last executing test programs: 3m56.731901196s ago: executing program 32 (id=192): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f779000f20e035000001000f22e066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x50}], 0x1, 0x43, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_io_uring_setup(0x18d7, &(0x7f00000003c0)={0x0, 0xb6d7, 0x2, 0xfffffffe, 0x25b}, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x3fffc, 0x180, 0x2, 0x0, 0xf5, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x8, 0x0, 0x45, 0xfffffffffffffffd, 0xbdb], 0x200000, 0x1c6017}) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m51.517521023s ago: executing program 3 (id=242): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r4 = dup(r3) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000040)='./file0\x00', r4}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000100)='./file0\x00', 0x0, 0x10}, 0x18) 3m51.342962713s ago: executing program 3 (id=243): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x0, 0x61, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x4, 0x7fff, 0x3, 0x400000000], 0x80a0000}) mount$overlay(0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m51.137179869s ago: executing program 3 (id=244): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m50.10869466s ago: executing program 3 (id=262): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2082, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) 3m50.076997546s ago: executing program 3 (id=263): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000340)={@val={0xa}, @void, @eth={@multicast, @random="9d3d93f9dc2b", @val={@val={0x88a8, 0x5, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0xffd}}, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \x00', 0x9c, 0x11, 0x0, @private0, @mcast2, {[], {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "f5256f784b2f3eb14db902f6e8af9bcf554dfb1db4f6de3ccda49fec1ba7b9ac", "8dcc8a965e7ef915f0974caef5bf907611fde498ba2769e287e812fc5bf19ae703ff9408d3c498f9fbcf9748bdeb5cd2", "f6677c05c0686e2268a61979ca21351c05190cd5eadfab5db3a73f12", {"c0b9efcafd122e03dccefeea1c521ef8", "808391032e3f8423b366895b9b610b03"}}}}}}}}}, 0xde) 3m49.315181079s ago: executing program 3 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='on\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)='0\x00', 0x2) write(r2, &(0x7f0000000040)='1\x00', 0x2) 3m49.267233603s ago: executing program 33 (id=272): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='auto\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000040)='on\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000040)='0\x00', 0x2) write(r2, &(0x7f0000000040)='1\x00', 0x2) 3m44.514514462s ago: executing program 0 (id=323): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) fsopen(0x0, 0x0) write(r3, &(0x7f00000005c0)='1', 0x1) 3m44.46441816s ago: executing program 0 (id=325): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd86", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c1", 0xda}], 0x1}}], 0x2, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3m44.385379078s ago: executing program 0 (id=327): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) close(0x3) 3m44.302451017s ago: executing program 0 (id=328): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x1102011, 0x4) 3m44.190300226s ago: executing program 0 (id=330): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m44.149422783s ago: executing program 0 (id=332): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001a40), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 3m36.786231598s ago: executing program 4 (id=419): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142bc00090ef83804919e1d9fb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2006, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080), 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) select(0x40, &(0x7f0000000400)={0x9, 0x3, 0x80000000, 0x0, 0x7, 0x201}, 0x0, 0x0, 0x0) 3m35.867593641s ago: executing program 4 (id=436): openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xffffffde, 0x318145a8, 0x0, 0xfffe, 0x2, 0xfffffff6, 0x0, 0x0, 0x8, 0x100}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40242, 0x1) close(r0) 3m35.765081569s ago: executing program 4 (id=438): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x200000c, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x3, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0xfffffffffffffe00, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r2, r3, 0x10000, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x26, 0x5, 0xffffffff8e040048, 0x0, 0xfffc, 0x8, 0xfffff5a3, 0x0, 0x0, 0x1, 0x10001}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004380)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa0, 0x0, 0x7, {{0x1000000000000002, 0x4, 0xfffffffffffffffe, 0x5, 0xfffffff8, 0x8003, {0x1000000002, 0x1, 0x5, 0x40000003, 0xfffffffffffffff7, 0x5, 0xfffffffb, 0x8, 0xfd55, 0x8000, 0x5, r2, 0x0, 0x1, 0xfffffdff}}, {0x0, 0x6}}}, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) 3m32.588241049s ago: executing program 4 (id=468): creat(&(0x7f0000000000)='file0\x00', 0x1ff) mkdir(&(0x7f0000000100)='my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) mount(&(0x7f0000000080)=@sr0, &(0x7f0000001080)='./file0\x00', 0x0, 0x81001, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r0, &(0x7f0000000f00)='file0', 0x5) 3m32.501925465s ago: executing program 4 (id=470): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000b31e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b857fb90f60000012cbd7000fbdbdf25de000000d60c00000000000000000001e000000200000000000000010000000000000004000000000a006080"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x0) 3m32.185365952s ago: executing program 4 (id=475): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3m32.137569752s ago: executing program 34 (id=475): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x0) 3m28.990256227s ago: executing program 35 (id=332): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, 0xd45, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r1}, &(0x7f0000001a40), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 2m44.664464852s ago: executing program 6 (id=925): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r1, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r3, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) 2m42.504943304s ago: executing program 6 (id=929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2c}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_open_dev$usbfs(0x0, 0xfffffffffffffffb, 0x48b01) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2m42.451219458s ago: executing program 6 (id=931): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x6, "152a44e3112c0000f5a82d86c200000000000000000000000000000800"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x4, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x8, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0x1, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x9, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x6, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x0, 0xe660, 0x4, 0x7, 0x101, 0x7fff, 0x1, 0x80000000, 0x4, 0x3, 0xe, 0xfffffffb, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0x4, 0x80003e, 0x8f, 0xceb8, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x2, 0x0, 0x5, 0x6, 0x8, 0x6, 0x1, 0x40], [0x1, 0xffff, 0x134, 0x7ffe, 0x9, 0xfffffff3, 0x129432e6, 0xcb, 0x6, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x0, 0x7, 0x5, 0x0, 0xe, 0x312, 0x74, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x3, 0x400, 0x5, 0x6, 0x7, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x100002, 0xa, 0x4, 0x9, 0x8, 0x800, 0x6, 0x7, 0x8002, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x80000003, 0x9, 0x48c93690, 0x42, 0x7], [0x400, 0x4, 0x0, 0x5, 0xfffffffe, 0xfffff76b, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x1, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x83, 0x80000003, 0x200009, 0x100003e7, 0x9, 0x5, 0x3, 0x2, 0xf38, 0x8, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x200, 0x80, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x207, 0x53cf697b, 0x4, 0x6, 0x9, 0x7, 0x2, 0x3, 0x7ff, 0xfffffffc, 0x2, 0x4, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x8, 0x8aaed, 0x4, 0x65], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0x20000ce7, 0x1ff, 0x2, 0xf58, 0x5, 0x3, 0x101, 0x10000, 0x6, 0x7ffe, 0x80000000, 0x200a620, 0x2, 0xc, 0x1, 0x4, 0x14c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x405, 0x8, 0x5, 0xee1, 0xfffff000, 0xffff, 0x3, 0x7f, 0x104, 0x9606, 0x7, 0x2, 0x4, 0x8006, 0x1, 0x0, 0x4, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7, 0x1, 0x6c1b, 0x2, 0x4, 0xb0b2748, 0x1, 0x1, 0x200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) close(0x4) 2m42.385351023s ago: executing program 6 (id=934): fsopen(0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x9, 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/fib_triestat\x00') preadv(r0, &(0x7f0000000540)=[{&(0x7f0000000040)=""/208, 0xd0}], 0x1, 0x2a, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 2m42.253844456s ago: executing program 6 (id=938): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m42.155755822s ago: executing program 6 (id=939): r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 2m40.161678019s ago: executing program 7 (id=959): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x24}}, 0x48040) 2m40.06529956s ago: executing program 7 (id=961): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x1, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2]}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x645, 0x9, 0xffffffffffffffff, 0x10000000, 0x10000, 0x3, 0x400004002004c2, 0x7ff, 0xfffffffffffffffe, 0x0, 0x404, 0x82, 0x3, 0xfffffffffffffff8, 0x6, 0x9], 0xeeee8000, 0x240456}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m39.889448645s ago: executing program 7 (id=963): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000054000/0x18000)=nil, 0x0, 0x0, 0x55, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x308000, 0x1000}, 0x20) 2m39.581728291s ago: executing program 7 (id=964): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) shutdown(r0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0xffff, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0x2, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0x80008071, 0x7, 0x6, 0xffffffff, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4004, 0x8, 0x200003ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x1, 0x8000012f, 0x8004, 0x5, 0xffff7fe3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x3, 0x5, 0xfc, 0x5, 0x1000003, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x7ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x0, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xc, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0xa, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120000, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x934, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) close(0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1) syz_open_dev$vim2m(0x0, 0x0, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 2m38.684062856s ago: executing program 7 (id=966): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8001, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m38.670120051s ago: executing program 7 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xa}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20004804) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004884) 2m26.287762514s ago: executing program 36 (id=939): r0 = socket$inet(0xa, 0x1, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0xfffffffffffffd31) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x7e}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 2m23.616306274s ago: executing program 37 (id=967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd21, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xc, 0xa}, {0x0, 0xfff1}, {0xfff2, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x20004804) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004884) 1m19.435261645s ago: executing program 9 (id=1838): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000140)="58ddb0", 0x3}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 1m19.422112216s ago: executing program 9 (id=1839): setitimer(0x0, &(0x7f0000000180)={{0x77359400}, {0x0, 0x2710}}, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000140)='./control\x00', 0x111) close(r0) r1 = inotify_init1(0x800) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) inotify_add_watch(r0, &(0x7f00000000c0)='./control\x00', 0x40000c17) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) rmdir(&(0x7f0000000100)='./control\x00') 1m19.296090074s ago: executing program 9 (id=1841): ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) r0 = openat$comedi(0xffffffffffffff9c, 0x0, 0x40400, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000240)={'das16m1\x00', [0x100, 0x9, 0x1, 0xfffffffe, 0x0, 0x7, 0x0, 0x20000004, 0x4, 0xa, 0x2, 0x8, 0x3, 0x0, 0x9, 0xffffffff, 0x3, 0x10008, 0x10006, 0x8, 0xa, 0x9, 0xbffffff9, 0x1000, 0x7f, 0x8, 0x4, 0x0, 0xf5c0, 0x7, 0x7]}) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x48, 0x0, 0x0, 0x2}) 1m19.281630273s ago: executing program 9 (id=1843): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) 1m19.243107473s ago: executing program 9 (id=1845): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000200)='./sys/kernel/tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/kernel/tracing/instances/A\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/kernel/tracing/instances/B\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000900)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000b00)='1\n\x00', 0x2) write(0xffffffffffffffff, &(0x7f0000000c00), 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) 1m18.740964746s ago: executing program 9 (id=1859): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x380, 0x8000000000000001) 1m3.715083876s ago: executing program 38 (id=1859): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x380, 0x8000000000000001) 3.764239331s ago: executing program 2 (id=3009): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x161442, 0xb6) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) 3.576323506s ago: executing program 2 (id=3010): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @remote}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 3.506150469s ago: executing program 5 (id=3011): r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000f00)=ANY=[@ANYBLOB="8500000008000000350000000000000085000000050000009500000000000000fed023000000c71adb30be7d75fa1f32f08a23ce3220b0cc9505d72768b8242dd90d17e4c52505756ca2b009546a0900000000000000d3df2bd87184446d165ae3939bbca322a415a98c8801000000000000800859362ed862b3c47fa8ce7c69adfd2f16af3a00000000000000000000009a317aa34f0c50f99eedac26048ab915e1be5aa845be00de14683ee4e859d65564a9c79d20e5a011e966388cd0bb39f45d6c508b8a0f7f2d48be0e2a8137c6741775428abf2ddfd2a473f5b271701e22f8cb42198906e1107fa780c435083cac323838727a606495803509f84729f3e8a2fbfb995f99b82df3b363a9cf6ba87fdfbf5a3dd0dde49b4193520e5e946687634c04000000000000bfbcd911eba0dee5e5ce6434f86fe82ee02f0e8e3173a97d85e232e584ace13387693614f3a7ef88709f4d552c7b3a7903e14dc418e58f3e98933b2c93fae25ec2dd190231e2531e1ffeff33676a4383a918cba3ad8318ea29f164563a42cdb596f255a251add2d2ae2fac0a0e7428e4bf07fc884be5721bdffe58c6a4b57014ce976ce8b9cddfa50175c53253d7659f0e88913d4fa7f37feb40337fada4363c0698510730725e23bdad60ceaeecfeeccc397565f204b82d6d4458d77a1b4abeadf350c21027d314237a9d448b82827ff3f29cc9b46c8fcfbb30d1fc18707c252b596cdbf4e77836adc1f59f9d1280333d135fdcdcee8eb817388666e02ff1b148b6bc3c283e71c0ad9c683c6bb6fea2d2d54af3ad488f0cc2e54a70c19ceac518adbe917652c34019d7478c716ab23d4a863b4dcd08d89f6cec674e9fd379d71e06357d207984e885ace8a0dbaffef403aff01d5f2f0e644b61cd8bd72a59f2d7cf67815aeb8761412d68c40dbed08b7eeda96b3856a519a71b83c19b2e8f88d92b66abec165663819a87e7cd8c082cb011051789c283eecfe08f0799f6c7023353b6d3af7177d6b56549616bfede82c598301c98b0420b1784b53238b39c0db1da864e593d45fd297e4d34e749bc737e0bcf36fd955a40124c00d40c3f21d26e6e276152412b4ef3f52dc416bb2d7463a93ee6c0b20c5749a44677a3c3a7aa9a47c7cd7bb52fbb2c8d63166f4ad1038f33258736b2224a66726f1fd4dce0eb6043a55fbdd341baba95cc5838a860068e0f3e73d992403455b03b25bd5414628d7325a6b25986666b336851d9c623c405bf608d4bd9347c83cb693aebab072be479705b0c6c9bb9728d131f8320b966898de1a16407692b57b6f7333eac0d2ed0a7a4457d9c70089fcf9aa553929a65777f3bbf6d0bdc6a11371a138c6d4b0fefc655716e4486f5c7a88e80b2fb0efb579333bef98ded75abfb982b1fb92f003a6aefb8bf25eacb848d8ed1c1162d000000000000000000000000e87dffd60f123527781805434d210bb72ac2c097c45b27dde4980bc85b43614d266a9d403c320f80646c7df8bdd1cf380000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f0000000700)="04d31fcd275bfc58188e699fa7c9", 0x0, 0x375, 0x0, 0x33, 0x0, &(0x7f0000000540)="9a4f1f796ecac0afa6efee7073e66f741b673e78b684388008a1374fed03c7508a50a9e6796dfd73facfb013a6322467a4a001", 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='measure func=FILE_CHECK ', 0x18) close(r2) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000080)={r5, 0x4}, &(0x7f00000000c0)=0x8) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x34343459, 0x68, 0xb, [{0x6, 0xd37e}, {0xdc5, 0x45}, {0x0, 0x5}, {0x8, 0x1ff}, {0x1000, 0xcb}, {0x5, 0x6}, {0x1, 0x80000001}, {0x8003, 0x8000}], 0x7, 0xa, 0x2, 0x2, 0x3}}) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a3000000000b4000000160a01040000000000000000010000000900010073797a30000000000900020073797a30000000008800038008000140000000007c0003801400010070696d7265670000000000000000000014000100626f6e64300000000000000000000000140001007866726d300000000000000000000000140001006e657464657673696d300000000000001400010076657468315f766972745f7769666900140001006970766c616e30000000000000000000dc000000180a0101000b00000000000001000000a00003800800014000000000080002400000000408008d030000091708000140000000007c0003801400010074756e6c300000000000000000000000140001006261746164763000000000000000000014000100627269646765aad5c7d776655f3000001400010070696d72656700000000005368e86d69cac87400766972745f77696669300000000000001400010076657468315f766972745f77696669000900010073797a30000000001c000380180003801400010067656e657665300000000000000000001400000010000100000000000000"], 