9cf2c27ff95a1efd4f7442ed68817d9da12ec9c136f63ab3c7a57e1b8fd8a6853f0ffcbc5fc49184f1a902b1a353c53673b66e6baa147aab3294d99655f3da06dc01c623e62b51a281c99cf8f01aaa027fdc529da99636485c03590055429c3d0239f71bc5b6ecb32"}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="240000001900010028bd7000fcdbdf251d01020008000900", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x4008844}, 0x30004016) r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x101700) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000080)) r7 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r6, 0xc4009420, &(0x7f0000000740)={0x1, 0x6, {0x7, @usage=0x10, 0x0, 0xaed, 0x9, 0x8000000000000001, 0x9, 0x2, 0x5d4, @struct={0x4, 0x8000}, 0xa, 0x9, [0x7, 0x5, 0x9, 0xa2, 0x800, 0x214]}, {0x5, @usage=0x6, 0x0, 0x2d, 0x4, 0xa, 0x7, 0x5, 0x3, @struct={0x6, 0xfffffffa}, 0xfffffff7, 0xfffffff8, [0x6, 0x80000000, 0x80000000, 0x200, 0x100, 0xb]}, {0x7, @struct={0x6, 0x8}, 0x0, 0x2, 0x373f, 0x8, 0x3, 0x5, 0xc2, @usage=0xaad, 0x3, 0x8, [0xff, 0x5, 0x4, 0x70, 0x100000000, 0x2]}, {0x8, 0x6, 0x6}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r7, 0xc4089434, &(0x7f0000000b40)={r8, 0x200, 0x0, [0x0, 0x8, 0x5, 0x4], [0xc0, 0x10000, 0x9, 0x9, 0x8, 0x34ca, 0x8, 0x80000000, 0x100, 0x364d, 0x40, 0x5, 0x568, 0x9, 0xb1ff, 0xb, 0xff, 0x9277, 0x5, 0x100, 0x6, 0x1a3eab7c, 0x300000, 0x2, 0x1, 0x5, 0xffffffff, 0xd5, 0x8000000000000001, 0x6, 0x4, 0xdd, 0x7, 0x0, 0x10001, 0x3e, 0x7, 0xb, 0x5, 0x7, 0xec9, 0x8, 0xfffffffffffffff8, 0x4, 0x9, 0x4, 0x4, 0x6, 0x2, 0x5, 0x4, 0xfffffffffffffffe, 0x10000, 0x0, 0x548b, 0x9, 0x7, 0x3, 0x6, 0x1, 0x8, 0x100000000, 0x4, 0x1, 0x5da, 0x9, 0x1, 0x1, 0x304, 0x5, 0x40, 0x6, 0x1f31, 0x7, 0x7, 0x7ff, 0x8, 0x10000, 0x6, 0xb75, 0x10001, 0x4, 0x7, 0x5, 0x6, 0x6d9, 0x5, 0x2, 0x2, 0xdf, 0x7, 0x8001, 0x0, 0x80000001, 0x400000000000, 0x7, 0x4, 0x8001, 0x7, 0x390c, 0xffffffffffffff80, 0x1, 0x3ff, 0x1, 0x9, 0x7, 0x329, 0x8000000000000001, 0x7, 0x3, 0xffffffffffffffbd, 0x6, 0x5, 0xff, 0x8, 0x200, 0x2, 0xd9b0, 0x100, 0x2, 0x2]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x400000000a0a01, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r9, 0xc0844123, &(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) r11 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ppoll(&(0x7f00000001c0)=[{r11, 0x8a6b6feb38288eb0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 1.990436649s ago: executing program 3 (id=7864): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0x8, 0x3f, 0x1b, "3eccd25569e20900"}) close(0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001840)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="3400238006001800ff0f000008001a000100000008001500200000000600120001000000050006000f00"], 0x50}, 0x1, 0x0, 0x0, 0x20004044}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 1.937012247s ago: executing program 3 (id=7868): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000440)="000000000000b4abd804b2800b00d8ffffff00"/28, 0x1c) 1.873392648s ago: executing program 3 (id=7870): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_procfs(0x0, &(0x7f0000000080)='net/rt_cache\x00') munmap(&(0x7f000006e000/0x1000)=nil, 0x1000) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ffffff00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0x0, 0x0, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='maxtcpc 0x40\x00', 0xd) 1.442840458s ago: executing program 7 (id=7882): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51fa3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPOIB_PKEY={0x6, 0x1, 0x3}, @IFLA_IPOIB_PKEY={0x6, 0x1, 0x9}, @IFLA_IPOIB_MODE={0x6, 0x2, 0x1}]}}}]}, 0x4c}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) 1.391195805s ago: executing program 7 (id=7884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b040000000000000000020000f558000480540001800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 1.332408691s ago: executing program 7 (id=7887): r0 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000140)=0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000180)={0x2c, 0x0, r1, 0x18, r2}, 0x10) r3 = syz_open_dev$dri(&(0x7f00000001c0), 0xfffffffffffffff9, 0x500) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000280)={0x9, &(0x7f0000000200)=[{0x0}, {}, {}, {}, {}, {}, {}, {}, {}]}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f00000002c0)={r4}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0xf4, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000050002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140ff"], 0x90}}, 0x0) 1.259638275s ago: executing program 7 (id=7889): r0 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1000, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff5, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x22b}, @TCA_TBF_PARMS={0x28, 0x1, {{0xfb, 0x2, 0x0, 0x2, 0x0, 0x4}, {0x2, 0x2, 0xffff, 0x8, 0x2, 0x10}, 0x100000, 0x3, 0x229d}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) ppoll(&(0x7f00000001c0)=[{r0, 0x8a6b6feb38288eb0}], 0x1, &(0x7f0000000240), 0x0, 0x0) 1.182099766s ago: executing program 7 (id=7892): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x26e8, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$bt_BT_CHANNEL_POLICY(r2, 0x112, 0xa, &(0x7f00000000c0)=0x3, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4000886) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) r4 = syz_open_dev$rtc(&(0x7f0000000040), 0x46, 0x80) ppoll(&(0x7f0000000c00)=[{r4}], 0x1, 0x0, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f00000002c0)={0x9, 0x0, [{0x99f, 0x0, 0x77}, {0xb06, 0x0, 0x4}, {0x8cc, 0x0, 0x1}, {0xba4, 0x0, 0x5}, {0x0, 0x0, 0x9}, {0x24a, 0x0, 0x4}, {0x40000080, 0x0, 0xfffffffffffffffe}, {0x5b9c0c5af81ad2d5, 0x0, 0x3}, {0x987, 0x0, 0x6}]}) capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) creat(&(0x7f0000000ac0)='./file0\x00', 0x63) chown(&(0x7f00000003c0)='./file0\x00', 0x0, 0xee01) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000a80)=0x1, 0x4) 1.102801865s ago: executing program 1 (id=7894): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xb, @dev={0xfe, 0x80, '\x00', 0x19}, 0xe}, 0x1c) r1 = socket$l2tp(0x2, 0x2, 0x73) getsockopt$ARPT_SO_GET_INFO(r1, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x0, [0x4, 0x6, 0xb0]}, &(0x7f00000000c0)=0x44) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @remote, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e13808ca72381f41e5fff9620915b6f78628dfaf9a2038083179cf6b7931c9b4"}}}}}}}, 0x0) 1.102374163s ago: executing program 1 (id=7895): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETLE(r3, 0x400454dc, &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) r4 = syz_open_dev$vcsn(&(0x7f00000000c0), 0xc30e, 0x200) ioctl$KVM_CAP_DISABLE_QUIRKS2(r4, 0x4068aea3, &(0x7f0000000180)={0xd5, 0x0, 0x22}) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 471.750827ms ago: executing program 4 (id=7907): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b040000000000000000020000005800048054f501800a0001006d617463680000004400028008000240000000002c0003005c260400000000000023edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad0a0001006c696d69740000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 470.330776ms ago: executing program 4 (id=7915): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000440)="000000000000b4abd804b2800b000000000000000001000000000000", 0x1c) 241.224789ms ago: executing program 7 (id=7908): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) munmap(&(0x7f000045e000/0x1000)=nil, 0x1000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f000091f000/0x1000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x40000001, 0x7fff, 0x4, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r3, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, &(0x7f0000000040)=[@wrmsr={0x65, 0x20, {0x40000070}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvfrom(r7, 0x0, 0x4f, 0x40002021, 0x0, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000002180)={&(0x7f0000000100)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f00000021c0)={0x0}, 0x7, 0x0, 0x0, 0x200040c6}, 0x0) madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12) r8 = socket$tipc(0x1e, 0x5, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000340), 0x2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r9, 0xc01064c1, &(0x7f0000000080)) r10 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r10, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x34325241, 0x3, [0x2], [0x80ffff], [], [0x400000000000000]}) recvmmsg(r8, &(0x7f0000008c80)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/83, 0x53}], 0x1}, 0x80}], 0x1, 0x40002102, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x1, 0x87, 0xffffffff, 0x3f}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x6b) mremap(&(0x7f00003d6000/0x8000)=nil, 0x8000, 0x3000, 0x3, &(0x7f0000968000/0x3000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 241.119205ms ago: executing program 4 (id=7909): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x1) r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x2800, 0x100) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfc, 0x6}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000340)=0x1) write$ppp(r1, &(0x7f0000000100)="5e12", 0x2) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) tee(r0, r2, 0x1, 0x0) r3 = syz_open_dev$I2C(&(0x7f00000002c0), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x62f) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x0, 0x2, 0x0, 0x0}) 71.91023ms ago: executing program 1 (id=7910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="2800000003080300000000000000000002000003050003002f0000000c000480080001400000000460c96544f3445225c06aaebe70f855db583ae23a94adc6ede298f84e28d14e2d1c080ce893ca4e72cc271df910fc540ef9cf0461c391bd7f59eb892ae627ebaf86241fc7bb3a63d5591b82832b27b9fe8a6a3fe804c3a2efc2017bff909d1672bb"], 0x28}, 0x1, 0x0, 0x0, 0x20004011}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000640)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa1c0806030460050610000afffffffffff046ffff3c7c3a1a483afe83b1f3400a3abbbbbbbbbbbb785321db"], 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000008c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000225bd7000fddbdf25210000000c00020001000000010000000c000600010000000100000086eb1eded9539de26ab6cc3de5b31dad17d900ff66a080b537a18d248e55693729"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/serial8250/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='serial8250\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond0\x00', 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f0000000080)={r7, 0x2, 0x1, "fa"}, 0x9) socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x1, 0x0) lseek(r9, 0x8, 0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r8, &(0x7f0000000680)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r11, 0xfffffffc}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)="4fd22cb3060d45ad11b863018efcffd28642f95b2cdac26fcfa4950a26b37e3137b47feb2cc1a64e42095dca92eb466eaab83a6eb40b2876e2cc7cef5a490a1d10be8971332912c35a11313416411529380ad82eee7a9fa4509b3de58c6106b868e25f38ed6b4568fac802b0a035711dc226807c821d4eb6bbfd8a577a84d716d16541b7ade42bc2e71360c9618a69c68c9892f6ae97f44376d3e6e396d192300e91c2c099db05a6fcc8f1f114b46109f236f35ca2c87165296fb7a70c", 0xbd}, {&(0x7f0000000100)="0b1fc4c2", 0x4}, {&(0x7f0000000440)="ddbb3738bf7bc29215ff21b8547f086d70af6edce4555371e997243c39fae165e742dbd1f5314320ff8b5e31906e6919c10eaca9964d8d1c1f8284478c8db7bd376166f92e5fe4f8312834dc1a4fc4d12f6975faf5c8b32b1fc7ae8782e0abdb40adb54d", 0x64}, {&(0x7f0000000780)="be1477c9341bdd1e3947361c296aa1061a1bd0ceee842910ca7d357963902c7cd406a94e9ec38674d5407084b3b2c80341c08554f11f077938ecd851eccf9a7e13a1f2174955cdc84e738b296bcf03cbbb796206bcced5a14922080ef2df4a2caaa166c317d7de44732894d6c2f947afdb37cb8b65c53ab913018ba1531a735e444cbae33dad8ce9b70ab8bb6c0dffd11b149a9f833ebf89dcba80090abdc5dae6240f32d343f4b2fae4c8e7f9df0ebdcbf0df920dffc329c1a7df647a055a3820eed9f16e46570aa0ef597605e4b88b545233a19f46ba", 0xd7}], 0x4}}, {{&(0x7f0000000540)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x1, 0x1}}, 0x80, &(0x7f0000000240)=[{&(0x7f00000005c0)="577bbfe9df84d76f289f7d7c924de47d30b55cdbcceccec338a90f525e5bc22575cc101e3b19e74962fad735c847e90b72a1b23430485694eff0e66664f119d8b332d38344c1749946a6c62e083e6dec38dc0364b186a2ebdf8214078fc828432ab7bb5e627872f331dc21f6f97e04e4de04b45fc852c062b19810873fed02", 0x7f}], 0x1}}], 0x2, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000000), 0x0) eventfd2(0x0, 0x0) write(r4, &(0x7f00000002c0)="7078613237782d75646300371f08b34a9750ad89ee5f613704bb2e9999e4bf750a4f16dd991a484c175e1877fe672fe3005235751ab2e7b699d9a9ae9e63f6bc258d29cfa3399583df51346043ea059b63c83c33829d530042c6f657f6e076ca2b67c4c723d418fd803b893571274e846f393aa630bbba35c52331b9f16f9907fb4b25bab97ab0a7a464de0ad02230398f5810bb28d7e5db357d88db449fc0acb712770b40cd938097ca3ef840138c86", 0xb0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/pxa27x-udc/bind\x00', 0x1, 0x0) 71.752137ms ago: executing program 1 (id=7911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000002000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000000824000180090001006d617371"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 832.922µs ago: executing program 4 (id=7912): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300020000000000fadbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0xc0c0}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc00000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x40, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0xaa3, 0xfffffffffffffff8}, {0x0, 0x8}, 0x300}}, 0xb8}}, 0x0) 673.983µs ago: executing program 1 (id=7913): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000380)={0x3c0, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {0x7000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) 231.236µs ago: executing program 4 (id=7914): prctl$PR_PAC_RESET_KEYS(0x36, 0x3) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x14) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x1e) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x1c) r0 = syz_open_dev$hiddev(&(0x7f0000000000), 0x5, 0x8400) read$hiddev(r0, &(0x7f0000000040)=""/9, 0x9) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x5) prctl$PR_PAC_RESET_KEYS(0x36, 0xa) prctl$PR_PAC_RESET_KEYS(0x36, 0x8) prctl$PR_PAC_RESET_KEYS(0x36, 0x10) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0xb) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x0) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x1e) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) (async) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x9) prctl$PR_PAC_RESET_KEYS(0x36, 0x2) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x4) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140), 0x2, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r1, 0xc0186e86, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x8, 0x1596, 0x9, 0x198}], 0x1}) (async) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) 94.419µs ago: executing program 1 (id=7916): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, r5, 0x1, 0x50bd26, 0x25dfdbf8, {{}, {@val={0x8, 0x1, 0x4f}, @val={0x8, 0x3, r4}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) write$cgroup_subtree(r1, &(0x7f0000000140)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) 0s ago: executing program 4 (id=7917): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000440)="000000000000b4abd804b2800b000000000000000101000000000000", 0x1c) kernel console output (not intermixed with test programs): UNC path provided in device string! [ 988.352200][T28040] [ 988.352209][T28040] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 988.900527][T28070] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7092'. [ 988.904893][T28070] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7092'. [ 989.341443][T28085] tc action pedit 'at' offset 6 out of bounds [ 989.980870][ T13] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 990.263132][ T5745] Bluetooth: hci1: command tx timeout [ 990.376093][T28102] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7105'. [ 990.531494][T28108] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 990.537744][T28108] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 990.545106][T28108] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 990.548563][T28108] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 990.583959][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 990.859958][T28119] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7114'. [ 990.925297][T28122] binder: 28118:28122 ioctl c0306201 200000001040 returned -14 [ 991.182912][T28131] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7117'. [ 991.460471][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 991.460484][ T42] audit: type=1400 audit(1787036626.993:8648): avc: denied { write } for pid=28141 comm="syz.2.7120" name="g1" dev="configfs" ino=9540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 991.858681][T28147] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7122'. [ 992.051213][T28158] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7126'. [ 993.827813][T28187] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7137'. [ 994.104967][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 994.145184][T12351] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 994.187466][ T7563] wlan1: Trigger new scan to find an IBSS to join [ 994.299942][T12351] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 994.304892][T12351] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 994.317104][T12351] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 994.321281][T12351] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.328474][T12351] usb 14-1: Product: syz [ 994.329906][T12351] usb 14-1: Manufacturer: