last executing test programs: 2m2.899257868s ago: executing program 32 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = msgget$private(0x0, 0x3ac) msgrcv(r0, 0x0, 0x0, 0xced6b2bc496a26e6, 0x0) msgsnd(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="0200800000df00003a50d3affd62699c40a34d74bb627ab2734f4011f9f371386b0b7d2d14aeae91baf54d7f71f1a3d030fd346274634fb492545ead0a2dd2ba57e2898320e67a0aac67181b1669bb1869368e034162d77070070ec1fcc19685a2e36d"], 0x8, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) msgctl$IPC_RMID(r0, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) msgrcv(r0, &(0x7f0000000180)={0x0, ""/91}, 0x63, 0x3, 0x800) ioctl$AUTOFS_DEV_IOCTL_VERSION(r1, 0xc0189371, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r3, &(0x7f00000003c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x2, 0x5, 0x8, 0x3, 0x1, {0x4, 0x57f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x80000000, 0xfffffffe, 0x8000, 0x40002, 0x0, 0x0, 0x3ff, 0x1}}}}, 0xa0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x202) prctl$PR_SET_NAME(0xf, &(0x7f0000000040)='\xc0\a\xb0\xfd\xa3\x1c\n\x17\x1b\xfa\x81 \xdd!\xd9\xeb\x1d\nW\xc1\x81p\x92\nH\xb0i\x03\xbdv\xb4<\xb3\x7f/E+\x12\xf9\x1c\xf3\xad\x80\x9dxa\xbf\xa2\t\xee\xdc\xae\x19d\xa9\xb5\x8f\xb1\xfa\xb6)\v\xb8\xa7\xb1\xf0\xb7ysd\xe15\b\xe9\x91\xb6\xec\x8f\x922]\xe3\x0ez\xcd\x04\r\xb0\xe8\xff\xcd\xf8\xb6>\xe2\xa5\x04\xa9\v\x0f\xf2A\xf2\xf5\xf2\xd2\x1a\t\xf9R\xc6\xddO') ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2d, &(0x7f0000000040)) read$FUSE(0xffffffffffffffff, &(0x7f0000003340)={0x2020}, 0x2020) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r4, 0x40bc5311, &(0x7f0000000100)={0x80, 0x1, 'client1\x00', 0xffffffff80000004, "00000000ffffffe3", "71a19060009f0000000000000000001aa241d3c6895c4100", 0x800000}) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r6) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0) read(r8, &(0x7f0000000b00), 0x64) 1m43.514009649s ago: executing program 4 (id=477): r0 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, r0, 0x300, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x4000001) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CCA_MODE(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x24}}, 0x24000004) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) bind$nfc_llcp(r8, &(0x7f0000000440)={0x27, r5, 0x1, 0x3, 0x1, 0x6, "30eefbef66234f7bfa85b7db9ea3e1bf20d5be11f4df857ec5c8ca4d80739277ecc10b818f96e6fd46c3388443b9ec8c90f2a0ec609916b9889c5923fd4755", 0x1}, 0x60) fcntl$setsig(r8, 0xa, 0x34) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x7, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd06, 0x0, 0x0, 0x0, 0x3}, [@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0xa7}]}, &(0x7f0000000500)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x20, '\x00', r9, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x0, 0x5, 0xffff}, 0x10, 0x0, 0xffffffffffffffff, 0x4, &(0x7f0000000600)=[0x1, r8], &(0x7f0000000640)=[{0x5, 0x2, 0x1, 0x7}, {0x0, 0x5, 0xf, 0x2}, {0x0, 0x5, 0x8, 0x1}, {0x0, 0x3, 0xc, 0x1}], 0x10, 0x7}, 0x94) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000740)) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$DRM_IOCTL_MARK_BUFS(r8, 0x40206417, &(0x7f0000000780)={0x9, 0x1, 0x2, 0x5, 0x1a, 0xfcb2}) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000008c0)={@ifindex=r9, 0x7, 0x0, 0x3d, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000800)=[0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0]}, 0x40) ioctl$sock_SIOCGSKNS(r8, 0x894c, &(0x7f0000000900)=0x9) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000980), r6) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r12, 0x100, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0xc010) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000000a80)) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$team(&(0x7f0000000b00), r8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000b40)={'wg1\x00', 0x0}) getsockopt$inet6_mreq(r8, 0x29, 0x15, &(0x7f0000000b80)={@mcast2, 0x0}, &(0x7f0000000bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000c00)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c40)={'ip6gre0\x00', r11, 0x2f, 0xa7, 0xfe, 0x5de, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @empty}, 0x10, 0x8, 0x3, 0x8}}) sendmsg$TEAM_CMD_OPTIONS_SET(r13, &(0x7f0000001a00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000019c0)={&(0x7f0000000d00)={0xcb4, r14, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{{0x8, 0x1, r11}, {0x1a8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffffa9ef}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8, 0x1, r9}, {0x254, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}]}}, {{0x8, 0x1, r9}, {0x24c, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8, 0x6, r11}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2, 0x7, 0x99, 0x4}, {0xfffd, 0x6, 0x6}, {0x3f, 0x9, 0x0, 0x3}, {0x40, 0x8, 0x5, 0x1}]}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r17}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x909}}}]}}, {{0x8, 0x1, r11}, {0x1ec, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xc6c7}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xb}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xffff0e7c}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x2, 0xb, 0x1, 0x7fffffff}]}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r18}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r11}, {0x160, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xdf}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xa8}}, {0x8, 0x6, r11}}}]}}]}, 0xcb4}, 0x1, 0x0, 0x0, 0x8}, 0x0) 1m43.452594428s ago: executing program 4 (id=478): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x2008010}, 0x40000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x8, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1a649133, 0x65}}}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) 1m43.393901614s ago: executing program 4 (id=479): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ipvlan0\x00', &(0x7f0000000000)=@ethtool_cmd={0x3, 0x8, 0x3, 0xb, 0x6, 0x6, 0xa, 0xd7, 0x2, 0x1, 0x3ff, 0x2, 0x3, 0x80, 0x3, 0x9, [0x800, 0x9]}}) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0xfe8e, 0x12) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x149802, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x8f, 0x0, 0x10}]}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m43.235371518s ago: executing program 4 (id=480): r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2040, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYRES64=r0, @ANYRESDEC=0x0]) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (rerun: 32) r2 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x34}}, 0x0) (async, rerun: 64) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@delneigh={0x60, 0x1d, 0x200, 0x70bd2a, 0x25dfdbff, {0x1c, 0x0, 0x0, r4, 0x1, 0xda}, [@NDA_NH_ID={0x8, 0xd, 0x10001}, @NDA_VNI={0x8, 0x7, 0x5}, @NDA_LINK_NETNSID={0x8, 0xa, 0xff}, @NDA_DST_IPV6={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0xf}}, @NDA_LINK_NETNSID={0x8, 0xa, 0x7f}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, @NDA_NH_ID={0x8, 0xd, 0x8000}]}, 0x60}}, 0x0) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x2, 0x0) write(r5, &(0x7f00000000c0)='0\n\x00', 0x2) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x0, 0x0) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r7, 0x1) write(r7, 0x0, 0x0) (async) read(r6, &(0x7f0000000100)=""/16, 0x10) (async) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r8, &(0x7f0000000100)='./file0\x00', 0x220) 1m43.235091678s ago: executing program 4 (id=481): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x4, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x8, "b546baa5cc590d3033de259c2996817bb959ebab028deda501009bdeffafde25", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000001c0)={"0080bced01eb0100000000000000000700000000000000c900", r3, 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r4, 0xc0383e04, &(0x7f00000003c0)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000000)=[0x0], 0x1, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_STATUS32(r5, 0x806c4120, &(0x7f0000000140)) syz_emit_ethernet(0x101, &(0x7f0000000200)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x22, 0xf3, 0x66, 0x0, 0xe0, 0x2f, 0x0, @local, @remote}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x97, 0x2, [], "ec9d216a25eecd2e250d5568edc87fb936a25f0d795bd5b0854800d0d142b655366e413a167f632faf68cec1df0a4f412a5026fc2f87c259ecab8455df60f8a704aad5bd1f0559bf592436c4738dffb3eb85f001446db8a99dab42e122bec37cf5e7f601b757359eaa1059e13d0b1fe823e716c3e9b4ff8d55725ffe237b668ce61de0812b5c049c84df0b58fdbf9eeb8ea22754b1ba06"}, {0x0, 0x0, 0x1}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x6]}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x80, 0x3, 0x1, 0x0, 0x3, 0x9}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x4, {{0x7, 0x2, 0x1, 0x3, 0x1, 0x0, 0x3, 0xfe}, 0x2, {0x7, 0x1, 0x0, 0x5, 0x0, 0x0, 0x3, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) 1m42.904300913s ago: executing program 4 (id=483): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @loopback, 0x10000004}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000000)={0x3, 0x8, 0x4, 0x6ff59a63, 0x6}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 1m42.831073726s ago: executing program 33 (id=483): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000440)={0xa, 0x4e01, 0x3, @loopback, 0x10000004}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000040)) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x8044) r3 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TIOCSISO7816(r3, 0xc0285443, &(0x7f0000000000)={0x3, 0x8, 0x4, 0x6ff59a63, 0x6}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 1m17.370845937s ago: executing program 1 (id=869): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001f00)=ANY=[@ANYBLOB="200000005e00250e00000000000000000c000080eec47c8e670527ab04000180"], 0x20}], 0x1}, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x103000, 0x0) (async) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) (async) setsockopt$sock_attach_bpf(r2, 0x1, 0x31, &(0x7f0000000000), 0x4) (async) ioctl$KVM_GET_MSRS_sys(r1, 0xc008ae88, &(0x7f00000003c0)={0x1, 0x0, [{0x8b, 0x0, 0x8}]}) 1m17.368841137s ago: executing program 1 (id=870): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000001a80)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0xed83, @local, 0xf797}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000000140)="984ba75417e9e6915559405de63e0396dc3b39389804fdb684e1065be3d26c618e612c84a60d435b34255d5fda64d5665ea2acf44e75783dabe9d559463f7d39d38b07985ff6821cfc91501736b527d0", 0x50}, {&(0x7f00000001c0)="7c76c31e1321865fe0f21fdeeb4246f2fc4e7f72ea3318498f7f80f2902d27fa12edb17097f758bcf3e17a4859f58b23b0af75df462e284b4bec828a85313dbd5e2d40270170b8ee0560bad86953b961d3c37118b0bf205fa45756baf808f45c28920921e4327618ea22c4b6e3ddb69dadfed8b6efec47a64c84b3c977e12e18d6bf95", 0x83}], 0x2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x1b8}}, {{&(0x7f0000000480)={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00', 0xf}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000004c0)="c5adc44baf0ae968817cd893980df575aaea4ca2a7134b92ba3099887aad0439abde279b105080797c441d44e34446ebba4e03818c52", 0x36}], 0x1}}, {{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000540)="a85397635363ed7eb0d5d81024cac5fc9a7faad6f7521706cef43f954f76f3e223d49b107c49cc576303abd9ee5a52644aeb15bfbbe85729c20279ddd40eae3d303bf8b0c480918f62e1eb72417d88057856a9e32b9d9115410009ac2326dcc0fad2d5c35906e11045f7125f0dfb1172fb4688855d7db9e63341b45d83eac6a270372a685b62beec71a00fa73cd8e2297049247b8e107e7cc7200698c06c2b35899239b3c19580277c6fca0d18adafa87e37670ee167c90326f5c53a", 0xbc}, {&(0x7f0000000600)="9386446c74e449b059cb7c9e01a842d010e4e4802fcea1207441140a4db3f3f07dbad2ab5987a1e94fa6eb0281a67740d4fe61ceb08c0d4071cfe6623227ac4bc2ec125107e665afe37cc1511255af1018ff50b6e1c85dc551b3821b01a084aaaed519e5a29c8c4c956e6ab80b508c8166aae165c00f58cb9a87625effb05ee55b0622a433c423d809b80ff327e6743268215b4b255c2418b4256cb6d5ccb92ef7d0c10807f5cd4403fa7cd82091948eb2f2b9b6d3e85c52fbd68d", 0xbb}, {&(0x7f00000006c0)="145fbd83242435a34fa7b7625a90e10565362f2dbf6d4acd661d929488ad67d2e277d4fdec161e61ae03090d379844a02820be8e1319b48d3a7b81b7bf8034cd73734009333901444b244699705729a015f1d3df025d8840d56cd1f688855e9b43329942cf4469b3387b8f0942dd1fbcf4", 0x71}, {&(0x7f0000000740)="149eb5b6fe6de33b6cd687e60309f5b08710f8bb3206f40f08c81e00b5d1d556f6a3e0576c6ebb68cdaa7383c13c9ede351663a6130cd03a1b0397d9331db8a44bc3d0ee3f3360e10124e8a5d8072f6be48c44e8aa691c1a00dfa31cf4422aa2f2dcf33746af2a186bd3f530df30da", 0x6f}, {&(0x7f00000007c0)="9e8849a2c98afd7cdba092b6c9777b9800590dd313f73a1228968477b2868eca331db4b4b5fe81667f6ec378aaa998e3df1dfb786ab9dc3865f0b4a2676a266f32cb5ef57f7380fbefe55be8ef2ba6d042bbf3c4450a17e4bc6b7de91a9163d672ba6f4bc179ca1e8e30dfe56f8792b9967ffd3158874ecdda1466b7620a0a6ab8eafec1dd710530c2377d6ca3e3664bd27931b443af10db9e8ce82a259ba9c8604b3625ea52067aee3495ab872d1795f16084362cead4431b93bc495819", 0xbe}, {&(0x7f0000000880)="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", 0x1000}], 0x6, &(0x7f00000019c0)=[@hopopts={{0x50, 0x29, 0x36, {0x1d, 0x6, '\x00', [@calipso={0x7, 0x30, {0x1, 0xa, 0x7, 0x2, [0xffffffff, 0x4, 0x8, 0x3, 0x8]}}]}}}, @dstopts_2292={{0x58, 0x29, 0x4, {0x84, 0x7, '\x00', [@generic={0x8, 0x32, "7c7be4c5de81c496ebc7627d8f60842d035aaac77fcbd4cc44bc6460bceaccc8b4739c797af66c0c6cb018bb12f42a05df9d"}, @jumbo={0xc2, 0x4, 0x7b}]}}}], 0xa8}}], 0x3, 0x800) sendto$inet6(r0, 0x0, 0x0, 0x40080c4, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000001b40)={'ip_vti0\x00', &(0x7f0000001900)={'sit0\x00', 0x0, 0x20, 0x80, 0x5, 0x10, {{0xb, 0x4, 0x2, 0x33, 0x2c, 0x68, 0x0, 0x5, 0x29, 0x0, @remote, @private=0xa010101, {[@end, @end, @cipso={0x86, 0x14, 0xffffffffffffffff, [{0x7, 0xe, "7e5fe7b733a9de8b817867a9"}]}]}}}}}) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x80) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000001b80)={@mcast1, 0xc, r1}) 1m17.218138112s ago: executing program 1 (id=871): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async, rerun: 32) ptrace$peekuser(0x3, r0, 0x380) (async, rerun: 32) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x38, r2, 0x1, 0x70bd2e, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x9b}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000800}, 0x90) 1m17.135105087s ago: executing program 1 (id=872): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'wg0\x00', @ifru_map={0x7, 0x8, 0xffff, 0x84, 0x9, 0x5}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}}, 0x4018) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)) 1m17.049071282s ago: executing program 1 (id=873): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) 1m16.965379785s ago: executing program 1 (id=874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "fc219b996f30c6e5ca8a0b75c0a0465a"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001840)={0x0, "edde1dacfa7af9050ce8b2f009e62fa9"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002840)={0xd, 0x0, {0x8, @usage=0x1, r1, 0xf0, 0x69bc, 0x200, 0x891, 0x3, 0x2, @usage=0x10001, 0x0, 0x1, [0x2, 0x5, 0x0, 0x3, 0x8, 0x4]}, {0x4, @usage=0x1, r2, 0x7, 0x6, 0x7c, 0x7, 0x9, 0x448, @usage=0x7f, 0xc6, 0xe1, [0x5, 0x9, 0x0, 0x0, 0xeff, 0x8]}, {0xfff, @usage=0x6, r3, 0xf0ec, 0x1, 0x7f, 0x9, 0xe9d6, 0x0, @struct={0x3, 0x3ff}, 0x7, 0x3, [0x2, 0x4, 0x3, 0x4f4a, 0x100000000, 0x7e]}, {0x100, 0x8, 0x2}}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 1m16.940645858s ago: executing program 34 (id=874): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, &(0x7f0000000000)) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000440)={0x0, "fc219b996f30c6e5ca8a0b75c0a0465a"}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000001440)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000001840)={0x0, "edde1dacfa7af9050ce8b2f009e62fa9"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000002840)={0xd, 0x0, {0x8, @usage=0x1, r1, 0xf0, 0x69bc, 0x200, 0x891, 0x3, 0x2, @usage=0x10001, 0x0, 0x1, [0x2, 0x5, 0x0, 0x3, 0x8, 0x4]}, {0x4, @usage=0x1, r2, 0x7, 0x6, 0x7c, 0x7, 0x9, 0x448, @usage=0x7f, 0xc6, 0xe1, [0x5, 0x9, 0x0, 0x0, 0xeff, 0x8]}, {0xfff, @usage=0x6, r3, 0xf0ec, 0x1, 0x7f, 0x9, 0xe9d6, 0x0, @struct={0x3, 0x3ff}, 0x7, 0x3, [0x2, 0x4, 0x3, 0x4f4a, 0x100000000, 0x7e]}, {0x100, 0x8, 0x2}}) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='ocfs2\x00', 0x0, &(0x7f0000000140)='grpquota') 1m13.394174772s ago: executing program 6 (id=919): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1}}]}}, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeed, 0x8031, 0xffffffffffffffff, 0xf6d0d000) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) syz_clone(0xa000, &(0x7f0000000180), 0x0, &(0x7f0000000640), &(0x7f00000007c0), &(0x7f0000000a40)="402e2d1e470849e8e29f7039c9daa1af0461381522837bb49b6c4b147fad91ad42a77836a20eada0") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001980)=[{&(0x7f00000001c0)="5c00000012006bab9a3ff36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb00"/74, 0x4a}, {&(0x7f0000000380)="1ed68483068e7e7b115365cde0c05b774875", 0x12}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000000240)=""/212, 0xd4}], 0x1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="10"], 0x10}], 0x1, 0x0, 0x0, 0x4000}, 0x44040) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c03000017"], 0x34c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000140)='0', 0x1) r4 = openat(r3, &(0x7f0000000000)='./file0\x00', 0x1a93c1, 0x141) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8982, &(0x7f0000000180)) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000900)={'ip6tnl0\x00', &(0x7f0000000880)={'syztnl1\x00', 0x0, 0xd9d01a46fe64329d, 0xf7, 0x36, 0x3, 0x34, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x1, 0x8000, 0x7, 0xffffff81}}) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000000740)=[{&(0x7f00000003c0)="bc50efe58212a481b2515a80c0290be283687528663c5d1b9da39a0f6feab047585b1595a0fcae9144d0fcc138a5adfea30cd4cee447c6f81cfd17dd5fc5516b194fbda56da1", 0x46}, {&(0x7f0000000440)="7ac93252dc9e0fe60815aaa00425f0c9898364e4eec6c0fb41d70abea4f22d00f2a8c0bead4ea9e5eafd87b607e914b5eca639150bb5507a4483bcef662ad6878a116a47b83a674246bcc9570fbb30d67f1d42f45cdaf9e6fadca0efd2c02cca4c65c279ec7adad4be2201060e76002dd024c43c582fd786d9898e8398b6da7c083e93cf92753cee4737957b50220bcdd2b83bdba704128913518a2b206eef5e30e62abd520422d39e0a39f3a818d88d81a257", 0xb3}, {&(0x7f0000000500)="421aca501e7ca65baa5a88015543bb1064448a50d183dfb6bf2e6305d590fa2139d51f0da9da6c37a02f44b80816ef2ffa3ebcc5025550f9535aa823c6ced7c9dae4c9ff86344257f954c63acfb3137a373b4790d0d559e2f291a39114c5771792cfef1977836b3d68d64678f3070d646e2456a06bac67242312a3f111123fbb34d32af7a847fc05abb8dfc68a50f94f25d3bd4e9f974c5c8f8e534a8b7db2d71f1b49296080e691a69681fbf7c928ac1b24a19dec89d027f1422f02266e9658855f5bde9d39802c5bd5b2163c6ed3865b36a9b591a927996490d1c0c1330ee9f7c83e4e3b6ad3f8aa5c64201179d682bc5ee9b4bdcabeea", 0xf8}, {&(0x7f0000000600)="d5e94a1f53a71545c32ccbb23d28a43a71cb503df0d0be15511cf0276ad36d81ed94b0b73791e1f95255dd2123f5b4b17d85b379226937393e177b032755757c", 0x40}, {&(0x7f0000000640)}, {&(0x7f0000000680)="05fa15e463cd641d14b462a90a18f0f012e78f9789b7dae7bc4734577a3a5936882a2c12e379da9544eb24523ed05a9afa45187fb3e086da0c7155e8ddb754bcc939eb41675af969f40e6529b6bf3e5f41a7f9dbf00ef422a8cfbc264fa26568749163bc4090e9100957869c671bc1bd2830f4ca64a6d65a301ae6e0e58fe8a85cfcab5b917cfe28e3eaefc0d3bc403d705de295a42295e1487bec2c472324019fb966a4f8d4fd21eea23b077a6e", 0xae}], 0x6, &(0x7f0000000940)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @loopback}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_ttl={{0x14, 0x0, 0x2, 0xdc8c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0xb8}, 0x0) 1m13.244538045s ago: executing program 6 (id=922): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x903f01) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000000)="114353012008ba00000037510800", 0x36, 0x0, &(0x7f00000000c0)={0x11, 0x9, r2, 0x1, 0xb2}, 0x14) ioctl$USBDEVFS_RESET(r0, 0x5514) unshare(0x6a040000) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x903f01) (async) ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, &(0x7f00000000c0)=0xffffffff) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)) (async) sendto$packet(r1, &(0x7f0000000000)="114353012008ba00000037510800", 0x36, 0x0, &(0x7f00000000c0)={0x11, 0x9, r2, 0x1, 0xb2}, 0x14) (async) ioctl$USBDEVFS_RESET(r0, 0x5514) (async) unshare(0x6a040000) (async) 1m12.425279017s ago: executing program 6 (id=929): mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='vegas', 0x5) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) (async) sendto$inet6(r0, &(0x7f0000001b00)="d1", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xb81, @loopback, 0xfffffffd}, 0x1c) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000000c0)='./config\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1\x00') 1m12.422643953s ago: executing program 6 (id=930): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000200), 0x644800, 0x0) ioctl$SG_GET_SCSI_ID(r0, 0x2276, &(0x7f0000000240)) (async) ioctl$SG_GET_RESERVED_SIZE(r0, 0x2272, &(0x7f0000000280)) (async) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x40002, 0xe0, 0x1b}, 0x18) mkdirat(r1, &(0x7f00000001c0)='./file0\x00', 0xa) (async) socket$unix(0x1, 0x5, 0x0) 1m12.332518251s ago: executing program 6 (id=932): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x0) (async) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140), &(0x7f00000001c0), 0x2, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) (async) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xc) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x40) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x8008, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 1m12.042143891s ago: executing program 6 (id=935): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x4000004) (async) fcntl$setpipe(r2, 0x407, 0x4000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="38000000010001", 0x7) (async) write(r3, &(0x7f0000000000)="38000000010001", 0x7) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x100000) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 1m11.9662813s ago: executing program 35 (id=935): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x9, 0x32, 0xffffffffffffffff, 0x34d4b000) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x4000004) (async) fcntl$setpipe(r2, 0x407, 0x4000004) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r3, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000000)="38000000010001", 0x7) (async) write(r3, &(0x7f0000000000)="38000000010001", 0x7) pipe2(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r4, 0x407, 0x100000) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f0000000fc0)={0x48}) 1m10.440116562s ago: executing program 3 (id=958): r0 = syz_open_dev$audion(&(0x7f0000000000), 0x6, 0x1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x4, 0xf, 0x6, 0x2, 0x1, @loopback, @mcast1, 0x20, 0x10, 0xa8ea, 0xb}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@ifindex=0x0, 0x1d, 0x0, 0x7, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0], 0x0}, 0x40) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000280)=@raw=[@call={0x85, 0x0, 0x0, 0x96}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x4}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x54, &(0x7f0000000300)=""/84, 0x41100, 0x28, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000003c0)=[{0x4, 0x1, 0x80, 0x7}, {0x3, 0x2, 0xa, 0x8}], 0x10, 0x10e}, 0x94) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r0, r1, 0x25, 0x10, @val=@netkit={@void, @value=r4, @void, @void, r3}}, 0x1c) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000004c0)={0xffffffffffffffff}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x19, 0x2c, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xeb89, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @generic={0x0, 0x8, 0x0, 0xfffb, 0x3}, @ldst={0x1, 0x2, 0x2, 0x8, 0x5, 0xffffffffffffffc0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x3}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000006c0)='GPL\x00', 0x10000, 0x41, &(0x7f0000000700)=""/65, 0x40f00, 0x1, '\x00', r2, @fallback=0x2f, r0, 0x8, &(0x7f0000000780)={0x6, 0x5}, 0x8, 0x10, &(0x7f00000007c0)={0x5, 0x10, 0x7fff, 0xbaa0461}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000800)=[r0, r0, r0, r0], &(0x7f0000000840)=[{0x3, 0x5, 0x6, 0x3}, {0x0, 0x2, 0xc, 0x1}, {0x3, 0x3, 0xa, 0x2}, {0x4, 0x3, 0x2, 0x4}, {0x1, 0x5, 0x2, 0x8}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@cgroup=r0, r6, 0x12, 0xe, 0x0, @void, @value=r7, @void, @void, r3}, 0x20) r8 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCDELRT(r8, 0x890c, &(0x7f00000009c0)={0x0, @generic={0x1f, "9e2ea7c84ad3943527ddf6760557"}, @phonet={0x23, 0x4, 0x2f, 0x1}, @phonet={0x23, 0x35, 0xe, 0x1b}, 0x3ff, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)='pim6reg0\x00', 0x7, 0xffffffffffffffff, 0x731}) setsockopt$X25_QBITINCL(r0, 0x106, 0x1, &(0x7f0000000a40)=0x1, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000bc0)={0xc, 0x0, &(0x7f0000000a80)=[@acquire, @exit_looper], 0xfd, 0x0, &(0x7f0000000ac0)="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"}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000c00)={0x0, 0x1, 0x10}, &(0x7f0000000c40)=0xc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000c80)={r9, 0x401}, &(0x7f0000000cc0)=0x8) mmap(&(0x7f0000fee000/0x10000)=nil, 0x10000, 0x3000000, 0x10010, r5, 0xd4fe0000) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000d00)='./binderfs/binder1\x00', 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0xc) r13 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000d40), 0x2, 0x0) write$FUSE_NOTIFY_POLL(r13, &(0x7f0000000d80)={0x18, 0x1, 0x0, {0x9}}, 0x18) ioctl$DVB_DVR_DMX_EXPBUF(r0, 0xc00c6f3e, &(0x7f0000000dc0)={0x697f388f, 0x0, r0}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000e00)=@assoc_value={r10, 0x1}, &(0x7f0000000e40)=0x8) ioctl$BTRFS_IOC_INO_PATHS(r4, 0xc0389423, &(0x7f0000000ec0)={0x4, 0x10, [0xfff, 0x6, 0x1, 0x5], &(0x7f0000000e80)=[0x0, 0x0]}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f00), 0x3d, 0x0, &(0x7f0000000f40)="79ce853a905a8949ed2290e9d8545d1aecd17d8a9ca4dde83abd14fcb33130e231b5b62c866c446e2df2574114a1c75b72c8c43a6d992957ac1c7e637a"}) cachestat(r0, &(0x7f0000000fc0)={0x8, 0x101}, &(0x7f0000001000), 0x0) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001080)=0x0, &(0x7f00000010c0)=0x4) sendmsg$nl_route(r12, &(0x7f00000011c0)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)=@bridge_setlink={0x64, 0x13, 0x100, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r15, 0x1000, 0x28}, [@IFLA_BROADCAST={0xa, 0x2, @broadcast}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x8}]}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xf62fa3db}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8}, 0x800) socket$alg(0x26, 0x5, 0x0) mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x100000d, 0x8010, r14, 0x80000000) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001240), r0) sendmsg$NL80211_CMD_SET_BSS(r12, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x34, r16, 0x400, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0xdb}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x8090) 1m10.382464781s ago: executing program 3 (id=959): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/netdevsim/del_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x700, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d000014000000000000000000000005000600000000000a0080ff00000020fc010000000000000000000000000000000000000000000005000500000000000a000000000000000000000000000000000000000000000000000000000000000800120002000200000000000000000030002bfe0103"], 0xa0}}, 0x0) (async) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040021}, 0x40080) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip_vti0\x00', 0x0, 0x7800, 0x1, 0xfffffffe, 0x5, {{0xd, 0x4, 0x2, 0x17, 0x34, 0x68, 0x0, 0x55, 0x0, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x1c, 0xb4, 0x1, 0xf, [{@loopback}, {@dev={0xac, 0x14, 0x14, 0x17}, 0x2}, {@empty, 0x1}]}]}}}}}) sendmsg$FOU_CMD_ADD(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x8094) 1m10.381219161s ago: executing program 3 (id=960): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x54, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x24, 