0x1d8}}, 0x0) 3.46073606s ago: executing program 5 (id=3012): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x101, 0xfffd, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x32b28eade3f84e8b, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x7, 0x7, 0x4, 0x0, 0x6000, 0xd, r2, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0xd, {0x0, 0x6, 0xfffffffffffffffd, 0x200, 0x3, 0x0, 0x6, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0x4e}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) userfaultfd(0x80001) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x40081, 0x0) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0xd0, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xa, 0x80000006, 0x400}, 0x0, 0x0) 3.373387283s ago: executing program 2 (id=3014): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x80000003) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @random="246fd483a581", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a35f2", 0x14, 0x6, 0x0, @remote={0xfe, 0x50}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) 3.3396869s ago: executing program 2 (id=3016): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_usb_connect$uac3(0x4, 0xa6, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x499, 0x103c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x94, 0x3, 0x1, 0x3, 0xb0, 0xd, {0x8, 0xb, 0x2, 0x1, 0x1, 0x24, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x1, 0x10, 0x9}, [@cluster_info_segment={0x6, 0x20, 0x5, 0x0, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xb8, 0x5, 0x8, {0xa, 0x25, 0x25, 0xf3, 0x0, 0x81}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x2, 0x1, 0x80, 0x7, 0x7}, @as_header={0x17, 0x24, 0x1, 0x5, 0x6, 0x2, 0x1002, 0xfb, 0x9, 0x832a, 0xf}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe0, 0x5b, 0x6, {0xa, 0x25, 0x25, 0x659b, 0x37, 0x3}}}}}}}}]}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r6, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="760005"], 0x8) 3.339231113s ago: executing program 5 (id=3017): ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x81}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x3}, [@call, @map_val, @map_val={0x18, 0x7, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x88ac}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3d4}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}]}, 0x0}, 0x94) socket(0x10, 0x4, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) timerfd_create(0x3, 0x800) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000010c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="070008000000000000000200000014000180060001000200000008000300ac1414aaf311ec4cbe61b705e5a6d814412974"], 0x28}}, 0x0) 3.204271955s ago: executing program 5 (id=3018): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) shutdown(r0, 0x1) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0x8001, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x20080058) bpf$MAP_CREATE(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x1, @empty, 0x6}, 0x1c) 2.352864999s ago: executing program 5 (id=3027): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmmsg$inet6(r0, &(0x7f0000002d40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x2, @private0, 0x8}, 0x1c, 0x0, 0x0, &(0x7f00000017c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x100}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast2}}}], 0x40}}], 0x1, 0x801) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x804, 0x0, 0x3, 0x9}, 0x20) socket(0x18, 0x5, 0x400) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) socket$netlink(0x10, 0x3, 0x1) socket$kcm(0xa, 0x2, 0x73) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000340)={0x8, 'ipvlan1\x00', {'veth0_to_bond\x00'}, 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x14000883}, 0x20008000) 2.289496636s ago: executing program 8 (id=3028): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000680009030066eb000000000000000a"], 0x24}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c", 0x4a}, {&(0x7f00000002c0)="3ff4c86f802f433514a3288f2477d69278311d30", 0x14}], 0x2, 0x0, 0xfffffffffffffd3b, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.219807301s ago: executing program 5 (id=3029): syz_emit_ethernet(0x47, &(0x7f0000000180)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x5, 0x0, 0x3}, {0x8100, 0x2, 0x1, 0x4}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @source_quench={0x4, 0x0, 0x0, 0x0, {0x5, 0x4, 0x3, 0x25, 0x7, 0x67, 0xfffd, 0x3, 0x2, 0x0, @local, @remote}, 'f'}}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x100, 0x25dfdbfd, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x6048800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000a00)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e402010902"], 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x0, 0x0}, 0x10) 2.111630689s ago: executing program 8 (id=3030): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000300)=0x4, 0x4) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a0920", 0x41}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306", 0x77}], 0x3, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.862070765s ago: executing program 8 (id=3033): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x181440, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000003008500000017000000bf91000000000000b7020000010000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket(0x2, 0x80805, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmmsg(r2, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r4}, 0x80, &(0x7f0000000880)=[{&(0x7f0000000780)="0f871190cc7c8e29af51d0912bcd", 0xe}], 0x1}}], 0x1, 0x0) 1.632676558s ago: executing program 8 (id=3036): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000400)="f5"}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x98c, 0x4, 0x5, 0x0, 0x3e0, 0x3, 0x1, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1cd78784, 0x1000, 0x80000001, 0x5, 0x100}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.341658564s ago: executing program 8 (id=3042): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0x9, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 833.988819ms ago: executing program 1 (id=3046): ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x6, 0x6, 0xc, "faf98357e5128bbad0099cebdc25f5abb534464c516bdd8a0f350000000000000000000000000000000000000100", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b41000000050000000000001000", [0x6, 0x12000000000003]}}) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac", 0x53}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e02801", 0x4d}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b9", 0xe2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x57, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 788.007745ms ago: executing program 1 (id=3047): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{0x0}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0xfe12) getsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r4}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x7ffffffd, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 644.216396ms ago: executing program 1 (id=3048): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 449.877846ms ago: executing program 1 (id=3049): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, 0x0, 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 303.785752ms ago: executing program 1 (id=3050): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x48, 0x0, &(0x7f0000000380)=[@register_looper, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000400)="f5"}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'pim6reg1\x00'}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private2}]}, 0x44}}, 0x8004) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000280)={0x0, 0x98c, 0x4, 0x5, 0x0, 0x3e0, 0x3, 0x1, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x1cd78784, 0x1000, 0x80000001, 0x5, 0x100}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 290.039467ms ago: executing program 8 (id=3051): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="350d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, 0x0, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="010000000600"], 0x50) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x839, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x1, 0x2}, {0xd, 0x10}, {0x1, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x0) 200.714032ms ago: executing program 1 (id=3052): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0xfffffffe, @loopback, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="91", 0x1}], 0x1}, 0x48043) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0x18, 0x20}, 0x20) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="30000000100001000000000000000071ff9aee24", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000006000008001b"], 0x30}, 0x1, 0x0, 0x0, 0x4004000}, 0x40080) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2a}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000300)={0x7, 0x1b, 0x3}, 0xffffff96) splice(r3, 0x0, r0, 0x0, 0x317e, 0x4) sendmsg$can_raw(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x0, 0x1, 0x1}, 0x3e, 0x1, 0x0, 0x0, "6d298cbc002627b6f2e99f6464b6e3eed9c66da182e93ce3c4220b0ddf6634952dccb9c8e4f95f1d8da7ae0915ed1cccb4953371e67b32c4027cf359128798b8"}, 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) write$tun(r1, &(0x7f0000000840)=ANY=[], 0x11b0) 112.22516ms ago: executing program 2 (id=3053): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/nvmet/ports/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r2, &(0x7f0000000c00)='tcp\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0) write(r3, &(0x7f0000000e00)='ipv4\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0) write(r4, &(0x7f0000001000)='127.0.0.1\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0) symlinkat(&(0x7f0000001300)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/nvmet/ports/1/subsystems/testnqn\x00') 0s ago: executing program 2 (id=3054): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4", 0x2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e", 0x2c}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 8 (id=3055): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/tcm.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./config/target/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/target/usb_gadget/naa.6001405123456789\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/lun/lun_0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/target/usb_gadget/naa.6001405123456789/tpgt_1/nexus\x00', 0x2, 0x0) write(r0, &(0x7f0000000940)='naa.600140', 0xa) kernel console output (not intermixed with test programs): d for a total size of 4096 [ 200.607292][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.8.1384 [ 200.624638][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.8.1384 [ 200.631262][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.8.1384 [ 200.640205][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.8.1384 [ 200.644260][T10388] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10388 comm=syz.8.1384 [ 200.771426][T10387] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.780836][T10387] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 200.787110][T10387] 8021q: adding VLAN 0 to HW filter on device bond4 [ 200.840885][ T5598] bond1: (slave ip6erspan0): link status definitely up, 0 Mbps full duplex [ 200.852531][ T5598] bond1: active interface up! [ 200.932021][ T12] bond5: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 200.936905][ T12] bond5: (slave veth7): making interface the new active one [ 200.944198][ T12] bond5: active interface up! [ 201.347903][T10398] tipc: Started in network mode [ 201.350237][T10398] tipc: Node identity 080211000001, cluster identity 4711 [ 201.354352][T10398] tipc: Enabled bearer , priority 0 [ 201.469840][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 201.512610][T10406] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 201.933131][T10426] tipc: New replicast peer: 255.255.255.255 [ 201.937455][T10426] tipc: Enabled bearer , priority 10 [ 202.361593][ T5830] tipc: Node number set to 134418688 [ 202.453698][T10450] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1409'. [ 202.471057][T10450] ip6gre1: entered promiscuous mode [ 202.473452][T10450] ip6gre1: entered allmulticast mode [ 202.486859][T10450] netlink: 'syz.5.1409': attribute type 6 has an invalid length. [ 202.489979][T10450] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1409'. [ 203.041600][T10471] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1417'. [ 203.108469][T10471] bond1: entered promiscuous mode [ 203.113490][T10471] bond1: entered allmulticast mode [ 203.570530][T10492] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 203.606745][T10492] CIFS: Attempting to mount //127.0.0.1/test [ 203.627082][T10492] CIFS: VFS: Error connecting to socket. Aborting operation. [ 203.630255][T10492] CIFS: VFS: cifs_mount failed w/return code = -101 [ 205.063889][T10506] tipc: Enabling of bearer rejected, already enabled [ 205.451075][T10512] xt_nat: multiple ranges no longer supported [ 205.638215][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 205.638235][ T42] audit: type=1400 audit(1786101708.779:1174): avc: denied { mount } for pid=10513 comm="syz.1.1436" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 205.735378][ C0] TC_ACT_REPEAT abuse ? [ 205.735645][ C2] TC_ACT_REPEAT abuse ? [ 205.837593][ C2] TC_ACT_REPEAT abuse ? [ 205.837815][ C0] TC_ACT_REPEAT abuse ? [ 205.940207][ C0] TC_ACT_REPEAT abuse ? [ 205.940283][ C2] TC_ACT_REPEAT abuse ? [ 206.042433][ C2] TC_ACT_REPEAT abuse ? [ 206.042611][ C0] TC_ACT_REPEAT abuse ? [ 206.144821][ C2] TC_ACT_REPEAT abuse ? [ 206.144928][ C0] TC_ACT_REPEAT abuse ? [ 206.313180][ T42] audit: type=1400 audit(1786101709.449:1175): avc: denied { unmount } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 206.388693][T10526] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 206.392083][T10526] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 206.608454][T10533] netlink: 'syz.1.1444': attribute type 3 has an invalid length. [ 206.614236][T10533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1444'. [ 207.411861][T10543] binder_alloc: 10542: binder_alloc_buf, no vma [ 207.707800][ T42] audit: type=1400 audit(1786101710.839:1176): avc: denied { write } for pid=10551 comm="syz.1.1451" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 207.738936][T10552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 207.742054][T10552] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 207.748818][T10552] vhci_hcd vhci_hcd.0: Device attached [ 207.769888][T10552] vhci_hcd vhci_hcd.0: port 0 already used [ 207.773753][T10553] vhci_hcd: connection closed [ 207.785996][ T9120] vhci_hcd vhci_hcd.1: stop threads [ 207.791755][ T9120] vhci_hcd vhci_hcd.1: release socket [ 207.794184][ T9120] vhci_hcd vhci_hcd.1: disconnect device [ 207.957103][ T5730] Bluetooth: hci2: command 0x0406 tx timeout [ 208.080420][T10567] netlink: 'syz.8.1456': attribute type 1 has an invalid length. [ 208.171055][ T42] audit: type=1400 audit(1786101711.309:1177): avc: denied { read } for pid=10570 comm="syz.9.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 208.613186][ T42] audit: type=1400 audit(1786101711.749:1178): avc: denied { getopt } for pid=10590 comm="syz.1.1463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 208.760014][T10598] syzkaller0: entered promiscuous mode [ 208.764616][T10598] syzkaller0: entered allmulticast mode [ 208.779936][T10594] bond6: (slave ip6gretap1): making interface the new active one [ 208.784884][T10594] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 209.126870][T10614] syz_tun: entered allmulticast mode [ 209.685848][ T41] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 209.848030][ T41] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 209.852198][ T41] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.869780][ T41] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 012 [ 209.965850][ T1039] usb 14-1: new full-speed USB device number 3 using dummy_hcd [ 210.026318][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 210.117988][ T1039] usb 14-1: unable to get BOS descriptor or descriptor too short [ 210.121937][ T1039] usb 14-1: not running at top speed; connect to a high speed hub [ 210.126831][ T1039] usb 14-1: config 0 has an invalid interface number: 88 but max is 0 [ 210.130336][ T1039] usb 14-1: config 0 has no interface number 0 [ 210.132581][ T1039] usb 14-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 46935, setting to 64 [ 210.137700][ T1039] usb 14-1: config 0 interface 88 has no altsetting 0 [ 210.143708][ T1039] usb 14-1: language id specifier not provided by device, defaulting to English [ 210.151619][ T1039] usb 14-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 210.155608][ T1039] usb 14-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 210.159586][ T1039] usb 14-1: Product: syz [ 210.161485][ T1039] usb 14-1: SerialNumber: Љ [ 210.168132][ T1039] usb 14-1: config 0 descriptor?? [ 210.177134][T10633] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22 [ 210.274272][ T41] (null): failure reading functionality [ 210.394229][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1480'. [ 210.405444][T10633] hsr_slave_0: left promiscuous mode [ 210.428838][T10633] hsr_slave_1: left promiscuous mode [ 210.472723][T10639] netlink: 156 bytes leftover after parsing attributes in process `syz.8.1482'. [ 210.475499][ T41] i2c i2c-2: failure reading functionality [ 210.484409][ T41] i2c i2c-2: connected i2c-tiny-usb device [ 210.505138][ T1039] input: syz as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:0.88/input/input17 [ 210.553482][ T1039] usb 14-1: USB disconnect, device number 3 [ 210.556001][ C2] usb_acecad 14-1:0.88: can't resubmit intr, dummy_hcd.9-1/input0, status -19 [ 210.653562][ T42] audit: type=1400 audit(1786101713.789:1179): avc: denied { write } for pid=10640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.735772][ T42] audit: type=1400 audit(1786101713.869:1180): avc: denied { write } for pid=10644 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.752823][ C2] net_ratelimit: 89 callbacks suppressed [ 210.752843][ C2] TC_ACT_REPEAT abuse ? [ 210.753041][ C0] TC_ACT_REPEAT abuse ? [ 210.798753][T10639] bridge0: port 3(wlan1) entered disabled state [ 210.855126][ C0] TC_ACT_REPEAT abuse ? [ 210.855157][ C2] TC_ACT_REPEAT abuse ? [ 210.863984][ T42] audit: type=1400 audit(1786101713.999:1181): avc: denied { write } for pid=10646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.911128][T10639] tipc: Resetting bearer [ 210.952924][ T42] audit: type=1400 audit(1786101714.089:1182): avc: denied { write } for pid=10649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.061041][ T42] audit: type=1400 audit(1786101714.199:1183): avc: denied { create } for pid=10655 comm="syz.5.