syz [ 994.336003][T12351] usb 14-1: SerialNumber: syz [ 994.345248][T12351] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 994.370041][T12351] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 994.375279][T12351] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 994.439523][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.547941][ T9] usb 14-1: USB disconnect, device number 10 [ 994.557793][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 994.572170][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 994.579374][ T9] ti_usb_3410_5052 14-1:2.0: device disconnected [ 995.128579][T28212] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7147'. [ 995.176640][T28215] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7149'. [ 995.303039][T28220] ip6gretap1: entered promiscuous mode [ 995.311838][T28220] ip6gretap1: entered allmulticast mode [ 995.495984][T28215] netlink: NAT attribute has 5 unknown bytes [ 995.497994][T28215] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 996.075782][ T9] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 996.258038][ T9] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 996.266244][ T9] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 996.325672][ T9] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 996.329336][ T9] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.332439][ T9] usb 14-1: Product: syz [ 996.333903][ T9] usb 14-1: Manufacturer: syz [ 996.335431][ T9] usb 14-1: SerialNumber: syz [ 996.344721][ T9] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 996.362207][ T9] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 996.370994][ T9] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 996.545680][ T9] usb 14-1: USB disconnect, device number 11 [ 996.556148][ T9597] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 996.590982][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 996.608170][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 996.615217][ T9] ti_usb_3410_5052 14-1:2.0: device disconnected [ 996.723358][T28243] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7159'. [ 996.727739][ T9597] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 996.732345][ T9597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 996.741723][ T9597] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 996.747283][ T9597] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 996.756652][ T9597] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 996.764532][ T9597] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.771997][ T9597] usb 7-1: config 0 descriptor?? [ 996.800855][T28245] netlink: 'syz.6.7160': attribute type 1 has an invalid length. [ 996.817432][T28245] 8021q: adding VLAN 0 to HW filter on device bond1 [ 997.185223][ T9597] plantronics 0003:047F:FFFF.0011: ignoring exceeding usage max [ 997.197593][ T9597] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 997.209014][T28258] loop2: detected capacity change from 0 to 7 [ 997.221012][T28258] Dev loop2: unable to read RDB block 7 [ 997.223275][T28258] loop2: AHDI p1 p2 p3 [ 997.226128][T28258] loop2: partition table partially beyond EOD, truncated [ 997.235443][T27653] wlan1: Trigger new scan to find an IBSS to join [ 997.239010][T28258] loop2: p1 start 1601398130 is beyond EOD, truncated [ 997.242308][T28258] loop2: p2 start 1702059890 is beyond EOD, truncated [ 997.380660][T28263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7168'. [ 997.452099][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802eb4ec00: rx timeout, send abort [ 997.463691][T28265] bridge1: entered promiscuous mode [ 997.466015][T28265] bridge1: entered allmulticast mode [ 997.495532][T28266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=28266 comm=syz.2.7158 [ 997.952460][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802eb4c000: rx timeout, send abort [ 997.955882][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802eb4ec00: abort rx timeout. Force session deactivation [ 998.286751][T28284] netlink: 'syz.9.7176': attribute type 1 has an invalid length. [ 998.290547][T28284] netlink: 193500 bytes leftover after parsing attributes in process `syz.9.7176'. [ 998.294519][T28284] netlink: 'syz.9.7176': attribute type 1 has an invalid length. [ 998.305974][T28284] netlink: 2016 bytes leftover after parsing attributes in process `syz.9.7176'. [ 998.336930][ T9] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 998.456038][ C3] vcan0: j1939_tp_rxtimer: 0xffff88802eb4c000: abort rx timeout. Force session deactivation [ 998.519418][ T9] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 998.524161][ T9] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 998.530462][ T9] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 998.534688][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.540642][ T9] usb 11-1: Product: syz [ 998.543141][ T9] usb 11-1: Manufacturer: syz [ 998.547024][ T9] usb 11-1: SerialNumber: syz [ 998.555154][ T9] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 998.564724][ T9] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 998.574818][ T9] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 998.757135][ T9] usb 11-1: USB disconnect, device number 35 [ 998.775361][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 998.788712][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 998.799180][ T9] ti_usb_3410_5052 11-1:2.0: device disconnected [ 998.988734][T28289] netlink: 'syz.2.7177': attribute type 13 has an invalid length. [ 998.991267][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7177'. [ 999.000099][T28289] netlink: 'syz.2.7177': attribute type 13 has an invalid length. [ 999.002660][T28289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7177'. [ 999.009568][T28289] syzkaller0: entered promiscuous mode [ 999.011363][T28289] syzkaller0: entered allmulticast mode [ 999.049669][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.052761][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.055904][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.059400][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 999.173334][T12351] usb 7-1: USB disconnect, device number 51 [ 999.322397][T28291] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7178'. [ 999.453624][ T42] audit: type=1400 audit(1787036634.989:8649): avc: denied { mount } for pid=28294 comm="syz.6.7180" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 999.474819][ T42] audit: type=1400 audit(1787036635.009:8650): avc: denied { unmount } for pid=27736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 999.830021][T28305] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7184'. [ 999.936707][T28307] xt_connbytes: Forcing CT accounting to be enabled [ 1000.287234][T28312] kvm: pic: level sensitive irq not supported [ 1000.288113][T12351] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 1000.348496][ T7563] wlan1: Trigger new scan to find an IBSS to join [ 1000.466921][T12351] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1000.473218][T12351] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1000.481647][T12351] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1000.485711][T12351] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.490041][T12351] usb 11-1: Product: syz [ 1000.491904][T12351] usb 11-1: Manufacturer: syz [ 1000.493901][T12351] usb 11-1: SerialNumber: syz [ 1000.503340][T12351] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 1000.511820][T12351] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1000.518851][T12351] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1000.704834][T12351] usb 11-1: USB disconnect, device number 36 [ 1000.714705][T12351] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1000.722542][T12351] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1000.727968][T12351] ti_usb_3410_5052 11-1:2.0: device disconnected [ 1000.814495][T28321] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7189'. [ 1001.089622][ T42] audit: type=1400 audit(1787036636.628:8651): avc: denied { write } for pid=28322 comm="syz.2.7190" name="/" dev="9p" ino=76832905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1001.172128][ T42] audit: type=1400 audit(1787036636.708:8652): avc: denied { mounton } for pid=28322 comm="syz.2.7190" path="/394/file0/file0" dev="9p" ino=76832953 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1001.890380][ T42] audit: type=1400 audit(1787036637.428:8653): avc: denied { listen } for pid=28331 comm="syz.9.7193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1002.125336][T27672] wlan1: Creating new IBSS network, BSSID d2:eb:00:df:5d:03 [ 1002.749265][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1003.183359][T28352] syzkaller1: entered promiscuous mode [ 1003.185439][T28352] syzkaller1: entered allmulticast mode [ 1003.694472][T28355] binder: 28354:28355 ioctl c0306201 0 returned -14 [ 1003.697605][T28355] binder: 28354:28355 ioctl 8933 2000000002c0 returned -22 [ 1004.671676][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1005.302921][ T9] IPVS: starting estimator thread 0... [ 1005.321581][T28373] ntfs3(nbd9): try to read out of volume at offset 0x0 [ 1005.413539][T28374] IPVS: using max 45 ests per chain, 108000 per kthread [ 1006.690912][T28391] FAULT_INJECTION: forcing a failure. [ 1006.690912][T28391] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.696988][T28391] CPU: 3 UID: 0 PID: 28391 Comm: syz.9.7211 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.697014][T28391] Tainted: [L]=SOFTLOCKUP [ 1006.697020][T28391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1006.697042][T28391] Call Trace: [ 1006.697065][T28391] [ 1006.697073][T28391] dump_stack_lvl+0x100/0x190 [ 1006.697128][T28391] should_fail_ex.cold+0x5/0xa [ 1006.697156][T28391] _copy_from_user+0x2e/0xd0 [ 1006.697216][T28391] do_sys_poll+0x345/0xe90 [ 1006.697261][T28391] ? bpf_ksym_find+0x128/0x1c0 [ 1006.697297][T28391] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1006.697321][T28391] ? is_bpf_text_address+0x94/0x1a0 [ 1006.697349][T28391] ? __pfx_do_sys_poll+0x10/0x10 [ 1006.697367][T28391] ? arch_stack_walk+0xa6/0xf0 [ 1006.697466][T28391] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1006.697501][T28391] ? set_user_sigmask+0x1e1/0x270 [ 1006.697532][T28391] ? __pfx_set_user_sigmask+0x10/0x10 [ 1006.697555][T28391] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1006.697584][T28391] __x64_sys_ppoll+0x2b5/0x350 [ 1006.697607][T28391] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1006.697626][T28391] ? ksys_write+0x1ac/0x250 [ 1006.697645][T28391] ? __pfx_ksys_write+0x10/0x10 [ 1006.697686][T28391] do_syscall_64+0x115/0x870 [ 1006.697711][T28391] ? clear_bhb_loop+0x40/0x90 [ 1006.697734][T28391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.697754][T28391] RIP: 0033:0x7fc0cf79e0d9 [ 1006.697767][T28391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.697782][T28391] RSP: 002b:00007fc0d0618028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1006.697816][T28391] RAX: ffffffffffffffda RBX: 00007fc0cfa25fa0 RCX: 00007fc0cf79e0d9 [ 1006.697827][T28391] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1006.697836][T28391] RBP: 00007fc0d0618090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.697845][T28391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1006.697853][T28391] R13: 00007fc0cfa26038 R14: 00007fc0cfa25fa0 R15: 00007fffbcb48cf8 [ 1006.697873][T28391] [ 1006.773243][T22360] Bluetooth: hci0: command 0x0c1a tx timeout [ 1006.913869][T28397] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7197'. [ 1006.966501][T28400] binder: 28398:28400 ioctl c0306201 0 returned -14 [ 1006.969327][T28400] binder: 28398:28400 ioctl 8933 2000000002c0 returned -22 [ 1008.265194][T28427] FAULT_INJECTION: forcing a failure. [ 1008.265194][T28427] name failslab, interval 1, probability 0, space 0, times 0 [ 1008.276678][T28427] CPU: 3 UID: 0 PID: 28427 Comm: syz.9.7224 Tainted: G L syzkaller #0 PREEMPT(full) [ 1008.276699][T28427] Tainted: [L]=SOFTLOCKUP [ 1008.276703][T28427] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1008.276710][T28427] Call Trace: [ 1008.276715][T28427] [ 1008.276720][T28427] dump_stack_lvl+0x100/0x190 [ 1008.276740][T28427] should_fail_ex.cold+0x5/0xa [ 1008.276755][T28427] should_failslab+0xc2/0x120 [ 1008.276771][T28427] __kmalloc_noprof+0xfc/0x820 [ 1008.276785][T28427] ? do_sys_poll+0x273/0xe90 [ 1008.276799][T28427] do_sys_poll+0x273/0xe90 [ 1008.276809][T28427] ? bpf_ksym_find+0x128/0x1c0 [ 1008.276826][T28427] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1008.276840][T28427] ? is_bpf_text_address+0x94/0x1a0 [ 1008.276856][T28427] ? __pfx_do_sys_poll+0x10/0x10 [ 1008.276867][T28427] ? arch_stack_walk+0xa6/0xf0 [ 1008.276920][T28427] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1008.276935][T28427] ? set_user_sigmask+0x1e1/0x270 [ 1008.276949][T28427] ? __pfx_set_user_sigmask+0x10/0x10 [ 1008.276962][T28427] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1008.276979][T28427] __x64_sys_ppoll+0x2b5/0x350 [ 1008.276991][T28427] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1008.277002][T28427] ? ksys_write+0x1ac/0x250 [ 1008.277013][T28427] ? __pfx_ksys_write+0x10/0x10 [ 1008.277026][T28427] do_syscall_64+0x115/0x870 [ 1008.277040][T28427] ? clear_bhb_loop+0x40/0x90 [ 1008.277054][T28427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.277065][T28427] RIP: 0033:0x7fc0cf79e0d9 [ 1008.277076][T28427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.277086][T28427] RSP: 002b:00007fc0d0618028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1008.277098][T28427] RAX: ffffffffffffffda RBX: 00007fc0cfa25fa0 RCX: 00007fc0cf79e0d9 [ 1008.277105][T28427] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1008.277111][T28427] RBP: 00007fc0d0618090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.277118][T28427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1008.277124][T28427] R13: 00007fc0cfa26038 R14: 00007fc0cfa25fa0 R15: 00007fffbcb48cf8 [ 1008.277137][T28427] [ 1008.425933][T28432] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7226'. [ 1008.428854][T28432] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7226'. [ 1008.431600][T28432] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Register Pid response ret = -22) [ 1008.550075][T28434] binder: 28433:28434 ioctl c0306201 0 returned -14 [ 1008.554740][T28434] binder: 28433:28434 ioctl 8933 2000000002c0 returned -22 [ 1008.571002][T28430] orangefs: client-core tried to read wrong size [ 1008.612103][ T42] audit: type=1400 audit(1787036644.124:8654): avc: denied { setattr } for pid=28428 comm="syz.6.7225" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 1008.882291][T12351] usb 14-1: new high-speed USB device number 12 using dummy_hcd [ 1009.012321][T12351] usb 14-1: device descriptor read/64, error -71 [ 1009.262712][T12351] usb 14-1: new high-speed USB device number 13 using dummy_hcd [ 1009.402624][T12351] usb 14-1: device descriptor read/64, error -71 [ 1009.512558][ T42] audit: type=1400 audit(1787036645.044:8655): avc: denied { shutdown } for pid=28446 comm="syz.2.7233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1009.525223][T12351] usb usb14-port1: attempt power cycle [ 1009.579928][T28448] netlink: zone id is out of range [ 1009.582141][T28448] netlink: zone id is out of range [ 1009.584778][T28448] netlink: zone id is out of range [ 1009.586950][T28448] netlink: zone id is out of range [ 1009.872845][T12351] usb 14-1: new high-speed USB device number 14 using dummy_hcd [ 1009.893557][T12351] usb 14-1: device descriptor read/8, error -71 [ 1010.119475][T28450] FAULT_INJECTION: forcing a failure. [ 1010.119475][T28450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1010.126501][T28450] CPU: 3 UID: 0 PID: 28450 Comm: syz.6.7234 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.126532][T28450] Tainted: [L]=SOFTLOCKUP [ 1010.126539][T28450] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1010.126579][T28450] Call Trace: [ 1010.126587][T28450] [ 1010.126596][T28450] dump_stack_lvl+0x100/0x190 [ 1010.126628][T28450] should_fail_ex.cold+0x5/0xa [ 1010.126654][T28450] _copy_from_user+0x2e/0xd0 [ 1010.126683][T28450] do_sys_poll+0x345/0xe90 [ 1010.126704][T28450] ? bpf_ksym_find+0x128/0x1c0 [ 1010.126731][T28450] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1010.126755][T28450] ? is_bpf_text_address+0x94/0x1a0 [ 1010.126783][T28450] ? __pfx_do_sys_poll+0x10/0x10 [ 1010.126802][T28450] ? arch_stack_walk+0xa6/0xf0 [ 1010.126898][T28450] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1010.126939][T28450] ? set_user_sigmask+0x1e1/0x270 [ 1010.126961][T28450] ? __pfx_set_user_sigmask+0x10/0x10 [ 1010.126982][T28450] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1010.127012][T28450] __x64_sys_ppoll+0x2b5/0x350 [ 1010.127051][T28450] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1010.127070][T28450] ? ksys_write+0x1ac/0x250 [ 1010.127086][T28450] ? __pfx_ksys_write+0x10/0x10 [ 1010.127109][T28450] do_syscall_64+0x115/0x870 [ 1010.127129][T28450] ? clear_bhb_loop+0x40/0x90 [ 1010.127151][T28450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.127170][T28450] RIP: 0033:0x7fb5c559e0d9 [ 1010.127188][T28450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.127207][T28450] RSP: 002b:00007fb5c63bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1010.127226][T28450] RAX: ffffffffffffffda RBX: 00007fb5c5825fa0 RCX: 00007fb5c559e0d9 [ 1010.127238][T28450] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1010.127249][T28450] RBP: 00007fb5c63bf090 R08: 0000000000000000 R09: 0000000000000000 [ 1010.127267][T28450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1010.127278][T28450] R13: 00007fb5c5826038 R14: 00007fb5c5825fa0 R15: 00007ffd78ac3948 [ 1010.127303][T28450] [ 1010.235608][T12351] usb 14-1: new high-speed USB device number 