0x34, @random="5d1f06fd0828b20ccc4739f227559886b8394e2de404d68f4980b38b1de2259b"}, @NL80211_ATTR_USE_MFP={0x8}, @NL80211_ATTR_IE={0xc, 0x2a, [@gcr_ga={0xbd, 0x6, @device_b}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x2008010}, 0x40000) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20000050) 1m10.225177588s ago: executing program 3 (id=961): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f0000000380)='./file0/file0/file0\x00', 0x1) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000140), 0x4000, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f0000000540)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee01}}, './file0/../file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r3, 0xc018937b, &(0x7f0000000600)={{0x1, 0x1, 0x18, r4, {r5, r6}}, './file0/../file0\x00'}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x18, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x4c}}, 0x40) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000380)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r9, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r10, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x9, 0xa5, 0x32315241, 0x3, 0x5, [{0x1, 0x5}, {0x7fffffff, 0x7}, {0x2, 0xa52}, {0x8, 0x1}, {0x6, 0x6ce22c19}, {0xf, 0x5c}, {0x1977, 0x5}, {0xfffffffb, 0x97}], 0x9a, 0x8, 0x8, 0x2}}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r9, 0x3ba0, &(0x7f0000000180)={0x48, 0x15, r11, 0x0, r10}) ioctl$sock_netdev_private(r8, 0x89f5, &(0x7f0000000040)="cb58e5295b1459f5d0ec70dee844597129b29b390b1e97fc8c3b") 1m9.872869217s ago: executing program 3 (id=963): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1", 0x2c}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r2, 0x0, 0x0) 1m9.285517789s ago: executing program 3 (id=968): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='i8042\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/platform/i8042/driver_override\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r7, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040090}, 0x40) write(r1, &(0x7f0000000400)='xhci-hcd\x00', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='i8042\x00', 0x6) mq_open(&(0x7f0000000240)='\'\xf5@$*\x00\x8cZ^E\xde\xbb\xf8\xd4\x9eH\x9e\x04\x11\xce\x84Z\x90\x02\x84H\xad\xf7\xa0\nW\xac]!H\xae\xbe\xd1\x02m7\xe6]\x1dn\xe3\xbf+\x02\b=n?\x87lda0\x1d\xea\xc4|\b\xa5\x84\x866\xef?e\xcf\xc1\xb7\xe6\xb76\xa9\xee^J;\xe4\x8d7\x96\xa4\xcb\xd6\x933.D\x95?K\xef\x97\x18\xd2\xcd\xc7I\xfd\x14Entf\x06\xc3\xc6\x0f\xd2\xf9\xd8>_@u\x04\xfd\xde\xe4\x1dmC\\\x96\xf6v\xa7\x88r\xc9\x8b\xff\a\x0e\x92\xa6\xb7\a\xd5c\x94\xe3\x13&\xc7\xd3\xe6', 0x800, 0x9b, 0x0) 1m9.266581167s ago: executing program 36 (id=968): capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/drivers/i8042/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='i8042\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/devices/platform/i8042/driver_override\x00', 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000022c0)={'wlan1\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x30, r7, 0xb97534d5fe9704cf, 0x70bd2b, 0x25dfdbfe, {{0x12}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8004}, 0x0) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000180), &(0x7f00000001c0)=0x4) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000040)={0x24, r4, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040090}, 0x40) write(r1, &(0x7f0000000400)='xhci-hcd\x00', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000600)='i8042\x00', 0x6) mq_open(&(0x7f0000000240)='\'\xf5@$*\x00\x8cZ^E\xde\xbb\xf8\xd4\x9eH\x9e\x04\x11\xce\x84Z\x90\x02\x84H\xad\xf7\xa0\nW\xac]!H\xae\xbe\xd1\x02m7\xe6]\x1dn\xe3\xbf+\x02\b=n?\x87lda0\x1d\xea\xc4|\b\xa5\x84\x866\xef?e\xcf\xc1\xb7\xe6\xb76\xa9\xee^J;\xe4\x8d7\x96\xa4\xcb\xd6\x933.D\x95?K\xef\x97\x18\xd2\xcd\xc7I\xfd\x14Entf\x06\xc3\xc6\x0f\xd2\xf9\xd8>_@u\x04\xfd\xde\xe4\x1dmC\\\x96\xf6v\xa7\x88r\xc9\x8b\xff\a\x0e\x92\xa6\xb7\a\xd5c\x94\xe3\x13&\xc7\xd3\xe6', 0x800, 0x9b, 0x0) 44.784222159s ago: executing program 2 (id=1316): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) syz_usb_disconnect(r1) readv(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) close(r2) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x13, 0x240, 0x3f, 0x3f, 0x32, 0x7f, 0x1, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3, 0x4}) 44.365574613s ago: executing program 5 (id=1320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x80400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x100, 0xf, 0xcd, 0x2, 0x0, 0x100, 0x0, 0x20000000, 0x8, 0xb, 0x0, 0xb51, 0x1, 0x401, 0x3, 0x1, 0x5, 0x3, 0x60000000, 0x401, 0x6, 0x2, 0x7, 0x9, 0x48, 0x9, 0x6, 0x6a77, 0x5, 0x7fffffff, 0xa]}) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) ioctl$I2C_FUNCS(0xffffffffffffffff, 0x705, &(0x7f0000000040)=0x5) kexec_load(0x3, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000005c0), 0xc, 0x9c1002) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000000)=0x1f3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000003f0007012bbd700000000000017ce18092f4fc800c00018008000600", @ANYRES32=0x0, @ANYBLOB="0c000280050023000000000008000900", @ANYRES32=r0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 44.365073284s ago: executing program 5 (id=1321): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x20003, 0x0, {[0x5, 0x6, 0x40003, 0xa, 0xfffffffffffffffe, 0x6, 0xffffffff]}}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000280)) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f00000005c0)={0x20003, 0x0, {[0x5, 0x6, 0x40003, 0xa, 0xfffffffffffffffe, 0x6, 0xffffffff]}}) (async) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000280)) (async) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000000)) (async) 44.113583905s ago: executing program 5 (id=1323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000580)=0x1, 0x4) getsockopt$inet6_tcp_buf(r0, 0x6, 0x2c, 0x0, &(0x7f0000000080)) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000140)=@fd={0x10001, 0x1, 0x4, 0x4000, 0x6, {0x0, 0x2710}, {0x2, 0x1, 0x7, 0x7, 0x2, 0x0, "746011d9"}, 0x7, 0x4, {}, 0xe7, 0x0, r3}) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000400)={0x80, 0x19, &(0x7f0000000340)="74ce16f13ac82154f22755f1d6fec17b5fa632f8b63260b35839a6200fc29fb176a0aca3e69693bf1004f09f527321139bd9432c0aa14b349b6b73c59c40f0b13ecb70572e4887d0ca961c357053ef2df128183f5b73b3a40ecf54742325d7fc0b6e7140415bda9ced649b93036821ea8ec07064ceaeb447e33359c5b1644db7caed055eea60b0880187b03ba5cf32e4493773dd0262a190b6", {0x7ff, 0xb, 0x3032344d, 0x7, 0x351, 0x9, 0x2, 0xfff}}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x9, 0x6, 0xfe, 0x7fff0006}]}) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f0000000100)={0x20004, r5, 0x2}) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r8, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r7}) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000300)={r9}) close_range(r4, 0xffffffffffffffff, 0x0) 44.024457554s ago: executing program 5 (id=1326): openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) (async) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x13, 0x240, 0x3f, 0x3f, 0x32, 0x7f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) (async) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x13, 0x240, 0x3f, 0x3f, 0x32, 0x7f, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="6c0100001000130726bd70000000000000000000000000000000ffffe0000002ac1414130000000000000000000000004e22000100000003020000003a000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) (async) fchdir(r3) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r7, &(0x7f00000000c0)=""/55, 0x37) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') lseek(r7, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) 43.575018832s ago: executing program 5 (id=1329): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB="01000402bbbbbbbbbbbbffffffffffffaaaaaa98aa2501"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0xc, &(0x7f00000013c0)=ANY=[@ANYBLOB="180200001000000000000000000000001801000020696c2500000000002020207b2af8ff00000000bfa100000000000007010000f8ffffffb702000008000040b7030000000000008500000006000000870000000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0xd2, &(0x7f0000000140)=""/210}, 0x90) close(r0) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000000000)={'virt_wifi0\x00', @multicast}) 43.574274109s ago: executing program 5 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000041c0)="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", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0xffffffff, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, 0x14, "faf98317e5a1149989fc8dbe43ea6acc9663a2503dc3bd3fe37d58328bbad0099cebf225f5d69098c8b534464c512bdd8a0f1901000100", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "6704dae4901802c4dae4162e43ac61b7ad3300", [0x7, 0x6]}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x53f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) sync() 43.085645422s ago: executing program 2 (id=1332): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x1a2c42) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001ac0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x0, 0x14a1ff, 0x0, 0x0, 0x1a, 0x1c, "3384020bbe82b398000000000000000000001d0ec0c1b4e9b1c4369d03740100ceaac594b3d6d741dd17c1c50d38ef2a565ef1e80000000058966500", "a9103939c787a16c1ca4f837026d1a8554feac911e1cd130e04d528539f3d3289737f0374c72a964a02447a75df8a6ca7f040000000000000072fd29f35239d2", "24431a1e77a68e174f00", [0x9, 0x400]}}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_coalesce={0x1, 0x2, 0x9295, 0xf86, 0x0, 0x5b9b8ab7, 0xbc95, 0x3, 0x1b9, 0x0, 0x1, 0x3, 0x1741, 0x4, 0x6, 0x7, 0xfffffff5, 0xfffffffe, 0xa236, 0x1, 0x1, 0xfb, 0x5}}) ioctl$BLKRRPART(r1, 0x125f, 0x0) 42.652046613s ago: executing program 2 (id=1333): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000000c0), 0x880, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x6, {"e512864f2c63b42b1e937260904ce544", "b80b00", "98fed86df169f801002f69ff0008e800"}, 0x3ff, 0x5}) ioctl$TIOCL_PASTESEL(r1, 0x4b47, &(0x7f0000000000)) ioctl$COMEDI_POLL(r0, 0x640f) r2 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) r3 = syz_open_dev$admmidi(&(0x7f00000001c0), 0x1, 0x48cb41) readv(r3, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/12, 0xc}], 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fsmount(r2, 0x0, 0x1) r4 = landlock_create_ruleset(&(0x7f0000000300)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0xe) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000280)}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f0000000140)='securityfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sec/tomoyo/profile\x00', 0x1, 0x0) write(r7, &(0x7f0000000040)="3c5c583ecd45036a2762bb626c65640a", 0x10) openat(r7, 0x0, 0xc2802, 0x1a) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x10, &(0x7f0000000200), 0x4) r9 = openat2$dir(0xffffff9c, &(0x7f0000000040)='./debug/failslab/times\x00', 0x0, 0x0) mkdirat(r9, &(0x7f0000000000)='./debug\x00', 0x1ff) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400001, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, 0x0) socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 42.371491511s ago: executing program 2 (id=1335): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21, 0x20}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8}]}}}]}, 0x40}}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0xc000, 0x4, 0x5, 0xff, 0x9, 0x3, 0x8, 0xb9, 0x3, 0x8e, 0x5, 0xc50}, {0x804, 0x1, 0x1, 0x45, 0xff, 0x6, 0x2, 0xff, 0x0, 0x4, 0x6, 0x7f, 0x20c}, {0xf1c2, 0x3, 0x38, 0xf, 0x84, 0x7, 0x3, 0x50, 0x0, 0x5, 0x4, 0x5, 0x3a}], 0xffffffff}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x6, 0xd4, 0x10, 0x62, 0x200002000001, 0x0, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x7fff, 0x3, 0x400000000], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000340)={0xb, 0x1, 0x1, {0x1, @sdr={0x30324c4a, 0x1d}}, 0x3}) 41.685255956s ago: executing program 2 (id=1341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd26, 0x25dfdbf0, {0x0, 0x0, 0x0, 0x0, 0x40c35}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x28001}, 0x4008800) (async) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r2) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETFB2(r2, 0xc06864ce, &(0x7f0000000400)={r3, 0x6, 0x1, 0x8, 0x3, [], [0x401, 0x7, 0x0, 0x4], [0x6, 0xffff, 0x6, 0x2], [0x0, 0x6, 0x1, 0x2]}) (async) preadv(r0, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/240, 0xf0}, {&(0x7f00000008c0)=""/151, 0x8e}, {&(0x7f0000000240)=""/66, 0x3c}, {&(0x7f00000004c0)=""/181, 0xb5}, {&(0x7f0000000580)=""/17, 0x11}, {&(0x7f00000005c0)=""/96, 0x60}, {&(0x7f0000000640)=""/201, 0xd5}, {&(0x7f00000001c0)=""/37, 0x25}, {&(0x7f0000000780)=""/113, 0x77}], 0x9, 0x6, 0x69a2) accept(r0, &(0x7f0000000000)=@can, &(0x7f0000000080)=0x80) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8992, &(0x7f0000000300)={'bond0\x00', @ifru_names='sit0\x00'}) 40.223814992s ago: executing program 2 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/acpi/devices/PNP0A08:00/cid\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24008805) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b4c76acb670ad35e3d77f040000000000000000020000002400048020000180080001006c6f6700140002800600013b0003000005e40440000100000900010073797a30000000000900020073d192f5cd696ba0d2000000110001000000"], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x200, 0x0) writev(r2, &(0x7f0000000280), 0xffffffffffffcd3) sendmsg$AUDIT_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x42}, 0x800) 40.139752347s ago: executing program 37 (id=1347): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/acpi/devices/PNP0A08:00/cid\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/100, 0x64) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x24008805) r2 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe8e, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000200400001"], 0x48) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b4c76acb670ad35e3d77f040000000000000000020000002400048020000180080001006c6f6700140002800600013b0003000005e40440000100000900010073797a30000000000900020073d192f5cd696ba0d2000000110001000000"], 0x78}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/cluster/mycluster\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x200, 