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 211.115973][ T42] audit: type=1400 audit(1786101714.249:1184): avc: denied { write } for pid=10654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.140034][ T7995] maxtcpc 0-0040: error -ENXIO: Failed to read TCPC_POWER_STATUS [ 211.147726][T10658] i2c i2c-0: new_device: Instantiated device maxtcpc at 0x40 [ 211.164101][ T8001] maxtcpc 1-0040: error -EIO: Failed to read TCPC_POWER_STATUS [ 211.169335][T10663] i2c i2c-1: new_device: Instantiated device maxtcpc at 0x40 [ 211.173072][ T8001] maxtcpc 1-0040: probe with driver maxtcpc failed with error -5 [ 211.234058][ T42] audit: type=1400 audit(1786101714.369:1185): avc: denied { write } for pid=10664 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.249458][T10668] netlink: 'syz.8.1485': attribute type 1 has an invalid length. [ 211.324136][T10668] veth3: entered allmulticast mode [ 211.333834][T10668] bond2: (slave veth3): Enslaving as an active interface with a down link [ 211.352419][ T42] audit: type=1326 audit(1786101714.489:1186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.5.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd438f97e57 code=0x7ffc0000 [ 211.380996][T10668] macvlan2: entered promiscuous mode [ 211.383157][T10668] macvlan2: entered allmulticast mode [ 211.385611][ T42] audit: type=1326 audit(1786101714.489:1187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.5.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd438f3f459 code=0x7ffc0000 [ 211.395919][ T42] audit: type=1326 audit(1786101714.489:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.5.1487" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd438f97e57 code=0x7ffc0000 [ 211.397313][T10668] bond2: entered promiscuous mode [ 211.419881][T10668] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 211.423618][T10668] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 211.430804][T10668] bond2: left promiscuous mode [ 211.957496][T10693] netlink: 'syz.9.1489': attribute type 1 has an invalid length. [ 212.015558][T10693] bond2: entered promiscuous mode [ 212.019809][T10693] 8021q: adding VLAN 0 to HW filter on device bond2 [ 212.041646][T10693] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1489'. [ 212.047431][T10693] bond2: entered allmulticast mode [ 212.074017][T10693] bond2: (slave bridge1): making interface the new active one [ 212.077480][T10693] bridge1: entered promiscuous mode [ 212.079951][T10693] bridge1: entered allmulticast mode [ 212.084316][T10693] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 212.425202][T10707] syz_tun: entered promiscuous mode [ 212.431757][T10707] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 213.025438][T10726] netlink: 'syz.5.1501': attribute type 1 has an invalid length. [ 213.039913][T10726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 213.062830][ T41] usb 6-1: USB disconnect, device number 12 [ 213.088756][T10726] bond7: (slave gretap2): making interface the new active one [ 213.094601][T10726] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 213.116991][T10726] selinux_netlink_send: 1887 callbacks suppressed [ 213.117040][T10726] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10726 comm=syz.5.1501 [ 213.321116][T10740] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1506'. [ 213.373211][T10740] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10740 comm=syz.5.1506 [ 213.435847][T10743] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1507'. [ 213.506732][T10743] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=10743 comm=syz.9.1507 [ 213.721811][T10749] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.725464][T10749] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.864599][T10749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.887604][T10749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.084565][T10755] bond0: (slave batadv0): Releasing backup interface [ 214.117991][T10755] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 214.152176][T10757] tipc: Enabling of bearer rejected, failed to enable media [ 214.174601][T10767] syzkaller0: entered promiscuous mode [ 214.181411][T10767] syzkaller0: entered allmulticast mode [ 214.196020][ T13] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.200087][ T13] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.204327][ T13] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.248663][ T5598] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.286488][T10777] bridge_slave_0: left allmulticast mode [ 214.295801][T10777] bridge_slave_0: left promiscuous mode [ 214.298597][T10777] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.311414][T10777] bridge_slave_1: left allmulticast mode [ 214.314342][T10777] bridge_slave_1: left promiscuous mode [ 214.318707][T10777] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.332710][T10777] bond1: (slave veth0_to_bond): Releasing backup interface [ 214.340525][T10777] bond0: (slave bond_slave_0): Releasing backup interface [ 214.351729][T10777] bond0: (slave bond_slave_1): Releasing backup interface [ 214.360124][T10777] team0: Port device team_slave_0 removed [ 214.366005][T10777] team0: Port device team_slave_1 removed [ 214.368893][T10777] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.372850][T10777] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.384441][T10777] bond2: (slave bridge1): Releasing backup interface [ 214.387445][T10777] bridge1: left promiscuous mode [ 214.389686][T10777] bridge1: left allmulticast mode [ 214.401615][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1515'. [ 214.405414][T10777] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1515'. [ 214.421749][T10780] 8021q: adding VLAN 0 to HW filter on device bond3 [ 214.428726][T10777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.434638][T10777] bond3: (slave bond0): Enslaving as an active interface with a down link [ 215.147710][ T847] usb 14-1: new full-speed USB device number 4 using dummy_hcd [ 215.310953][ T847] usb 14-1: config 0 has no interfaces? [ 215.314599][ T847] usb 14-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 215.321126][ T847] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.339998][ T847] usb 14-1: config 0 descriptor?? [ 215.391573][T10819] netlink: 'syz.8.1526': attribute type 1 has an invalid length. [ 215.441122][T10819] bond4: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 215.446926][T10819] bond4 (unregistering): Released all slaves [ 215.492601][T10822] bridge0: entered promiscuous mode [ 215.499991][T10822] bond3: (slave bridge0): making interface the new active one [ 215.503587][T10822] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 215.549890][T10794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.563914][T10794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.571109][ T5730] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 215.571158][ T5730] Bluetooth: hci1: Malformed LE Event: 0x0d [ 215.571822][ T9103] usb 14-1: USB disconnect, device number 4 [ 215.720263][T10828] netlink: 'syz.1.1529': attribute type 1 has an invalid length. [ 215.742341][T10828] bond4: entered promiscuous mode [ 215.745092][T10828] 8021q: adding VLAN 0 to HW filter on device bond4 [ 215.815443][T10828] veth9: entered allmulticast mode [ 215.827938][T10828] bond4: (slave veth9): making interface the new active one [ 215.830896][T10828] veth9: entered promiscuous mode [ 215.834313][T10828] bond4: (slave veth9): Enslaving as an active interface with an up link [ 215.849481][T10832] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 215.854935][T10832] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 215.880827][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1530'. [ 216.041906][ T42] kauditd_printk_skb: 3943 callbacks suppressed [ 216.041926][ T42] audit: type=1400 audit(1786101719.179:5129): avc: denied { write } for pid=10834 comm="syz.8.1531" name="uncompressed" dev="configfs" ino=28260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.061497][ T42] audit: type=1400 audit(1786101719.199:5130): avc: denied { write } for pid=10834 comm="syz.8.1531" name="u" dev="configfs" ino=46689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.070891][ T42] audit: type=1400 audit(1786101719.199:5131): avc: denied { write } for pid=10834 comm="syz.8.1531" name="h" dev="configfs" ino=28269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.078859][T10837] bridge_slave_0: left allmulticast mode [ 216.085931][T10837] bridge_slave_0: left promiscuous mode [ 216.087163][ T42] audit: type=1400 audit(1786101719.199:5132): avc: denied { create } for pid=10834 comm="syz.8.1531" name="u" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 216.088463][T10837] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.113515][T10837] bridge_slave_1: left allmulticast mode [ 216.116308][T10837] bridge_slave_1: left promiscuous mode [ 216.116920][ T42] audit: type=1400 audit(1786101719.199:5133): avc: denied { write } for pid=10834 comm="syz.8.1531" name="h" dev="configfs" ino=28269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.128401][ T42] audit: type=1400 audit(1786101719.209:5134): avc: denied { write } for pid=10834 comm="syz.8.1531" name="fs" dev="configfs" ino=28266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.136682][T10837] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.137757][ T42] audit: type=1400 audit(1786101719.209:5135): avc: denied { write } for pid=10834 comm="syz.8.1531" name="fs" dev="configfs" ino=28266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.183539][T10837] bond0: (slave bond_slave_0): Releasing backup interface [ 216.203474][T10837] bond0: (slave bond_slave_1): Releasing backup interface [ 216.241091][T10837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.244270][T10837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.250539][T10837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.253895][T10837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.262188][T10837] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 216.281472][T10838] tipc: Enabling of bearer rejected, failed to enable media [ 216.660215][ T9173] IPVS: starting estimator thread 0... [ 216.676834][T10861] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1539'. [ 216.710921][T10861] bond5: entered promiscuous mode [ 216.716141][T10861] bond5: entered allmulticast mode [ 216.788282][T10862] IPVS: using max 26 ests per chain, 62400 per kthread [ 216.851022][T10865] syzkaller0: entered promiscuous mode [ 216.853378][T10865] syzkaller0: entered allmulticast mode [ 216.891076][T10867] netlink: 'syz.1.1541': attribute type 1 has an invalid length. [ 216.958896][T10867] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.972743][T10870] 8021q: adding VLAN 0 to HW filter on device bond6 [ 216.975668][T10870] bond6: (slave gre1): The slave device specified does not support setting the MAC address [ 216.979923][T10870] bond6: (slave gre1): Error -95 calling set_mac_address [ 217.038545][T10867] gretap1: entered promiscuous mode [ 217.048924][T10867] bond6: (slave gretap1): making interface the new active one [ 217.052933][T10867] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 217.161937][T10867] macvlan2: entered promiscuous mode [ 217.172625][T10867] macvlan2: entered allmulticast mode [ 217.176809][T10867] bond6: entered promiscuous mode [ 217.188727][T10867] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 217.211337][T10867] bond6: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 217.229179][T10867] bond6: left promiscuous mode [ 217.369155][T10845] binder: 10844:10845 ioctl c0306201 200000000040 returned -14 [ 217.677256][ T42] audit: type=1400 audit(1786101720.819:5136): avc: denied { watch watch_reads } for pid=10879 comm="syz.9.1545" path="/proc/271/net/dev_snmp6" dev="proc" ino=4026533428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 217.699614][T10880] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 217.711136][ T42] audit: type=1400 audit(1786101720.849:5137): avc: denied { getopt } for pid=10879 comm="syz.9.1545" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 218.169623][ T42] audit: type=1400 audit(1786101721.309:5138): avc: denied { append } for pid=10903 comm="syz.8.1553" name="comedi3" dev="devtmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 218.185674][T10901] tipc: Enabling of bearer rejected, already enabled [ 218.213189][ T9120] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.887722][T10928] netlink: 'syz.5.1563': attribute type 8 has an invalid length. [ 218.890299][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 218.894680][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1563'. [ 219.047416][T10934] netlink: 'syz.8.1565': attribute type 1 has an invalid length. [ 219.125514][T10934] bridge1: entered promiscuous mode [ 219.130585][T10934] bond4: (slave bridge1): making interface the new active one [ 219.134096][T10934] bond4: (slave bridge1): Enslaving as an active interface with an up link [ 219.149501][T10934] bridge2: entered promiscuous mode [ 219.156211][T10934] bond4: (slave bridge2): Enslaving as a backup interface with an up link [ 219.514588][T10954] syzkaller0: entered promiscuous mode [ 219.516428][T10954] syzkaller0: entered allmulticast mode [ 219.818455][ T5730] Bluetooth: hci2: unexpected event for opcode 0x0403 [ 219.900177][T10981] netlink: 'syz.9.1583': attribute type 1 has an invalid length. [ 219.952160][T10981] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.980187][T10987] 8021q: adding VLAN 0 to HW filter on device bond4 [ 219.983154][T10987] bond4: (slave gre1): The slave device specified does not support setting the MAC address [ 219.987961][T10987] bond4: (slave gre1): Error -95 calling set_mac_address [ 220.032035][T10981] gretap1: entered promiscuous mode [ 220.041639][T10981] bond4: (slave gretap1): making interface the new active one [ 220.046612][T10981] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 220.090181][T10981] 8021q: adding VLAN 0 to HW filter on device bond5 [ 220.096075][T10981] bond4: (slave bond5): Enslaving as an active interface with a down link [ 220.118051][T10981] bond4 (unregistering): (slave gretap1): Releasing active interface [ 220.130232][T10981] bond4 (unregistering): (slave bond5): Releasing active interface [ 220.137423][T10981] bond4 (unregistering): Released all slaves [ 220.609451][T11015] batadv_slave_1: left promiscuous mode [ 220.623052][T11015] geneve2: left promiscuous mode [ 220.627779][T11015] bond1: left promiscuous mode [ 220.630343][T11015] bridge0: left promiscuous mode [ 220.633830][T11015] bridge1: left promiscuous mode [ 220.636612][T11015] bridge2: left promiscuous mode [ 220.694954][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1592'. [ 220.699079][T11015] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1592'. [ 221.204261][T11021] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 221.207735][T11021] mac80211_hwsim hwsim5 syzkaller0: left allmulticast mode [ 221.379157][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 221.379175][ T42] audit: type=1400 audit(1786101724.519:5145): avc: denied { bind } for pid=11033 comm="syz.8.