15 using dummy_hcd [ 1010.253557][T12351] usb 14-1: device descriptor read/8, error -71 [ 1010.363936][T12351] usb usb14-port1: unable to enumerate USB device [ 1010.382116][T28459] binder: 28458:28459 ioctl c0306201 0 returned -14 [ 1010.388817][T28459] binder: 28458:28459 ioctl 8933 2000000002c0 returned -22 [ 1010.570130][T28464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7239'. [ 1011.674977][T28475] FAULT_INJECTION: forcing a failure. [ 1011.674977][T28475] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.679368][T28475] CPU: 3 UID: 0 PID: 28475 Comm: syz.9.7244 Tainted: G L syzkaller #0 PREEMPT(full) [ 1011.679392][T28475] Tainted: [L]=SOFTLOCKUP [ 1011.679397][T28475] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1011.679407][T28475] Call Trace: [ 1011.679412][T28475] [ 1011.679419][T28475] dump_stack_lvl+0x100/0x190 [ 1011.679444][T28475] should_fail_ex.cold+0x5/0xa [ 1011.679465][T28475] should_failslab+0xc2/0x120 [ 1011.679486][T28475] __kmalloc_cache_noprof+0x91/0x6c0 [ 1011.679509][T28475] ? find_held_lock+0x2b/0x80 [ 1011.679523][T28475] ? __pollwait+0x2c3/0x490 [ 1011.679548][T28475] ? __pfx___pollwait+0x10/0x10 [ 1011.679569][T28475] __pollwait+0x2c3/0x490 [ 1011.679592][T28475] ? __pfx___pollwait+0x10/0x10 [ 1011.679613][T28475] pipe_poll+0x195/0x6e0 [ 1011.679629][T28475] ? __pfx_pipe_poll+0x10/0x10 [ 1011.679643][T28475] do_sys_poll+0x6e5/0xe90 [ 1011.679664][T28475] ? __pfx_do_sys_poll+0x10/0x10 [ 1011.679678][T28475] ? arch_stack_walk+0xa6/0xf0 [ 1011.679720][T28475] ? __pfx___pollwait+0x10/0x10 [ 1011.679745][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679760][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679774][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679790][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679805][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679820][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679835][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679849][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679864][T28475] ? __pfx_pollwake+0x10/0x10 [ 1011.679880][T28475] ? __mutex_unlock_slowpath+0x35d/0x930 [ 1011.679900][T28475] ? set_user_sigmask+0x1e1/0x270 [ 1011.679917][T28475] ? __pfx_set_user_sigmask+0x10/0x10 [ 1011.679934][T28475] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1011.679955][T28475] __x64_sys_ppoll+0x2b5/0x350 [ 1011.679973][T28475] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1011.679987][T28475] ? ksys_write+0x1ac/0x250 [ 1011.679999][T28475] ? __pfx_ksys_write+0x10/0x10 [ 1011.680018][T28475] do_syscall_64+0x115/0x870 [ 1011.680035][T28475] ? clear_bhb_loop+0x40/0x90 [ 1011.680052][T28475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.680066][T28475] RIP: 0033:0x7fc0cf79e0d9 [ 1011.680080][T28475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1011.680094][T28475] RSP: 002b:00007fc0d0618028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1011.680109][T28475] RAX: ffffffffffffffda RBX: 00007fc0cfa25fa0 RCX: 00007fc0cf79e0d9 [ 1011.680118][T28475] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 1011.680127][T28475] RBP: 00007fc0d0618090 R08: 0000000000000000 R09: 0000000000000000 [ 1011.680135][T28475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1011.680143][T28475] R13: 00007fc0cfa26038 R14: 00007fc0cfa25fa0 R15: 00007fffbcb48cf8 [ 1011.680162][T28475] [ 1011.932974][ T42] audit: type=1400 audit(1787036647.453:8656): avc: denied { getopt } for pid=28480 comm="syz.9.7246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 1012.000251][T28483] binder: 28482:28483 ioctl c0306201 0 returned -14 [ 1012.007684][T28483] binder: 28482:28483 ioctl 8933 2000000002c0 returned -22 [ 1012.203171][T28488] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7249'. [ 1012.653277][T28494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.662263][T28494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.702213][T28498] FAULT_INJECTION: forcing a failure. [ 1012.702213][T28498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1012.708366][T28498] CPU: 0 UID: 0 PID: 28498 Comm: syz.2.7254 Tainted: G L syzkaller #0 PREEMPT(full) [ 1012.708389][T28498] Tainted: [L]=SOFTLOCKUP [ 1012.708397][T28498] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1012.708404][T28498] Call Trace: [ 1012.708409][T28498] [ 1012.708414][T28498] dump_stack_lvl+0x100/0x190 [ 1012.708435][T28498] should_fail_ex.cold+0x5/0xa [ 1012.708450][T28498] _copy_to_user+0x32/0xd0 [ 1012.708471][T28498] simple_read_from_buffer+0xcb/0x170 [ 1012.708491][T28498] proc_fail_nth_read+0x1af/0x230 [ 1012.708539][T28498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.708566][T28498] ? rw_verify_area+0xce/0x6d0 [ 1012.708589][T28498] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1012.708613][T28498] vfs_read+0x1e4/0xb40 [ 1012.708640][T28498] ? __pfx_vfs_read+0x10/0x10 [ 1012.708661][T28498] ? __fget_files+0x215/0x3d0 [ 1012.708677][T28498] ? __fget_files+0x21f/0x3d0 [ 1012.708691][T28498] ksys_read+0x12a/0x250 [ 1012.708713][T28498] ? __pfx_ksys_read+0x10/0x10 [ 1012.708734][T28498] do_syscall_64+0x115/0x870 [ 1012.708748][T28498] ? clear_bhb_loop+0x40/0x90 [ 1012.708761][T28498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.708774][T28498] RIP: 0033:0x7f01a915e90e [ 1012.708785][T28498] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1012.708796][T28498] RSP: 002b:00007f01aa11afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1012.708808][T28498] RAX: ffffffffffffffda RBX: 00007f01aa11b6c0 RCX: 00007f01a915e90e [ 1012.708815][T28498] RDX: 000000000000000f RSI: 00007f01aa11b0a0 RDI: 0000000000000005 [ 1012.708821][T28498] RBP: 00007f01aa11b090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.708828][T28498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.708834][T28498] R13: 00007f01a9426038 R14: 00007f01a9425fa0 R15: 00007ffc32036578 [ 1012.708848][T28498] [ 1012.957297][T28503] binder: 28502:28503 ioctl c0306201 0 returned -14 [ 1012.962689][T28503] binder: 28502:28503 ioctl 8933 2000000002c0 returned -22 [ 1013.509166][T28512] tipc: Started in network mode [ 1013.513720][T28512] tipc: Node identity 4004, cluster identity 4711 [ 1013.521671][T28512] tipc: Node number set to 16388 [ 1014.127180][ T42] audit: type=1400 audit(1787036649.652:8657): avc: denied { mounton } for pid=28519 comm="syz.6.7263" path="/66/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 1014.219471][T28520] pci_bus 0000:01: busn_res: [bus 01] is released [ 1014.402586][T28531] binder: 28530:28531 ioctl c0306201 0 returned -14 [ 1014.413186][T28531] binder: 28530:28531 ioctl 8933 2000000002c0 returned -22 [ 1014.488664][T28533] program syz.6.7266 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1014.512605][T28533] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7266'. [ 1014.652094][T28537] pim6reg: entered allmulticast mode [ 1015.096672][T28548] binder: 28547:28548 ioctl c0306201 0 returned -14 [ 1015.102234][T28548] binder: 28547:28548 ioctl 8933 2000000002c0 returned -22 [ 1015.295601][T28555] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 1015.303955][T28555] trusted_key: encrypted_key: insufficient parameters specified [ 1015.456794][T28559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7278'. [ 1015.858146][T28580] binder: 28577:28580 ioctl c0306201 0 returned -14 [ 1015.861702][T28580] binder: 28577:28580 ioctl 8933 2000000002c0 returned -22 [ 1015.904313][T28581] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7285'. [ 1017.572891][T28608] binder: 28607:28608 ioctl c0306201 0 returned -14 [ 1017.582577][T28608] binder: 28607:28608 ioctl 8933 2000000002c0 returned -22 [ 1017.777084][T12351] usb 14-1: new high-speed USB device number 16 using dummy_hcd [ 1017.906976][T12351] usb 14-1: device descriptor read/64, error -71 [ 1018.001167][T28615] netlink: 'syz.6.7297': attribute type 11 has an invalid length. [ 1018.011631][T28615] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24984 sclass=netlink_route_socket pid=28615 comm=syz.6.7297 [ 1018.156909][T12351] usb 14-1: new high-speed USB device number 17 using dummy_hcd [ 1018.290248][T12351] usb 14-1: device descriptor read/64, error -71 [ 1018.408628][T12351] usb usb14-port1: attempt power cycle [ 1018.771067][T12351] usb 14-1: new high-speed USB device number 18 using dummy_hcd [ 1018.802595][T12351] usb 14-1: device descriptor read/8, error -71 [ 1019.047283][T12351] usb 14-1: new high-speed USB device number 19 using dummy_hcd [ 1019.075042][T12351] usb 14-1: device descriptor read/8, error -71 [ 1019.202662][T12351] usb usb14-port1: unable to enumerate USB device [ 1019.397546][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1020.432539][T28636] binder: 28635:28636 ioctl c0306201 0 returned -14 [ 1020.440831][T28636] binder: 28635:28636 ioctl 8933 2000000002c0 returned -22 [ 1020.937051][ T42] audit: type=1800 audit(1787036656.458:8658): pid=28658 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.7312" name="midi1_first_group" dev="configfs" ino=141269 res=0 errno=0 [ 1021.082330][T28663] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1021.538678][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1021.678621][ T9] usb 7-1: device descriptor read/64, error -71 [ 1021.691947][T28670] binder: 28669:28670 ioctl c0306201 0 returned -14 [ 1021.699644][T28670] binder: 28669:28670 ioctl 8933 2000000002c0 returned -22 [ 1021.938797][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1021.950720][ T42] audit: type=1400 audit(1787036657.478:8659): avc: denied { remount } for pid=28679 comm="syz.6.7320" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 1021.969782][ T42] audit: type=1400 audit(1787036657.478:8660): avc: denied { setattr } for pid=28679 comm="syz.6.7320" name="[userfaultfd]" dev="anon_inodefs" ino=142347 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 1022.088899][ T9] usb 7-1: device descriptor read/64, error -71 [ 1022.209146][ T9] usb usb7-port1: attempt power cycle [ 1022.559088][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1022.589527][ T9] usb 7-1: device descriptor read/8, error -71 [ 1022.840372][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1022.859545][ T9] usb 7-1: device descriptor read/8, error -71 [ 1022.911890][T28686] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1022.979711][ T9] usb usb7-port1: unable to enumerate USB device [ 1023.883665][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1024.266141][T28696] binder: 28695:28696 ioctl c0306201 0 returned -14 [ 1024.268915][T28696] binder: 28695:28696 ioctl 8933 2000000002c0 returned -22 [ 1024.432853][T28703] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 1025.134397][T28711] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1025.478587][T28716] misc userio: No port type given on /dev/userio [ 1025.543998][T28719] binder: 28717:28719 ioctl c0306201 0 returned -14 [ 1025.558194][T28719] binder: 28717:28719 ioctl 8933 2000000002c0 returned -22 [ 1025.750194][T28725] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.763549][T28725] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.811904][ T50] usb 14-1: new high-speed USB device number 20 using dummy_hcd [ 1025.970966][ T50] usb 14-1: device descriptor read/64, error -71 [ 1026.213468][ T50] usb 14-1: new high-speed USB device number 21 using dummy_hcd [ 1026.279984][T28743] openvswitch: netlink: Tunnel attr 16 has unexpected len 16 expected 0 [ 1026.342171][ T50] usb 14-1: device descriptor read/64, error -71 [ 1026.456568][ T50] usb usb14-port1: attempt power cycle [ 1026.831886][ T50] usb 14-1: new high-speed USB device number 22 using dummy_hcd [ 1026.851704][ T50] usb 14-1: device descriptor read/8, error -71 [ 1027.101405][ T50] usb 14-1: new high-speed USB device number 23 using dummy_hcd [ 1027.121926][ T50] usb 14-1: device descriptor read/8, error -71 [ 1027.231790][ T50] usb usb14-port1: unable to enumerate USB device [ 1032.713505][T28762] binder: 28761:28762 ioctl c0306201 0 returned -14 [ 1032.724714][T28762] binder: 28761:28762 ioctl 8933 2000000002c0 returned -22 [ 1033.575153][ T149] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 1033.734739][ T149] usb 11-1: device descriptor read/64, error -71 [ 1033.995705][ T149] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 1034.025193][T28792] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7355'. [ 1034.135014][ T149] usb 11-1: device descriptor read/64, error -71 [ 1034.188076][T28794] binder: BINDER_SET_CONTEXT_MGR already set [ 1034.190802][T28794] binder: 28793:28794 ioctl 4018620d 200000004a80 returned -16 [ 1034.194705][T28794] binder: 28793:28794 ioctl c0306201 0 returned -14 [ 1034.200973][T28794] binder: 28793:28794 ioctl 8933 2000000002c0 returned -22 [ 1034.260235][ T149] usb usb11-port1: attempt power cycle [ 1034.615252][ T149] usb 11-1: new high-speed USB device number 39 using dummy_hcd [ 1034.636020][ T149] usb 11-1: device descriptor read/8, error -71 [ 1034.885353][ T149] usb 11-1: new high-speed USB device number 40 using dummy_hcd [ 1034.917292][ T149] usb 11-1: device descriptor read/8, error -71 [ 1035.047095][ T149] usb usb11-port1: unable to enumerate USB device [ 1035.056834][T28814] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7368'. [ 1035.085816][T28816] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 1035.110454][T28816] xt_hashlimit: size too large, truncated to 1048576 [ 1035.435629][T28823] binder: 28822:28823 ioctl c0306201 0 returned -14 [ 1035.445338][T28823] binder: 28822:28823 ioctl 8933 2000000002c0 returned -22 [ 1036.573458][T28851] binder: 28850:28851 ioctl c0306201 0 returned -14 [ 1036.582716][T28851] binder: 28850:28851 ioctl 8933 2000000002c0 returned -22 [ 1036.810331][T28855] netlink: zone id is out of range [ 1036.837902][T28861] netlink: 'syz.6.7386': attribute type 14 has an invalid length. [ 1036.845066][T28863] netlink: 'syz.6.7386': attribute type 14 has an invalid length. [ 1037.873479][T28871] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ĂXTz“W¡t‘’lWµ«= [ 1037.876127][T28871] [U] J"—e:ÀÆ" [ 1038.034142][T28877] binder: 28876:28877 ioctl c0306201 0 returned -14 [ 1038.042039][T28877] binder: 28876:28877 ioctl 8933 2000000002c0 returned -22 [ 1038.092776][ T9597] usb 14-1: new high-speed USB device number 24 using dummy_hcd [ 1038.469588][ T9597] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.472832][ T9597] usb 14-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1038.541256][ T9597] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1038.550090][ T9597] usb 14-1: config 2 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1038.644367][T28889] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 1038.655815][ T9597] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1038.665746][ T9597] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.678125][ T9597] usb 14-1: Product: syz [ 1038.679909][ T9597] usb 14-1: Manufacturer: syz [ 1038.681846][ T9597] usb 14-1: SerialNumber: syz [ 1038.732005][ T9597] ti_usb_3410_5052 14-1:2.0: required endpoints missing [ 1038.993838][ T9] usb 14-1: USB disconnect, device number 24 [ 1041.296462][T28916] binder: 28915:28916 ioctl c0306201 0 returned -14 [ 1041.306299][T28916] binder: 28915:28916 ioctl 8933 2000000002c0 returned -22 [ 1041.486559][T28918] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 1041.652391][T28921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.661419][T28921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.449236][T27661] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1042.566329][T28928] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7409'. [ 1042.626089][T22360] Bluetooth: hci2: command 0x0406 tx timeout [ 1043.545881][T28939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1043.555344][T28939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1043.621048][T28942] openvswitch: netlink: Actions may not be safe on all matching packets [ 1043.898355][T28947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7417'. [ 1044.090345][T28949] binder: 28948:28949 ioctl c0306201 0 returned -14 [ 1044.176839][T28949] binder: 28948:28949 ioctl 8933 2000000002c0 returned -22 [ 1044.636232][T28966] macsec1: entered promiscuous mode [ 1044.642785][T28966] macsec1: entered allmulticast mode [ 1044.657709][T28966] loop8: detected capacity change from 0 to 7 [ 1044.702334][T28966] loop8: [CUMANA/ADFS] p1 [Linux] p2 [ADFS] p1 [Linux] p2 [ 1044.717734][T28966] loop8: partition table partially beyond EOD, truncated [ 1044.723026][T28966] loop8: p1 size 1905483274 extends beyond EOD, truncated [ 1044.734278][T28966] loop8: p2 start 121280928 is beyond EOD, truncated [ 1045.070330][ T50] usb 11-1: new high-speed USB device number 41 using dummy_hcd [ 1045.173496][T28980] binder: 28979:28980 ioctl c0306201 0 returned -14 [ 1045.199830][T28980] binder: 28979:28980 ioctl 8933 2000000002c0 returned -22 [ 1045.216472][T28982] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7430'. [ 1045.227505][ T50] usb 11-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.233107][ T50] usb 11-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1045.239851][ T50] usb 11-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1045.249877][ T50] usb 11-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1045.256158][ T50] usb 11-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1045.264084][ T50] usb 11-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1045.281144][ T50] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1045.293605][ T50] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.303660][ T50] usb 11-1: Product: syz [ 1045.305048][ T50] usb 11-1: Manufacturer: syz [ 1045.313051][ T50] usb 11-1: SerialNumber: syz [ 1045.327136][ T50] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 1045.334308][ T50] ti_usb_3410_5052 11-1:2.0: missing endpoints [ 