0x0) writev(r2, &(0x7f0000000280), 0xffffffffffffcd3) sendmsg$AUDIT_GET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x800, 0x70bd2a, 0x25dfdbff, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x42}, 0x800) 28.3127428s ago: executing program 38 (id=1330): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000280), 0x80010a, 0x1cb600) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r2, &(0x7f00000041c0)="0a44566bd8cd7422e078875d6a98d0a2dcc0a0c7881e44e46c6bf84253a3ba4cba8183c2236313cd49babfb721c547a5caed646bac2f2ea43e134e2a05d84cd813c9e2a96e68352f95c458f6ba48078f1d10fce44d869b4a00c68ca338ff3b877cb434f502cedfe83cbfb33d5233d081ec8ee2ac10e08194f6257183be922fc7203071a2aaf87478d1420237a1516e749623929f0d60f15e536376ba41fbbce034588b60680572f0d1d76ed122dc46252cc143f0e665e3f4e3f56bc454957265bd9a029cf8c7397ca01f95bc0e6601673bb31804c34307725385260df48c32527d74e51e5f26728aaedf9f379f5960f5e6e7146eff3254aaf54eb42834e1f57595a2b0333f5ca1474e07c2447c33dbe8f62f24cd788ac18475493edb813450e917837b125ad6f850e6af93e16828a6741c6ac00a4e25cfcd498f1b857e74a4eb8dce5ffcb3999031f1da13e9e6a973134ec04795a3fe91388fb6b349e668f49bd4c4ffa71a8662916219b4a2075bbfe4892cd1080f662005c1c2030d35999c9637f4836ae5745acae8ff0d745184e58241510d780f8a9aeeccb17b9213527a1b747dd23df6b4ac2ca4bd07fb7de6bb4bf8811e5c2f99f4bbcb3cba79fc483182bb981815a1b1ba5afad464631e6eb940a5da4e73787e9e0103bc7ea59cc8d63f740131a14c3cd034e91e885bd730521ba80c1071f25e0073a44bf8e36cc23a5f433378a13d2e2be7fbb8ca204976651924ae8637b339e883f4d388e239424031e20616341a5d51cd5d574382d518e4824dcdadba86143b4de3ff8126f0be226d1e6526a2af981d11092c428bc699ea208d4d38d63ef525b8da551207397fdb7d57a52c2062182072b017141de1b70bd15c758c88c65f6acffd5b5b0846c2a779660ceef46b22336abf817a24d27c3f66839b5f2f99131898dd372a124d9e5df84b24fa7be045b92fb225a735da1be1972c706120c391ffadf231603ffbb86d38ff2c76202a0f81317a7f790dadcdca1d109e4428f52246b17f6b5822f64d36da71167df86cedf76f4405f320f70a3d6d6307a13e023d9a23985fd9c95793118674346d7977654ed14a121c1bc0b3e8672087245e0721230edc667c1fb6bcdb22b3264b7fffedb589a2899096493ba97ce5fb0ad97821d0a4528465380e086b61f632eb0ce1f89eea2d8336217f51b4085433d426d404431360be55776cbb0f80c33e807732df3d73bf9d9a8e3b1468d2ac7c73a4aa239c96bbeef3965132a02254d887e65fbeaf517e913cc331ed36c3e326163d1a3aef7df9db06f8997668cc35e39813c82a440a73f12011bcc0b2abb993b99e79727d49e6656e8d9ecfb7b65c2c187ca6262361c6a7d3679aba9df764d13485874b1443f47d8caea64963011294082a9d50ed2fb08cdfaaa7dbcf782b7e8f8d8206dbc421bf9807727126b1ea364498f3ae693fe19f5b56af13df090892919c136c201a0d058c1863f136a3ff389cc510c17b1de341ca9a8d6ffd80fd019ac3fd9eeeb845202f2c5f207b1e7e169d57164855b9c3dbdf3c696124136d07a4de6be16b43352567a3e3bab0f73ccdd41255ffeb3ecb2bdf9eedd1d4332f4a7534b01b6331474880d4d07b464bd8c3b18d02fbf1faeeff70c8ae35b4eef002930dfa9a0c9350ffb72c82535a55280ac9c6d5384cf9aa3c66cc918497f51a6dbad608eee21f6085f85990983d0a51e5b41cb69ae52d60fa835045aaa0132be8b4dfdb10f521bc22b0192a4133040453c5a0a8bbb5d4c46ea25f2be5b0e79d71c4a13db6e9cb66db9f2c4804d41b9c26f96fd23c358ee9c8f57322540953224b56072af25b5c7041de560f1d4bde367eb3bbac949d9a9a86123ae62d0f4741446192e85772fb893b64c0e7c44a6e967af906b0f50e32be384027379c8dde251f549f94b16cee199da537d07ae89848da801b43bab3b65651402756cb22d17e602cdc33790ec8a5484a955bc8f487597ac9752166a405bbd7dfc9107af72b46e39d29afd2a0447e53377fd11997ab21db0f740699843a168720377e365caf88fd319dca184cadb8ffb4d288a0045b349be5ecb64561a2bdfa13336ef96aea86c48a5e405330a01c5390d482e6ccf4ebb2cf149d8b6274b2f9e6e1066004172a1a90e0db9838afafcb663bd693b2e5ca35858dcb82c05cbc87ec5cedfbb08daf55c472e250861bf357569342d90a667f3ac7fc2d4e54220444a97810ac14b0af6b043a07c1d791182635b983492f21db4a6ffee2d686238869e50b9bb73d75ec26087c0c8cb92ff25740b3995e4d771469b8474efef04d8d75f3544aaf84f02ad977948764d4c1bce36aa4198d6f22091b263d9eae96f1096fe3d8045949f189f33ec713101fea26ea043fe98b987542e33ab372058c64205e90a0e1f52d04b2c5ba7a5572ddb95f7d2b04f22e2e987c5d0f879db65718d8979da2a45cd333a5aacf96081977a9eb3dcee4afb44443ad37528c5a314d1ea08d1c3f0a36d4bdf77fc0caaeaa1eb2746a26683561b62d22f4e166192892e2ec1597f8bf6e89cd53840c8d7baea220e1b5e17df52a05017363727b0cc77ee61577a79b3de2ed364f3419a30d23701044b45ed3ba44b01804750bacf5bc959cffba86619f3331cc939fecadb5cba1edfe28952e0f70d2d99ce696dab9411aa2f7e7ca6207a3b16fc36a70e339aa5a618f6bcb0272968eba6edd95242825fe6e47cf1d50d229d4b1676aad0e9410aa1f2d6d2fcb9c4ec8e06c83faefbc2143de2367123bdb7669bd959782cf64def3a601c596611ac98d76df33e1fe340829340ba0a582d014ffacf9a9394300ab7efd60222cf96a99e42dae6e1ff1fcad1e3280ca07de5ea7e08b264a60015ffb76cc72d70ded58a1e2f59906f3c76433e4353a94a2a49f91103e2b5491ac7f66d54ae2a0e82099c4c9bd683971c2d3dd51601bf5e94f7660158bc6fdc1b2ce3d689a3aa64c29810ad7d9e91e49b72e6f97230a2a966434bf5cdb339556e6452e6b446766f55df45219fc02192cb73076285e74eb848229bffd812f6058782b3f5d0efa4d7b0d3c120931aa8b679e318ecc5ea539e3dcaf87473e2573189ce500b616957d88a09a014baffbd66990e41a3432891279cb82d9c4b50675ff067b76503535631aab9a29ee7e274eded1cd542c801bf519e1119fbab84f57c7686209c9e5177545bf0f403609c81fe6d8f2979d886c43fa3053b38b6e21ec3632011c97451d8409f169f71d226e61fdd206ec5f962b0277eee286a694ba5381493941ed44b3659994d3cd2a8c9c3bdb2f63d77eaee180428d7d6df86f6738cf7adb4b863c9ee9da9904bba4c2c3188a1cfe1c5b082857e5566055c8cf58a9e9f7624d220b8d3093cbc6eaed7fcf15fc700ed711575aff5fb5cb7e206c810ea7a766d2960a1356687aad2ec171e4a1db6540a9257385a1e8b9f029485866c32e74c1a19e1113040c9d215f9f4bb4311f0d587b9cb6d11cdf28d4cbcdde4ee7831e5c8608335a1e41883b55b3609b9c4fb8489619481dffc6224e4c98b1e89831187b28b6bcebe7f78c779f5a2896e47bef8e607811b435c517e8e3f19d74752d7ae99cb7caf69c0f977f1b94f8f11bdbf35444fabaac2fc0e568d3b5b3b9f13162b1fa92615bc16492b870fc85c79c51b6516276f8e559e769a8d37a2335d67edbdbe2d4ded10e79ad26629ba6de862acb27fa7d0607a5c83840e446ca0d231ae9175ae9cddf35443ef8434a61d54b704d2b46835ca030d4325dd62918d361c27bd6e422f3f8431ff979953c88a5f3d07a84b733b2fffda5dedbc2ba876ea653aaa2a8446019d2cb69c4c7023177af7b5de358c4a93ba969415c7e3bd3e10a17653cc4c0031dc779d47bedc8d0f77b9fb39484e47d1edfa16a4839d7e3c1f4147bf7a5a41395980d0234577d433c4f3663a648865cf5cfc4a713bfde809cae8161f044770d8f3dd65f183392ed73dd0512951dce40dd6f68927144d09a6df1225769a47a2f1dc7da5a0e5651dc0198c2feb7de7aae5675a3753272294cdc8f05b4bf1b478d6e2a18f6a9dfdc42421bae7072786a4122cb3fcc61b2d0bc9314b92be8be3f9b8b109631305e06b52c0bf621d577f014d0572327c49fd705b45794aa8f198b37c139c4a8008763c654af912552549203733ad09c667104a3c1756dacc50af3d19bd996a99a7f857d9ff8c337c6feb16cb7fe282cbf8c975bdb60a7ddaa056352d9cf752f2b49fd0ae9dd7a263c4e1c1a027c7d45529b5a49de9f2306862b8ef8d386594f9909aabc849c5955241d192ab57d52fd2c7db0e4066bc3f70445599a60016de606b30a92b1bcbcd9dc8cfb492a6e66aa2be612e1d5f7fc61989d51285f1ef8a4e724a46c36bdaa6bed82ec972fe3e929a7a708397432b13e266d9a66954e011a158c9bc031587f9315382dfcc2334100d99b7d50b87096970d294261dd3263bee8f5aac2d86f070d70e278ecca4cf6ff05e511c0a65d6da81b68d94cd635e9dc98c1259fa2060de60d05117090a9a36d7b7aab999cd28a6c0727336312ede8f7fe0118e22aeb4094a64311fa766412d68ee04a93a1b9e2da91afcc91a1fc3c216f0aed6da74baed3242e620482ae01d3055562d16cab58500a5f41145d2275f6da8e24003cae19a7bdb9de8ef57965341253901962d846fcfd687e32fc81e716c42fae279382c8a750c9ef9543c942ca644287ec9cc921f99e9c901810a342e198f3b60a5c75aa91e67c1a6f08008841ddbe0766604b38a211929682303ce61e8024ea4589aa955886adc98f365af515daf30c376eb2b96fd78d46bc3999935a336c89f02ebe822bb5db6a1fd145c4d403b88f17b3fac670b2eb1296b3a5a7055556c21259695c248696162fc179aa1b4ec10e022ea7bacd0255937f9aa89f4d4c58bdedb54b43fde47268552f51b949a9cfbdabf6e3172853e6de9d0b0d9643349595769e98dab85282c49ce8c52301c04710a2c43cf63decaf65243d4756015b681bb680fdd1aba59d63b54e2ebedc68df32e575a95adfb2b18a79688b23ffb498d03012250f0dfaaed5353025aea7a35c8a89873b5f73adb41cc864b9f86e14624d70c917f05e47bab793958de9957cf23c94a9807b30bd7574edf66250224b887a8c02baa05cc02abd4c008339129b3109f1b04da29a9edf472991a440fcc8e586bef32b8c95fcd3d6702b9f43bf41454d5fe72a1f1ac80604c93dc9e9abf9a824c6d45e65b4f39f8341799dce4eac5e9036450ba7829221fdac7ec394c0a8e9813f5aad3ad0052f5156b3dca979e9c9a8755d4be2502727d346889210a13e5391951afef1880bcbd2a9ea020c9b2946563cd40c40f6202bce9bd1d2a1bbc3e5e6b2a9d2220343fd1ff5cde1b4d27c0601b8890b6ad8d3d80075a23725bddd81c15cd1b63e0123c4ac01de7b62b1e0fe2b72eaf400a1bcc63f76316d471eb191c931d5350e83a110b89e77668cfdc47734b91c2268fbbd89ce15b50b84c423a1f27943c32739e99b046a665c966275dba2dd6449b69ec53e5cb9cde89afe4149589c7378f5f3648d748bf3d46fa53f50d1228714252a328cebe7146d81dbb2f850aad492bc0697e2760dc9c60bc76a010e85110c0076478a21b47e5fbc4f7397a319e1db642e305bb1330674d96eb4b421f0f2131d125d4cec8aef4637dce572bad633e076972c9147a48b4c67135ace6a4490e16fa4731d62864e910762f1eb58afa63031c78c375a90147ceef07cd1e8155a649f2558d67dba9d6d2e012a3af4b603cd094e4a3b2e30c65c80cf8d9b2cb840e9df91e70162b80e74be96467574ca0ac5ad52238163283c556f0865c2338d6dcc73fa330634f6e5ce68e766df2db5b7edce0d98203e1d4374e7eda3558667229ea2daeb74156cf5895c4afb460cb4037456b14d9b748ddf7b8f3d5accd3e0d8d2eca2a78056d945eb4383078cc09a3a77736ce4e91f8174fe03fdceef8df92a50c2797b0cd06c6f1ae95650e48d103fb269c0a004d62237b77257807c8954678476030d788543d84770a1533a72141c7ea919e533bc182a3306782233d1a20153fa3e9e315a856e75f760bb7f943ea2f5956243f75fdb241ddfb4c081219ebb4eb3c3e989e3d953a93d96dafe1142c29434a554a92d319747e618cbd3af5202e51d30761e81b6c2d6febf221e3147b63171ea5dbaab4cba1b0fe7dc9cb249d74bbbcd7ef11c35fade1132ee4b74dc6090cfb6f852fb01d79aa0e5ee6897b7c021c6a1e69995e0546932c56e65b2581d619fc59f9775f3e8573b3c4926b8f6a9041512788d11a6fb279941ce24fea916e6568db25f1fcd3fd1e907fb3c45ddbca37230f5b3ffd48cf9c2269ec068d0bc528aac14807636c9067c5e32f2c2f259f6502ffffdbea40ad1b6b4a1d819fccc5c77da908204781747ecb0f2245dfa2941a9dba5d11ad186ab0eb87173dda634bd5a9221143e244c793d6262c904a64ba36cdced65abdd3be06d534b649b03791f7ce41e9abdea4d2c17f14bfbee0455dfa791f241341c78ce24cb8b86a9e332787d4ac1bdc20d022ae9588e8d63c22925d5e507bf41faddc17e01d3354c597908124705d88131b2e8ce8d04d660ce4100b5288d750d996e069bca1fe21f9b84c97011dd14c95c3cd538bf619b1df241fcf286c7014f8467a7ee81b2bef1c3bc56573894dbb54efb6a2fff0302b26c7589e08993e755059ba8b94fe728f1fdcb8ab10a5133d0434973e6667c25288b6e5e2d75202aec6bc0255177a53ea7c666afa79dca738a9d20990f118075b9f1cfb8ff1e5be75b49635bcbf43cb3bf97719dae8ec5c5528fcf89a9dda8fe6c08f7f737d69ef181ad3e35cf8e46efd94358b4640de1c387e295ae38edd0d5b80287f022895ca4dd9532bece6b2bbe100a83fef98dc5af595f4f7e4747ff5d28ab372db71b7c1c423183fa8ba4d823cc05b7be8819dd669b6517bd753e83f4d407a72dcbfcd0e9b2d5daef7fa88c1618236375a50ad2baa6a5e0551e679dce352181a1f9e72f5fca8c323b945bdd92e2d424b3e75041734d099f778fcb1e6407c80e7724d52ab110b02c0c9d1d4b78df12fc443fd8dc8fe82d9f3c8da7b87fdfb11e912c97a4e61425ac7b3954cb2e7e46ed0e24cc0c961dd5c2fc619a9e5e3550ca7bc21f2adc1a85c5b9dade357f1ecfd72646b27e7ab59b1b4d63c63082907b3be4cda341c49ade8992af489d11cf285b81a34c5614284ab4bb94018009e2333aa8e4630a9f6792b44b62d9c6e9d1855ffecab30c611cf5dc1e6ec09088b83a4c2cda9e5ee080df0b5e36b9badc035d6991bfd82fbb408faac15ced6ddcc917a9249b767f8844d6458411c1a31ff84e272311ea968ed3ff02f2e0caa47b1a6e030b07984c07d71e740420a9ed47b26799feecbba4f26dcdb61c9422e940550bfafa99ef0f826d2bcb1d7862016abe81d021be29adabe2c399fb9aa2f3ac472012b26ccd4eea2957343b06ac8ad71a637b8fa209ab6d4351fae53a9af0e920c043df94eccd5c1a847cb17d13589021f1a621b457fbe02a16f0f4b9dee0e7eb9358b8afd999d47f5143d49d4aef227f5b06ecef1ed71207e3526ff82b6ec69d3e8788f6c476437fe96f0533394027cf48e3e146aed7943d872bc35de34f7fdba13e5e1c259a68aa8050a813aa734f202ad7faba9f64b16f5068b43bdfb726e5fa54a1675dcab0697fc47a4fa3dd472022cc0d317d39076ad9847e72e1965b227f3e49ad6e8e742305bdd05d0c88b5859d6cfc98cc47a566269dbc4c200615f3e995511a69d8e724f0c842c06c46b5460dca83137656aae785e8415cfb57d57265af9c1d8f126081bcb218a427b80ccfaa95b8bd3f87f58f09ac52a2a47bbff99b057576d26876fa758c8e41172dd2bd45742a30d55f1b65bafc0c7c9c785f583069caf6de080c9057238e110456c0f9e8d898918b6981011f8dd17c55caced49eed32839305ec37b45e8cc4c35aec0c8a4cac54035a941842e5d19fd298757799c4a501718bf21a024106a292626d4eb3c784119b9f5003c6cdb36e442c04ca5b0ea59efb63fe90f9e218fdd9f0864f407cf8edbe71f3fb1d3a587ccfadbf7a5acbb0713b1ca1991e25e75738ca68e1817d08fdbacfab6900242b91ed9541efd2ca469bf7acc7857185d47506fd0a735d7b542949241976cfb1252f2e490fcdef3166f993ff9a812d0af902001a4f239989c087b41de65f83af93e349a2d37ad3b59c5009465e14030ecdfc8fec2d27939af2311bc5d544b19220b12a5782deb83f0e193f57cc4631d8746e7d0736e1295128f3a48aeacf2952be3005b09de00c9a4565e07692d8355a947d072de4324f2e8f3b2f01483d31999826b4ac7bad4f6ae099225f751995f463e5f762b9671ebb79fdfc51b5080af6fae4837a4e00a76b775eaa6f1fa1479b6afe5d66ac5fd148fdc4750d6ae1e268da446ba08dc4d7c872bd6401f1dd6b226e91bcf77c085e3c115f49d05a29c4e282caa7b8a60a1fe09a2e98227a2cbaa838d6053cb56bc7cc84e6ffa81c18ee26c1b32c2ce205c8fee3b2f4fa8d983b4901c80d766a3299fd62e3339a697305ab7cda995b3cce61e3372f152841ec1d540c9f6cfe2871e7cf4e6997afac85b1c05bed03a5e017bce4b45b0903e9c60cf3538df7df9d8fa93b53856fe93f522f723470c553799c90c56fb705040ba78141f7e5e9117f4876c45884edd5059c8588fc39f9c6268038c4a462a4a5fbbecac0daaf54876ac0217a9ab6f83ec52f15a170005e57baead0e8b1570508e10d2c9808ff3a437436d93ffd02c72c703e2e1917c0c82c3a4b4c03cb91c961451e3f6e2d9d9e58ac1810831d7618f81a34c23cc14029326f16cd043e82ea3bea5c6bcb84152d140659d1a4f135cee82640f96e177c030907117a6c6a8049fd3815fa06249ba4b37c2381c0eca124e7f5abd393c6d175ccf0c5fd4a6e9e00d5338899ed03b5a5023dbe4c6ae1f1ffc192411049e6fa34adeefa3b2e6b45165f341e0b853561ea0d183d93100efe80237ab878312281d607ac8dc10f34e6840a6b6d5c2975348a15761326504c24d5ec648f5714254087bd8c53fe131461ca4cea09ab52848b2526edb91a2bf6c0287aeaac51eb720507d66522ff2f94d90ec584f6088910ee079538e43cf8db55e2f0d70a60eac90eafd82480d11ea5dd795a05a698c2961eedad5f8a79dc3ffa92129f76b8d795e24a1905fc82f11c40d68d11af282621b9a2e39a8dd146013bd3a044f55366af078f7c15adc548029ba4ed896ddb646d74e3af69d8597831e08eb4df1b7ed54b8f3b327753ebf47d50a215c461cd422483c8f2d54f010fa9b76e5afef86b1bb8aa6d4b0c5c9ee798791379ed4dea481feb37ea18b5c7c0146aed32772245cc39628ecc13e03b76c302f80ebcb50279fa2ff74139468a23f36881ee7e7119d8040f90c7e3d8f75d80624d17d881e363b4913eb02e73224c7dac1077d19cc9063f8831053eaa9ecf87ffc31140f6a0a47869e5a5660e5d53b404c34e17b4693df9d5418131c8aaabb0e15aee98594c57cfb2202f209a4529a293b37ef68a2e95fb8fe5142e974f1d3fe3a08ed169379387e96ab5d927771ca7157e9bbd2650992680105dcd6a75829e0643b5ad708e5c65ea4b04b3eeedc24bcac8152cb887f32436a11efab6dc2509fa42d3d31e8aac73e9e8e84a88d7096b9549bc4a879d8f824eb63809a253409294f359b76ac3f031e6bf74a4de018f1c666239bae7bb01c523f53efc922232415d68264872296967dd150af095a12717e7eaeeb98f48c84a70fce8063790f9c2f43db477175e1c8da911