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 221.616142][ T9120] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.619782][ T9120] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.623452][ T9120] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.635606][ T9120] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.640043][ T9120] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.764342][ T42] audit: type=1400 audit(1786101724.899:5146): avc: denied { create } for pid=11055 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 221.776294][ T9120] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.786698][ T42] audit: type=1400 audit(1786101724.899:5147): avc: denied { getopt } for pid=11055 comm="syz.5.1610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 221.810610][T11059] CIFS: Attempting to mount //127.0.0.1/share [ 221.813928][T11059] CIFS: VFS: Error connecting to socket. Aborting operation. [ 221.817494][T11059] CIFS: VFS: cifs_mount failed w/return code = -101 [ 221.873660][T11061] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1611'. [ 221.901345][ T42] audit: type=1400 audit(1786101725.039:5148): avc: denied { name_bind } for pid=11062 comm="syz.9.1612" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 221.921463][ T42] audit: type=1400 audit(1786101725.059:5149): avc: denied { write } for pid=11062 comm="syz.9.1612" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.936136][ T42] audit: type=1400 audit(1786101725.059:5150): avc: denied { remove_name } for pid=11062 comm="syz.9.1612" name="file0" dev="9p" ino=74212577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.956348][ T42] audit: type=1400 audit(1786101725.059:5151): avc: denied { unlink } for pid=11062 comm="syz.9.1612" name="file0" dev="9p" ino=74212577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 221.964171][ T42] audit: type=1400 audit(1786101725.089:5152): avc: denied { write } for pid=11062 comm="syz.9.1612" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 221.972559][ T42] audit: type=1400 audit(1786101725.089:5153): avc: denied { create } for pid=11062 comm="syz.9.1612" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 221.988579][ T42] audit: type=1400 audit(1786101725.119:5154): avc: denied { write } for pid=11062 comm="syz.9.1612" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 222.101659][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4cbfd1 [ 222.134370][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x4cd0 [ 222.186802][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xd500 [ 222.225160][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xdd00 [ 222.233105][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xbd00 [ 222.258862][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x9d00 [ 222.266653][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x10000c200 [ 222.274919][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x10000aa00 [ 222.313353][T11066] kvm: kvm [11064]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x3f0000c500 [ 222.924625][T11108] netlink: 'syz.5.1630': attribute type 4 has an invalid length. [ 223.185925][ T5781] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 223.416369][ T5816] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 223.463975][ T5781] usb 6-1: unable to get BOS descriptor or descriptor too short [ 223.468111][ T5781] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 223.471273][ T5781] usb 6-1: can't read configurations, error -71 [ 223.566011][ T5816] usb 14-1: Using ep0 maxpacket: 16 [ 223.569985][ T5816] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 223.573906][ T5816] usb 14-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 223.579797][ T5816] usb 14-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 223.583562][ T5816] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.586569][ T5816] usb 14-1: Product: syz [ 223.588197][ T5816] usb 14-1: Manufacturer: syz [ 223.590071][ T5816] usb 14-1: SerialNumber: syz [ 223.595851][ T5816] r8152-cfgselector 14-1: Unknown version 0x0000 [ 223.601138][ T5816] r8152-cfgselector 14-1: config 0 descriptor?? [ 223.812359][T11118] syz.5.1635 (11118) used greatest stack depth: 19120 bytes left [ 223.812607][T11116] xt_hashlimit: size too large, truncated to 1048576 [ 223.911276][T11125] 9pnet_virtio: no channels available for device syz [ 223.928544][ T29] r8152-cfgselector 14-1: USB disconnect, device number 5 [ 223.960516][T11127] fuse: fd is not a fuse device [ 223.969176][T11127] CIFS: Attempting to mount //127.0.0.1/share [ 223.971491][T11127] CIFS: VFS: Error connecting to socket. Aborting operation. [ 223.974052][T11127] CIFS: VFS: cifs_mount failed w/return code = -101 [ 224.312160][T11140] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 224.315029][T11140] mac80211_hwsim hwsim5 syzkaller0: entered allmulticast mode [ 225.038039][T11171] netlink: 'syz.5.1655': attribute type 13 has an invalid length. [ 225.046590][T11172] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 225.220664][ T5730] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 225.530170][T11192] ip_tables: iptables: counters copy to user failed while replacing table [ 226.212931][ T5730] Bluetooth: hci2: unexpected event for opcode 0x2027 [ 226.323490][T11298] netlink: 'syz.8.1717': attribute type 1 has an invalid length. [ 226.327008][T11298] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1717'. [ 226.422875][T11312] comedi comedi2: pcm3724: I/O base address or length out of range [ 226.500713][T11324] ip_tables: iptables: counters copy to user failed while replacing table [ 226.544093][T11328] xt_NFQUEUE: number of total queues is 0 [ 226.664397][T11350] program syz.1.1743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 226.695665][T11356] kAFS: No cell specified [ 226.839066][ T5730] Bluetooth: hci2: unexpected event for opcode 0x200b [ 226.848291][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 226.848301][ T42] audit: type=1400 audit(2000000003.659:5177): avc: denied { read } for pid=11384 comm="syz.9.1758" name="fb0" dev="devtmpfs" ino=3627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.858071][ T42] audit: type=1400 audit(2000000003.659:5178): avc: denied { open } for pid=11384 comm="syz.9.1758" path="/dev/fb0" dev="devtmpfs" ino=3627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 226.868037][ T42] audit: type=1400 audit(2000000003.659:5179): avc: denied { ioctl } for pid=11384 comm="syz.9.1758" path="/dev/fb0" dev="devtmpfs" ino=3627 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 227.141426][T11420] usb usb1: usbfs: process 11420 (syz.9.1776) did not claim interface 10 before use [ 227.208979][T11432] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 227.208979][T11432] Please contact the netfilter-devel mailing list or update your nftables rules. [ 227.235323][T11434] ±ÿ: renamed from lo [ 227.411507][T11449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1790'. [ 227.435611][ T5730] Bluetooth: Wrong link type (-71) [ 227.502696][T11460] Cannot find del_set index 57343 as target [ 227.593840][T11470] comedi comedi0: dt2814: I/O base address not correctly aligned [ 227.702022][T11483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.097300][T11533] pimreg: entered allmulticast mode [ 228.143459][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1834'. [ 228.169140][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1834'. [ 228.173889][T11539] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1834'. [ 228.176822][ T5598] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.180524][ T5598] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.196341][ T9120] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.199234][ T9120] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 228.414411][ T5730] Bluetooth: hci2: unexpected subevent 0x0a length: 35 > 30 [ 228.417940][ T5730] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 228.426815][ T5730] CPU: 2 UID: 0 PID: 5730 Comm: kworker/u34:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.426861][ T5730] Tainted: [L]=SOFTLOCKUP [ 228.426866][ T5730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.426875][ T5730] Workqueue: hci2 hci_rx_work [ 228.426973][ T5730] Call Trace: [ 228.426986][ T5730] [ 228.426993][ T5730] dump_stack_lvl+0x100/0x190 [ 228.427035][ T5730] sysfs_warn_dup.cold+0x1c/0x28 [ 228.427065][ T5730] sysfs_create_dir_ns+0x24b/0x2b0 [ 228.427089][ T5730] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 228.427108][ T5730] ? find_held_lock+0x2b/0x80 [ 228.427128][ T5730] ? kobject_add_internal+0x25f/0x930 [ 228.427153][ T5730] ? kobject_add_internal+0x25f/0x930 [ 228.427173][ T5730] ? do_raw_spin_unlock+0x145/0x1e0 [ 228.427194][ T5730] kobject_add_internal+0x2c8/0x930 [ 228.427214][ T5730] kobject_add+0x16a/0x1e0 [ 228.427228][ T5730] ? __pfx_kobject_add+0x10/0x10 [ 228.427244][ T5730] ? class_to_subsys+0x10f/0x150 [ 228.427283][ T5730] ? kobject_put+0xb9/0x640 [ 228.427306][ T5730] ? _raw_spin_unlock+0x28/0x50 [ 228.427327][ T5730] device_add+0x294/0x1970 [ 228.427350][ T5730] ? __pfx_dev_set_name+0x10/0x10 [ 228.427364][ T5730] ? __pfx_device_add+0x10/0x10 [ 228.427385][ T5730] ? mgmt_send_event_skb+0x2fb/0x460 [ 228.427411][ T5730] hci_conn_add_sysfs+0x1a3/0x260 [ 228.427428][ T5730] le_conn_complete_evt+0x11eb/0x1f60 [ 228.427451][ T5730] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 228.427468][ T5730] ? hci_event_packet+0x186/0xcd0 [ 228.427489][ T5730] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 228.427508][ T5730] ? skb_pull_data+0x15f/0x1e0 [ 228.427557][ T5730] hci_le_meta_evt+0x34a/0x5f0 [ 228.427582][ T5730] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 228.427598][ T5730] hci_event_packet+0x51c/0xcd0 [ 228.427622][ T5730] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 228.427641][ T5730] ? __pfx_hci_event_packet+0x10/0x10 [ 228.427665][ T5730] ? kcov_remote_start+0x384/0x670 [ 228.427682][ T5730] ? lockdep_hardirqs_on+0x78/0x100 [ 228.427706][ T5730] hci_rx_work+0x451/0xfc0 [ 228.427724][ T5730] process_one_work+0xa23/0x1940 [ 228.427749][ T5730] ? __pfx_process_one_work+0x10/0x10 [ 228.427766][ T5730] ? __pfx_hci_rx_work+0x10/0x10 [ 228.427786][ T5730] worker_thread+0x5ef/0xe50 [ 228.427805][ T5730] ? kthread+0x13a/0x450 [ 228.427822][ T5730] ? __pfx_worker_thread+0x10/0x10 [ 228.427834][ T5730] kthread+0x370/0x450 [ 228.427846][ T5730] ? __pfx_kthread+0x10/0x10 [ 228.427864][ T5730] ret_from_fork+0x72b/0xd50 [ 228.427882][ T5730] ? __pfx_ret_from_fork+0x10/0x10 [ 228.427904][ T5730] ? rcu_is_watching+0x12/0xc0 [ 228.427932][ T5730] ? __switch_to+0x800/0x10f0 [ 228.427952][ T5730] ? __pfx_kthread+0x10/0x10 [ 228.427975][ T5730] ret_from_fork_asm+0x1a/0x30 [ 228.428018][ T5730] [ 228.428044][ T5730] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 228.452023][ T42] audit: type=1400 audit(2000000005.259:5180): avc: denied { mounton } for pid=11561 comm="syz.9.1845" path="/168/sys/kernel/tracing" dev="sysfs" ino=897 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 228.453224][ T5730] Bluetooth: hci2: failed to register connection device [ 228.466993][ T42] audit: type=1400 audit(2000000005.269:5181): avc: denied { write } for pid=11561 comm="syz.9.1845" name="instances" dev="tracefs" ino=3204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 228.550990][T11571] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1849'. [ 228.555583][ T42] audit: type=1400 audit(2000000005.279:5182): avc: denied { add_name } for pid=11561 comm="syz.9.1845" name="A" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 228.585586][ T42] audit: type=1400 audit(2000000005.279:5183): avc: denied { create } for pid=11561 comm="syz.9.1845" name="A" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 228.593861][ T42] audit: type=1400 audit(2000000005.319:5184): avc: denied { write } for pid=11561 comm="syz.9.1845" name="instances" dev="tracefs" ino=3204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 228.625623][T11571] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11571 comm=syz.5.1849 [ 228.735555][T11576] jffs2: notice: (11576) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 228.764437][ T42] audit: type=1400 audit(2000000005.569:5185): avc: denied { remount } for pid=11575 comm="syz.5.1851" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 228.789078][T11581] jffs2: notice: (11581) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 2 orphan) and 2 of xref (0 dead, 2 orphan) found. [ 228.800833][ T42] audit: type=1400 audit(2000000005.609:5186): avc: denied { setattr } for pid=11580 comm="syz.8.1853" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.898642][T11590] jffs2: notice: (11590) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 228.950697][T11595] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1860'. [ 228.997997][T11601] xt_hashlimit: size too large, truncated to 1048576 [ 229.211195][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1872'. [ 229.214669][T11622] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1872'. [ 229.281920][T11631] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1877'. [ 229.849934][T11669] syzkaller0: entered promiscuous mode [ 229.851606][T11669] syzkaller0: entered allmulticast mode [ 230.085041][T11683] team0: entered promiscuous mode [ 230.087581][T11683] team_slave_0: entered promiscuous mode [ 230.089686][T11683] team_slave_1: entered promiscuous mode [ 230.253097][T11698] bond0: (slave bond_slave_0): Releasing backup interface [ 230.264868][T11698] bond0: (slave bond_slave_1): Releasing backup interface [ 230.271981][T11698] team_slave_0: left promiscuous mode [ 230.275617][T11698] team0: Port device team_slave_0 removed [ 230.280643][T11698] team_slave_1: left promiscuous mode [ 230.286224][T11698] team0: Port device team_slave_1 removed [ 230.289452][T11698] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.292027][T11698] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.295127][T11698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.299125][T11698] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 230.313154][T11701] xfrm0: entered promiscuous mode [ 230.320532][T11701] team0: Port device xfrm0 added [ 230.355953][T11698] tipc: Enabled bearer , priority 0 [ 230.807059][T11733] netlink: 'syz.5.1917': attribute type 5 has an invalid length. [ 231.785955][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 231.961032][T11752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1924'. [ 232.076979][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 232.076990][ T42] audit: type=1400 audit(2000000008.889:5190): avc: denied { setopt } for pid=11761 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.087348][ T42] audit: type=1400 audit(2000000008.899:5191): avc: denied { connect } for pid=11761 comm="syz.1.1931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 232.143696][T11764] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 232.196083][T11766] veth1_macvtap: left allmulticast mode [ 232.198472][T11766] macsec0: entered promiscuous mode [ 232.214580][T11766] veth1_macvtap: entered allmulticast mode [ 232.217515][T11766] macsec0: left promiscuous mode [ 232.577972][T11787] __nla_validate_parse: 5 callbacks suppressed [ 232.577990][T11787] netlink: 4436 bytes leftover after parsing attributes in process `syz.5.1943'. [ 232.684415][ T5936] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 232.849848][ T5936] usb 6-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 232.853707][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.857473][ T5936] usb 6-1: Product: syz [ 232.859657][ T5936] usb 6-1: Manufacturer: syz [ 232.861803][ T5936] usb 6-1: SerialNumber: syz [ 232.897208][ T5936] usb 6-1: config 0 descriptor?? [ 233.112082][ T9210] usb 6-1: USB disconnect, device number 15 [ 233.668642][T11748] Set syz0 is full, maxelem 65536 reached [ 233.939735][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 233.958496][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 233.962995][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 233.965880][ T41] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 233.969125][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 233.974579][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 233.979141][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 234.116046][ T41] usb 6-1: Using ep0 maxpacket: 32 [ 234.121974][ T41] usb 6-1: unable to get BOS descriptor or descriptor too short [ 234.149225][ T41] usb 6-1: string descriptor 0 read error: -22 [ 234.151888][ T41] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 234.155499][ T41] usb 6-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 234.174244][ T41] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 234.185856][ T41] dw2102: su3000_power_ctrl: 1, initialized 0 [ 234.189069][ T41] dvb-usb: bulk message failed: -22 (2/0) [ 234.204247][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 234.209819][ T41] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 234.216143][ T41] usb 6-1: media controller created [ 234.218765][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 234.221384][ T41] dw2102: i2c transfer failed. [ 234.223750][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 234.226438][ T41] dw2102: i2c transfer failed. [ 234.228437][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 234.230772][ T41] dw2102: i2c transfer failed. [ 234.232711][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 234.235015][ T41] dw2102: i2c transfer failed. [ 234.238967][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 234.241290][ T41] dw2102: i2c transfer failed. [ 234.243236][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 234.245607][ T41] dw2102: i2c transfer failed. [ 234.247683][ T41] dvb-usb: MAC address: 02:02:02:02:02:02 [ 234.260803][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.289955][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 234.303751][ T41] dw2102: command 0x0e transfer failed. [ 234.307572][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 234.310152][ T41] dw2102: command 0x0e transfer failed. [ 234.634734][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 234.636832][ T41] dw2102: command 0x0e transfer failed. [ 234.640269][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 234.642208][ T41] dw2102: command 0x0e transfer failed. [ 234.644436][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 234.651440][ T41] dw2102: command 0x51 transfer failed. [ 234.658261][T11814] dvb-usb: bulk message failed: -22 (5/0) [ 234.662670][T11814] dw2102: i2c transfer failed. [ 234.682381][ T41] DVB: Unable to find symbol ds3000_attach() [ 234.684336][ T41] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 234.726301][ T41] rc_core: IR keymap rc-su3000 not found [ 234.730774][ T41] Registered IR keymap rc-empty [ 234.733513][ T41] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 234.740170][ T41] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input18 [ 234.757861][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 234.766585][ T41] dw2102: su3000_power_ctrl: 