1045.385669][ T42] audit: type=1400 audit(1787036680.896:8661): avc: denied { accept } for pid=28984 comm="syz.9.7432" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1045.528859][ T149] usb 11-1: USB disconnect, device number 41 [ 1045.706136][T28991] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 1045.805520][T28991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1045.807693][T28991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1045.812386][T28991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1045.814339][T28991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1045.820091][T28991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1045.822800][T28991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1045.835774][T28991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1045.837917][T28991] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1046.436065][T28991] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1046.768600][T29006] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 1047.693068][T29020] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7443'. [ 1048.151871][ T50] usb 14-1: new high-speed USB device number 25 using dummy_hcd [ 1048.314208][ T50] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.324403][ T50] usb 14-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1048.334864][ T50] usb 14-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1048.345713][ T50] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.361914][ T50] usb 14-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1048.366391][ T50] usb 14-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1048.377444][ T50] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1048.380665][ T50] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1048.388228][ T50] usb 14-1: Product: syz [ 1048.389618][ T50] usb 14-1: Manufacturer: syz [ 1048.396266][ T50] usb 14-1: SerialNumber: syz [ 1048.405351][ T50] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 1048.425955][ T50] ti_usb_3410_5052 14-1:2.0: missing endpoints [ 1048.610612][ T50] usb 14-1: USB disconnect, device number 25 [ 1049.315749][T29027] binder: 29026:29027 ioctl c0306201 0 returned -14 [ 1049.356149][T29027] binder: 29026:29027 ioctl 8933 2000000002c0 returned -22 [ 1050.566776][ T42] audit: type=1400 audit(1787036686.073:8662): avc: denied { unmount } for pid=24870 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 1050.767321][T29056] netlink: 'syz.0.7456': attribute type 2 has an invalid length. [ 1050.897023][T29060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7457'. [ 1051.016107][ T50] usb 14-1: new high-speed USB device number 26 using dummy_hcd [ 1051.185596][ T50] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.189491][ T50] usb 14-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1051.199543][ T50] usb 14-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1051.211394][ T50] usb 14-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.220109][ T50] usb 14-1: config 2 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1051.231866][ T50] usb 14-1: config 2 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1051.251840][ T50] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1051.260759][ T50] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.269247][ T50] usb 14-1: Product: syz [ 1051.271020][ T50] usb 14-1: Manufacturer: syz [ 1051.275129][ T50] usb 14-1: SerialNumber: syz [ 1051.285641][ T50] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 1051.293667][ T50] ti_usb_3410_5052 14-1:2.0: missing endpoints [ 1051.423584][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1051.485211][ T50] usb 14-1: USB disconnect, device number 26 [ 1051.862583][T29067] binder: 29066:29067 ioctl c0306201 0 returned -14 [ 1051.867668][T29067] binder: 29066:29067 ioctl 8933 2000000002c0 returned -22 [ 1051.942759][ T42] audit: type=1400 audit(1787036687.443:8663): avc: denied { write } for pid=29068 comm="syz.2.7461" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1052.165505][ T42] audit: type=1400 audit(1787036687.633:8664): avc: denied { ioctl } for pid=29068 comm="syz.2.7461" path="/dev/input/mice" dev="devtmpfs" ino=940 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1052.321479][T29075] CIFS: Attempting to mount //1#7.0.0.1/Ë7̀/Đä…¯»—yshare [ 1052.397765][T29075] CIFS: VFS: Error connecting to socket. Aborting operation. [ 1052.404258][T29075] CIFS: VFS: cifs_mount failed w/return code = -111 [ 1052.679254][T29085] netlink: 'syz.6.7469': attribute type 2 has an invalid length. [ 1052.701813][T29088] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7466'. [ 1052.758429][T29088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1052.860818][T29086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7467'. [ 1053.133236][T29098] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7472'. [ 1053.195613][T12351] usb 11-1: new high-speed USB device number 42 using dummy_hcd [ 1053.269129][T29102] binder: 29101:29102 ioctl c0306201 0 returned -14 [ 1053.275508][T29102] binder: 29101:29102 ioctl 8933 2000000002c0 returned -22 [ 1053.365861][T12351] usb 11-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.371397][T12351] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1053.382056][T12351] usb 11-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1053.390802][T12351] usb 11-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1053.423972][T12351] usb 11-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1053.434689][T12351] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1053.448259][T12351] usb 11-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1053.464339][T12351] usb 11-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1053.486323][T12351] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1053.501205][T12351] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1053.523691][T12351] usb 11-1: Product: syz [ 1053.532818][T12351] usb 11-1: Manufacturer: syz [ 1053.542547][T12351] usb 11-1: SerialNumber: syz [ 1053.553528][T12351] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 1053.567599][T12351] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1053.583956][T12351] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1053.759483][T29093] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1053.781113][ T50] usb 11-1: USB disconnect, device number 42 [ 1053.795158][ T50] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1053.816246][ T50] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1053.834792][ T50] ti_usb_3410_5052 11-1:2.0: device disconnected [ 1054.407299][T29124] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7482'. [ 1054.556543][T29129] binder: 29128:29129 ioctl c0306201 0 returned -14 [ 1054.562797][T29129] binder: 29128:29129 ioctl 8933 2000000002c0 returned -22 [ 1054.826778][T29133] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7486'. [ 1056.089935][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 1069.534462][T22360] Bluetooth: hci3: command 0x2016 tx timeout [ 1075.807622][T27660] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1091.756970][ C2] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1109.699629][ T5754] Bluetooth: hci1: command 0x0406 tx timeout [ 1117.379968][ C3] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1119.806253][ T1446] ieee802154 phy0 wpan0: encryption failed: -22 [ 1124.380112][T27661] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1136.209436][ T9714] SELinux: failure in sel_netif_sid_slow(), invalid network interface (11) [ 1136.686995][ T5754] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1136.836813][T29171] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1136.862934][T29171] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1136.875132][T29171] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1136.878268][T29171] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1136.880769][T29171] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1136.884889][T29171] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1136.914855][T29171] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1136.918262][T29171] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1136.939842][T29173] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1136.942929][T29172] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1136.963323][T29173] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1137.031423][T29171] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1137.043332][T29171] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1137.047444][T29171] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1137.053069][T29171] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1137.118768][T29171] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1137.144506][T29171] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1137.147758][T29171] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1137.150455][T29171] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1138.982574][T29171] Bluetooth: hci2: command tx timeout [ 1139.137629][T29171] Bluetooth: hci6: command tx timeout [ 1139.217494][ T5754] Bluetooth: hci4: command tx timeout [ 1139.225469][T29171] Bluetooth: hci5: command tx timeout [ 1140.599692][T29167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1140.607204][T29167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.612131][T29167] bridge_slave_0: entered allmulticast mode [ 1140.617277][T29167] bridge_slave_0: entered promiscuous mode [ 1140.625266][T29167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1140.629799][T29167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1140.634408][T29167] bridge_slave_1: entered allmulticast mode [ 1140.639716][T29167] bridge_slave_1: entered promiscuous mode [ 1140.753619][T29167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1140.761805][T29167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1140.839201][T29167] team0: Port device team_slave_0 added [ 1140.842674][T29167] team0: Port device team_slave_1 added [ 1140.883540][T29167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1140.885976][T29167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.894353][T29167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1140.916325][T29167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1140.918790][T29167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1140.926818][T29167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.045289][T29167] hsr_slave_0: entered promiscuous mode [ 1141.047790][T29167] hsr_slave_1: entered promiscuous mode [ 1141.051027][T29167] debugfs: 'hsr0' already exists in 'hsr' [ 1141.052913][T29167] Cannot create hsr debugfs directory [ 1141.064594][T29164] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.067128][T29164] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.069581][ T5754] Bluetooth: hci2: command tx timeout [ 1141.077289][T29164] bridge_slave_0: entered allmulticast mode [ 1141.082389][T29164] bridge_slave_0: entered promiscuous mode [ 1141.107668][T29168] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.110357][T29168] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.112716][T29168] bridge_slave_0: entered allmulticast mode [ 1141.115441][T29168] bridge_slave_0: entered promiscuous mode [ 1141.118722][T29164] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.120999][T29164] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.123265][T29164] bridge_slave_1: entered allmulticast mode [ 1141.126676][T29164] bridge_slave_1: entered promiscuous mode [ 1141.133919][T29168] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.136404][T29168] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.139173][T29168] bridge_slave_1: entered allmulticast mode [ 1141.141977][T29168] bridge_slave_1: entered promiscuous mode [ 1141.205418][T29168] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.212678][T29164] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.218348][ T5754] Bluetooth: hci6: command tx timeout [ 1141.228063][T29163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1141.231537][T29163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1141.234360][T29163] bridge_slave_0: entered allmulticast mode [ 1141.237223][T29163] bridge_slave_0: entered promiscuous mode [ 1141.241744][T29168] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.257510][T29164] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.277830][T29163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1141.281179][T29163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1141.284351][T29163] bridge_slave_1: entered allmulticast mode [ 1141.288225][T29163] bridge_slave_1: entered promiscuous mode [ 1141.301967][T29171] Bluetooth: hci5: command tx timeout [ 1141.310863][ T5754] Bluetooth: hci4: command tx timeout [ 1141.341965][T29168] team0: Port device team_slave_0 added [ 1141.345449][T29164] team0: Port device team_slave_0 added [ 1141.349455][T29164] team0: Port device team_slave_1 added [ 1141.362877][T29168] team0: Port device team_slave_1 added [ 1141.383879][T29163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1141.406082][T29163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1141.415532][T29164] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.418289][T29164] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.426674][T29164] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.441335][T29168] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1141.443697][T29168] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.451764][T29168] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1141.455874][T29164] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.459937][T29164] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.467826][T29164] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.483100][T29163] team0: Port device team_slave_0 added [ 1141.485398][T29168] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1141.488123][T29168] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1141.496757][T29168] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1141.509578][T29163] team0: Port device team_slave_1 added [ 1142.202385][T29163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1142.206755][T29163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.237978][T29163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1142.250182][T29163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1142.255260][T29163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1142.278902][T29163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1142.434494][T29168] hsr_slave_0: entered promiscuous mode [ 1142.438190][T29168] hsr_slave_1: entered promiscuous mode [ 1142.442097][T29168] debugfs: 'hsr0' already exists in 'hsr' [ 1142.443862][T29168] Cannot create hsr debugfs directory [ 1142.450835][T29164] hsr_slave_0: entered promiscuous mode [ 1142.453260][T29164] hsr_slave_1: entered promiscuous mode [ 1142.455502][T29164] debugfs: 'hsr0' already exists in 'hsr' [ 1142.457736][T29164] Cannot create hsr debugfs directory [ 1142.464510][T29163] hsr_slave_0: entered promiscuous mode [ 1142.466935][T29163] hsr_slave_1: entered promiscuous mode [ 1142.469400][T29163] debugfs: 'hsr0' already exists in 'hsr' [ 1142.471509][T29163] Cannot create hsr debugfs directory [ 1143.139329][ T5754] Bluetooth: hci2: command tx timeout [ 1143.309496][ T5754] Bluetooth: hci6: command tx timeout [ 1143.379622][ T5754] Bluetooth: hci4: command tx timeout [ 1143.379895][T29171] Bluetooth: hci5: command tx timeout [ 1143.591076][ T5789] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.705165][ T5789] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.819857][ T5789] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1143.964909][ T5789] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1144.188955][ T5789] bridge_slave_1: left allmulticast mode [ 1144.191877][ T5789] bridge_slave_1: left promiscuous mode [ 1144.194545][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1144.201207][ T5789] bridge_slave_0: left allmulticast mode [ 1144.203705][ T5789] bridge_slave_0: left promiscuous mode [ 1144.206311][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1144.217137][ T5789] pim6reg: left allmulticast mode [ 1144.403813][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1144.423205][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1144.429215][ T5789] bond0 (unregistering): Released all slaves [ 1144.439166][ T5789] bond1 (unregistering): Released all slaves [ 1144.600935][ T5789] tipc: Left network mode [ 1144.944799][ T5789] hsr_slave_0: left promiscuous mode [ 1144.947065][ T5789] hsr_slave_1: left promiscuous mode [ 1144.949627][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1144.952299][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1144.955059][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1144.957825][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.971366][ T5789] veth1_macvtap: left promiscuous mode [ 1144.973679][ T5789] veth0_macvtap: left promiscuous mode [ 1144.975743][ T5789] veth1_vlan: left promiscuous mode [ 1144.977449][ T5789] veth0_vlan: left promiscuous mode [ 1145.170095][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1145.184389][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1145.230422][T29171] Bluetooth: hci2: command tx timeout [ 1145.390768][T29171] Bluetooth: hci6: command tx timeout [ 1145.460530][T29171] Bluetooth: hci4: command tx timeout [ 1145.461294][ T5754] Bluetooth: hci5: command tx timeout [ 1145.797782][ T5789] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.923025][ T5789] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1145.982983][ T5789] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.138678][ T5789] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.175869][T29167] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1146.194342][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.200213][T29167] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1146.209253][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.215890][T29167] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1146.237162][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.240128][T29167] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1146.244589][T29167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.515165][T29168] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1146.527645][T29168] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.532156][T29168] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1146.538169][T29168] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.560012][T29168] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1146.572344][T29168] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.576311][T29168] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1146.582626][T29168] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1146.753198][ T5789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.759523][ T5789] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.859732][T29163] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1146.866462][T29163] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1146.879987][T29163] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1146.892211][T29163] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1146.895779][T29163] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1146.900185][T29163] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1146.970948][ T5789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1146.975307][ T5789] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1146.996402][T29163] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1147.001710][T29163] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1147.092095][T29167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.159182][ T5789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.162672][ T5789] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.225292][T29167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.268228][ T5789] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1147.272343][ T5789] netdevsim netdevsim2 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.282533][T29164] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1147.287939][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1147.295290][T29168] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.298347][T29164] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1147.308581][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1147.314313][T29164] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1147.323801][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1147.328358][T27670] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.331359][T27670] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.344761][T29164] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1147.349327][T29164] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1147.380562][ T7557] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.385429][ T7557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.413289][T29168] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.440409][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.442797][T15844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.467693][T15844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1147.470027][T15844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1147.490833][T29163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1147.555787][T29163] 8021q: adding VLAN 0 to HW filter on device team0 [ 1147.571345][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1147.573689][T15844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1147.580700][ T5789] bridge_slave_1: left allmulticast mode [ 1147.583423][ T5789] bridge_slave_1: left promiscuous mode [ 1147.585265][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.589043][ T5789] bridge_slave_0: left promiscuous mode [ 1147.590979][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.616325][ T5789] mac80211_hwsim hwsim53 wlan1: left allmulticast mode [ 1147.620291][ T5789] mac80211_hwsim hwsim53 wlan1: left promiscuous mode [ 1147.626195][ T5789] bridge0: port 3(wlan1) entered disabled state [ 1147.630821][ T5789] bridge_slave_1: left allmulticast mode [ 1147.633401][ T5789] bridge_slave_1: left promiscuous mode [ 1147.635939][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1147.640805][ T5789] bridge_slave_0: left allmulticast mode [ 1147.648665][ T5789] bridge_slave_0: left promiscuous mode [ 1147.651169][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1147.851208][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1147.858267][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1147.864632][ T5789] bond0 (unregistering): Released all slaves [ 1148.036668][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1148.044403][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1148.048425][ T5789] bond0 (unregistering): Released all slaves [ 1148.054137][ T5789] bond1 (unregistering): Released all slaves [ 1148.088939][T15844] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.091208][T15844] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.102092][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1148.240761][T29164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1148.302401][T29164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1148.341706][T15844] bridge0: port 1(bridge_slave_0) entered blocking state [ 1148.344769][T15844] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1148.395415][T27653] bridge0: port 2(bridge_slave_1) entered blocking state [ 1148.398471][T27653] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.549742][T29164] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1148.751415][T29168] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1148.775320][T29167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.027182][T29167] veth0_vlan: entered promiscuous mode [ 1149.038048][T29167] veth1_vlan: entered promiscuous mode [ 1149.048790][T29163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.146671][T29164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1149.153670][T29167] veth0_macvtap: entered promiscuous mode [ 1149.186500][T29167] veth1_macvtap: entered promiscuous mode [ 1149.261541][T29167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1149.287128][T29167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1149.291503][T29163] veth0_vlan: entered promiscuous mode [ 1149.315864][ T5789] hsr_slave_0: left promiscuous mode [ 1149.318249][ T5789] hsr_slave_1: left promiscuous mode [ 1149.320513][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.324711][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.327594][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.330111][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.340629][ T5789] hsr_slave_0: left promiscuous mode [ 1149.344327][ T5789] hsr_slave_1: left promiscuous mode [ 1149.346528][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1149.349105][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1149.352970][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.355451][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.403337][ T5789] veth1_macvtap: left promiscuous mode [ 1149.405742][ T5789] veth0_macvtap: left promiscuous mode [ 1149.408087][ T5789] veth1_vlan: left promiscuous mode [ 1149.410204][ T5789] veth0_vlan: left promiscuous mode [ 1149.414830][ T5789] veth1_macvtap: left promiscuous mode [ 1149.417206][ T5789] veth0_macvtap: left promiscuous mode [ 1149.419756][ T5789] veth1_vlan: left promiscuous mode [ 1149.422007][ T5789] veth0_vlan: left promiscuous mode [ 1149.677926][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1149.685136][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1149.935222][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1149.947516][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1150.100668][T29168] veth0_vlan: entered promiscuous mode [ 1150.111391][T29163] veth1_vlan: entered promiscuous mode [ 1150.145713][T29168] veth1_vlan: entered promiscuous mode [ 1150.299856][T29163] veth0_macvtap: entered promiscuous mode [ 1150.315831][ T7557] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.318531][T29163] veth1_macvtap: entered promiscuous mode [ 1150.319174][ T7557] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.371553][T15844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.374373][T15844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.383308][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.386588][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.394958][T29164] veth0_vlan: entered promiscuous mode [ 1150.403084][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.414567][T29164] veth1_vlan: entered promiscuous mode [ 1150.420040][T29163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.443431][ T5817] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.455164][T29168] veth0_macvtap: entered promiscuous mode [ 1150.481053][T29163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.515764][T29168] veth1_macvtap: entered promiscuous mode [ 1150.533486][T29316] netlink: 'syz.1.7495': attribute type 2 has an invalid length. [ 1150.555574][T29164] veth0_macvtap: entered promiscuous mode [ 1150.573193][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1150.602628][T29164] veth1_macvtap: entered promiscuous mode [ 1150.613974][T29168] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.714547][T29323] binder: 29322:29323 ioctl c0306201 0 returned -14 [ 1150.718466][T29323] binder: 29322:29323 ioctl 8933 2000000002c0 returned -22 [ 1150.734210][T29168] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1150.825930][T27653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.830876][T27653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.843033][T29164] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1150.924984][T27660] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1150.927817][T27660] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1150.942341][T29164] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.009099][ T5817] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.017484][ T5817] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.025271][T29327] 0x000000000000-0x000000020000 : "" [ 1151.147129][T29327] ftl_cs: FTL header not found. [ 1151.182817][ T5817] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.207285][T29267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.232757][T27660] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.238555][T27660] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.326804][ T5817] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.353806][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.499668][T15844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.502727][T15844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.528176][T27670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.536676][T27670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.553596][ T5817] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.559883][ T5817] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.608546][T15844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1151.611902][T29340] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7494'. [ 1151.622191][T15844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1151.653684][T29267] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.658336][T29267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.668913][T29267] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1151.762108][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1151.765868][T29348] netlink: 'syz.4.7503': attribute type 30 has an invalid length. [ 1151.786364][T29348] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7503'. [ 1151.795458][T29348] netlink: 'syz.4.7503': attribute type 30 has an invalid length. [ 1151.804198][T29267] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.812986][T29267] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.822470][T29350] gadgetfs: bound to dummy_udc driver [ 1151.833955][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.837250][T29350] net_ratelimit: 67 callbacks suppressed [ 1151.837265][T29350] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1151.842809][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1151.951412][ T5818] usb 12-1: new high-speed USB device number 76 using dummy_hcd [ 1152.001482][T29354] binder_alloc: 29353: binder_alloc_buf size 8 failed, no address space [ 1152.014808][T29354] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1152.024781][T29354] binder: 29353:29354 ioctl c0306201 2000000001c0 returned -14 [ 1152.025242][ T42] audit: type=1400 audit(1787036787.483:8665): avc: denied { watch } for pid=29355 comm="syz.3.7505" path="/3/file0" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 1152.030192][T29356] mac80211_hwsim hwsim70 »»»»»»: renamed from wlan0 (while UP) [ 1152.057010][T29349] gadgetfs: suspended from state 2 [ 1152.083930][ T9714] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 1152.130640][ T5818] usb 12-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.138231][ T5818] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1152.151342][T29358] binder: 29357:29358 ioctl c0306201 0 returned -14 [ 1152.156592][ T5818] usb 12-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1152.175009][ T5818] usb 12-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1152.177145][T29358] binder: 29357:29358 ioctl 8933 2000000002c0 returned -22 [ 1152.182329][T29362] xt_limit: Overflow, try lower: 271964/0 [ 1152.182612][ T5818] usb 12-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.182651][ T5818] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1152.182669][ T5818] usb 12-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1152.182687][ T5818] usb 12-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1152.184910][ T5818] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1152.210419][ T5818] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.213706][ T5818] usb 12-1: Product: syz [ 1152.216327][ T5818] usb 12-1: Manufacturer: syz [ 1152.218252][ T5818] usb 12-1: SerialNumber: syz [ 1152.226998][ T5818] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 1152.232971][ T5818] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1152.240069][ T5818] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1152.297504][T29365] macvlan0: entered allmulticast mode [ 1152.300998][T29365] veth1_vlan: entered allmulticast mode [ 1152.309752][T29366] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7511'. [ 1152.365094][T29368] xt_connbytes: Forcing CT accounting to be enabled [ 1152.401619][T29373] jffs2: notice: (29373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1152.408818][ T42] audit: type=1400 audit(1787036787.872:8666): avc: denied { write } for pid=29372 comm="syz.4.7514" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1152.432311][T29346] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1152.436703][T29143] usb 12-1: USB disconnect, device number 76 [ 1152.457347][T29143] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1152.463357][T29143] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1152.467747][T29143] ti_usb_3410_5052 12-1:2.0: device disconnected [ 1152.492264][T29380] gadgetfs: bound to dummy_udc driver [ 1152.501849][T29380] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1152.575866][T29384] binder_alloc: 29383: binder_alloc_buf size 8 failed, no address space [ 1152.585812][T29384] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1152.594025][T29384] binder: 29383:29384 ioctl c0306201 2000000001c0 returned -14 [ 1152.828177][T29396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7524'. [ 1153.010686][T29406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7529'. [ 1153.027404][T29410] gadgetfs: bound to dummy_udc driver [ 1153.041537][T29410] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 1153.072130][T29406] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7529'. [ 1153.262579][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7531'. [ 1153.266042][T29416] netlink: 'syz.7.7531': attribute type 30 has an invalid length. [ 1153.288367][T29416] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7531'. [ 1153.291417][T29416] netlink: 'syz.7.7531': attribute type 30 has an invalid length. [ 1153.301332][T29422] binder_alloc: 29421: binder_alloc_buf size 8 failed, no address space [ 1153.308297][T29422] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1153.336219][ T5817] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.348570][ T5817] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.359520][ T5817] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.370571][ T5817] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.551557][T29436] mac80211_hwsim hwsim74 »»»»»»: renamed from wlan0 (while UP) [ 1153.704644][ T9714] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1153.880604][ T9714] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.884046][ T9714] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1153.896033][ T9714] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1153.901757][ T9714] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1153.912125][ T9714] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 1153.917187][ T9714] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1153.924664][ T9714] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1153.930278][ T9714] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1153.942517][ T9714] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1153.952209][ T9714] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.964678][ T9714] usb 6-1: Product: syz [ 1153.966234][ T9714] usb 6-1: Manufacturer: syz [ 1153.968344][ T9714] usb 6-1: SerialNumber: syz [ 1153.983265][ T9714] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 1153.994296][ T9714] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1154.004095][ T9714] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1154.180986][T29431] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1154.187328][ T9714] usb 6-1: USB disconnect, device number 2 [ 1154.211600][ T9714] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1154.255793][ T9714] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1154.268979][ T9714] ti_usb_3410_5052 6-1:2.0: device disconnected [ 1154.314756][T29485] binder_alloc: 29484: binder_alloc_buf size 8 failed, no address space [ 1154.320220][T29485] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1154.397227][T29487] vcan1: entered allmulticast mode [ 1154.400577][T29487] ipt_ECN: cannot use operation on non-tcp rule [ 1154.493711][ T5150] pmem0: [POWERTEC] [ 1154.634075][T29497] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7553'. [ 1154.848658][T29511] jffs2: notice: (29511) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1154.862826][ T42] audit: type=1400 audit(1787036790.311:8667): avc: denied { write } for pid=29510 comm="syz.7.7557" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1154.929385][T29522] xt_limit: Overflow, try lower: 271964/0 [ 1154.962959][T29526] netlink: 'syz.4.7563': attribute type 4 has an invalid length. [ 1154.972301][T29528] binder: 29527:29528 ioctl c0306201 0 returned -14 [ 1154.981945][T29528] binder: 29527:29528 ioctl 8933 2000000002c0 returned -22 [ 1155.113839][T29537] binder_alloc: 29536: binder_alloc_buf size 8 failed, no address space [ 1155.125254][T29537] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1155.189974][T29542] jffs2: notice: (29542) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1155.218264][ T42] audit: type=1400 audit(1787036790.681:8668): avc: denied { write } for pid=29540 comm="syz.1.7569" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1155.304759][T29369] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1155.370909][T29555] binder: 29553:29555 ioctl c0306201 0 returned -14 [ 1155.373537][T29555] binder: 29553:29555 ioctl 8933 2000000002c0 returned -22 [ 1155.376663][T29554] netlink: 'syz.3.7573': attribute type 4 has an invalid length. [ 1155.423266][T29561] xt_connbytes: Forcing CT accounting to be enabled [ 1155.462959][T29565] tmpfs: Bad value for 'mpol' [ 1155.463006][T29566] tmpfs: Bad value for 'mpol' [ 1155.794881][T29580] binder: 29579:29580 ioctl c0306201 0 returned -14 [ 1155.799149][T29580] binder: 29579:29580 ioctl 8933 2000000002c0 returned -22 [ 1155.817030][T29583] xt_limit: Overflow, try lower: 271964/0 [ 1155.961392][T29596] jffs2: notice: (29596) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1155.974135][ T42] audit: type=1400 audit(1787036791.431:8669): avc: denied { write } for pid=29594 comm="syz.4.7591" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1156.129404][T29610] binder: 29609:29610 ioctl c0306201 0 returned -14 [ 1156.138229][T29610] binder: 29609:29610 ioctl 8933 2000000002c0 returned -22 [ 1156.139747][T29616] xt_limit: Overflow, try lower: 271964/0 [ 1156.308846][T29628] binder_alloc: 29627: binder_alloc_buf size 8 failed, no address space [ 1156.313668][T29628] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1156.314659][T29630] xt_connbytes: Forcing CT accounting to be enabled [ 1156.397056][T29634] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1156.455002][T29639] binder: 29638:29639 ioctl c0306201 0 returned -14 [ 1156.461447][T29639] binder: 29638:29639 ioctl 8933 2000000002c0 returned -22 [ 1156.805064][ T9714] playstation 0003:054C:05C4.0012: hidraw1: USB HID v0.01 Device [syz1] on syz1 [ 1156.813549][ T9714] playstation 0003:054C:05C4.0012: Failed to retrieve feature with reportID 18: -5 [ 1156.817377][ T9714] playstation 0003:054C:05C4.0012: Failed to retrieve DualShock4 pairing info: -5 [ 1156.820575][ T9714] playstation 0003:054C:05C4.0012: Failed to get MAC address from DualShock4 [ 1156.823387][ T9714] playstation 0003:054C:05C4.0012: Failed to create dualshock4. [ 1156.836852][ T9714] playstation 0003:054C:05C4.0012: probe with driver playstation failed with error -5 [ 1156.890701][T29663] jffs2: notice: (29663) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1156.900905][ T42] audit: type=1400 audit(1787036792.360:8670): avc: denied { write } for pid=29662 comm="syz.3.7613" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1157.151846][T29696] binder_alloc: 29695: binder_alloc_buf size 8 failed, no address space [ 1157.154591][T29696] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1157.201915][T29702] xt_limit: Overflow, try lower: 271964/0 [ 1157.253938][T29704] jffs2: notice: (29704) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1157.272139][ T42] audit: type=1400 audit(1787036792.730:8671): avc: denied { write } for pid=29703 comm="syz.7.7624" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1157.489088][T29719] __nla_validate_parse: 1 callbacks suppressed [ 1157.489105][T29719] netlink: 36 bytes leftover after parsing attributes in process `syz.7.7629'. [ 1157.506524][T20967] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1157.611990][T29723] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.614557][T29723] binder: 29722:29723 ioctl 4018620d 200000000100 returned -16 [ 1157.618339][T29723] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.622044][T29723] binder: 29722:29723 ioctl 4018620d 200000000100 returned -16 [ 1157.631195][T29723] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.633801][T29723] binder: 29722:29723 ioctl 4018620d 200000000100 returned -16 [ 1157.638727][T29723] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.641561][T29723] binder: 29722:29723 ioctl 4018620d 200000000100 returned -16 [ 1157.644858][T29723] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.648137][T29723] binder: 29722:29723 ioctl 4018620d 200000000100 returned -16 [ 1157.651895][T29723] binder: BINDER_SET_CONTEXT_MGR already set [ 1157.654481][T29723] binder: 29722:29723 ioctl 4018620d 200000000100 returned -16 [ 1157.668357][T20967] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1157.675002][T20967] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 1157.682946][T20967] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1157.687134][T20967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.690569][T20967] usb 6-1: Product: syz [ 1157.692311][T20967] usb 6-1: Manufacturer: syz [ 1157.699337][T20967] usb 6-1: SerialNumber: syz [ 1157.713303][T20967] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 1157.728200][T20967] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1157.734591][T20967] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1157.814555][T29742] jffs2: notice: (29742) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1157.822549][ T42] audit: type=1400 audit(1787036793.280:8672): avc: denied { write } for pid=29741 comm="syz.7.7636" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1157.840238][T29745] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7637'. [ 1157.905784][ T42] audit: type=1400 audit(1787036793.360:8673): avc: denied { write } for pid=29744 comm="syz.3.7637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 1157.906356][T29753] program syz.4.7641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1157.919358][T29706] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1157.929843][T20967] usb 6-1: USB disconnect, device number 3 [ 1157.964507][T20967] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1157.974998][T20967] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1157.988352][T29758] fuse: root generation should be zero [ 1157.990835][T20967] ti_usb_3410_5052 6-1:2.0: device disconnected [ 1157.997343][T29759] binder: 29757:29759 ioctl c0306201 0 returned -14 [ 1158.001776][T29759] binder: 29757:29759 ioctl 8933 2000000002c0 returned -22 [ 1158.072539][T29764] ext2: Unknown parameter 'discar¿' [ 1158.168594][T29770] jffs2: notice: (29770) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1158.175206][ T42] audit: type=1400 audit(1787036793.629:8674): avc: denied { write } for pid=29769 comm="syz.4.7648" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1158.435881][T29781] netlink: 'syz.4.7652': attribute type 1 has an invalid length. [ 1158.446689][T29781] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7652'. [ 1158.493858][ T42] audit: type=1400 audit(1787036793.949:8675): avc: denied { lock } for pid=29780 comm="syz.4.7652" path="socket:[149469]" dev="sockfs" ino=149469 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1158.574913][ T5817] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.583411][ T5817] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1158.743351][T29793] CacheFiles: Failed to register: -95 [ 1158.766227][T29799] binder_alloc: 29798: binder_alloc_buf size 8 failed, no address space [ 1158.774402][T29799] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1158.922543][ T5817] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1158.926134][ T5817] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.184340][T29812] xt_hashlimit: size too large, truncated to 1048576 [ 1159.204241][ T5817] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.214066][ T5817] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.261518][T29822] jffs2: notice: (29822) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1159.286671][ T42] audit: type=1400 audit(1787036794.739:8676): avc: denied { write } for pid=29821 comm="syz.7.7666" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.311317][T17178] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 1159.385745][T29833] binder: 29832:29833 ioctl c0306201 0 returned -14 [ 1159.391499][ T5817] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1159.392429][T29833] binder: 29832:29833 ioctl 8933 2000000002c0 returned -22 [ 1159.407212][ T5817] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.472392][T17178] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1159.478398][T17178] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1159.484783][T17178] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1159.489231][T17178] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.492512][T17178] usb 9-1: Product: syz [ 1159.494236][T17178] usb 9-1: Manufacturer: syz [ 1159.496027][T17178] usb 9-1: SerialNumber: syz [ 1159.526739][T17178] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 1159.538529][T17178] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1159.567973][T17178] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1159.624947][T29849] netlink: 'syz.1.7675': attribute type 2 has an invalid length. [ 1159.726606][T29854] jffs2: notice: (29854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1159.744091][T29807] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1159.749417][ T42] audit: type=1400 audit(1787036795.199:8677): avc: denied { write } for pid=29852 comm="syz.3.7678" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1159.750447][T17178] usb 9-1: USB disconnect, device number 9 [ 1159.778994][T17178] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1159.784194][T17178] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1159.789203][T17178] ti_usb_3410_5052 9-1:2.0: device disconnected [ 1159.925972][T29868] binder_alloc: 29867: binder_alloc_buf size 8 failed, no address space [ 1159.929154][T29868] binder_alloc: allocated: 12288 (num: 1 largest: 12288), free: 0 (num: 0 largest: 0) [ 1160.020145][ T42] audit: type=1400 audit(1787036795.479:8678): avc: denied { write } for pid=29870 comm="syz.7.7686" name="/" dev="9p" ino=76832905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1160.069962][T29879] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20004 [ 1160.072223][T17178] IPVS: starting estimator thread 0... [ 1160.180094][T29880] IPVS: using max 26 ests per chain, 62400 per kthread [ 1160.233694][ T5817] bond0 (unregistering): Released all slaves [ 1160.239319][ T5817] bond1 (unregistering): Released all slaves [ 1160.247057][ T5817] bond2 (unregistering): Released all slaves [ 1160.404233][T29887] binder: 29885:29887 ioctl c0306201 0 returned -14 [ 1160.411737][T29887] binder: 29885:29887 ioctl 8933 2000000002c0 returned -22 [ 1160.460082][ T5754] Bluetooth: hci5: ISO packet for unknown connection handle 3743 [ 1160.480424][T29893] jffs2: notice: (29893) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1160.494735][ T42] audit: type=1400 audit(1787036795.948:8679): avc: denied { write } for pid=29892 comm="syz.4.7693" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1160.772944][T29914] binder: 29913:29914 ioctl c0306201 0 returned -14 [ 1160.773354][T29914] binder: 29913:29914 ioctl 8933 2000000002c0 returned -22 [ 1160.841599][ T5817] hsr_slave_0: left promiscuous mode [ 1160.844022][ T5817] hsr_slave_1: left promiscuous mode [ 1160.852447][ T5817] veth1_macvtap: left promiscuous mode [ 1160.852506][ T5817] veth0_macvtap: left promiscuous mode [ 1160.852564][ T5817] veth1_vlan: left promiscuous mode [ 1160.852598][ T5817] veth0_vlan: left promiscuous mode [ 1160.880344][T29920] jffs2: notice: (29920) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1160.895128][ T42] audit: type=1400 audit(1787036796.338:8680): avc: denied { write } for pid=29919 comm="syz.4.7706" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1161.333127][T29949] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7715'. [ 1161.450283][T29953] netlink: 16 bytes leftover after parsing attributes in process `syz.7.7715'. [ 1161.544005][T29963] jffs2: notice: (29963) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1161.620414][T29970] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7721'. [ 1161.623406][T29970] netlink: del zone limit has 8 unknown bytes [ 1161.634085][T29971] jffs2: notice: (29971) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1161.764518][T29983] xt_limit: Overflow, try lower: 271964/0 [ 1161.778301][T29979] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1161.784425][T29979] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7725'. [ 1161.991105][ T5817] IPVS: stop unused estimator thread 0... [ 1162.037050][T29993] jffs2: notice: (29993) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1162.152707][T29999] Cannot find set identified by id 0 to match [ 1162.355450][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 1162.355464][ T42] audit: type=1400 audit(1787036797.757:8686): avc: denied { setcurrent } for pid=30004 comm="syz.1.7736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 1162.370014][ T42] audit: type=1401 audit(1787036797.807:8687): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 1162.539046][ T9627] usb 12-1: new high-speed USB device number 77 using dummy_hcd [ 1162.641527][T30019] jffs2: notice: (30019) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1162.652652][ T42] audit: type=1400 audit(1787036798.107:8688): avc: denied { write } for pid=30017 comm="syz.4.7741" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1162.700831][T30024] syzkaller0: entered promiscuous mode [ 1162.701698][ T9627] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1162.703010][T30024] syzkaller0: entered allmulticast mode [ 1162.711583][ T9627] usb 12-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1162.720639][ T9627] usb 12-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 1162.721111][T30024] tipc: Started in network mode [ 1162.725006][ T9627] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.725157][T30024] tipc: Node identity 56cc350eafaa, cluster identity 4711 [ 1162.733197][T30024] tipc: Enabled bearer , priority 0 [ 1162.739196][ T9627] usb 12-1: Product: syz [ 1162.741344][ T9627] usb 12-1: Manufacturer: syz [ 1162.744014][ T9627] usb 12-1: SerialNumber: syz [ 1162.751451][T30023] tipc: Resetting bearer [ 1162.751684][ T9627] ti_usb_3410_5052 12-1:2.0: TI USB 5052 2 port adapter converter detected [ 1162.778142][T30023] tipc: Disabling bearer [ 1162.782247][ T9627] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 1162.789748][ T9627] usb 12-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 1162.902003][T30035] xt_limit: Overflow, try lower: 271964/0 [ 1162.954382][T30006] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 1162.957086][T30039] netlink: 'syz.1.7750': attribute type 1 has an invalid length. [ 1162.961087][T17178] usb 12-1: USB disconnect, device number 77 [ 1162.977819][T17178] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 1162.995140][T17178] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 1163.004618][T17178] ti_usb_3410_5052 12-1:2.0: device disconnected [ 1163.025953][T30039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7750'. [ 1163.031476][T30039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1163.041505][T30039] bridge1: entered promiscuous mode [ 1163.060539][T30039] bond1: (slave bridge1): making interface the new active one [ 1163.066692][T30039] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1163.132815][T30039] bridge2: entered promiscuous mode [ 1163.143122][T30039] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 1164.577830][T30097] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7771'. [ 1164.811861][T30111] 9p: Bad value for 'rq' [ 1165.177645][T30131] FAULT_INJECTION: forcing a failure. [ 1165.177645][T30131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1165.183153][T30131] CPU: 2 UID: 0 PID: 30131 Comm: syz.7.7784 Tainted: G L syzkaller #0 PREEMPT(full) [ 1165.183180][T30131] Tainted: [L]=SOFTLOCKUP [ 1165.183186][T30131] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1165.183212][T30131] Call Trace: [ 1165.183237][T30131] [ 1165.183244][T30131] dump_stack_lvl+0x100/0x190 [ 1165.183338][T30131] should_fail_ex.cold+0x5/0xa [ 1165.183368][T30131] _copy_from_user+0x2e/0xd0 [ 1165.183424][T30131] get_timespec64+0x8d/0x240 [ 1165.183459][T30131] ? __pfx_get_timespec64+0x10/0x10 [ 1165.183478][T30131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1165.183548][T30131] __x64_sys_ppoll+0x189/0x350 [ 1165.183584][T30131] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1165.183600][T30131] ? ksys_write+0x1ac/0x250 [ 1165.183615][T30131] ? __pfx_ksys_write+0x10/0x10 [ 1165.183637][T30131] do_syscall_64+0x115/0x870 [ 1165.183657][T30131] ? clear_bhb_loop+0x40/0x90 [ 1165.183678][T30131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.183695][T30131] RIP: 0033:0x7f84c739e0d9 [ 1165.183711][T30131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1165.183726][T30131] RSP: 002b:00007f84c8249028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1165.183763][T30131] RAX: ffffffffffffffda RBX: 00007f84c7625fa0 RCX: 00007f84c739e0d9 [ 1165.183774][T30131] RDX: 0000200000000240 RSI: 0000000000000001 RDI: 00002000000001c0 [ 1165.183785][T30131] RBP: 00007f84c8249090 R08: 0000000000000000 R09: 0000000000000000 [ 1165.183795][T30131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1165.183805][T30131] R13: 00007f84c7626038 R14: 00007f84c7625fa0 R15: 00007ffd0c3d6548 [ 1165.183827][T30131] [ 1165.531620][T30144] jffs2: notice: (30144) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1165.542244][ T42] audit: type=1400 audit(1787036800.996:8689): avc: denied { write } for pid=30143 comm="syz.7.7790" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1165.967060][T30156] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7795'. [ 1165.975442][T30156] tipc: Invalid UDP bearer configuration [ 1165.975496][T30156] tipc: Enabling of bearer rejected, failed to enable media [ 1165.998323][T30158] xt_connbytes: Forcing CT accounting to be enabled [ 1166.124298][T30165] netlink: 'syz.7.7799': attribute type 2 has an invalid length. [ 1166.187534][T30167] jffs2: notice: (30167) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1166.218862][ T42] audit: type=1400 audit(1787036801.665:8690): avc: denied { write } for pid=30166 comm="syz.7.7800" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1166.455182][T30187] FAULT_INJECTION: forcing a failure. [ 1166.455182][T30187] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1166.459487][T30187] CPU: 0 UID: 0 PID: 30187 Comm: syz.1.7807 Tainted: G L syzkaller #0 PREEMPT(full) [ 1166.459506][T30187] Tainted: [L]=SOFTLOCKUP [ 1166.459510][T30187] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1166.459522][T30187] Call Trace: [ 1166.459541][T30187] [ 1166.459546][T30187] dump_stack_lvl+0x100/0x190 [ 1166.459662][T30187] should_fail_ex.cold+0x5/0xa [ 1166.459683][T30187] _copy_to_user+0x32/0xd0 [ 1166.459722][T30187] simple_read_from_buffer+0xcb/0x170 [ 1166.459753][T30187] proc_fail_nth_read+0x1af/0x230 [ 1166.459778][T30187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1166.459795][T30187] ? rw_verify_area+0xce/0x6d0 [ 1166.459812][T30187] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1166.459828][T30187] vfs_read+0x1e4/0xb40 [ 1166.459847][T30187] ? __pfx_vfs_read+0x10/0x10 [ 1166.459863][T30187] ? __fget_files+0x215/0x3d0 [ 1166.459877][T30187] ? __fget_files+0x21f/0x3d0 [ 1166.459892][T30187] ksys_read+0x12a/0x250 [ 1166.459909][T30187] ? __pfx_ksys_read+0x10/0x10 [ 1166.459929][T30187] do_syscall_64+0x115/0x870 [ 1166.459973][T30187] ? clear_bhb_loop+0x40/0x90 [ 1166.459987][T30187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.459998][T30187] RIP: 0033:0x7efe82d5e90e [ 1166.460008][T30187] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1166.460019][T30187] RSP: 002b:00007efe80ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1166.460047][T30187] RAX: ffffffffffffffda RBX: 00007efe80ff66c0 RCX: 00007efe82d5e90e [ 1166.460054][T30187] RDX: 000000000000000f RSI: 00007efe80ff60a0 RDI: 0000000000000004 [ 1166.460060][T30187] RBP: 00007efe80ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1166.460067][T30187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1166.460073][T30187] R13: 00007efe83026038 R14: 00007efe83025fa0 R15: 00007fff39574678 [ 1166.460087][T30187] [ 1166.652286][T30197] jffs2: notice: (30197) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1166.670757][ T42] audit: type=1400 audit(1787036802.115:8691): avc: denied { write } for pid=30196 comm="syz.7.7812" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1166.754771][ T42] audit: type=1400 audit(1787036802.205:8692): avc: denied { write } for pid=30206 comm="syz.7.7816" name="/" dev="configfs" ino=3097 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 1166.979438][T30223] mac80211_hwsim hwsim68 »»»»»»: renamed from wlan0 (while UP) [ 1167.033653][T30229] jffs2: notice: (30229) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1167.048353][ T42] audit: type=1400 audit(1787036802.495:8693): avc: denied { write } for pid=30228 comm="syz.3.7825" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1167.101611][T30237] FAULT_INJECTION: forcing a failure. [ 1167.101611][T30237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1167.113319][T30240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7829'. [ 1167.115533][T30237] CPU: 3 UID: 0 PID: 30237 Comm: syz.4.7827 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.115555][T30237] Tainted: [L]=SOFTLOCKUP [ 1167.115560][T30237] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1167.115566][T30237] Call Trace: [ 1167.115571][T30237] [ 1167.115575][T30237] dump_stack_lvl+0x100/0x190 [ 1167.115595][T30237] should_fail_ex.cold+0x5/0xa [ 1167.115611][T30237] _copy_from_iter+0x1f4/0x1690 [ 1167.115632][T30237] ? __pfx__copy_from_iter+0x10/0x10 [ 1167.115649][T30237] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1167.115672][T30237] copy_page_from_iter+0x238/0x300 [ 1167.115691][T30237] tun_build_skb.constprop.0+0x2ea/0x18f0 [ 1167.115755][T30237] ? __pfx_tun_build_skb.constprop.0+0x10/0x10 [ 1167.115767][T30237] ? unwind_get_return_address+0x59/0xa0 [ 1167.115799][T30237] ? arch_stack_walk+0xa6/0xf0 [ 1167.115826][T30237] ? _kstrtoull+0x13c/0x1f0 [ 1167.115837][T30237] ? __pfx__kstrtoull+0x10/0x10 [ 1167.115851][T30237] tun_get_user+0x16d6/0x3c20 [ 1167.115869][T30237] ? __pfx_tun_get_user+0x10/0x10 [ 1167.115891][T30237] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1167.115920][T30237] ? find_held_lock+0x2b/0x80 [ 1167.115932][T30237] ? tun_get+0x191/0x370 [ 1167.115942][T30237] ? tun_get+0x191/0x370 [ 1167.115956][T30237] tun_chr_write_iter+0xdc/0x200 [ 1167.115970][T30237] vfs_write+0x6ac/0x1050 [ 1167.115989][T30237] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1167.116007][T30237] ? __pfx_vfs_write+0x10/0x10 [ 1167.116024][T30237] ? find_held_lock+0x2b/0x80 [ 1167.116043][T30237] ksys_write+0x12a/0x250 [ 1167.116053][T30237] ? __pfx_ksys_write+0x10/0x10 [ 1167.116067][T30237] do_syscall_64+0x115/0x870 [ 1167.116083][T30237] ? clear_bhb_loop+0x40/0x90 [ 1167.116097][T30237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.116109][T30237] RIP: 0033:0x7fc74d55e90e [ 1167.116120][T30237] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.116131][T30237] RSP: 002b:00007fc74e509fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.116144][T30237] RAX: ffffffffffffffda RBX: 00007fc74e50a6c0 RCX: 00007fc74d55e90e [ 1167.116152][T30237] RDX: 000000000000007e RSI: 0000200000000300 RDI: 00000000000000c8 [ 1167.116158][T30237] RBP: 00007fc74e50a090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.116165][T30237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.116172][T30237] R13: 00007fc74d826038 R14: 00007fc74d825fa0 R15: 00007ffc54965298 [ 1167.116186][T30237] [ 1167.167081][T30247] netlink: 664 bytes leftover after parsing attributes in process `syz.4.7831'. [ 1167.266518][T30257] jffs2: notice: (30257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1167.288189][ T42] audit: type=1400 audit(1787036802.735:8694): avc: denied { write } for pid=30253 comm="syz.3.7836" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1167.359171][T30271] fuse: Bad value for 'fd' [ 1167.404451][T30277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1167.413522][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1167.444644][T30277] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1167.454640][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.455192][T30277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7843'. [ 1167.458214][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.458239][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.458259][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1167.490826][T30285] iommufd_mock iommufd_mock0: Adding to iommu group 4 [ 1167.496763][T30284] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7845'. [ 1167.641380][T30301] fuse: Bad value for 'fd' [ 1167.701613][ T42] audit: type=1400 audit(1787036803.145:8695): avc: denied { read } for pid=30292 comm="syz.4.7847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 1167.707682][T30308] jffs2: notice: (30308) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1167.723908][ T42] audit: type=1400 audit(1787036803.175:8696): avc: denied { write } for pid=30307 comm="syz.1.7855" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1167.743335][T30311] FAULT_INJECTION: forcing a failure. [ 1167.743335][T30311] name failslab, interval 1, probability 0, space 0, times 0 [ 1167.748395][T30311] CPU: 3 UID: 0 PID: 30311 Comm: syz.3.7856 Tainted: G L syzkaller #0 PREEMPT(full) [ 1167.748423][T30311] Tainted: [L]=SOFTLOCKUP [ 1167.748429][T30311] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1167.748440][T30311] Call Trace: [ 1167.748447][T30311] [ 1167.748455][T30311] dump_stack_lvl+0x100/0x190 [ 1167.748485][T30311] should_fail_ex.cold+0x5/0xa [ 1167.748509][T30311] should_failslab+0xc2/0x120 [ 1167.748531][T30311] kmem_cache_alloc_noprof+0x91/0x6a0 [ 1167.748555][T30311] ? dst_alloc+0x99/0x1a0 [ 1167.748621][T30311] ? __pfx_ip6_dst_gc+0x10/0x10 [ 1167.748659][T30311] dst_alloc+0x99/0x1a0 [ 1167.748681][T30311] ip6_pol_route+0x9fd/0x1310 [ 1167.748706][T30311] ? __pfx_ip6_pol_route+0x10/0x10 [ 1167.748729][T30311] ? ip6t_do_table+0xbed/0x1c90 [ 1167.748749][T30311] ? __local_bh_enable_ip+0x9e/0x120 [ 1167.748785][T30311] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1167.748808][T30311] fib6_rule_lookup+0x52f/0x720 [ 1167.748830][T30311] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1167.748852][T30311] ? __pfx_ip6t_do_table+0x10/0x10 [ 1167.748875][T30311] ? nf_nat_ipv6_fn+0xff/0x2d0 [ 1167.748902][T30311] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1167.748926][T30311] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1167.748953][T30311] ip6_route_input+0x662/0xc50 [ 1167.748978][T30311] ? __pfx_ip6_route_input+0x10/0x10 [ 1167.749002][T30311] ? find_held_lock+0x2b/0x80 [ 1167.749016][T30311] ? nf_hook.constprop.0+0x2d9/0x750 [ 1167.749048][T30311] ? udp_v6_early_demux+0x4a8/0xfd0 [ 1167.749069][T30311] ip6_rcv_finish_core.isra.0+0x1b1/0x1260 [ 1167.749099][T30311] ipv6_rcv+0x1e8/0x3d0 [ 1167.749122][T30311] ? __pfx_ipv6_rcv+0x10/0x10 [ 1167.749161][T30311] __netif_receive_skb_one_core+0x12d/0x1e0 [ 1167.749183][T30311] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1167.749204][T30311] ? lock_acquire+0x1b9/0x370 [ 1167.749230][T30311] __netif_receive_skb+0x1f/0x120 [ 1167.749251][T30311] netif_receive_skb+0x139/0x7d0 [ 1167.749270][T30311] ? __pfx_netif_receive_skb+0x10/0x10 [ 1167.749296][T30311] tun_rx_batched.isra.0+0x3f6/0x750 [ 1167.749329][T30311] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 1167.749361][T30311] ? tun_get_user+0x1cc8/0x3c20 [ 1167.749384][T30311] tun_get_user+0x1e31/0x3c20 [ 1167.749412][T30311] ? __pfx_tun_get_user+0x10/0x10 [ 1167.749432][T30311] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1167.749468][T30311] ? find_held_lock+0x2b/0x80 [ 1167.749484][T30311] ? tun_get+0x191/0x370 [ 1167.749499][T30311] ? tun_get+0x191/0x370 [ 1167.749523][T30311] tun_chr_write_iter+0xdc/0x200 [ 1167.749543][T30311] vfs_write+0x6ac/0x1050 [ 1167.749571][T30311] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1167.749598][T30311] ? __pfx_vfs_write+0x10/0x10 [ 1167.749622][T30311] ? find_held_lock+0x2b/0x80 [ 1167.749653][T30311] ksys_write+0x12a/0x250 [ 1167.749684][T30311] ? __pfx_ksys_write+0x10/0x10 [ 1167.749707][T30311] do_syscall_64+0x115/0x870 [ 1167.749730][T30311] ? clear_bhb_loop+0x40/0x90 [ 1167.749752][T30311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1167.749769][T30311] RIP: 0033:0x7f3a5375e90e [ 1167.749784][T30311] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1167.749801][T30311] RSP: 002b:00007f3a54672fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1167.749820][T30311] RAX: ffffffffffffffda RBX: 00007f3a546736c0 RCX: 00007f3a5375e90e [ 1167.749852][T30311] RDX: 000000000000007e RSI: 0000200000000300 RDI: 00000000000000c8 [ 1167.749861][T30311] RBP: 00007f3a54673090 R08: 0000000000000000 R09: 0000000000000000 [ 1167.749870][T30311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1167.749880][T30311] R13: 00007f3a53a26038 R14: 00007f3a53a25fa0 R15: 00007fffbbc7de78 [ 1167.749904][T30311] [ 1167.998729][T30325] fuse: Bad value for 'fd' [ 1168.081304][T30335] jffs2: notice: (30335) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1168.093189][ T42] audit: type=1400 audit(1787036803.535:8697): avc: denied { write } for pid=30334 comm="syz.3.7868" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1168.138828][T30345] FAULT_INJECTION: forcing a failure. [ 1168.138828][T30345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1168.143455][T30345] CPU: 2 UID: 0 PID: 30345 Comm: syz.1.7869 Tainted: G L syzkaller #0 PREEMPT(full) [ 1168.143474][T30345] Tainted: [L]=SOFTLOCKUP [ 1168.143478][T30345] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1168.143485][T30345] Call Trace: [ 1168.143489][T30345] [ 1168.143494][T30345] dump_stack_lvl+0x100/0x190 [ 1168.143513][T30345] should_fail_ex.cold+0x5/0xa [ 1168.143528][T30345] _copy_to_user+0x32/0xd0 [ 1168.143545][T30345] simple_read_from_buffer+0xcb/0x170 [ 1168.143559][T30345] proc_fail_nth_read+0x1af/0x230 [ 1168.143577][T30345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.143595][T30345] ? rw_verify_area+0xce/0x6d0 [ 1168.143610][T30345] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1168.143626][T30345] vfs_read+0x1e4/0xb40 [ 1168.143649][T30345] ? __pfx_vfs_read+0x10/0x10 [ 1168.143665][T30345] ? __fget_files+0x215/0x3d0 [ 1168.143679][T30345] ? __fget_files+0x21f/0x3d0 [ 1168.143694][T30345] ksys_read+0x12a/0x250 [ 1168.143711][T30345] ? __pfx_ksys_read+0x10/0x10 [ 1168.143731][T30345] do_syscall_64+0x115/0x870 [ 1168.143746][T30345] ? clear_bhb_loop+0x40/0x90 [ 1168.143759][T30345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1168.143771][T30345] RIP: 0033:0x7efe82d5e90e [ 1168.143781][T30345] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1168.143792][T30345] RSP: 002b:00007efe80ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1168.143804][T30345] RAX: ffffffffffffffda RBX: 00007efe80ff66c0 RCX: 00007efe82d5e90e [ 1168.143811][T30345] RDX: 000000000000000f RSI: 00007efe80ff60a0 RDI: 0000000000000004 [ 1168.143817][T30345] RBP: 00007efe80ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1168.143824][T30345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1168.143830][T30345] R13: 00007efe83026038 R14: 00007efe83025fa0 R15: 00007fff39574678 [ 1168.143844][T30345] [ 1168.751268][T30388] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 1168.975241][T30405] __nla_validate_parse: 1 callbacks suppressed [ 1168.975284][T30405] netlink: 112 bytes leftover after parsing attributes in process `syz.4.7896'. [ 1169.076520][T30410] program syz.4.7898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1169.343056][T30428] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1169.571308][T30437] jffs2: notice: (30437) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1169.578016][ T42] audit: type=1400 audit(1787036805.024:8698): avc: denied { write } for pid=30436 comm="syz.4.7915" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1169.970104][T30448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7911'. [ 1170.035449][T30460] jffs2: notice: (30460) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (3 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 1170.044233][ T42] audit: type=1400 audit(1787036805.494:8699): avc: denied { write } for pid=30458 comm="syz.4.7917" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 1170.092232][T30465] [ 1170.093302][T30465] ====================================================== [ 1170.096149][T30465] WARNING: possible circular locking dependency detected [ 1170.098994][T30465] syzkaller #0 Tainted: G L [ 1170.101516][T30465] ------------------------------------------------------ SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1170.102337][ T42] audit: type=1400 audit(1787036805.544:8700): avc: denied { write } for pid=5715 comm="syz-executor" path="pipe:[1584]" dev="pipefs" ino=1584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1170.104290][T30465] syz.1.7916/30465 is trying to acquire lock: [ 1170.104306][T30465] ffffffff90b4efe8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1170.104475][T30465] [ 1170.104475][T30465] but task is already holding lock: [ 1170.104482][T30465] ffff88803af90860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1170.104563][T30465] [ 1170.104563][T30465] which lock already depends on the new lock. [ 1170.104563][T30465] [ 1170.104570][T30465] [ 1170.104570][T30465] the existing dependency chain (in reverse order) is: [ 1170.104577][T30465] [ 1170.104577][T30465] -> #6 (&pipe->mutex){+.