ce853042d84e7f24df59e8caca5ee93e2daa6aa18e92930b4495dc22ff6729964942d1baaccd07233dcab828c2254f719132271e9239390e2ebb74ddde7284ebb8955719f7d086cdbe7eef6d7298576fac821eae5a8b6ddf9d88a1dcb32121b6d3ce49c245dd675e8a3b2254a9998ec0d0d7d9570bf6b6db0392c5b060872e154841096351d880f71bc00e5a576b14c26f85840c93a0c424cdbbc57b1d1212e300a874921c1f9c0de14a8cf61f8ebd03eee5cc79f34a41235b6c72aebf48243250c6dae8547b6634374e0bd073f7c162d4226a26032bc154eba7964b2975a8d35f17560a5312cf124741c74774f9a30f8d5ddc891e78bafdaf4f86d16d4c1363d23708463ab1314e3bade23316c7fbf51d2a2417da5162f9112c4331eab695d457e3712bb5f880c68367dba95b61f6f6a9297e477eaec615dff2cd3222f21d90abd8bd4b12fabb278c9fd44ce1ed024ccf908cb4995a1d9da53f62532203d7079e20a46b2b069be4b13a52a81c3b5227f57d6c184945a1799e80dbc7cd137e3427df352c0c0fba04f3b7fb02aa36c9af4611ebb51333326f8f750d662a0a8b43e30acaaeaf2653431b57e95a77adf8261298f791d200c02bdf4b821f7d09f972dd165ce92109c8dce081bd0bd53f598200bb3c5d875bbf1be2a7dc68355e42c515c20f2d72cef3d680a42e8a705f17c6ce15f47b144e55a3e566cb73ba5ee18c5a1535e5f4b4c1774736ed1654bc024b6c748b48d9cea48a06a571d264fc876f9afb2bb43441b39bb3f9e844f70dabd4d0ea06a46c1361a60ef5914411397600e63ecaa65f6598b4ce6f3a967c93ef0697e268b70d0637709ea3fef1da8afed0d2ffd36503197efcf68e0a2cb10b4104b209c133fdbe11e07a8d5c511045d19b69c63818e55168de4357a99eed1d8410664efdc866451de9bf6794d9742e2182449e2ae3869a01f1ed7ee37ffe817a38c502b8243a1c05f1ccbd349c7b9864cbf45b5a3c6f395e4a6602a02bb80ccac94ab66d67dfd8e5cc6fa6321e930354a2c40a1e8d360752dbdcf00134d34a21b24b9acfa2cd37f3c191461f4c9d8243176f42a8109bb05c37ee715ceb027861cf71268f283035d71ce4bae4ac5f79ee5211475ddfc33f02dcd91276e5ca265e5b9104222fdff5969f434a4412ba9fe00aec27f559b63c25a9e8d53c063db549035ec2c8e91e1a6247045541a7e28ff6c13e9f29a3683e55731d80d714b9d5801cfbf617aeb6651290293ac0f4e246df99e72434772b7d8494485537b7b2063c7bc5e80eb6c7ab6647d01189cc910aae2fe8249a0fc3226caa8994b476c6777bf113d153c43da337a6304fd10582d58919596a6de42ad500b62c1e6550d8cdc059496073a48110b2fccb42c96e3e3640f1a87fe379779adcd8836aa8dc545db39bb3afc032c16977e150e9572c3e5f8e04bc15497ec8217a0e187ba097fa95a855af66d47a105bdc3c837091daf5fbeb3ee5ce10b132f912b89ea1c6b9ecb8fbee0e4ea4e43b835ae583b67aab430dec741ea03195fed3cc164472d4b571d166ae20e0a309a80ce00b0fb349f7641f41a31993a8bd9ee092aa7ef16c9563e4db6236c9e702710dc95b198f533b1140441a1827aa4bef6a01c689127eb7028d1bb083edc8a08b8d239389d99948f1290623ba908e6e1c606035b70ba7065f8011451151dca715fb920b4d87858f01c5484df0e63656", 0x2000, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82803, 0x8e) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r3, 0xffffffff, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x13, 0x14, "faf98317e5a1149989fc8dbe43ea6acc9663a2503dc3bd3fe37d58328bbad0099cebf225f5d69098c8b534464c512bdd8a0f1901000100", "32d8cc263d9e234b02000000000000004a6783cdd3dfe7800b2d7b6aa54cc5001fcaed1e831fa79a000000020000000000000400", "6704dae4901802c4dae4162e43ac61b7ad3300", [0x7, 0x6]}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x53f04}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x200400c1}, 0x0) sync() 4.450104091s ago: executing program 9 (id=1507): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0xa0, 0x0, &(0x7f0000000300)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a80", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_ECN={0x8}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x53}]}}]}, 0x44}}, 0x20004055) r1 = creat(&(0x7f0000000580)='./bus\x00', 0x0) r2 = fanotify_init(0xf00, 0x2) fanotify_mark(r2, 0x105, 0x8971, r1, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYRES8=r0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x14, r7, 0x101, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x2400c040) sendmsg$NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x1c, r7, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4811) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bcb7000f6d3e3251200000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000006003600350500000b00ac003388af2c26dba400040013000500c2000d000000"], 0x48}}, 0x8000080) r8 = socket$inet_udp(0x2, 0x2, 0x0) r9 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0) ioctl$FIBMAP(r9, 0x1, &(0x7f0000000040)=0x85) write(r8, &(0x7f00000010c0)="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", 0x1000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000020c0)="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", 0x1000) 4.2629684s ago: executing program 7 (id=1509): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000003a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010728bd7000fcdbdf251900000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r7], 0x3c}, 0x1, 0x0, 0x0, 0x4044c02}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newtaction={0xfffffff1, 0x30, 0xffff, 0x1000000, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0x3, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0x40}, 0x7}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x2, 0x3, 0x7, 0x4, 0x6}, 0x4, r7}}, @TCA_MIRRED_PARMS={0x0, 0x2, {{0x9, 0x9, 0xc, 0x6, 0x6}, 0x2, r7}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 4.094306906s ago: executing program 9 (id=1511): syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, &(0x7f00000005c0)="0f2096660f5f000f013166ba420066b87aa966ef8fe828edf400b991020000b800000100ba000000000f30640f381c3e0f20e035020000000f22e00f01d1b9010100c0b80d000000ba010000000f30", 0x4f}], 0x1, 0x11, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c9, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_io_uring_setup(0x5c26, &(0x7f0000000240)={0x0, 0x0, 0x13290}, &(0x7f0000000440), &(0x7f0000000080), &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0xa04018, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x7e) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r7, &(0x7f00000001c0)='functionfs\x00', 0xb) read(r6, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x243, 0x0) io_uring_enter(r5, 0x1, 0x0, 0x1, 0x0, 0x1000000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="99", 0x1}], 0x1) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 3.857557646s ago: executing program 7 (id=1514): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001600)={0x0, 0x0, "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", "e2ba32d712fc92fa191ec4853dc0442bd613dd0a8bcdcd619ec6cba5e9ed523782215ccb168244e97a69d32052125900cbe5916617f2dc7c0615947b93446e4af5f01dde344d48b4eccc0bcd45ebfe5a78d7a47c0ed1d5680700104ad7a336adc0be54ff6f6caa3bd2bd32b420b49c05bd1df68cc45647d5215182d35ce7ffb371ce8e0d44d9314a88c0d2edfd84e64e877d05e9451db177f233e69765897f02d6a6844c70d0359d45ed0edbe9b709934122d55ca4ce30a14e5211d32c2d37f446e44befe93bbe8b6b7d19f3f4bf6b1bbc31ac064d477222392583fa0fc27643dad674bb6c1950c0e9b867054be515f5f75efb290f3fb14b19cad33d24f12e2815cd575c00b551735dc793f9cd5ec80141609061ae6b811cf9cd1afe0a732f115290471aaceb3f1db2dc7080ef44145beca8b7f95790bd1bc3a6380c0b2c665da17b8f4f0278e9496cd1141903dc54dc6008be93ab9c9b20e6729f969dab4ecbab4aa602e9e3240b7aae39337beb4fbc3ed78d50de13bfcc7686f920a6efa63b85e1ddd862197f2279384cce96100df8d6ac6307cf130a2aea7f59865117de5c7844df7e43edc69e4c833ab11acae23a29741df0043a7a76cd2d299f584d91e784012b499129c3d94c500a4cef2f275f02c72f23acabec828c5be2206fa98bf2277867a7d526b833082abcfbf227e74f6bfc4c9af01fe6d2da247c428aae805778329fb70a229b2489d591b42448fe2be81b6e1bc8404e4cd94c3e43e53f5462d99a3355ed2d46d64ae093afeef81ce357c52731cfec5273252fbd5f37bfd7112a54f2c7211a95d13c5b9da102caafb17542d1282be51ef20132892b0a18f7379693e0d0903e97b53faaf7dc57e1d624de885532cfb645c2d246542220ce22d1dd9ba2a3d322fd39364aa64b3300f071211747f4cb3f9585380db3e012055a03e9f38a985517c7f6f7f64d9e71507256341cc1ee501856cd9f5dcd11555178a2f97e738c5dae754d3300e14953f4534f047b8ef09fd9fee52bce236633eee3992e90d473fdddf675435f49e0a455f8126f2c61acc4869eaa67eec22284712abef5f049bd6b26bc2bc0e90065fa9442c2794e8e44863ac3e9769ba8bee15b3c4410340a585787cbbacaf23f3203505a119386a0809d5f4f7ffccedaa272653cf6b9cc80944a20ac3c2c8d3408444db4ce6f267e0207d265af9c1099c29331f2c57ecc9ed1de7c597cb9942b568ad219389727f58e3b125b918259a8025086f229b526a3021d0fd3f89e43c6446635290f7a9594f934903ec1df6e56b278995d91edb066496db48902564d27b6bc67e1bb0ba7873634f138ad69968deb4ac01b1da1db1faad27424d07cd89149fda40eb77986ce52a01c7becd32d208739f930d830e154f1091ffc781d779cba7640e7b9459298a4860808e1f49de59bf783b270574faba4998b25ea2ea29fdded66ac533213e14df8e59c8a59e98859b28b7cc6c4a598206d4a140f3a81e798ed08bb3f0c3f58b703440a5816ac12aedc8e428189fa2d75a7569258aab8c9cdca5ab4a7f3066671b331f28661a8d0bfb7c4a42d010fdd8824a3f6ef842dc4bd0a925cdbe1ede867122dc832c8f8d81096de34f3d2ca7ce2bc82e9a671150997fa6c694aeedd5773ee7083f9275ba2fe033e4654646c5db514c9627b1d7d10597c284bd2d4bed8912f8ba78a34e07931ceb49e774fec771775cca677586073e4cc20e4f9a6f70def601737f617d0fbb1172076eb531c2aa2759d56b1367a795487296b51f078d61f309fa53585d057afbfd144d1acd02aedbc4dffffd7423c57eb69d9e68d183dfbbdf058c448fcb4f52e6609a5d1a5a03efc6d32d08a3a33db4e05db8042529538fa6b2f3fde5ee71a87d0a2eacfe1b25594fab94db75f8cb704d4a1b2aeeaa7f2fc4500fa466ddb4d3ff418aa983dc4d197705cb270610dca54f9871e7b905364c3e78c6d8a2deca51947d76c10eb4540eedde79325082bdb60f0efc879734b1a420b02e5744cb87bfc376323166f71a2939aacaf875b64e74bb70db57ae36e64887a78ff8bb63fa48a6feeca9e7390b70e8908601e5f370304e8ed369e457bb32ad05d29d10162c36bbf499a1f4af92afe3310d53ade1462e64030f181e7165e33b35f35208d2cf1ede5bb580156c143d4b9a1fb83ad871316a08d4f7834065fdef4fb6896642d861706867bc2acc20f70e1c0d49dd945b1993c1d822ba0f8405b775a06fdabc26cd57ede0b6196449e57f7e44cb77b195e5b6f8ae77c6885395d9cdbaeeb9cfa833ab745f801598e417d21302f9ce64ac8b4ec484abe798bbcb733fab59cf8bac056d0c04bc314b0c0aed8f7c7ee71c5d9aed586e3ac68a24984f836fd3f38b7076aa37179c3a7e8f271d464ad9e3d1a83d5b1de562a7ce024d386210d57571b1bacf0e40fc5586c93077e69fd2d4f744a36e74bcfb886daa2e4d7bcd158f670cde138dcbf001b2737361376cf3fda985d30d509387777bde79a822c3831dddc17a12d95955dde9d2a27962e7cb330e7a91a39b78f17dae8f1cf7b44d5dcfcdf55c8b518dd3cf04b7b2b856c53c80a49faa7fc002d72cf9b2227a7d8d8a4988b5cd21028709f55436ddeb129918076ff4a9640d0ce8338b5753dfc2c691d0e2ad82f9f4037b7a65541865c9cb2f027f4e6ec149dd3113f554b31d6e6792b50dc792ebd911af05eb8872aea0485f0d0d409c63150029d584caa2cde18d526d68c4daa50bf56c45ebe37443d46ee5dccefbcdc0b5520636a9ae53872ceaa1a798a5a77ed5c7794ee4e77952f39916f65216f14330f609f18bc307a94ecf32a19f58d910d535bbafec6c980cc6ae1da83d2d1bed10155334c366a4338f9eb1bf856959493f91fa7e81951824731b39496c428ceaee31078cc4325a4a095ba33f2d5711908035503a791f77bd8dc633514ffe33eb5ebb722b7a4764b88ae3d542aceb4b9f19620776cfa9a56387d12b6b8fb729d0201a958b5b377213ee7491eac68ed2f5199d225457c892fdef8b017a4224079bdefb96bbd06343681c433171ead0bec7390607fd34fc52df2aa8352710276b64c3fbcbae89f13ff84f00131b33ca987a43db298e2f7a4a1102bcf503f34e7bc34383cbe4a971cd31feb318b584f2a7321045779f2ac180668a16b9165413e46c0381bf01faa05ab90e5d58a2925773fd57ed3744fd96b08715cda65f0f2a46217f0ffc45d474bc1b6caa91a918b3c742f4ac4fd1b3fa73ea7e59728367b2b4772ea239c880decd7a355890bafb17019b3bda868e55f4aa40d9ec209a73c0b5864d7bbdcdd4a76ce37a9355aa5e2e11c1a75ecd34aeeda89c257ee18ed87fe8ac2290d983453951c8370afef93d09c9f33975f88f6dfdb0d50ba9a7a05568227e7e1b0ac0d374b0473b4d5acf6faeaf6919a2baab73931b9a3d58d3d60185507eda0022f1bf6776c05ca4f1cdecdd486debddf11fe567ec42815707831fed3ea5873c1ea4d5734a1ce7a48dd7b186487fc6bf0e3148c1e7970d1dc587f3e3c3f11f41597ce3eddeeede2cdbb6dde70fbd7da2879a8a6d4f0af15d6a65e33eba98fd71c2cc0fa0649204782b1f13d9df5226eb55e82948b8808a42776094e6748ca4fad2f970077190d520010b390f319a4ea7e12ebffa21c1135c4ee2c1ec6a428135cc12515dadf9001c8dcff35cd19acc092b9a3a6ca42381983b82c76a0b21d70a8380ab4311383ad73e66f831b9183e2d1f5b186d6dc4e370445b3bb9e4b8243102ccb1c847ca30aee8d4f77708b2a3ce4573e04b224e0d6e9e9acd938a0e149bde24e2d85ba68e12ab70c15d1469d0e176e29b64cafea17810817506bd688881594c57578bcac72341de11f2e24832a980766d78613997e91edffbc912277b6d6aee948c2a03ea4e8fb068a2bb0cf7174e8e6946bcf9971343ebde495bc3b94941119bba659e0b1478ae208ba90e64270fe23659c1774ef98c2e5d9f9d12d5e2dfff69f68ab7439307fc534c1894c21c9a0dbaf07e0bb78e46552f2d7b451bfda9dbdf0ab3202e7bfee13a45d9b22fb87ac9b911e4c3b6b66b8cea397e50aac85ef01ee68810ce233154469ebd0fde26dc477b1f3d8f91ad6aa629acb8e7ca77e59039e5d7a31d742b3f624d451092bacf58c16c0921a661495c95bd0d462e619c2a1b4d3eacd15318fcb8ef55315cd1c07d029b7471256f9183f0a9f9470aaa64cc2bed2d020990614d8b4ef9e6ee7110c74a083c97746ec39736446150633d6a63eb2dcfac76e2b87e7eab223bca2608de71a016575cbe249145b921850d2a190df5e01719ae88d130c916a73791ba693689780ce6e502a7888b6f21203a82cbd5557066a92bdcd13da4a61f63d1e41418b1418d97c5192afbd0274d37e62b998deb99ef5c288345244c2eeaf8e7a38834492e15b48d98d1d21ff4eed723e2748a6a1da3e93be1c58f66c99ba54bf0b08848d77702634593d63acb1b51fab1105c4efcb002af92a893a56b46f78fab96959a6bb6eaff5c56fd1bcc8fd6565ecd20b66f55093e24213ca97747d95f4a0bc686cf70c0351ce5d066b4012c3bd0626bc023d3af5863c689b5b9c237641a058d2989b210724debad077ff72e27e14dd28f81d26d365d33bb1e3ef7152ea8b14aaf1d6bcd1b158d860208a936c7a85afbb6cd46a46a083ee5ee6a22f276841cb462c0deb881bf0a5637768f2fc8faf6b08e0532c40a26e0c97b7db763d9baf9395dc6b9fe923abcccf6b6cd8ac14cc2b8a4eb4567d654c9839e9b24445f34ba02c4a893766f7c7f236d97e2943238b523feaebc10d8f637025db8f352fe23d4bad42b94f2e2c800232ef3ec71981be01a7ed38ecaa56b31e722535fed7e94bedb5ccd087790e5f7d7b120a062e5398775a05d8bd556fe4d9142f58eaf8ec12876329b330bcfa9b11b7627d7e291ae4a1abd1ed04ef376613c7f13b3ef431827dd8afda3654cb309f0366ea19caf59ba4f63012cdf84ad8d5dea4c9089d8e73a0f3e88b378de7fa9d9781b851576bad2dc97edba4d20240236656739f61898156d872b4e7c040b8c2f9fd7a12dacdb4038a19fc2e858f30c9595316d6da0e9b240c8ba9cb732ddce270ddcce1a91341ed4671d6320e15ab92b7818e297b0ca2b3458cb32a215fae61f4cc020316e6832afe2ebb2320f30ad383a04df745e9b6f3e9c0b95a123808ec2618ee92dd5ca092a2b3ad4b0cfb3f5b4c93e57be55bc24916bfc6b53d3c057121e6f9b46090822aa653c1930fae60a43f69c1988067d6dd093b602197e38d05d8621cca292034b9293d6847eed853917d511cd13d3522682f224213384874cabf78a75be90636476da4b005307f546af5b8d66313845ff54ab19ec2c3bdbaaa92a7a12e6e8961"}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000002600)={{r1, 0x100, 0x7, 0x59, 0x7fffffff, 0x8, 0xc, 0x5, 0x9, 0x800, 0x4, 0xa2, 0xd7ad, 0x800, 0x9}}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, &(0x7f0000000280)="262e440f80ca780000c7442400eb000000c7442402136ba9fcff1c2448b80b000000000000000f23c80f21f8350c00a0000f23f8b976080000b800000000ba010000000f3066ba4200b000eedec6c4a17d51e9b9ed0b00000f32660f3881bf00800000c46169e4d4", 0x68}], 0x1, 