0, initialized 1 [ 234.771543][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 234.792160][ T41] usb 6-1: USB disconnect, device number 16 [ 234.872700][T11835] netlink: 4436 bytes leftover after parsing attributes in process `syz.8.1961'. [ 234.927390][ T41] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 234.973941][ T42] audit: type=1800 audit(2000000011.779:5192): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1965" name="device_path" dev="configfs" ino=52257 res=0 errno=0 [ 234.985426][T11843] nvmet: Invalid value 't' for trtype [ 234.997281][ T42] audit: type=1800 audit(2000000011.779:5193): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1965" name="enable" dev="configfs" ino=52258 res=0 errno=0 [ 235.009246][ T42] audit: type=1400 audit(2000000011.789:5194): avc: denied { write } for pid=11842 comm="syz.8.1965" name="ports" dev="configfs" ino=6292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 235.020766][ T42] audit: type=1800 audit(2000000011.789:5195): pid=11843 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1965" name="addr_trtype" dev="configfs" ino=52264 res=0 errno=0 [ 235.057884][T11845] fuse: Bad value for 'group_id' [ 235.060112][T11845] fuse: Bad value for 'group_id' [ 235.102807][T11847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 235.106777][T11847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.432261][T11841] Set syz0 is full, maxelem 65536 reached [ 236.661530][T11879] vlan4: left promiscuous mode [ 236.663633][T11879] hsr0: left promiscuous mode [ 236.666727][T11879] bond2: left promiscuous mode [ 236.668809][T11879] ip6erspan0: left promiscuous mode [ 236.670958][T11879] mac80211_hwsim hwsim5 syzkaller0: left promiscuous mode [ 236.673959][T11879] bond4: left promiscuous mode [ 236.676592][T11879] veth9: left promiscuous mode [ 236.679008][T11879] bond5: left promiscuous mode [ 236.681157][T11879] gretap1: left promiscuous mode [ 236.697217][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 236.700915][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1979'. [ 237.391495][ T42] audit: type=1400 audit(2000000014.199:5196): avc: denied { write } for pid=11908 comm="syz.8.1993" name="functions" dev="configfs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 237.408145][ T42] audit: type=1800 audit(2000000014.219:5197): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1993" name="out_ports" dev="configfs" ino=49014 res=0 errno=0 [ 237.425792][ T42] audit: type=1400 audit(2000000014.219:5198): avc: denied { append } for pid=11908 comm="syz.8.1993" name="UDC" dev="configfs" ino=49015 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 237.446618][ T42] audit: type=1800 audit(2000000014.219:5199): pid=11909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.1993" name="in_ports" dev="configfs" ino=49013 res=0 errno=0 [ 238.053021][ T42] audit: type=1400 audit(2000000014.859:5200): avc: denied { ioctl } for pid=11935 comm="syz.8.2007" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 238.475055][T11895] Set syz0 is full, maxelem 65536 reached [ 238.589766][T11965] netlink: 'syz.8.2021': attribute type 1 has an invalid length. [ 238.629139][T11965] 8021q: adding VLAN 0 to HW filter on device bond6 [ 238.647207][T11965] gretap1: entered promiscuous mode [ 238.660583][T11965] bond6: (slave gretap1): making interface the new active one [ 238.664554][T11965] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 238.690906][T11965] bond7 (unregistering): Released all slaves [ 238.739573][T11973] bond6 (unregistering): (slave gretap1): Releasing active interface [ 238.750918][T11973] bond6 (unregistering): Released all slaves [ 238.979757][ T5730] Bluetooth: hci3: unexpected event for opcode 0x080f [ 239.152152][T12004] netlink: 'syz.5.2036': attribute type 4 has an invalid length. [ 239.190005][ T5730] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 239.461755][T12027] netlink: 'syz.5.2048': attribute type 4 has an invalid length. [ 239.581998][ T5730] Bluetooth: hci2: unexpected event for opcode 0x0c5b [ 239.655647][T12039] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 239.712071][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.716358][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.771319][ T42] audit: type=1800 audit(2000000016.579:5201): pid=12047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2057" name="size" dev="configfs" ino=52574 res=0 errno=0 [ 240.325955][ T42] audit: type=1400 audit(2000000017.129:5202): avc: denied { write } for pid=12056 comm="syz.8.2061" name="fs" dev="configfs" ino=24139 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 240.374950][ T42] audit: type=1800 audit(2000000017.179:5203): pid=12059 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2062" name="addr_traddr" dev="configfs" ino=51070 res=0 errno=0 [ 240.431453][T12062] pimreg: tun_chr_ioctl cmd 1074025672 [ 240.433607][T12062] pimreg: ignored: set checksum enabled [ 240.499519][ T5730] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 240.592952][ T42] audit: type=1400 audit(2000000017.399:5204): avc: denied { create } for pid=12072 comm="syz.8.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 240.613510][ T42] audit: type=1400 audit(2000000017.419:5205): avc: denied { getopt } for pid=12072 comm="syz.8.2070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 240.771221][T12088] tc action pedit offset 0 out of bounds [ 244.176468][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 244.182220][T12143] IPVS: You probably need to specify IP address on multicast interface. [ 244.184775][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 244.193492][T12143] IPVS: Error connecting to the multicast addr [ 244.195236][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 244.204333][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 244.208262][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 244.564059][T12184] netlink: 'syz.8.2121': attribute type 4 has an invalid length. [ 244.708020][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4cbfd1 [ 244.725455][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x9100 [ 244.741339][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xe200 [ 244.756615][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xad00 [ 244.773616][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xb000 [ 244.786091][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xca00 [ 244.791542][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.797854][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.802352][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xad00 [ 244.804765][T12153] bridge_slave_0: entered allmulticast mode [ 244.810334][T12153] bridge_slave_0: entered promiscuous mode [ 244.816724][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.819197][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.820664][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xb000 [ 244.822573][T12153] bridge_slave_1: entered allmulticast mode [ 244.829470][T12153] bridge_slave_1: entered promiscuous mode [ 244.835434][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xca00 [ 244.852492][T12187] kvm: kvm [12186]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xad00 [ 244.867435][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.910274][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.963508][T12153] team0: Port device team_slave_0 added [ 244.970005][T12153] team0: Port device team_slave_1 added [ 245.020210][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.024993][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.036479][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.043029][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.046630][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 245.057923][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.150575][ T42] audit: type=1400 audit(2000000021.959:5206): avc: denied { write } for pid=12204 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.175635][T12153] hsr_slave_0: entered promiscuous mode [ 245.180075][T12153] hsr_slave_1: entered promiscuous mode [ 245.185265][T12153] debugfs: 'hsr0' already exists in 'hsr' [ 245.189835][T12153] Cannot create hsr debugfs directory [ 245.200398][ T42] audit: type=1400 audit(2000000022.009:5207): avc: denied { write } for pid=12209 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.406098][ T5808] bond3 (unregistering): (slave bond0): Releasing active interface [ 245.413530][ T5808] bond0 (unregistering): Released all slaves [ 245.423107][ T5808] bond1 (unregistering): Released all slaves [ 245.436689][ T5808] bond2 (unregistering): Released all slaves [ 245.459779][ T5808] bond3 (unregistering): Released all slaves [ 245.472273][ T5808] bond5 (unregistering): Released all slaves [ 245.497549][ T5437] 8021q: adding VLAN 0 to HW filter on device eth21 [ 245.595166][T12217] netlink: 'syz.5.2123': attribute type 4 has an invalid length. [ 245.747042][T12224] jffs2: notice: (12224) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 245.750620][T12226] netlink: 'syz.8.2124': attribute type 1 has an invalid length. [ 245.761859][ T42] audit: type=1400 audit(2000000022.569:5208): avc: denied { write } for pid=12221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.864790][ T42] audit: type=1400 audit(2000000022.669:5209): avc: denied { write } for pid=12230 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.941921][ T5437] 8021q: adding VLAN 0 to HW filter on device eth22 [ 245.981059][T12226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 246.047253][T12239] 8021q: adding VLAN 0 to HW filter on device bond7 [ 246.053820][T12239] bond6: (slave bond7): Enslaving as an active interface with a down link [ 246.194209][ T42] audit: type=1400 audit(2000000022.999:5210): avc: denied { write } for pid=12254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.224277][T12260] jffs2: notice: (12260) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 246.266181][ T5730] Bluetooth: hci1: command tx timeout [ 246.288543][ T42] audit: type=1400 audit(2000000023.089:5211): avc: denied { write } for pid=12263 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.592353][T12282] netlink: 'syz.8.2141': attribute type 4 has an invalid length. [ 246.728115][ T5437] 8021q: adding VLAN 0 to HW filter on device eth23 [ 246.976268][ T42] audit: type=1400 audit(2000000023.779:5212): avc: denied { write } for pid=12297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.052318][ T42] audit: type=1400 audit(2000000023.859:5213): avc: denied { write } for pid=12304 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.086680][T12309] netlink: 'syz.1.2150': attribute type 4 has an invalid length. [ 247.119863][T12312] netlink: 'syz.5.2151': attribute type 1 has an invalid length. [ 247.138575][ T5437] 8021q: adding VLAN 0 to HW filter on device eth24 [ 247.183557][T12312] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.192381][T12319] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 247.269572][T12318] 8021q: adding VLAN 0 to HW filter on device bond8 [ 247.272946][T12318] bond8: (slave gre1): The slave device specified does not support setting the MAC address [ 247.279807][T12318] bond8: (slave gre1): Error -95 calling set_mac_address [ 247.304392][T12312] gretap3: entered promiscuous mode [ 247.311283][T12312] bond8: (slave gretap3): making interface the new active one [ 247.316019][T12312] bond8: (slave gretap3): Enslaving as an active interface with an up link [ 247.364488][T12320] 8021q: adding VLAN 0 to HW filter on device bond9 [ 247.370370][T12320] bond8: (slave bond9): Enslaving as an active interface with a down link [ 247.450057][ T42] audit: type=1400 audit(2000000024.259:5214): avc: denied { write } for pid=12328 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.540061][T12342] netlink: 'syz.5.2159': attribute type 4 has an invalid length. [ 247.552534][ T42] audit: type=1400 audit(2000000024.359:5215): avc: denied { write } for pid=12339 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 247.707910][T12153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 247.721514][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.727414][T12153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 247.740664][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.744442][T12153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 247.751422][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.761636][T12153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 247.792053][T12153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 248.016931][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.032305][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.049700][ T8002] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.051947][ T8002] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.062668][ T8002] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.065345][ T8002] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.085443][T12387] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 248.264926][T12402] netlink: 'syz.5.2172': attribute type 4 has an invalid length. [ 248.346009][T12413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.348913][T12413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.351287][ T5730] Bluetooth: hci1: command tx timeout [ 248.464808][T12427] nvmet: Invalid value '117.0.0.1' for traddr [ 248.509350][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 248.539267][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.544730][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.549497][T12433] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 248.552140][T12153] veth0_vlan: entered promiscuous mode [ 248.553827][T12433] UDF-fs: Scanning with blocksize 512 failed [ 248.561056][T12153] veth1_vlan: entered promiscuous mode [ 248.563099][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.570583][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.574419][T12433] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 248.578470][T12433] UDF-fs: Scanning with blocksize 1024 failed [ 248.579831][T12153] veth0_macvtap: entered promiscuous mode [ 248.581469][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.594556][T12153] veth1_macvtap: entered promiscuous mode [ 248.597375][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.600589][T12433] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 248.603465][T12433] UDF-fs: Scanning with blocksize 2048 failed [ 248.606308][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 248.610006][T12433] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 248.613590][T12433] UDF-fs: warning (device nbd1): udf_load_vrs: No anchor found [ 248.616994][T12433] UDF-fs: Scanning with blocksize 4096 failed [ 248.617791][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.619410][T12433] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 248.625042][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.678635][ T5808] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.687989][ T5808] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.711486][T12443] netlink: 'syz.5.2182': attribute type 4 has an invalid length. [ 248.716888][ T5808] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.717220][ T8011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.720107][ T5808] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.741566][ T8011] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.763099][ T8011] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.768138][ T8011] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.934577][T12463] sctp: [Deprecated]: syz.2.2187 (pid 12463) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.934577][T12463] Use struct sctp_sack_info instead [ 249.034372][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'. [ 249.078270][T12474] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2191'. [ 249.089723][ T5808] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.094052][ T5808] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.098400][ T5808] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.102237][ T5808] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.229883][T12493] netlink: 'syz.5.2197': attribute type 1 has an invalid length. [ 249.275889][T12493] 8021q: adding VLAN 0 to HW filter on device bond10 [ 249.292542][T12493] 8021q: adding VLAN 0 to HW filter on device bond10 [ 249.296114][T12493] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 249.302334][T12493] bond10: (slave gre1): Error -95 calling set_mac_address [ 249.354236][T12507] 8021q: adding VLAN 0 to HW filter on device bond11 [ 249.370871][T12507] bond10: (slave bond11): Enslaving as an active interface with a down link [ 249.522474][T12516] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input19 [ 249.717088][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.719336][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 249.721063][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.728485][T12530] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.737535][T12530] UDF-fs: Scanning with blocksize 512 failed [ 249.749862][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.751196][ T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.755957][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.756127][T12531] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2204'. [ 249.764470][ T12] netdevsim netdevsim10 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.776017][T12530] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.786987][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.788417][T12530] UDF-fs: Scanning with blocksize 1024 failed [ 249.790514][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.802809][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.802816][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 