+.}-{4:4}: [ 1170.104627][T30465] lock_acquire+0x1b9/0x370 [ 1170.104668][T30465] __mutex_lock+0x1a4/0x1bd0 [ 1170.139618][T30465] pipe_lock+0x69/0x80 [ 1170.141540][T30465] iter_file_splice_write+0x1fd/0x10b0 [ 1170.143986][T30465] do_splice+0x109c/0x1f90 [ 1170.146029][T30465] __do_splice+0x33b/0x370 [ 1170.148068][T30465] __x64_sys_splice+0x187/0x250 [ 1170.150270][T30465] do_syscall_64+0x115/0x870 [ 1170.152360][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.154970][T30465] [ 1170.154970][T30465] -> #5 (sb_writers#6){.+.+}-{0:0}: [ 1170.157999][T30465] lock_acquire+0x1b9/0x370 [ 1170.160081][T30465] mnt_want_write+0x6f/0x410 [ 1170.162192][T30465] path_openat+0xad9/0x4280 [ 1170.163861][T30465] do_file_open+0x20e/0x430 [ 1170.165867][T30465] file_open_name+0x1c3/0x3e0 [ 1170.167991][T30465] filp_open+0x2e/0x50 [ 1170.169894][T30465] nvmet_file_ns_enable+0x95/0x420 [ 1170.172205][T30465] nvmet_ns_enable+0x35f/0x5d0 [ 1170.174435][T30465] nvmet_ns_enable_store+0x11e/0x160 [ 1170.176818][T30465] configfs_write_iter+0x302/0x4e0 [ 1170.179110][T30465] vfs_write+0x6ac/0x1050 [ 1170.181105][T30465] ksys_write+0x12a/0x250 [ 1170.183088][T30465] do_syscall_64+0x115/0x870 [ 1170.185173][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.187784][T30465] [ 1170.187784][T30465] -> #4 (&subsys->lock){+.+.}-{4:4}: [ 1170.190825][T30465] lock_acquire+0x1b9/0x370 [ 1170.192872][T30465] __mutex_lock+0x1a4/0x1bd0 [ 1170.194595][T30465] nvmet_ns_device_path_store+0x57/0x1c0 [ 1170.197087][T30465] configfs_write_iter+0x302/0x4e0 [ 1170.199424][T30465] vfs_write+0x6ac/0x1050 [ 1170.201422][T30465] ksys_write+0x12a/0x250 [ 1170.203431][T30465] do_syscall_64+0x115/0x870 [ 1170.205505][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.208084][T30465] [ 1170.208084][T30465] -> #3 (&p->frag_sem){++++}-{4:4}: [ 1170.211114][T30465] lock_acquire+0x1b9/0x370 [ 1170.213147][T30465] down_read+0x99/0x4c0 [ 1170.215003][T30465] configfs_read_iter+0x346/0x6f0 [ 1170.217269][T30465] __kernel_read+0x397/0xad0 [ 1170.219383][T30465] integrity_kernel_read+0x7e/0xb0 [ 1170.221709][T30465] ima_calc_file_hash_tfm+0x25e/0x350 [ 1170.224116][T30465] ima_calc_file_hash+0x1e3/0x380 [ 1170.225942][T30465] ima_collect_measurement+0x94f/0xb30 [ 1170.228366][T30465] process_measurement+0xdfe/0x2350 [ 1170.230678][T30465] ima_file_check+0xc3/0x110 [ 1170.232747][T30465] security_file_post_open+0xc4/0x210 [ 1170.235176][T30465] path_openat+0x985/0x4280 [ 1170.237224][T30465] do_file_open+0x20e/0x430 [ 1170.239344][T30465] do_sys_openat2+0x10f/0x1e0 [ 1170.241439][T30465] __x64_sys_openat+0x12d/0x210 [ 1170.243601][T30465] do_syscall_64+0x115/0x870 [ 1170.245687][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.248298][T30465] [ 1170.248298][T30465] -> #2 (&buffer->mutex){+.+.}-{4:4}: [ 1170.251323][T30465] lock_acquire+0x1b9/0x370 [ 1170.252937][T30465] __mutex_lock+0x1a4/0x1bd0 [ 1170.255090][T30465] configfs_read_iter+0x79/0x6f0 [ 1170.257289][T30465] __kernel_read+0x397/0xad0 [ 1170.259365][T30465] integrity_kernel_read+0x7e/0xb0 [ 1170.261653][T30465] ima_calc_file_hash_tfm+0x25e/0x350 [ 1170.264032][T30465] ima_calc_file_hash+0x1e3/0x380 [ 1170.266291][T30465] ima_collect_measurement+0x94f/0xb30 [ 1170.268665][T30465] process_measurement+0xdfe/0x2350 [ 1170.270970][T30465] ima_file_check+0xc3/0x110 [ 1170.273037][T30465] security_file_post_open+0xc4/0x210 [ 1170.275442][T30465] path_openat+0x985/0x4280 [ 1170.277486][T30465] do_file_open+0x20e/0x430 [ 1170.279541][T30465] do_sys_openat2+0x10f/0x1e0 [ 1170.281641][T30465] __x64_sys_openat+0x12d/0x210 [ 1170.283823][T30465] do_syscall_64+0x115/0x870 [ 1170.285932][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.288518][T30465] [ 1170.288518][T30465] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 1170.292029][T30465] lock_acquire+0x1b9/0x370 [ 1170.294141][T30465] __mutex_lock+0x1a4/0x1bd0 [ 1170.296236][T30465] process_measurement+0x5ab/0x2350 [ 1170.298565][T30465] ima_file_check+0xc3/0x110 [ 1170.300333][T30465] security_file_post_open+0xc4/0x210 [ 1170.302613][T30465] path_openat+0x985/0x4280 [ 1170.304677][T30465] do_file_open_root+0x2f6/0x5a0 [ 1170.306907][T30465] file_open_root+0x1c6/0x3f0 [ 1170.309012][T30465] kernel_read_file_from_path_initns+0x189/0x260 [ 1170.311773][T30465] _request_firmware+0x733/0x13c0 [ 1170.314047][T30465] request_firmware+0x35/0x50 [ 1170.316147][T30465] reg_reload_regdb+0x85/0x460 [ 1170.318330][T30465] genl_family_rcv_msg_doit+0x214/0x300 [ 1170.320790][T30465] genl_rcv_msg+0x560/0x800 [ 1170.322853][T30465] netlink_rcv_skb+0x159/0x420 [ 1170.324997][T30465] genl_rcv+0x28/0x40 [ 1170.326882][T30465] netlink_unicast+0x585/0x850 [ 1170.328561][T30465] netlink_sendmsg+0x8b0/0xda0 [ 1170.330754][T30465] ____sys_sendmsg+0xa4d/0xbe0 [ 1170.332915][T30465] ___sys_sendmsg+0x190/0x1e0 [ 1170.335015][T30465] __sys_sendmsg+0x160/0x210 [ 1170.337133][T30465] do_syscall_64+0x115/0x870 [ 1170.339256][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.341850][T30465] [ 1170.341850][T30465] -> #0 (cb_lock){++++}-{4:4}: [ 1170.344652][T30465] check_prev_add+0xeb/0xe60 [ 1170.346740][T30465] __lock_acquire+0x136c/0x1a40 [ 1170.348954][T30465] lock_acquire+0x1b9/0x370 [ 1170.351008][T30465] down_read+0x99/0x4c0 [ 1170.352935][T30465] genl_rcv+0x19/0x40 [ 1170.354780][T30465] netlink_unicast+0x585/0x850 [ 1170.356948][T30465] netlink_sendmsg+0x8b0/0xda0 [ 1170.359089][T30465] sock_sendmsg+0x394/0x410 [ 1170.361136][T30465] splice_to_socket+0xb3c/0x11a0 [ 1170.363065][T30465] do_splice+0x109c/0x1f90 [ 1170.364948][T30465] __do_splice+0x33b/0x370 [ 1170.366981][T30465] __x64_sys_splice+0x187/0x250 [ 1170.369153][T30465] do_syscall_64+0x115/0x870 [ 1170.371261][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.373860][T30465] [ 1170.373860][T30465] other info that might help us debug this: [ 1170.373860][T30465] [ 1170.377891][T30465] Chain exists of: [ 1170.377891][T30465] cb_lock --> sb_writers#6 --> &pipe->mutex [ 1170.377891][T30465] [ 1170.382589][T30465] Possible unsafe locking scenario: [ 1170.382589][T30465] [ 1170.385610][T30465] CPU0 CPU1 [ 1170.387725][T30465] ---- ---- [ 1170.389836][T30465] lock(&pipe->mutex); [ 1170.391565][T30465] lock(sb_writers#6); [ 1170.394276][T30465] lock(&pipe->mutex); [ 1170.396943][T30465] rlock(cb_lock); [ 1170.398539][T30465] [ 1170.398539][T30465] *** DEADLOCK *** [ 1170.398539][T30465] [ 1170.401454][T30465] 1 lock held by syz.1.7916/30465: [ 1170.403646][T30465] #0: ffff88803af90860 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 1170.407142][T30465] [ 1170.407142][T30465] stack backtrace: [ 1170.409570][T30465] CPU: 0 UID: 0 PID: 30465 Comm: syz.1.7916 Tainted: G L syzkaller #0 PREEMPT(full) [ 1170.409595][T30465] Tainted: [L]=SOFTLOCKUP [ 1170.409601][T30465] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 1170.409622][T30465] Call Trace: [ 1170.409640][T30465] [ 1170.409648][T30465] dump_stack_lvl+0x100/0x190 [ 1170.409681][T30465] print_circular_bug.cold+0x178/0x1c7 [ 1170.409708][T30465] check_noncircular+0x146/0x160 [ 1170.409731][T30465] check_prev_add+0xeb/0xe60 [ 1170.409751][T30465] __lock_acquire+0x136c/0x1a40 [ 1170.409773][T30465] lock_acquire+0x1b9/0x370 [ 1170.409792][T30465] ? genl_rcv+0x19/0x40 [ 1170.409811][T30465] ? __pfx___might_resched+0x10/0x10 [ 1170.409855][T30465] down_read+0x99/0x4c0 [ 1170.409878][T30465] ? genl_rcv+0x19/0x40 [ 1170.409895][T30465] ? __pfx_down_read+0x10/0x10 [ 1170.409916][T30465] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1170.409933][T30465] genl_rcv+0x19/0x40 [ 1170.409949][T30465] netlink_unicast+0x585/0x850 [ 1170.409967][T30465] ? __pfx_netlink_unicast+0x10/0x10 [ 1170.409987][T30465] netlink_sendmsg+0x8b0/0xda0 [ 1170.410005][T30465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.410023][T30465] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1170.410050][T30465] sock_sendmsg+0x394/0x410 [ 1170.410067][T30465] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1170.410085][T30465] ? __pfx_sock_sendmsg+0x10/0x10 [ 1170.410110][T30465] splice_to_socket+0xb3c/0x11a0 [ 1170.410135][T30465] ? __pfx_splice_to_socket+0x10/0x10 [ 1170.410154][T30465] ? futex_unqueue+0x13d/0x2c0 [ 1170.410178][T30465] ? inode_has_perm+0x16d/0x1d0 [ 1170.410205][T30465] ? bpf_lsm_file_permission+0x9/0x10 [ 1170.410231][T30465] ? security_file_permission+0x76/0x210 [ 1170.410251][T30465] ? rw_verify_area+0xce/0x6d0 [ 1170.410272][T30465] ? __pfx_splice_to_socket+0x10/0x10 [ 1170.410292][T30465] do_splice+0x109c/0x1f90 [ 1170.410311][T30465] ? __lock_acquire+0x49f/0x1a40 [ 1170.410332][T30465] ? __pfx_do_splice+0x10/0x10 [ 1170.410350][T30465] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 1170.410368][T30465] ? find_held_lock+0x2b/0x80 [ 1170.410384][T30465] __do_splice+0x33b/0x370 [ 1170.410403][T30465] ? __pfx___do_splice+0x10/0x10 [ 1170.410424][T30465] __x64_sys_splice+0x187/0x250 [ 1170.410444][T30465] do_syscall_64+0x115/0x870 [ 1170.410464][T30465] ? clear_bhb_loop+0x40/0x90 [ 1170.410482][T30465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.410499][T30465] RIP: 0033:0x7efe82d9e0d9 [ 1170.410515][T30465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.410532][T30465] RSP: 002b:00007efe80fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 1170.410561][T30465] RAX: ffffffffffffffda RBX: 00007efe83026090 RCX: 00007efe82d9e0d9 [ 1170.410572][T30465] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 1170.410582][T30465] RBP: 00007efe82e35024 R08: 0000000000003000 R09: 100000000000000d [ 1170.410594][T30465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1170.410605][T30465] R13: 00007efe83026128 R14: 00007efe83026090 R15: 00007fff39574678 [ 1170.410619][T30465] [ 1170.914325][ T5789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1170.919623][ T5789] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.005662][ T5789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.009103][ T5789] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.121968][ T5789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.127007][ T5789] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.268185][ T5789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1171.272485][ T5789] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1171.355315][ T5789] bridge_slave_1: left allmulticast mode [ 1171.357577][ T5789] bridge_slave_1: left promiscuous mode [ 1171.359804][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1171.364841][ T5789] bridge_slave_0: left allmulticast mode [ 1171.367122][ T5789] bridge_slave_0: left promiscuous mode [ 1171.369490][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1171.375249][ T5789] macvlan0: left allmulticast mode [ 1171.376968][ T5789] veth1_vlan: left allmulticast mode [ 1171.428248][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1171.446679][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1171.459385][ T5789] bond0 (unregistering): Released all slaves [ 1171.821111][ T5789] hsr_slave_0: left promiscuous mode [ 1171.825592][ T5789] hsr_slave_1: left promiscuous mode [ 1171.830305][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1171.833999][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1171.837599][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1171.840627][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1171.847302][ T5789] veth1_macvtap: left promiscuous mode [ 1171.849659][ T5789] veth0_macvtap: left promiscuous mode [ 1171.851962][ T5789] veth1_vlan: left promiscuous mode [ 1171.854335][ T5789] veth0_vlan: left promiscuous mode [ 1171.947593][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1171.954015][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1172.339922][ T5789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.343328][ T5789] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.392944][ T5789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.396355][ T5789] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.469364][ T5789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.472644][ T5789] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.582601][ T5789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.587096][ T5789] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.660722][ T5789] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.665097][ T5789] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.700608][ T5789] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.704935][ T5789] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.750132][ T5789] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.754347][ T5789] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.834597][ T5789] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1172.838922][ T5789] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.909263][ T5789] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1172.969589][ T5789] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.022439][ T5789] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.104330][ T5789] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1173.169554][ T5789] bridge_slave_1: left allmulticast mode [ 1173.171442][ T5789] bridge_slave_1: left promiscuous mode [ 1173.173306][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.176921][ T5789] bridge_slave_0: left allmulticast mode [ 1173.179369][ T5789] bridge_slave_0: left promiscuous mode [ 1173.181937][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.191234][ T5789] bridge_slave_1: left allmulticast mode [ 1173.195094][ T5789] bridge_slave_1: left promiscuous mode [ 1173.198076][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.202778][ T5789] bridge_slave_0: left allmulticast mode [ 1173.207671][ T5789] bridge_slave_0: left promiscuous mode [ 1173.209538][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.215023][ T5789] bridge_slave_1: left allmulticast mode [ 1173.216997][ T5789] bridge_slave_1: left promiscuous mode [ 1173.218814][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.221888][ T5789] bridge_slave_0: left allmulticast mode [ 1173.223696][ T5789] bridge_slave_0: left promiscuous mode [ 1173.226060][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.297305][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.301435][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.305286][ T5789] bond0 (unregistering): Released all slaves [ 1173.353310][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.358997][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.363669][ T5789] bond0 (unregistering): Released all slaves [ 1173.413075][ T5789] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 1173.416714][ T5789] bond1 (unregistering): (slave bridge1): the permanent HWaddr of slave - 9e:e5:88:f9:da:9f - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1173.424440][ T5789] bond1 (unregistering): (slave bridge2): making interface the new active one [ 1173.432018][ T5789] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1173.439703][ T5789] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1173.445861][ T5789] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1173.450663][ T5789] bond0 (unregistering): Released all slaves [ 1173.458042][ T5789] bond1 (unregistering): Released all slaves [ 1173.464581][ T5789] bond2 (unregistering): Released all slaves [ 1173.574636][ T5789] tipc: Left network mode [ 1174.013668][ T5789] hsr_slave_0: left promiscuous mode [ 1174.016627][ T5789] hsr_slave_1: left promiscuous mode [ 1174.019345][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.022478][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.026329][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.029524][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.036067][ T5789] hsr_slave_0: left promiscuous mode [ 1174.038952][ T5789] hsr_slave_1: left promiscuous mode [ 1174.041719][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.047323][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.051088][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.054306][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.061645][ T5789] hsr_slave_0: left promiscuous mode [ 1174.064518][ T5789] hsr_slave_1: left promiscuous mode [ 1174.067913][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1174.071154][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1174.075000][ T5789] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1174.078257][ T5789] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1174.090611][ T5789] veth1_macvtap: left promiscuous mode [ 1174.093074][ T5789] veth0_macvtap: left promiscuous mode [ 1174.095956][ T5789] veth1_vlan: left promiscuous mode [ 1174.098497][ T5789] veth0_vlan: left promiscuous mode [ 1174.101743][ T5789] veth1_macvtap: left promiscuous mode [ 1174.104197][ T5789] veth0_macvtap: left promiscuous mode [ 1174.107044][ T5789] veth1_vlan: left promiscuous mode [ 1174.109398][ T5789] veth0_vlan: left promiscuous mode [ 1174.112552][ T5789] veth1_macvtap: left promiscuous mode [ 1174.115274][ T5789] veth0_macvtap: left promiscuous mode [ 1174.117772][ T5789] veth1_vlan: left promiscuous mode [ 1174.119971][ T5789] veth0_vlan: left promiscuous mode [ 1174.322329][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1174.329216][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1174.461343][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1174.466370][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1174.530810][ T5789] team0 (unregistering): Port device team_slave_1 removed [ 1174.543229][ T5789] team0 (unregistering): Port device team_slave_0 removed [ 1175.501367][ T5789] IPVS: stop unused estimator thread 0...