249.814087][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.824002][T12530] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.833861][T12530] UDF-fs: Scanning with blocksize 2048 failed [ 249.851866][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 249.858072][T12530] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 249.863092][T12530] UDF-fs: warning (device nbd2): udf_load_vrs: No anchor found [ 249.866256][T12530] UDF-fs: Scanning with blocksize 4096 failed [ 249.868513][T12530] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 250.260474][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 250.260490][ T42] audit: type=1800 audit(2000000027.069:5245): pid=12573 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2217" name="streaming_maxpacket" dev="configfs" ino=58371 res=0 errno=0 [ 250.322469][T12579] netlink: 'syz.8.2227': attribute type 4 has an invalid length. [ 250.555869][ T9103] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 250.694563][T12605] netlink: 'syz.5.2232': attribute type 4 has an invalid length. [ 250.705846][ T9103] usb 7-1: Using ep0 maxpacket: 32 [ 250.713150][ T9103] usb 7-1: unable to get BOS descriptor or descriptor too short [ 250.714274][ T9103] usb 7-1: config 14 has an invalid interface number: 228 but max is 0 [ 250.714296][ T9103] usb 7-1: config 14 has no interface number 0 [ 250.714346][ T9103] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 250.714366][ T9103] usb 7-1: config 14 interface 228 has no altsetting 0 [ 250.717065][ T9103] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 250.717087][ T9103] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.717105][ T9103] usb 7-1: Product: syz [ 250.717118][ T9103] usb 7-1: Manufacturer: syz [ 250.717132][ T9103] usb 7-1: SerialNumber: syz [ 250.771006][T12608] bridge0: entered promiscuous mode [ 250.773754][T12608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.779353][T12608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.788010][T12602] kvm_pr_unimpl_wrmsr: 48 callbacks suppressed [ 250.788026][T12602] kvm: kvm [12601]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4cbfd1 [ 250.819031][T12608] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 250.822452][T12602] kvm: kvm [12601]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xda00 [ 250.823362][T12608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 250.837547][T12602] kvm: kvm [12601]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xb200 [ 250.837826][T12608] veth1_vlan: left promiscuous mode [ 250.844173][T12608] veth0_vlan: left promiscuous mode [ 250.848026][T12608] veth0_vlan: entered promiscuous mode [ 250.852053][T12608] veth1_vlan: entered promiscuous mode [ 250.855318][T12602] kvm: kvm [12601]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xa500 [ 250.858672][T12608] veth1_macvtap: left promiscuous mode [ 250.862012][T12608] veth0_macvtap: left promiscuous mode [ 250.865244][T12608] veth0_macvtap: entered promiscuous mode [ 250.868994][T12608] veth1_macvtap: entered promiscuous mode [ 250.875541][T12608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 250.879788][T12608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 250.883396][T12608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 250.887663][T12608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 250.893441][T12608] 8021q: adding VLAN 0 to HW filter on device bond1 [ 250.901431][T12602] kvm: kvm [12601]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x700007d00 [ 250.901804][T12608] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 250.910766][ T64] Bluetooth: hci1: command tx timeout [ 250.991085][ T5808] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.994727][ T5808] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.000893][ T5808] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.004628][ T5808] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.015935][ T5808] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.389727][T12630] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 251.430668][T12633] netlink: 'syz.1.2242': attribute type 1 has an invalid length. [ 251.461284][T12633] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.488605][T12633] 8021q: adding VLAN 0 to HW filter on device bond7 [ 251.491061][T12633] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 251.494973][T12633] bond7: (slave gre1): Error -95 calling set_mac_address [ 251.540924][T12635] 8021q: adding VLAN 0 to HW filter on device bond8 [ 251.552480][T12635] bond7: (slave bond8): Enslaving as an active interface with a down link [ 251.560535][T12635] bond7 (unregistering): (slave bond8): Releasing active interface [ 251.567547][T12635] bond7 (unregistering): Released all slaves [ 251.946610][T12578] comedi comedi0: reset error (fatal) [ 251.971121][ T9103] legousbtower 7-1:14.228: interrupt endpoints not found [ 251.976787][ T9103] usb 7-1: USB disconnect, device number 4 [ 252.035243][ T42] audit: type=1400 audit(2000000028.839:5246): avc: denied { unmount } for pid=8992 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 252.153875][T12665] netlink: 'syz.1.2253': attribute type 1 has an invalid length. [ 252.178921][T12665] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.209566][T12665] 8021q: adding VLAN 0 to HW filter on device bond7 [ 252.212786][T12665] bond7: (slave gre1): The slave device specified does not support setting the MAC address [ 252.218316][T12665] bond7: (slave gre1): Error -95 calling set_mac_address [ 252.264729][T12671] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.273210][T12671] bond7: (slave bond9): Enslaving as an active interface with a down link [ 252.285361][T12671] bond7 (unregistering): (slave bond9): Releasing active interface [ 252.290353][T12671] bond7 (unregistering): Released all slaves [ 252.348091][T12670] kvm: kvm [12669]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x300000088 [ 252.438181][T12670] kvm: kvm [12669]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x7b00000080 [ 252.468937][T12670] kvm: kvm [12669]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xff00000000 [ 252.473520][T12670] kvm: kvm [12669]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0xf500000080 [ 252.511948][T12670] kvm: kvm [12669]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0xff00000080 [ 252.590856][ T42] audit: type=1400 audit(2000000029.399:5247): avc: denied { read write } for pid=12700 comm="syz.2.2266" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 252.604722][ T42] audit: type=1400 audit(2000000029.399:5248): avc: denied { open } for pid=12700 comm="syz.2.2266" path="/12/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 252.627576][T12702] macvtap1: entered promiscuous mode [ 252.632912][T12702] macvtap1: entered allmulticast mode [ 252.659525][ T42] audit: type=1400 audit(2000000029.469:5249): avc: denied { read } for pid=12703 comm="syz.2.2267" path="socket:[56228]" dev="sockfs" ino=56228 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 252.693292][T12706] netlink: 'syz.2.2268': attribute type 1 has an invalid length. [ 252.761318][T12707] gretap1: entered promiscuous mode [ 252.850600][T12706] bond1 (unregistering): Released all slaves [ 252.909136][T12707] team0: Port device team_slave_0 removed [ 253.032124][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2279'. [ 253.125617][ T64] Bluetooth: hci1: Malformed LE Event: 0x0b [ 253.193107][T12743] macvtap1: entered promiscuous mode [ 253.195321][T12743] macvtap1: entered allmulticast mode [ 253.663039][T12777] netlink: 'syz.2.2295': attribute type 4 has an invalid length. [ 253.719332][ T42] audit: type=1400 audit(2000000000.100:5250): avc: denied { bind } for pid=12780 comm="syz.8.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.736072][ T42] audit: type=1400 audit(2000000000.100:5251): avc: denied { listen } for pid=12780 comm="syz.8.2297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.746959][T12783] netlink: 'syz.2.2298': attribute type 1 has an invalid length. [ 253.811020][T12786] gretap1: entered promiscuous mode [ 253.875574][T12783] bond1 (unregistering): Released all slaves [ 253.883362][ T42] audit: type=1400 audit(2000000000.260:5252): avc: denied { setattr } for pid=12791 comm="syz.1.2301" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.299977][T12808] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f802 [ 254.331715][ T64] Bluetooth: Unexpected start frame (len 12) [ 254.338787][ T64] Bluetooth: Wrong link type (-57) [ 254.354851][T12815] netlink: 'syz.1.2312': attribute type 4 has an invalid length. [ 254.441747][ T64] Bluetooth: hci1: Malformed LE Event: 0x0d [ 254.526929][ T64] Bluetooth: hci2: Malformed LE Event: 0x0b [ 254.604691][T12838] netlink: 'syz.1.2324': attribute type 4 has an invalid length. [ 254.838666][T12840] block nbd8: shutting down sockets [ 254.899464][T12862] device-mapper: ioctl: Invalid ioctl structure: name t, dev f803 [ 255.070731][ T42] audit: type=1800 audit(2000000001.450:5253): pid=12871 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2337" name="bmAttributes" dev="configfs" ino=59450 res=0 errno=0 [ 255.472324][T12890] block nbd1: shutting down sockets [ 255.485294][T12892] netlink: 'syz.8.2345': attribute type 1 has an invalid length. [ 255.522547][T12892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 255.553112][T12895] netlink: 'syz.2.2346': attribute type 4 has an invalid length. [ 255.567059][T12892] 8021q: adding VLAN 0 to HW filter on device bond9 [ 255.574432][T12892] bond8: (slave bond9): Enslaving as an active interface with a down link [ 255.602124][T12892] bond8 (unregistering): (slave bond9): Releasing active interface [ 255.611898][T12892] bond8 (unregistering): Released all slaves [ 255.632141][ T42] audit: type=1400 audit(2000000002.010:5254): avc: denied { append } for pid=12903 comm="syz.2.2350" name="card1" dev="devtmpfs" ino=3621 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 255.717917][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.725970][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.864003][T12925] netlink: 'syz.5.2359': attribute type 4 has an invalid length. [ 255.964717][ T42] audit: type=1400 audit(2000000002.340:5255): avc: denied { append } for pid=12936 comm="syz.1.2364" name="fb0" dev="devtmpfs" ino=3627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.976170][ T42] audit: type=1400 audit(2000000002.340:5256): avc: denied { map } for pid=12936 comm="syz.1.2364" path="/dev/fb0" dev="devtmpfs" ino=3627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 255.987888][ T42] audit: type=1400 audit(2000000002.340:5257): avc: denied { write execute } for pid=12936 comm="syz.1.2364" path="/dev/fb0" dev="devtmpfs" ino=3627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 256.050697][T12943] tipc: Started in network mode [ 256.054263][T12943] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 256.057713][T12943] tipc: Enabled bearer , priority 0 [ 256.154382][T12954] overlayfs: failed to clone upperpath [ 256.194340][T12957] netlink: 'syz.1.2372': attribute type 4 has an invalid length. [ 256.291771][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2377'. [ 256.324316][T12968] netlink: 'syz.8.2377': attribute type 1 has an invalid length. [ 256.331080][T12968] netlink: 'syz.8.2377': attribute type 2 has an invalid length. [ 256.334408][T12968] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2377'. [ 256.409000][T12974] syzkaller1: entered promiscuous mode [ 256.411000][T12974] syzkaller1: entered allmulticast mode [ 256.866780][T12986] netlink: 'syz.5.2382': attribute type 4 has an invalid length. [ 256.930671][T12993] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 257.057372][T13003] fuse: fd is not a fuse device [ 257.066608][ T5878] tipc: Node number set to 43690 [ 258.012043][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2412'. [ 258.015945][T13054] netlink: 'syz.1.2412': attribute type 1 has an invalid length. [ 258.019873][T13054] netlink: 'syz.1.2412': attribute type 2 has an invalid length. [ 258.036127][T13054] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2412'. [ 258.483760][T13072] syzkaller1: entered promiscuous mode [ 258.488347][T13072] syzkaller1: entered allmulticast mode [ 258.531642][ T42] audit: type=1800 audit(2000000004.910:5258): pid=13082 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.8.2424" name="buffered_io" dev="configfs" ino=61932 res=0 errno=0 [ 258.532149][T13082] nvmet: disable ns before setting buffered_io value. [ 258.653706][ T42] audit: type=1400 audit(2000000005.030:5259): avc: denied { write } for pid=13085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.687936][ T42] audit: type=1400 audit(2000000005.070:5260): avc: denied { setopt } for pid=13093 comm="syz.1.2428" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 258.724141][ T42] audit: type=1400 audit(2000000005.100:5261): avc: denied { write } for pid=13097 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 258.831093][T13107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.835273][T13107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.840697][T13109] netlink: 'syz.2.2434': attribute type 4 has an invalid length. [ 260.506211][ T42] audit: type=1400 audit(2000000006.880:5262): avc: denied { write } for pid=13133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.573709][ T42] audit: type=1400 audit(2000000006.950:5263): avc: denied { write } for pid=13142 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.618762][T13148] pim6reg: entered allmulticast mode [ 260.628741][T13146] pim6reg: left allmulticast mode [ 260.665852][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 260.665867][ T42] audit: type=1400 audit(2000000007.040:5265): avc: denied { write } for pid=13150 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.725569][ T42] audit: type=1400 audit(2000000007.100:5266): avc: denied { write } for pid=13153 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 260.834711][T13163] netlink: 'syz.5.2451': attribute type 7 has an invalid length. [ 261.181998][T13163] netlink: 'syz.5.2451': attribute type 7 has an invalid length. [ 261.196743][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.201910][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.208705][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.420480][ T42] audit: type=1400 audit(2000000009.800:5267): avc: denied { write } for pid=13187 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.484520][ T42] audit: type=1400 audit(2000000009.860:5268): avc: denied { write } for pid=13192 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.548844][T13195] binder: 13194:13195 ioctl c0306201 200000000040 returned -22 [ 263.619487][T13202] device-mapper: ioctl: only supply one of name or uuid, cmd(9) [ 263.698752][ T42] audit: type=1400 audit(2000000010.080:5269): avc: denied { load_policy } for pid=13203 comm="syz.1.2462" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 263.706042][T13205] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 263.709179][T13205] SELinux: invalid class [ 263.713235][T13205] SELinux: failed to load policy [ 264.777955][ T42] audit: type=1400 audit(2000000011.160:5270): avc: denied { mounton } for pid=13215 comm="syz.8.2464" path="/352/file0" dev="tmpfs" ino=1893 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 265.461287][T13233] loop7: detected capacity change from 0 to 16384 [ 265.652030][T13242] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 265.793421][T13251] netlink: 'syz.8.2482': attribute type 1 has an invalid length. [ 265.838778][ C0] I/O error, dev loop7, sector 13824 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 265.846103][ C0] I/O error, dev loop7, sector 14080 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 265.854182][T13238] loop7: detected capacity change from 16384 to 0 [ 265.855734][ C0] I/O error, dev loop7, sector 13824 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.861949][ C0] Buffer I/O error on dev loop7, logical block 1728, async page read [ 265.865603][ C0] I/O error, dev loop7, sector 13832 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.870284][ C0] Buffer I/O error on dev loop7, logical block 1729, async page read [ 265.873854][ C0] I/O error, dev loop7, sector 13840 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.878243][ C0] Buffer I/O error on dev loop7, logical block 1730, async page read [ 265.881803][ C0] I/O error, dev loop7, sector 13848 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 265.886239][ C0] Buffer I/O error on dev loop7, logical block 1731, async page read [ 265.911513][T13251] bond8 (unregistering): Released all slaves [ 265.914012][T13257] MTD: Couldn't look up './dev/mtdblock0': -2 [ 266.253533][ T42] audit: type=1400 audit(2000000012.630:5271): avc: denied { write } for pid=13272 comm="syz.2.2491" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.474156][T13285] netlink: 'syz.5.2497': attribute type 1 has an invalid length. [ 266.562297][T13285] bond12 (unregistering): Released all slaves [ 266.685845][T13297] jffs2: notice: (13297) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 2 orphan) and 3 of xref (0 dead, 2 orphan) found. [ 266.745535][ T42] audit: type=1400 audit(2000000013.130:5272): avc: denied { write } for pid=13296 comm="syz.2.2499" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.755600][ T42] audit: type=1400 audit(2000000013.130:5273): avc: denied { add_name } for pid=13296 comm="syz.2.2499" name="test2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.784435][ T42] audit: type=1400 audit(2000000013.130:5274): avc: denied { read write open } for pid=13296 comm="syz.2.2499" path="/59/mnt/test2" dev="jffs2" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 266.802274][ T42] audit: type=1400 audit(2000000013.150:5275): avc: denied { write } for pid=13296 comm="syz.2.2499" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 266.902393][T13312] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 267.112247][T13324] kvm: Disabled LAPIC found during irq injection [ 267.288774][T13330] gtp0: entered promiscuous mode [ 267.291483][T13330] gtp0: entered allmulticast mode [ 268.157064][ T42] audit: type=1400 audit(2000000014.530:5276): avc: denied { watch } for pid=13363 comm="syz.8.2529" path="/366/file0" dev="tmpfs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 268.167173][ T42] audit: type=1400 audit(2000000014.530:5277): avc: denied { watch_sb watch_reads } for pid=13363 comm="syz.8.2529" path="/366/file0" dev="tmpfs" ino=1966 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 268.224606][T13369] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 268.231465][T13369] binder: 13368:13369 ioctl 4018620d 200000004a80 returned -1 [ 268.525751][T13381] bond12 (unregistering): Released all slaves [ 268.862228][T13406] eql: remember to turn off Van-Jacobson compression on your slave devices [ 268.882605][T13406] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 269.627508][T13399] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 270.021620][T13437] xt_hashlimit: size too large, truncated to 1048576 [ 270.031443][T13438] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 271.092124][T13455] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 271.390675][ T42] audit: type=1400 audit(2000000017.770:5278): avc: denied { write } for pid=13474 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.478037][ T42] audit: type=1400 audit(2000000017.860:5279): avc: denied { write } for pid=13482 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.613208][ T42] audit: type=1400 audit(2000000017.990:5280): avc: denied { write } for pid=13492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.623034][T13498] syzkaller1: entered promiscuous mode [ 271.623059][T13498] syzkaller1: entered allmulticast mode [ 271.694026][ T42] audit: type=1400 audit(2000000018.070:5281): avc: denied { write } for pid=13502 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.920876][T13509] netlink: 'syz.5.2581': attribute type 8 has an invalid length. [ 271.924424][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2581'. [ 271.958078][T13511] netlink: 'syz.1.2582': attribute type 1 has an invalid length. [ 271.995374][T13511] 8021q: adding VLAN 0 to HW filter on device bond7 [ 272.038849][T13511] bond10 (unregistering): Released all slaves [ 272.365841][ T42] audit: type=1400 audit(2000000018.750:5282): avc: denied { write } for pid=13527 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.427545][ T42] audit: type=1400 audit(2000000018.810:5283): avc: denied { write } for pid=13533 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.538734][ T42] audit: type=1400 audit(2000000018.920:5284): avc: denied { write } for pid=13537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.601560][ T42] audit: type=1400 audit(2000000018.980:5285): avc: denied { write } for pid=13547 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 272.658696][T13551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.663018][T13551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.020658][T13561] xt_hashlimit: size too large, truncated to 1048576 [ 273.174776][T13570] binder: BINDER_SET_CONTEXT_MGR bad uid 60929 != 0 [ 273.178187][T13570] binder: 13569:13570 ioctl 4018620d 200000004a80 returned -1 [ 274.181256][T13605] overlayfs: failed to clone upperpath [ 274.438316][T13615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.461294][T13615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.815900][T13625] netlink: 'syz.8.2623': attribute type 1 has an invalid length. [ 274.920882][T13625] bond8 (unregistering): Released all slaves [ 275.149676][T13635] SELinux: failed to load policy [ 275.718058][ T42] audit: type=1400 audit(2000000022.100:5286): avc: denied { append } for pid=13667 comm="syz.2.2639" name="loop5" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 275.730206][T13668] loop5: detected capacity change from 0 to 7 [ 275.738687][T13668] loop5: p1 < > p3 p4 [ 275.740305][T13668] loop5: partition table partially beyond EOD, truncated [ 275.748894][T13668] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 275.816349][ T8061] udevd[8061]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 275.820628][ T8247] udevd[8247]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 275.825839][ T5732] udevd[5732]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 276.158092][T13689] coredump: 219(syz.2.2646): Core dump to core aborted: cannot preserve file permissions [ 276.306640][T13694] loop5: detected capacity change from 0 to 7 [ 276.310779][T13694] loop5: p1 < > p3 p4 [ 276.312783][T13694] loop5: partition table partially beyond EOD, truncated [ 276.328357][T13694] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 276.359005][T13699] netlink: 'syz.8.2650': attribute type 2 has an invalid length. [ 276.408493][ T6513] udevd[6513]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 276.412291][ T8247] udevd[8247]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 276.421353][ T5732] udevd[5732]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 276.858126][T13711] fuse: fd is not a fuse device [ 276.894306][T13714] netlink: 'syz.5.2655': attribute type 1 has an invalid length. [ 276.907287][T13714] bond12: entered promiscuous mode [ 276.909378][T13714] 8021q: adding VLAN 0 to HW filter on device bond12 [ 276.926313][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 276.930093][T13714] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2655'. [ 276.935879][ T1039] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 276.958533][T13714] bond12: (slave bridge2): making interface the new active one [ 276.961479][T13714] bridge2: entered promiscuous mode [ 276.965203][T13714] bond12: (slave bridge2): Enslaving as an active interface with an up link [ 277.087367][ T1039] usb 6-1: config 128 has an invalid interface number: 148 but max is 0 [ 277.092529][ T1039] usb 6-1: config 128 has no interface number 0 [ 277.095178][ T1039] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x7 has invalid wMaxPacketSize 0 [ 277.099207][ T1039] usb 6-1: config 128 interface 148 altsetting 9 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 277.103743][ T1039] usb 6-1: config 128 interface 148 has no altsetting 0 [ 277.109037][T13729] netlink: 'syz.5.2663': attribute type 2 has an invalid length. [ 277.111689][ T1039] usb 6-1: New USB device found, idVendor=0cf3, idProduct=e019, bcdDevice=fb.4f [ 277.116157][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.119609][ T1039] usb 6-1: Product: syz [ 277.121437][ T1039] usb 6-1: Manufacturer: syz [ 277.123441][ T1039] usb 6-1: SerialNumber: syz [ 277.348989][ T1039] usb 6-1: USB disconnect, device number 17 [ 277.549425][T13745] ip_tables: iptables: counters copy to user failed while replacing table [ 277.825984][ T5878] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 277.975837][ T5878] usb 6-1: Using ep0 maxpacket: 8 [ 277.980189][ T5878] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 277.983594][ T5878] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 277.987804][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 277.991749][ T5878] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 16 [ 277.995998][ T5878] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 278.001356][ T5878] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 278.005100][ T5878] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.225137][ T5878] usb 6-1: usb_control_msg returned -32 [ 278.228572][ T5878] usbtmc 6-1:16.0: can't read capabilities [ 278.293466][T13764] netlink: 'syz.5.2678': attribute type 4 has an invalid length. [ 278.652623][T13775] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2682'. [ 279.029749][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2683'. [ 279.065579][T13784] fuse: fd is not a fuse device [ 279.066125][T13783] ip_tables: iptables: counters copy to user failed while replacing table [ 279.110896][T13788] netlink: 'syz.8.2687': attribute type 4 has an invalid length. [ 279.210766][T13800] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2693'. [ 279.215770][T13800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2693'. [ 279.720766][T13812] netlink: 'syz.5.2697': attribute type 2 has an invalid length. [ 279.760022][T13815] netlink: 'syz.8.2698': attribute type 4 has an invalid length. [ 279.970118][ T5878] usb 6-1: USB disconnect, device number 18 [ 280.121958][T13840] netlink: 'syz.1.2708': attribute type 4 has an invalid length. [ 280.338492][ T42] audit: type=1400 audit(2000000026.710:5287): avc: denied { read append } for pid=13853 comm="syz.2.2714" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.352661][ T42] audit: type=1400 audit(2000000026.710:5288): avc: denied { open } for pid=13853 comm="syz.2.2714" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 280.413484][T13854] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.420554][T13854] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.424962][T13863] db_root: cannot be changed because it's in use [ 280.460903][T13854] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 280.475768][T13854] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.478654][T13854] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 280.486625][T13854] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.488630][T13854] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 280.509233][T13854] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 281.554213][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2743'. [ 282.009367][ T42] audit: type=1400 audit(2000000028.390:5289): avc: denied { open } for pid=13946 comm="syz.1.2753" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 282.125540][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2755'. [ 282.238281][T13955] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 282.241350][T13955] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 282.244270][T13955] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 282.683010][ T42] audit: type=1400 audit(2000000029.060:5290): avc: denied { write } for pid=13969 comm="syz.8.2762" name="/" dev="9p" ino=74212575 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.704111][ T42] audit: type=1400 audit(2000000029.080:5291): avc: denied { map } for pid=13969 comm="syz.8.2762" path="/416/file0/cpuacct.usage_user" dev="9p" ino=74212601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 283.246728][ T64] Bluetooth: unknown link type 85 [ 283.249562][ T64] Bluetooth: hci2: connection err: -111 [ 283.568720][T14004] netlink: 'syz.8.2776': attribute type 4 has an invalid length. [ 283.605813][ T9215] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 283.755840][ T9215] usb 7-1: Using ep0 maxpacket: 16 [ 283.759323][ T9215] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 283.763340][ T9215] usb 7-1: config 0 interface 0 has no altsetting 0 [ 283.771531][ T9215] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 283.774650][ T9215] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.777748][ T9215] usb 7-1: Product: syz [ 283.779192][ T9215] usb 7-1: Manufacturer: syz [ 283.780833][ T9215] usb 7-1: SerialNumber: syz [ 283.792250][ T9215] usb 7-1: config 0 descriptor?? [ 284.006549][ C3] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 284.014802][ T9215] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input20 [ 284.022622][ T9215] imon:send_packet: packet tx failed (-71) [ 284.035760][ T9215] imon 7-1:0.0: panel buttons/knobs setup failed [ 284.085824][ T9215] rc_core: IR keymap rc-imon-pad not found [ 284.087701][ T9215] Registered IR keymap rc-empty [ 284.089529][ T9215] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 284.092636][ T9215] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 284.095938][ T9215] imon:send_packet: packet tx failed (-71) [ 284.115947][ T9215] imon 7-1:0.0: remote input dev register failed [ 284.120499][T14019] bond13 (unregistering): Released all slaves [ 284.123251][ T9215] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 284.174839][ T9215] imon 7-1:0.0: unable to initialize intf0, err 0 [ 284.178493][ T9215] imon:imon_probe: failed to initialize context! [ 284.181062][ T9215] imon 7-1:0.0: unable to register, err -19 [ 284.186162][ T9215] usb 7-1: USB disconnect, device number 5 [ 284.266737][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 284.266797][ T5730] Bluetooth: hci3: command 0x0406 tx timeout [ 284.266853][ T5737] Bluetooth: hci2: command 0x0406 tx timeout [ 284.547983][T14037] netlink: 'syz.8.2788': attribute type 4 has an invalid length. [ 284.736780][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 284.849195][T14056] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2795'. [ 284.895796][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 284.900002][ T10] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.904445][ T10] usb 7-1: config 0 interface 0 has no altsetting 0 [ 284.908853][T14056] bond13 (unregistering): Released all slaves [ 284.910746][ T10] usb 7-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 284.915165][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.919867][ T10] usb 7-1: Product: syz [ 284.921559][ T10] usb 7-1: Manufacturer: syz [ 284.923440][ T10] usb 7-1: SerialNumber: syz [ 284.932841][ T10] usb 7-1: config 0 descriptor?? [ 284.996505][T14063] netlink: 'syz.8.2797': attribute type 4 has an invalid length. [ 285.148288][ T10] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input22 [ 285.338126][T14083] netlink: 'syz.5.2806': attribute type 4 has an invalid length. [ 285.346484][ C0] imon 7-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 285.350216][ T10] imon:send_packet: packet tx failed (-32) [ 285.365826][ T10] imon 7-1:0.0: panel buttons/knobs setup failed [ 285.422287][T14092] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2809'. [ 285.430068][ T10] rc_core: IR keymap rc-imon-pad not found [ 285.434959][ T10] Registered IR keymap rc-empty [ 285.440414][ T10] imon 7-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 285.447283][ T10] imon 7-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 285.453677][ T10] imon:send_packet: packet tx failed (-71) [ 285.462959][T14092] bond13 (unregistering): Released all slaves [ 285.473503][T14086] kvm: pic: non byte write [ 285.475997][ T10] imon 7-1:0.0: remote input dev register failed [ 285.479688][ T10] imon 7-1:0.0: imon_init_intf0: rc device setup failed [ 285.494245][ T10] imon 7-1:0.0: unable to initialize intf0, err 0 [ 285.496692][ T10] imon:imon_probe: failed to initialize context! [ 285.499234][ T10] imon 7-1:0.0: unable to register, err -19 [ 285.514635][ T10] usb 7-1: USB disconnect, device number 6 [ 285.555013][ T42] audit: type=1400 audit(2000000031.930:5292): avc: denied { map } for pid=14096 comm="syz.1.2810" path="pipe:[68112]" dev="pipefs" ino=68112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 285.567367][ T42] audit: type=1400 audit(2000000031.930:5293): avc: denied { execute } for pid=14096 comm="syz.1.2810" path="pipe:[68112]" dev="pipefs" ino=68112 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 285.725933][T14106] binder: 14105:14106 ioctl c0306201 0 returned -14 [ 285.750854][T14102] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 285.767278][T14111] Bluetooth: (null): Invalid header checksum [ 286.053351][T14120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2820'. [ 286.120350][T14120] bond10 (unregistering): Released all slaves [ 286.186517][T14132] binder: 14131:14132 ioctl c0306201 0 returned -14 [ 286.220053][T14130] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2824'. [ 286.345830][ T5730] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.348508][ T64] Bluetooth: hci2: command 0x0406 tx timeout [ 286.348565][ T5737] Bluetooth: hci3: command 0x0406 tx timeout [ 286.568791][ T42] audit: type=1400 audit(2000000032.950:5294): avc: denied { setopt } for pid=14150 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 286.577207][ T42] audit: type=1400 audit(2000000032.950:5295): avc: denied { create } for pid=14150 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.585532][ T42] audit: type=1400 audit(2000000032.950:5296): avc: denied { setopt } for pid=14150 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.594632][ T42] audit: type=1400 audit(2000000032.950:5297): avc: denied { connect } for pid=14150 comm="syz.1.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 286.701398][T14160] overlayfs: failed to clone upperpath [ 287.350888][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2849'. [ 287.431313][T14204] netlink: 'syz.2.2850': attribute type 4 has an invalid length. [ 287.465144][T14207] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2851'. [ 287.540100][T14197] bond13 (unregistering): Released all slaves [ 288.425872][ T5730] Bluetooth: hci2: command 0x0406 tx timeout [ 288.427844][ T5737] Bluetooth: hci1: command 0x0c1a tx timeout [ 289.459293][T14227] netlink: 'syz.8.2860': attribute type 4 has an invalid length. [ 289.491983][T14231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'. [ 289.500462][T14231] tipc: Enabling of bearer rejected, failed to enable media [ 289.521744][ T42] audit: type=1400 audit(2000000035.900:5298): avc: denied { write } for pid=14228 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.634308][T14240] binder_alloc: 14238: binder_alloc_buf size 24560 failed, no address space [ 289.635625][ T42] audit: type=1400 audit(2000000036.010:5299): avc: denied { write } for pid=14237 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.638977][T14240] binder_alloc: allocated: 8 (num: 1 largest: 8), free: 12280 (num: 1 largest: 12280) [ 289.740246][ T42] audit: type=1400 audit(2000000036.120:5300): avc: denied { ioctl } for pid=14246 comm="syz.5.2865" path="socket:[70100]" dev="sockfs" ino=70100 ioctlcmd=0x8904 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 289.864580][ T42] audit: type=1400 audit(2000000036.240:5301): avc: denied { write } for pid=14252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.061312][T14291] xt_nat: multiple ranges no longer supported [ 291.604713][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 291.604731][ T42] audit: type=1400 audit(2000000037.980:5335): avc: denied { ioctl } for pid=14298 comm="syz.8.2878" path="socket:[68539]" dev="sockfs" ino=68539 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 294.949690][T14362] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2902'. [ 295.023223][T14362] bond10 (unregistering): Released all slaves [ 295.173930][T14370] netlink: 'syz.1.2903': attribute type 4 has an invalid length. [ 295.360155][T14376] binder_alloc: 14375: pid 14375 spamming oneway? 1 buffers allocated for a total size of 4096 [ 295.375502][T14376] binder_alloc: 14375: pid 14375 spamming oneway? 2 buffers allocated for a total size of 5120 [ 295.448441][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2908'. [ 295.482589][T14382] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14382 comm=syz.2.2908 [ 295.587833][T14382] veth3: entered allmulticast mode [ 295.667811][T14382] bond1: (slave veth3): Enslaving as an active interface with an up link [ 295.773283][T14385] bond1 (unregistering): (slave veth3): Releasing backup interface [ 295.798783][T14385] bond1 (unregistering): Released all slaves [ 296.633119][T14393] 8021q: adding VLAN 0 to HW filter on device bond13 [ 296.712159][T14393] 8021q: adding VLAN 0 to HW filter on device bond14 [ 296.721565][T14393] bond13: (slave bond14): Enslaving as an active interface with an up link [ 296.826085][T14395] bond13 (unregistering): (slave bond14): Releasing backup interface [ 296.839828][T14395] bond13 (unregistering): Released all slaves [ 296.847618][T14399] netlink: 'syz.2.2912': attribute type 4 has an invalid length. [ 296.997130][T14403] sctp: [Deprecated]: syz.5.2914 (pid 14403) Use of struct sctp_assoc_value in delayed_ack socket option. [ 296.997130][T14403] Use struct sctp_sack_info instead [ 297.156413][ T42] audit: type=1400 audit(2000000043.540:5336): avc: denied { map } for pid=14406 comm="syz.5.2917" path="socket:[71695]" dev="sockfs" ino=71695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.160506][T14407] protocol 0000 is buggy, dev veth0_vlan [ 297.172428][ T42] audit: type=1400 audit(2000000043.540:5337): avc: denied { read write } for pid=14406 comm="syz.5.2917" path="socket:[71695]" dev="sockfs" ino=71695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 297.189746][T14409] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2916'. [ 297.199615][T14409] unsupported nlmsg_type 40 [ 297.319326][T14413] netlink: 'syz.5.2918': attribute type 1 has an invalid length. [ 297.333549][T14411] netlink: 'syz.2.2919': attribute type 2 has an invalid length. [ 297.342273][ T42] audit: type=1400 audit(2000000043.720:5338): avc: denied { connect } for pid=14410 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.406570][ T42] audit: type=1400 audit(2000000043.790:5339): avc: denied { write } for pid=14410 comm="syz.2.2919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 297.426863][T14419] netlink: 'syz.5.2921': attribute type 2 has an invalid length. [ 297.437799][T14419] netlink: 46 bytes leftover after parsing attributes in process `syz.5.2921'. [ 297.460657][T14419] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2921'. [ 297.923873][T14421] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 298.100933][ T42] audit: type=1400 audit(2000000044.480:5340): avc: denied { read } for pid=14386 comm="syz.1.2909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 298.168104][T14436] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 298.510207][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 298.558155][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 298.564544][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2932'. [ 298.900050][T14462] binder_alloc: 14461: pid 14461 spamming oneway? 1 buffers allocated for a total size of 4096 [ 298.912318][T14462] binder_alloc: 14461: pid 14461 spamming oneway? 2 buffers allocated for a total size of 5120 [ 299.283723][T14471] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 299.296219][ T42] audit: type=1400 audit(2000000045.680:5341): avc: denied { write } for pid=14468 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 299.767132][T14481] mac80211_hwsim hwsim5 syzkaller0: entered promiscuous mode [ 299.983027][T14483] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 300.093039][ T42] audit: type=1400 audit(2000000046.470:5342): avc: denied { write } for pid=14491 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.227591][ T42] audit: type=1400 audit(2000000046.610:5343): avc: denied { audit_write } for pid=14499 comm="syz.1.2946" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 300.356371][ T42] audit: type=1400 audit(2000000046.730:5344): avc: denied { write } for pid=14504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.441570][ T42] audit: type=1400 audit(2000000046.820:5345): avc: denied { write } for pid=14510 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.860069][T14535] syzkaller0: entered promiscuous mode [ 300.862199][T14535] syzkaller0: entered allmulticast mode [ 301.175361][T14548] bridge0: entered allmulticast mode [ 301.179182][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2960'. [ 301.191857][T14548] bridge0 (unregistering): left allmulticast mode [ 301.834312][T14566] netlink: 'syz.5.2967': attribute type 4 has an invalid length. [ 302.016563][T14570] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 302.019700][T14570] sock: sock_set_timeout: `syz.5.2970' (pid 14570) tries to set negative timeout [ 302.266872][T14600] netlink: 'syz.5.2978': attribute type 4 has an invalid length. [ 302.380434][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 302.380451][ T42] audit: type=1400 audit(2000000048.760:5351): avc: denied { wake_alarm } for pid=14606 comm="syz.8.2980" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 302.469676][ T42] audit: type=1400 audit(2000000048.850:5352): avc: denied { write } for pid=14606 comm="syz.8.2980" name="functions" dev="configfs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.492611][ T42] audit: type=1400 audit(2000000048.870:5353): avc: denied { write } for pid=14606 comm="syz.8.2980" name="c.1" dev="configfs" ino=18159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.506017][ T42] audit: type=1400 audit(2000000048.870:5354): avc: denied { write } for pid=14606 comm="syz.8.2980" name="c.1" dev="configfs" ino=18159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 302.911458][T14629] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2991'. [ 303.094239][T14638] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.123208][T14640] netlink: 'syz.1.2995': attribute type 2 has an invalid length. [ 303.127087][T14640] netlink: 46 bytes leftover after parsing attributes in process `syz.1.2995'. [ 303.147858][T14640] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2995'. [ 303.206352][T14638] tipc: Enabling of bearer rejected, failed to enable media [ 303.550483][T14667] syzkaller0: entered promiscuous mode [ 303.552955][T14667] syzkaller0: entered allmulticast mode [ 303.748801][T14672] fuse: fd is not a fuse device [ 304.145757][ T42] audit: type=1400 audit(2000000050.520:5355): avc: denied { mount } for pid=14679 comm="syz.5.3011" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 304.158930][ T42] audit: type=1400 audit(2000000050.540:5356): avc: denied { name_connect } for pid=14679 comm="syz.5.3011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 304.271233][T14687] fuse: fd is not a fuse device [ 304.444534][T14703] jffs2: notice: (14703) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 2 orphan) and 4 of xref (0 dead, 2 orphan) found. [ 304.485768][ T5598] nci: nci_ntf_packet: unknown ntf opcode 0x600 [ 306.179851][T14760] kAFS: No cell specified [ 306.191804][T14760] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3040'. [ 306.445254][T14764] mac80211_hwsim hwsim19 syzkaller0: entered promiscuous mode [ 306.449687][T14764] mac80211_hwsim hwsim19 syzkaller0: entered allmulticast mode [ 307.341739][T14694] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 307.400487][T14790] netlink: 'syz.8.3051': attribute type 8 has an invalid length. [ 307.403843][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3051'. [ 307.414133][T14790] bond0: entered promiscuous mode [ 307.418353][T14790] bond0: left promiscuous mode [ 307.507535][T14790] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3051'. [ 307.529735][ T42] audit: type=1800 audit(2000000053.910:5357): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3053" name="device_path" dev="configfs" ino=73932 res=0 errno=0 [ 307.537104][ T42] audit: type=1800 audit(2000000053.920:5358): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3053" name="enable" dev="configfs" ino=73933 res=0 errno=0 [ 307.544000][ T42] audit: type=1800 audit(2000000053.920:5359): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3053" name="addr_trtype" dev="configfs" ino=72276 res=0 errno=0 [ 307.549254][T14795] nvmet_tcp: malformed ip/port passed: 127.0.0.1: [ 307.552515][ T42] audit: type=1800 audit(2000000053.920:5360): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3053" name="addr_adrfam" dev="configfs" ino=72277 res=0 errno=0 [ 307.552556][ T42] audit: type=1800 audit(2000000053.920:5361): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3053" name="addr_traddr" dev="configfs" ino=72278 res=0 errno=0 [ 307.552620][ T42] audit: type=1800 audit(2000000053.920:5362): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.3053" name="addr_trsvcid" dev="configfs" ino=72279 res=0 errno=0 [ 307.552656][ T42] audit: type=1400 audit(2000000053.920:5363): avc: denied { write } for pid=14794 comm="syz.2.3053" name="subsystems" dev="configfs" ino=52260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.552678][ T42] audit: type=1400 audit(2000000053.920:5364): avc: denied { write } for pid=14794 comm="syz.2.3053" name="subsystems" dev="configfs" ino=52260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.762970][ T42] audit: type=1400 audit(2000000054.140:5365): avc: denied { write } for pid=14800 comm="syz.8.3055" name="functions" dev="configfs" ino=12653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.772011][ T42] audit: type=1400 audit(2000000054.150:5366): avc: denied { write } for pid=14800 comm="syz.8.3055" name="target" dev="configfs" ino=5346 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 307.772521][T14801] [ 307.780561][T14801] ====================================================== [ 307.783562][T14801] WARNING: possible circular locking dependency detected [ 307.786418][T14801] syzkaller #0 Tainted: G L [ 307.789055][T14801] ------------------------------------------------------ [ 307.791829][T14801] syz.8.3055/14801 is trying to acquire lock: [ 307.794299][T14801] ffff88802008d6c0 (&sb->s_type->i_mutex_key#31){++++}-{4:4}, at: configfs_depend_item_unlocked+0xf3/0x6a0 [ 307.799274][T14801] [ 307.799274][T14801] but task is already holding lock: [ 307.802342][T14801] ffff888062a62918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 307.806398][T14801] [ 307.806398][T14801] which lock already depends on the new lock. [ 307.806398][T14801] [ 307.810504][T14801] [ 307.810504][T14801] the existing dependency chain (in reverse order) is: [ 307.814644][T14801] [ 307.814644][T14801] -> #2 (&opts->dep_lock){+.+.}-{4:4}: [ 307.818019][T14801] lock_acquire+0x1b9/0x370 [ 307.820058][T14801] __mutex_lock+0x1a4/0x1bd0 [ 307.822262][T14801] tcm_set_name+0x29/0xb0 [ 307.824183][T14801] function_make+0x21c/0x3f0 [ 307.826324][T14801] configfs_mkdir+0x51e/0xb70 [ 307.828461][T14801] vfs_mkdir+0x361/0x850 [ 307.830566][T14801] filename_mkdirat+0x48b/0x5e0 [ 307.832273][T14801] __x64_sys_mkdirat+0x89/0xc0 [ 307.834442][T14801] do_syscall_64+0x115/0x870 [ 307.836463][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.838570][T14801] [ 307.838570][T14801] -> #1 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 307.841539][T14801] lock_acquire+0x1b9/0x370 [ 307.843535][T14801] __mutex_lock+0x1a4/0x1bd0 [ 307.845420][T14801] uvcg_streaming_header_allow_link+0x7c/0x650 [ 307.847567][T14801] configfs_symlink+0x540/0x11f0 [ 307.849743][T14801] vfs_symlink+0x178/0x4d0 [ 307.851647][T14801] filename_symlinkat+0x2a6/0x560 [ 307.853420][T14801] __x64_sys_symlinkat+0x9c/0xe0 [ 307.855536][T14801] do_syscall_64+0x115/0x870 [ 307.857506][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.859424][T14801] [ 307.859424][T14801] -> #0 (&sb->s_type->i_mutex_key#31){++++}-{4:4}: [ 307.862844][T14801] check_prev_add+0xeb/0xe60 [ 307.864648][T14801] __lock_acquire+0x136c/0x1a40 [ 307.866644][T14801] lock_acquire+0x1b9/0x370 [ 307.868637][T14801] down_write+0x8b/0x1f0 [ 307.870475][T14801] configfs_depend_item_unlocked+0xf3/0x6a0 [ 307.872475][T14801] usbg_make_tpg+0x261/0x620 [ 307.874396][T14801] target_fabric_make_tpg+0xab/0x8c0 [ 307.876729][T14801] configfs_mkdir+0x51e/0xb70 [ 307.878377][T14801] vfs_mkdir+0x361/0x850 [ 307.879954][T14801] filename_mkdirat+0x48b/0x5e0 [ 307.882049][T14801] __x64_sys_mkdirat+0x89/0xc0 [ 307.883896][T14801] do_syscall_64+0x115/0x870 [ 307.885485][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.887919][T14801] [ 307.887919][T14801] other info that might help us debug this: [ 307.887919][T14801] [ 307.891883][T14801] Chain exists of: [ 307.891883][T14801] &sb->s_type->i_mutex_key#31 --> gadget_subsys.su_mutex --> &opts->dep_lock [ 307.891883][T14801] [ 307.898447][T14801] Possible unsafe locking scenario: [ 307.898447][T14801] [ 307.901520][T14801] CPU0 CPU1 [ 307.903736][T14801] ---- ---- [ 307.905950][T14801] lock(&opts->dep_lock); [ 307.907834][T14801] lock(gadget_subsys.su_mutex); [ 307.910970][T14801] lock(&opts->dep_lock); [ 307.913927][T14801] lock(&sb->s_type->i_mutex_key#31); [ 307.916300][T14801] [ 307.916300][T14801] *** DEADLOCK *** [ 307.916300][T14801] [ 307.919656][T14801] 5 locks held by syz.8.3055/14801: [ 307.921913][T14801] #0: ffff888024ab6450 (sb_writers#19){.+.+}-{0:0}, at: filename_create+0x10d/0x400 [ 307.925866][T14801] #1: ffff888039ac4880 (&sb->s_type->i_mutex_key#7/1){+.+.}-{4:4}, at: filename_create+0x1c0/0x400 [ 307.930112][T14801] #2: ffffffff8fd80be8 (&subsys->su_mutex){+.+.}-{4:4}, at: configfs_mkdir+0x4b5/0xb70 [ 307.934015][T14801] #3: ffffffff9024bf00 (tpg_instances_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x10b/0x620 [ 307.938097][T14801] #4: ffff888062a62918 (&opts->dep_lock){+.+.}-{4:4}, at: usbg_make_tpg+0x1a4/0x620 [ 307.941834][T14801] [ 307.941834][T14801] stack backtrace: [ 307.944734][T14801] CPU: 3 UID: 0 PID: 14801 Comm: syz.8.3055 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.944765][T14801] Tainted: [L]=SOFTLOCKUP [ 307.944774][T14801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.944787][T14801] Call Trace: [ 307.944804][T14801] [ 307.944812][T14801] dump_stack_lvl+0x100/0x190 [ 307.944851][T14801] print_circular_bug.cold+0x178/0x1c7 [ 307.944895][T14801] check_noncircular+0x146/0x160 [ 307.944922][T14801] check_prev_add+0xeb/0xe60 [ 307.944947][T14801] __lock_acquire+0x136c/0x1a40 [ 307.944976][T14801] ? rcu_is_watching+0x12/0xc0 [ 307.945009][T14801] lock_acquire+0x1b9/0x370 [ 307.945030][T14801] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 307.945058][T14801] ? __pfx___might_resched+0x10/0x10 [ 307.945082][T14801] down_write+0x8b/0x1f0 [ 307.945109][T14801] ? configfs_depend_item_unlocked+0xf3/0x6a0 [ 307.945134][T14801] ? __pfx_down_write+0x10/0x10 [ 307.945162][T14801] configfs_depend_item_unlocked+0xf3/0x6a0 [ 307.945188][T14801] ? __lock_acquire+0x49f/0x1a40 [ 307.945211][T14801] usbg_make_tpg+0x261/0x620 [ 307.945233][T14801] ? __pfx_usbg_make_tpg+0x10/0x10 [ 307.945254][T14801] ? find_held_lock+0x2b/0x80 [ 307.945270][T14801] ? __pfx_usbg_make_tpg+0x10/0x10 [ 307.945290][T14801] target_fabric_make_tpg+0xab/0x8c0 [ 307.945319][T14801] configfs_mkdir+0x51e/0xb70 [ 307.945345][T14801] ? __pfx_target_fabric_make_tpg+0x10/0x10 [ 307.945374][T14801] ? __pfx_configfs_mkdir+0x10/0x10 [ 307.945401][T14801] ? inode_permission+0x374/0x620 [ 307.945429][T14801] vfs_mkdir+0x361/0x850 [ 307.945456][T14801] filename_mkdirat+0x48b/0x5e0 [ 307.945477][T14801] ? __pfx_filename_mkdirat+0x10/0x10 [ 307.945496][T14801] ? strncpy_from_user+0x19d/0x2d0 [ 307.945530][T14801] ? do_getname+0x191/0x390 [ 307.945554][T14801] __x64_sys_mkdirat+0x89/0xc0 [ 307.945571][T14801] do_syscall_64+0x115/0x870 [ 307.945592][T14801] ? clear_bhb_loop+0x70/0xc0 [ 307.945612][T14801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.945631][T14801] RIP: 0033:0x7fead6b9e0d9 [ 307.945647][T14801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.945664][T14801] RSP: 002b:00007fead799d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 307.945681][T14801] RAX: ffffffffffffffda RBX: 00007fead6e25fa0 RCX: 00007fead6b9e0d9 [ 307.945693][T14801] RDX: 00000000000001ff RSI: 0000200000000740 RDI: ffffffffffffff9c [ 307.945705][T14801] RBP: 00007fead6c35024 R08: 0000000000000000 R09: 0000000000000000 [ 307.945716][T14801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.945725][T14801] R13: 00007fead6e26038 R14: 00007fead6e25fa0 R15: 00007ffec72c4a38 [ 307.945743][T14801] [ 312.716600][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 312.716660][ T42] audit: type=1400 audit(2000000059.099:5369): avc: denied { write } for pid=14803 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.748746][ T42] audit: type=1400 audit(2000000059.129:5370): avc: denied { write } for pid=14806 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.157799][ T1436] ieee802154 phy1 wpan1: encryption failed: -22