0x48, &(0x7f0000000340), 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$XFS_IOC_SCRUB_METADATA(0xffffffffffffffff, 0xc040583c, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r6, 0xae80, 0x0) set_mempolicy(0x2005, 0x0, 0xfffffffffffffffe) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r5, 0x4020aed2, &(0x7f0000000100)={0x1000, 0x8000}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0xc, &(0x7f00000004c0)=""/118, &(0x7f0000000280)=0x76) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @flow_dissector}, 0x94) 3.529060888s ago: executing program 0 (id=1516): syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') set_tid_address(0x0) name_to_handle_at(r0, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x400) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0x40045731, &(0x7f0000000040)={0x1}) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0xfd5e, &(0x7f0000000f80)=[{&(0x7f0000000880)='m', 0x1}], 0x1}, 0x5) setsockopt$sock_attach_bpf(r2, 0x1, 0xa, &(0x7f0000000180), 0x4) recvmsg$unix(r2, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000000)={r6, 0x4, 0x6, 0x6}, 0x10) syz_usb_connect(0x3, 0x3d, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="99", 0x1}], 0x1) close_range(r7, 0xffffffffffffffff, 0x200000000000000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r6, @in6={{0xa, 0x4e21, 0xaf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7}}, 0x800, 0x86, 0x8001, 0x80000001, 0x4, 0x10001}, &(0x7f00000001c0)=0x9c) 3.022154535s ago: executing program 7 (id=1519): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000940)={0x14, r2, 0x1, 0x0, 0x0, {0x19}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYRES8=r3, @ANYBLOB="0c0001800800010028aae60340b27076531e1b426b2c79d52f9f3c86a39a72f47f75c7a8ece5d5b85aeec2fbcd59ec4036658c42047ddf693bc48fe5451cf13baa1a845c1ee0f101000100232da7d6f13bb48a72af4d816e1d90db41a8645f4714ca659b4bae707357381a16537a06ad8481841467e083", @ANYBLOB="489b2aa9407a5037afd04a6aa07f54613eae34c2febbb5da1271d2d7deffbe859522d941c34e71b880639185a85c7843cafcbb7a9e00ce0bf8eb05431aa93019352dedfb19a777fd69aa73ed59b429fe76b264896312dab5dff99b8fda"], 0x24}, 0x1, 0x0, 0x0, 0x804}, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x2200) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r5, &(0x7f00000004c0)={0x293, 0x7d, 0x2, {{0x500, 0xf0, 0x0, 0x5000000, {0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffff, 0xfffffffffffffffd, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x55, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x181, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x232) r6 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x200) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = fcntl$dupfd(r7, 0x406, r7) ioctl$NBD_SET_SOCK(r6, 0xab00, r8) ioctl$DVD_AUTH(r8, 0x5390, &(0x7f00000002c0)=@hrpcs={0xb, 0x5}) ioctl$NBD_DO_IT(r4, 0xab03) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2) write$binfmt_misc(r10, &(0x7f0000000000)="a5ce", 0xfed0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r8, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x94}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x3ff}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x8081) r11 = openat$cuse(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) splice(r9, 0x0, r11, 0x0, 0xaaa, 0x9) 2.321008283s ago: executing program 0 (id=1521): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x9, 0x8000}) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = dup(r1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) socket$kcm(0x29, 0x0, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r0, 0x7a6, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x0, 0x9, 0x8000}) (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) dup(r1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000180)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff4}]}, &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1b, r2}, 0x94) (async) socket$kcm(0x29, 0x0, 0x0) (async) 2.239413224s ago: executing program 7 (id=1522): r0 = socket$kcm(0x10, 0x2, 0x4) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000000c0)=0x60) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000009c0)="623b4ef2bd06aaec6ed87a053327c5d4982f1f59bd6f4bb34288b27e90c50344bfa934bf7f34080b077c93a8a13fe718510f9d29e3a36e419eb8b0502ad0ff8111eb6060ce7e1263490f92203147277211472555ea410a01d7012d0b41012eb9e18eee69fbd1ffe9d181025110f441ef655f48544a804bbcc74add0ee6c66925f8da9735762425a0d9b71ad7443d885bd04e4d61a8304ed9a68962343890060569cdb611a1efb09fe046a9593d8a9d98b50ea661b6bcc18760522b08d80c79ff7fd173a0f46450db3b29ae7cc720d57e9e7b756773391e6c79ffb8b052e16e7cce6b8773f3f03b65bfd47e", 0xeb}, {&(0x7f0000000180)="e99c0144b2fc2eac8d2a68a5fecd2b21648c347827c6b541c33d5cf61fb36c0dd02db5201710591d8f5f9a3bade3c45bee2fb95a72bdd2fb50418da2f3f9e9251556ce883ccf90051208d3a2dc3eedb61e72a48f7b28935dafdb3982ddb529c7f21f8347e6c073626d8de5bc66f9c5f60cffe96971a8600000d09da6288fc28cbb874cf30dd15c46e36147baa61ad729f18bf9442f18409a758b3af71a081cb7c0b74f7eff0bbb1e0a683f74c68c98ac11944a9c33aa0fccde619c5ccc47773e4208a23a6473eff4cd6cf863c381f08fc3d98f4d0c3884d6992a94f122", 0xdd}, {&(0x7f0000000280)="76f36baa527cc9c3066501b19e5659bc6e0832f8c4eb28dfa2100576a8ca2e25649473f230dbe4bd4dfc8248b100254dae425e7fb8b6ceacfa0205bea3972f89659230791e0f358f7d073ce0134f463be6cacb8b38bd196ff6a5832a6a715a9b67de73af9d8bdfe0b53a889995daa30f5af6", 0x72}, {&(0x7f0000000300)="204527c3e93ddf4e34598661f0f9e857f809d8539c5c1cfcd30fb1ca8b95342bdd461d2bbe6f46151257f54993b061dfa99bf95236c6138db479b2b7147096c9291cb63d8e5d2ca8e3f6a8304ad757dc8b42a199ef452b0f4b626dc281caa8a96cc93a935a12af0c7fd96fd2d8a48025c5e35c7d5e4c9ec83c9c54a0e0baf24823263dc544408b5faf776ed978d108af47867793a0d48160fbba85a69eb94042819b228175b0b4f32709d74c340b77b76e20e85fd618107e245ed7c6a37b8c443f790ea0f06bc4e66ab076777f42df91a31616d46c144ce4f9817194676932a62a5136be37e8cacf7c4b183ad09c4c8d8acd0db4e6", 0xf5}, {&(0x7f0000000400)="bebbdae724a6bd8cab72a54adb32637feeb88d79583be52324ccd2522b8e3cac7a55bd13966820ae0d39cc15af927bcf69e0e0df7facac4584fad57cc5f91c2ad96d462502ee221eb2a4eb3bdfd8ba0d77da8f08869dac655a2f2fbe11313a6a9699141bd5da52806fe9f17cd37222e1391355", 0x73}, {&(0x7f0000000480)="b1691dce36c7791779a8d275e66fbc42162885c6e32c1b05752e8bc858dcedd348c3a46a099e0cffe7a536d968f9d3bc0020f0e2fc02ce97ef897cb37b3cf51db84bfda0a68bc0e977408cd41b6c97d13e22c73afe49fb33e558f563a0df69dedfff3434467b99542e46d7fa745006cc4e17157ab041695e378d646bf864ff11bcae6fee579bbfe887212838b9206dc96138b5696f1db95db2ada2e31f6f5a17d6997168bfa2cd23e463a43b67cfd7d7f49bf1d0c7d557ea32d3dc04bb50430f8730e49cb7d35190", 0xc8}, {&(0x7f0000000580)="a5c7abab0ae5695ef4f07a00f0638e8475d52498b28b", 0x16}, {&(0x7f0000000900)="5a25c3796e95b05431863bac92ccaa82f218fcf0806ec31cfb0414bd314a89473c8ed9ef6ff6f0eadde1227af38eaf3bfaf536bf2d8b00c8be791f1e21bfc37f181af22f932aa83d806d4c839cf1e05ba798fc38a8ca9cdf0ab3d12b998c63917cec48faa73bebe975fc079dc725153733019d6ff6f61afc5c969a3aac5912fc21f54a0380995b26032571f98b9a8fdbe805733ae6c32707b4d78b51def0", 0x9e}, {&(0x7f0000000680)="debd45d4ec220f7c969e8d0d5016eabe3247ea12971e3f543e4a926fcd4c74dcaf2b0085ed2be581cf589dc84636cadbd70c7aa9c3eae65c16128009b00d910a4f141bb2e612b76998b208a534e9a4ce2b544d9823b975b5b1811b5aeebc1b5f22172edf9847f8986f366ba8d785e26322495e5cfaca563e3620a3dc355827f85c4d3ece89c120cfb6987dd41ea6389dfac4812f916d346c3e84565dec2155bfd9d7d0ca5d8dcfbf788884b8bfee53ea07f947ee", 0xb4}, {&(0x7f0000000880)="3dd364afbaf8f2ac3c0a043746060af8e8f7210f1ab8c936a33e64b0fadf8d23ac0875550e4f5e6bdbe04e4076bcc4b806e5f44bffac191618c86c006b643527407c", 0x42}], 0xa, 0x0, 0x0, 0x1f00c00e}, 0x0) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) 2.045173175s ago: executing program 7 (id=1523): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1", 0x2c}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.043945524s ago: executing program 0 (id=1524): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x700, 0x186) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='befs\x00', 0x80001, &(0x7f0000000340)='workdir') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0x100, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xa, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x0, 0x4, 0x3}, @TCA_FLOW_MASK={0xffffffffffffff6b, 0x6, 0x80000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 1.942866289s ago: executing program 7 (id=1525): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b16, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x2, 0x8000000000005}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f000000edc0)={0x18, 0x0, &(0x7f000000dd80)=[@request_death, @decrefs], 0x0, 0x0, 0x0}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="27030200dc0f14000e00203c00", 0xd}], 0x1}, 0x4005) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000001000)=ANY=[@ANYBLOB="016f0800010027000000270000004600fd5e00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c4f60402ffffff070000ffc10002d588380003c100000085c0083c1ffc94548d1aec11a4a7425e038d7f25477b1cc30b36763ce238be19c6c50974a7359d3cfcd30dc3316223df4597cbd131f03d8674efe71fa6535980b65d4fbd89d5d534f832c831086f8ed51659cca507b243d269b271f226f6d9e451f9473278450524601749"], 0xfd6c) 1.794141388s ago: executing program 0 (id=1527): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='htcp', 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.swap.events\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) (async) fcntl$lock(r1, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r1, 0x6, &(0x7f0000000280)={0x0, 0x0, 0x2f, 0x1}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x4, 0x90}) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) (async) syz_usb_disconnect(0xffffffffffffffff) ptrace(0x10, r3) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000010000100", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="e853edf4d076b6075df064efae318f7f3fc368c5b858948417eda82d59c04477a9810699c2db593ef73716e59f9d78183155e7cdbe89b05a9f607dd31905965aa3c908931ee3b171ff9e55311361444e33a5b5cc6ba7851fc6697df6f546f70263c74d70d4059f64a6cb1cf070b6264cd96539601b412ba150f124fda3302c77569db083fba62ee9d7c6b79ceb831ddaa6be87232d0062726f863dc09d220cb32f9ccb39e63de4a6123b24cb3b048f5631ea838715e4038bf0587cb41039b715c0abec1f116654942bd821499f44e620b475c074e6646cd80f08a8157e02dfade8ce49e33a334ec2f8581a9c081cc93fb1f9ddd84f2ecd49411a5a0c53e0ed0828cdc1f8d3058d09fda9983956bc75bc61f86e80bdd7b7dce17aab72fd2f1cba81852ba56dafec2c29025313c63d000000000000000000"], 0x38}}, 0x0) 1.384529631s ago: executing program 0 (id=1529): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='configfs\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000700), &(0x7f0000000740)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000180)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='/dev/loop0,131072\x00', 0x12) write(r2, &(0x7f0000000240)='dummy_udc.0\n', 0xc) 1.023652879s ago: executing program 8 (id=1531): r0 = syz_open_dev$sg(&(0x7f00000019c0), 0xfffffffffffffff0, 0x8000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x0, 0x0}, 0x10) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000000)) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x23, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}, {0xfff3, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0x1, 0x1}}}}]}, 0x40}}, 0x44080) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xd, r3}) 945.557695ms ago: executing program 8 (id=1532): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1, 0x0, 0xfffffffffffffee5}, 0x4000000) 807.258943ms ago: executing program 8 (id=1533): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003002000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe7f74bdf1", 0x2c}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x10000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @mcast1, [0xffffff00, 0xffffffff, 0xffffff00, 0xff], [0xffffff7f, 0xfffffefe, 0xff000000, 0xff], 'xfrm0\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x2f, 0xb7, 0x0, 0x1}, 0x0, 0x218, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@statistic={{0x38}, {0x1, 0x0, 0x1, 0x3, 0x10001, {0x1}}}, @common=@rt={{0x138}, {0x5, [0x1, 0x4], 0x1, 0x2, 0x2, [@private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @private2, @mcast1, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x44}, @local, @loopback, @remote, @mcast2, @remote], 0x6}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff, 0x6, 0x6}, {0xffffffffffffffff, 0x8, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000001200)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000240)="aac1c667980bacb85ff0df16951a5501523076ebe2b944529178d22b164563f7ff1ce7f7b143bf7d9bd7a4d205fd632f830272d3a78302205252b9ae7d8be5638396a0fa0583974f3f28302280b7b4d3c9e13d74dbc7b9e8718956dd5fe482", 0x5f}, {&(0x7f0000000100)="2e3b4d0793c0907a06a1c65afd96e5c997cc6fe980972c7c01fcfa7c85b0db039afd7c02884bfed5faf093fd548fca4f3a6e7391c8acfda620b96e71569873b28a43558b1c85f34b806418d36165411c9ebd66627a", 0x55}, {&(0x7f0000000340)="920c19715e7b63112a94919262715064bc2cd9548fab1c823575fc42bb47c202c216ca5ba5d30f7c657e1fb4bc1494b9c3af7da34476ae85425970a2b4accde6c711e12df583b78f6cd5d2eae194ae5f9f1f0b81fd6618f469933b16eca1f9e35798daafec41c54ec908440bc6f2a8c94e6bdf0c72c8e528f0778c5b5ad28a834e43f387c8282e50e7d6b0cd91a93f87f645b32c1f200f7d9f101c7bcf701e4462f36e5fe5503da319f5261659f63d203e503fc3476bb556d4987fbfbf", 0xbd}, {&(0x7f0000000440)="126ce0a7ad2d3c4b1b140fc7402f00828a02ec6c4e59757eda3f13f9d8a4376fed93dd5b8c0ba901c5305f", 0x2b}], 0x4, 0x0, 0x0, 0xc40}], 0x1, 0x24000040) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1e00000007", @ANYRES64, @ANYRES32, @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f40600", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 711.422789ms ago: executing program 0 (id=1534): syz_emit_vhci(&(0x7f0000000100)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0x2b}, {0x3, [{@any, 0xd, 0x5, "1b7d56", 0x5, 0xc}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x5, 0xda, "3171f9", 0x1, 0x4}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x5, 0x3, "95ec5d", 0xaf2, 0x2}]}}}, 0x2e) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0), 0x2441, 0x0) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r1, 0x31f, &(0x7f0000000140)={0xa1, 0xe, 0x44}) ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, &(0x7f0000000400)=0xb8e7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372"], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) r4 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x2c0, 0x0) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x5, 0x5, 0xd54f}) r5 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$uac3(r5, 0x0, 0x0) syz_usb_control_io$uac1(r5, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000a00)={0x40, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$I2C(&(0x7f00000000c0), 0x2, 0x40402) ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000240)={0x1, 0x4, 0x8, &(0x7f0000000080)={0xe, "c955000000d5ac81e630a59afe000000000200"}}) prctl$PR_MCE_KILL(0x21, 0x1, 0x2) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 710.602543ms ago: executing program 9 (id=1535): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x700, 0x186) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mount(&(0x7f00000000c0)=@sr0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0)='befs\x00', 0x80001, &(0x7f0000000340)='workdir') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0x100, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0xa, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_RSHIFT={0x0, 0x4, 0x3}, @TCA_FLOW_MASK={0xffffffffffffff6b, 0x6, 0x80000000}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) socket$unix(0x1, 0x1, 0x0) syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="040effff2820"], 0x7) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) 594.942389ms ago: executing program 8 (id=1536): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000340)={{0x80, 0x4}, 'port0\x00', 0x109, 0x60004, 0xff7ffffc, 0xffffffff, 0x1, 0x4, 0x0, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000500)={{0x80, 0x9}, 'port0\x00', 0x57, 0x40800, 0x9, 0x10, 0x0, 0x800, 0x8, 0x0, 0x3, 0x7f}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000140)={{0x80, 0x2}, 'port0\x00', 0x80, 0x100816, 0x4, 0x9, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) (async) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r4, 0x1, 0x70bd24, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @empty}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0xc}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24080850}, 0xc010) (async) r5 = syz_io_uring_setup(0x277a, &(0x7f00000000c0)={0x0, 0xe38e, 0x400, 0x1, 0x3b2}, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000400)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r5, 0x12, 0x0, 0x0) (async) write(r2, &(0x7f0000000040)="2e000000010003", 0x7) (async) close_range(r1, 0xffffffffffffffff, 0x0) 474.576384ms ago: executing program 9 (id=1537): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"], 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="6b6d56752cb5b1bf004d3da3eef1e0d9e583f6955ecb3be19084b6f093a8c1715d0f559241da40dec81a327545fff6309e97b71932406e1d44abeea13bed43aebeab190bf24b3549a61f09f8e56c3750a3abecb06162bb68e46aafdaa1e3e12d112ccea32fda8a7780056c02763edfcdb79f430c7ee2460062a2758cdfdf69e6155bd751a2275de93522065f89a4e6aeba1f2a5559d3d09a17b4", @ANYRES32=r3, @ANYRES64=r0], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r4, 0x5761, &(0x7f0000000f40)={0x5, 0x0, [{0x8000, 0x7, 0x2103d2da, [0x9, 0x9, 0x1af, 0xb9a2, 0xfffffffe, 0x10, 0x3, 0x2]}, {0xfffff78a, 0x69, 0x113e, [0x9f7, 0x3, 0x1, 0x0, 0x4, 0xf, 0x8, 0x4117d958]}, {0x200, 0x9, 0x80000000, [0x94f, 0x0, 0x73e5d9cb, 0x9, 0x7, 0x9, 0xfffffff7, 0x400]}, {0x5, 0x7fffffff, 0xf, [0x8, 0x100, 0x0, 0x30000, 0x8001, 0xca, 0x100, 0xf08b9bb]}, {0x2e, 0x3, 0x8, [0x8, 0x6, 0xb1, 0x7, 0x7, 0x2, 0x100, 0x4]}]}) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000002a40), 0x4a0, 0x0) ioctl$SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000002a80)) 405.366886ms ago: executing program 8 (id=1538): r0 = syz_open_dev$radio(&(0x7f00000000c0), 0xffffffffffffffff, 0x2) sched_setaffinity(0x0, 0x0, 0x0) (async) sched_setaffinity(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYRES32=r1], 0x47) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @ptr=0x7}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000140)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f905, 0x0, '\x00', @ptr=0x7}}) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) (async) r5 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) (async) fsconfig$FSCONFIG_SET_FD(r5, 0x5, &(0x7f00000005c0)='fd', 0x0, r4) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(0xffffffffffffffff, 0x1, 0xf7) fchdir(r6) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) chdir(&(0x7f0000000080)='./file1\x00') (async) chdir(&(0x7f0000000080)='./file1\x00') syz_clone(0x16080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r7 = syz_clone(0x16080, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r7, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) setpgid(0x0, r7) (async) setpgid(0x0, r7) open(&(0x7f0000000000)='./file0\x00', 0x2000, 0x16) r8 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x9, 0x40002) ioctl$FE_GET_PROPERTY(r8, 0x80106f53, &(0x7f0000000000)={0x24, &(0x7f00000001c0)=[{0x3e, '\x00', @buffer={"e2bf26845437fe13e45843f86c59ef76c9ad9dc4b1727a56716842429eaba686", 0x20}, 0x6000}, {0x3b, '\x00', @buffer={"79f624a4545cb91f55ccb72d2ccc006e069215f01d6990e5ff61a138fd9d3f93", 0x20}, 0x9}]}) close_range(r1, r8, 0x2) (async) close_range(r1, r8, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1, 0x0, {0xa, 0x4e23, 0xfff, @empty, 0x10000}}}, 0x32) getsockopt(r6, 0x2, 0x100000ff, 0x0, &(0x7f0000000180)=0x4c) ioctl$vim2m_VIDIOC_CREATE_BUFS(r2, 0xc100565c, &(0x7f0000000480)={0x100, 0xdd64, 0x1, {0x3, @raw_data="5314313f81ee09db6e9bf2058d2a411596850f4ea5d5fcb77ac1d116f47d3062a7f0e3540b0e507d90cdaf7251e13641faac6594aaf5f81c39be9d37108f07ca6493aab9796d47eb7f29e2bfdb676f2401a7e86b901e7399ff64ff3bdf4b1623a2f45ed15fa4cb0b302f9feb34d2d6b97b66f96015efe8736c90666caed22fc3e26801cd719beb341f5be49817d78fa604c51f9f58802db82f11f03e0e9da0b8ad79640adc4ed1e4d21cb48f55d0baa54564cd05ebc98ae0dca480cc3fa957b7179f68ec4dcad056"}, 0xffff0001}) 379.261357ms ago: executing program 9 (id=1539): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) mmap(&(0x7f0000b07000/0x1000)=nil, 0x1000, 0x10, 0x100010, r2, 0x136a8000) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20000, 0x0) (async) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000040)) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000b07000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) (async) ioctl$UI_DEV_CREATE(r3, 0x5501) (async) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, &(0x7f0000000000)) (async) mmap(&(0x7f0000b07000/0x1000)=nil, 0x1000, 0x10, 0x100010, r2, 0x136a8000) (async) 276.956516ms ago: executing program 8 (id=1540): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000000080008d804dd0000000000000109022400010000a008090400fe01030001000921fffffd0122050009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000080)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="001105"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_vlan\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000001000270e00"/20, @ANYRES32=0x0, @ANYRES64=r0], 0x3c}}, 0x4040005) r5 = socket(0x10, 0x3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040)='btrfs\x00', 0x8080, &(0x7f00000001c0)='discard') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r8 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) ioctl$VIDIOC_ENUMINPUT(r8, 0xc050561a, &(0x7f00000000c0)={0x3, "a8df7802c53b418126a7aed1c00000000000e7ffffffffdeffff0000df00", 0x2, 0x7ffffff8, 0x4, 0xb700, 0x400, 0x8}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r9 = dup3(r7, r6, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0xfffffffffffffeae, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000001040)={0x4c, 0x0, &(0x7f0000000ec0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000c00)={0x44, 0x0, &(0x7f0000000a80)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r11, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route(r5, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000006800010000000000fddbdf25020000000000000006000700040000000c000880050004000100000008000600f200000008000500", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x2004cc33}, 0x0) 0s ago: executing program 9 (id=1541): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x902, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = syz_kvm_setup_syzos_vm$x86(r3, &(0x7f0000bfe000/0x400000)=nil) r5 = syz_kvm_add_vcpu$x86(r4, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[@cpuid={0x64, 0x18, {0xc0000000, 0x2000000}}], 0x18}) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000000080)={0x42, 0x0, [{0xc0000000, 0x10, 0x7, 0x1, 0xcc7, 0x80000001, 0x7}, {0xc0000000, 0x9, 0x1, 0xa, 0x98, 0xfffffffe, 0x5}]}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r6) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) setresgid(0x0, 0xee00, 0x0) r7 = semget$private(0x0, 0x4, 0x6bb) semop(r7, &(0x7f0000000180)=[{0x1, 0xfffd}], 0x1) semtimedop(r7, &(0x7f0000000000)=[{0x3, 0x4, 0x1800}], 0x1, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): cc 0x1001 length: 249 > 9 [ 131.355825][ T5095] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 131.358946][ T5095] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 131.439825][ T9430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.569012][ T9596] lo speed is unknown, defaulting to 1000 [ 131.626600][ T9430] veth0_vlan: entered promiscuous mode [ 131.636630][ T9430] veth1_vlan: entered promiscuous mode [ 131.666624][ T9430] veth0_macvtap: entered promiscuous mode [ 131.676254][ T9430] veth1_macvtap: entered promiscuous mode [ 131.706014][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.724990][ T9430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.735907][ T5981] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.740044][ T5981] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.755920][ T5981] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.761764][ T5981] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.861804][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.866779][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 131.896641][ T9637] IPVS: set_ctl: invalid protocol: 24117 10.1.1.0:20001 [ 131.907165][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 131.912598][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.062728][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.064530][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 132.064551][ T42] audit: type=1400 audit(1785337554.519:28131): avc: denied { mount } for pid=9651 comm="syz.7.937" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.065142][ T9596] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.067045][ T42] audit: type=1400 audit(1785337554.519:28132): avc: denied { search } for pid=9651 comm="syz.7.937" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 132.074485][ T9596] bridge_slave_0: entered allmulticast mode [ 132.079003][ T42] audit: type=1400 audit(1785337554.519:28133): avc: denied { write } for pid=9651 comm="syz.7.937" name="buffer_subbuf_size_kb" dev="tracefs" ino=6170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.087874][ T9596] bridge_slave_0: entered promiscuous mode [ 132.093225][ T42] audit: type=1400 audit(1785337554.519:28134): avc: denied { open } for pid=9651 comm="syz.7.937" path="/0/tracefs_dir/buffer_subbuf_size_kb" dev="tracefs" ino=6170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 132.097018][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.106691][ T9596] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.109238][ T9596] bridge_slave_1: entered allmulticast mode [ 132.112014][ T9596] bridge_slave_1: entered promiscuous mode [ 132.133140][ T9596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.137965][ T9596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.166453][ T9596] team0: Port device team_slave_0 added [ 132.171610][ T9596] team0: Port device team_slave_1 added [ 132.201395][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.207268][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.218247][ T9596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.222818][ T5886] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 132.225107][ T9596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.228824][ T9596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 132.238269][ T9596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.265014][ T9596] hsr_slave_0: entered promiscuous mode [ 132.267407][ T9596] hsr_slave_1: entered promiscuous mode [ 132.269643][ T9596] debugfs: 'hsr0' already exists in 'hsr' [ 132.271483][ T9596] Cannot create hsr debugfs directory [ 132.368831][ T42] audit: type=1400 audit(1785337554.819:28135): avc: denied { read } for pid=9676 comm="syz.2.985" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.381479][ T42] audit: type=1400 audit(1785337554.819:28136): avc: denied { open } for pid=9676 comm="syz.2.985" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 132.403467][ T5886] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 12336, setting to 1024 [ 132.408118][ T5886] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 132.412143][ T5886] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.420095][ T5886] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 132.424344][ T5886] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 132.424366][ T5886] usb 10-1: Product: syz [ 132.424380][ T5886] usb 10-1: Manufacturer: syz [ 132.431154][ T5886] usb 10-1: SerialNumber: syz [ 132.435316][ T9647] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 132.456095][ T9596] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 132.458684][ T9596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.460125][ T9596] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 132.461824][ T9596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.462586][ T9596] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 132.465347][ T9596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.465954][ T9596] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 132.475056][ T9596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.476407][ T9679] zonefs (loop2) ERROR: Not a zoned block device [ 132.508270][ T9596] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.511275][ T9596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.514460][ T9596] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.517700][ T9596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.561114][ T9596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 132.574527][ T94] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.578357][ T94] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.593232][ T9596] 8021q: adding VLAN 0 to HW filter on device team0 [ 132.600688][ T6352] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.603038][ T6352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.615158][ T6352] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.617525][ T6352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.639005][ T5886] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 132.714034][ T9698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.988'. [ 132.838011][ T42] audit: type=1400 audit(1785337555.289:28137): avc: denied { unmount } for pid=9430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.847247][ T2328] usb 10-1: USB disconnect, device number 8 [ 132.855826][ T5095] Bluetooth: hci3: command tx timeout [ 132.858367][ T2328] usblp0: removed [ 132.923510][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.959387][ T9596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.060843][ T9730] overlay: ./file0 is not a directory [ 133.112026][ T9596] veth0_vlan: entered promiscuous mode [ 133.119093][ T9596] veth1_vlan: entered promiscuous mode [ 133.137917][ T9596] veth0_macvtap: entered promiscuous mode [ 133.143074][ T9596] veth1_macvtap: entered promiscuous mode [ 133.151877][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.159876][ T9596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.167101][ T5822] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.171933][ T5822] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.182779][ T5822] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.186289][ T5822] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.252967][ T9730] sctp: [Deprecated]: syz.2.995 (pid 9730) Use of int in maxseg socket option. [ 133.252967][ T9730] Use struct sctp_assoc_value instead [ 133.254938][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.273288][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.325128][ T6352] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.328642][ T6352] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.389274][ T9743] vxfs: WRONG superblock magic 7665642f at 1 [ 133.394665][ T9743] vxfs: WRONG superblock magic 001c0a8e at 8 [ 133.396618][ T9743] vxfs: can't find superblock. [ 133.399311][ T9743] Trying to write to read-only block-device nullb0 [ 133.403234][ T5095] Bluetooth: hci1: command tx timeout [ 133.436126][ T9753] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 133.445947][ T42] audit: type=1400 audit(1785337555.899:28138): avc: denied { checkpoint_restore } for pid=9752 comm="syz.2.999" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 133.484272][ T9753] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.999'. [ 133.538487][ T9761] veth0_vlan: left promiscuous mode [ 133.568124][ T42] audit: type=1400 audit(1785337556.009:28139): avc: denied { unmount } for pid=9596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 133.656802][ T9772] netlink: 140 bytes leftover after parsing attributes in process `syz.8.1005'. [ 133.704080][ T42] audit: type=1400 audit(1785337556.159:28140): avc: denied { ioctl } for pid=9774 comm="syz.8.1007" path="socket:[34236]" dev="sockfs" ino=34236 ioctlcmd=0x89f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 134.162487][ T5821] usb 13-1: new high-speed USB device number 2 using dummy_hcd [ 134.262598][ T5823] usb 12-1: new full-speed USB device number 2 using dummy_hcd [ 134.322518][ T8071] usb 7-1: new full-speed USB device number 21 using dummy_hcd [ 134.326352][ T5821] usb 13-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 134.330905][ T5821] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.337085][ T5821] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.341800][ T5821] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 134.349266][ T5821] usb 13-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 134.355837][ T5821] usb 13-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 134.359482][ T5821] usb 13-1: Manufacturer: syz [ 134.369759][ T5821] usb 13-1: config 0 descriptor?? [ 134.392642][ T5823] usb 12-1: device descriptor read/64, error -71 [ 134.474079][ T8071] usb 7-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 134.477823][ T8071] usb 7-1: config 0 interface 0 altsetting 255 endpoint 0x8F has an invalid bInterval 0, changing to 4 [ 134.481180][ T8071] usb 7-1: config 0 interface 0 has no altsetting 0 [ 134.485882][ T8071] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 134.489086][ T8071] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 134.491730][ T8071] usb 7-1: Product: syz [ 134.493356][ T8071] usb 7-1: Manufacturer: syz [ 134.495048][ T8071] usb 7-1: SerialNumber: syz [ 134.498609][ T8071] usb 7-1: config 0 descriptor?? [ 134.501660][ T9811] nbd: must specify a size in bytes for the device [ 134.504586][ T8071] usb 7-1: selecting invalid altsetting 0 [ 134.652489][ T5823] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 134.705033][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.707797][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.710641][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.714140][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.717323][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.720369][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.723851][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.727018][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.729766][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.732456][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.735237][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.738020][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.740752][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.743695][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.746409][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.749280][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.751950][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.754663][ T9798] usb 7-1: cannot submit urb 0, error -2: endpoint not enabled [ 134.756129][ T8071] usb 7-1: USB disconnect, device number 21 [ 134.757388][ T9798] usb 7-1: cannot submit urb 0, error -19: no device [ 134.791739][ T5821] hid_parser_main: 149 callbacks suppressed [ 134.791761][ T5821] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 134.798792][ T5823] usb 12-1: device descriptor read/64, error -71 [ 134.824240][ T5821] appleir 0003:05AC:8243.0008: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0 [ 134.912859][ T5823] usb usb12-port1: attempt power cycle [ 134.922601][ T5095] Bluetooth: hci3: command tx timeout [ 134.983378][ T9789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.987653][ T9789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.262617][ T5823] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 135.276061][ T9810] orangefs_mount: mount request failed with -4 [ 135.283608][ T5823] usb 12-1: device descriptor read/8, error -71 [ 135.324868][ T9818] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1020'. [ 135.432111][ T9825] netlink: ct family unspecified [ 135.434235][ T9825] openvswitch: netlink: Actions may not be safe on all matching packets [ 135.542541][ T5823] usb 12-1: new full-speed USB device number 5 using dummy_hcd [ 135.552026][ T9832] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1025'. [ 135.559038][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1025'. [ 135.573995][ T5823] usb 12-1: device descriptor read/8, error -71 [ 135.614506][ T5821] usb 13-1: USB disconnect, device number 2 [ 135.682917][ T5823] usb usb12-port1: unable to enumerate USB device [ 135.882539][ T5095] Bluetooth: hci1: command tx timeout [ 136.218603][ T9862] No buffer was provided with the request [ 136.403792][ T9870] binder: BINDER_SET_CONTEXT_MGR already set [ 136.408309][ T9870] binder: 9869:9870 ioctl 4018620d 200000000140 returned -16 [ 136.550827][ T9886] syzkaller1: entered promiscuous mode [ 136.553374][ T9886] syzkaller1: entered allmulticast mode [ 136.738421][ T9900] netlink: 'syz.2.1044': attribute type 34 has an invalid length. [ 136.741081][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1044'. [ 136.783199][ T9903] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1045'. [ 136.802547][ T5821] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 136.953987][ T5821] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.959010][ T5821] usb 13-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 136.962231][ T5821] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.965145][ T5821] usb 13-1: Product: syz [ 136.966532][ T5821] usb 13-1: Manufacturer: syz [ 136.968528][ T5821] usb 13-1: SerialNumber: syz [ 136.975737][ T5821] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 136.978937][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 87 [ 136.982135][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 7 [ 136.986769][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 81 [ 136.990095][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 82 [ 136.993541][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 1 [ 136.996861][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 136.999997][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 85 [ 137.004138][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 5 [ 137.008863][ T5821] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 137.012853][ T5095] Bluetooth: hci3: command tx timeout [ 137.013490][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 83 [ 137.017295][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 137.019848][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 3 [ 137.022331][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 4 [ 137.025105][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 86 [ 137.027715][ T5821] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 137.031595][ T5821] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 137.073644][ T847] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 137.118461][ T9910] overlayfs: unescaped trailing colons in lowerdir mount option. [ 137.182165][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 137.182185][ T42] audit: type=1400 audit(1785337559.629:28147): avc: denied { bind } for pid=9887 comm="syz.8.1040" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 137.183253][ T24] usb 13-1: USB disconnect, device number 3 [ 137.198575][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 137.204195][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 137.208107][ T24] keyspan 13-1:1.0: device disconnected [ 137.233138][ T847] usb 7-1: Using ep0 maxpacket: 8 [ 137.237560][ T42] audit: type=1326 audit(1785337559.689:28148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9916 comm="syz.7.1051" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f71aad9de99 code=0x0 [ 137.237847][ T847] usb 7-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 137.249647][ T847] usb 7-1: config 1 interface 0 has no altsetting 0 [ 137.255503][ T847] usb 7-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 137.258697][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.262022][ T847] usb 7-1: Product: syz [ 137.264555][ T847] usb 7-1: Manufacturer: syz [ 137.266476][ T847] usb 7-1: SerialNumber: syz [ 137.340716][ T9919] openvswitch: netlink: Actions may not be safe on all matching packets [ 137.480712][ T847] usbhid 7-1:1.0: can't add hid device: -71 [ 137.482821][ T847] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 137.488847][ T847] usb 7-1: USB disconnect, device number 22 [ 137.972525][ T5095] Bluetooth: hci1: command tx timeout [ 138.044967][ T1306] block nbd1: Possible stuck request ffff8880290f5080: control (read@0,1024B). Runtime 30 seconds [ 138.130536][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1057'. [ 138.148417][ T9939] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1057'. [ 138.152556][ T56] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 138.166681][ T42] audit: type=1400 audit(1785337560.609:28149): avc: denied { write } for pid=9940 comm="syz.2.1058" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 138.316300][ T9951] afs: Unknown parameter 'flocßSÔ:gŒŽk' [ 138.557905][ T9962] ucma_write: process 420 (syz.5.1066) changed security contexts after opening file descriptor, this is not allowed. [ 138.622280][ T42] audit: type=1400 audit(1785337561.069:28150): avc: denied { connect } for pid=9968 comm="syz.5.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 138.672474][ T847] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 138.740206][ T9971] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 138.758259][ T9971] cramfs: wrong magic [ 138.811386][ T9976] can: request_module (can-proto-0) failed. [ 138.834442][ T9983] FAULT_INJECTION: forcing a failure. [ 138.834442][ T9983] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.838678][ T9983] CPU: 0 UID: 0 PID: 9983 Comm: syz.2.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 138.838697][ T9983] Tainted: [L]=SOFTLOCKUP [ 138.838701][ T9983] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 138.838715][ T9983] Call Trace: [ 138.838733][ T9983] [ 138.838738][ T9983] dump_stack_lvl+0x100/0x190 [ 138.838846][ T9983] should_fail_ex.cold+0x5/0xa [ 138.838880][ T9983] _copy_from_iter+0x1f4/0x1690 [ 138.838934][ T9983] ? __asan_memset+0x23/0x50 [ 138.838996][ T9983] ? __pfx__copy_from_iter+0x10/0x10 [ 138.839019][ T9983] ? __pfx___alloc_skb+0x10/0x10 [ 138.839116][ T9983] netlink_sendmsg+0x808/0xda0 [ 138.839165][ T9983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.839184][ T9983] ? selinux_socket_sendmsg+0x198/0x2f0 [ 138.839223][ T9983] ____sys_sendmsg+0xa4d/0xbe0 [ 138.839255][ T9983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.839274][ T9983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.839309][ T9983] ___sys_sendmsg+0x190/0x1e0 [ 138.839336][ T9983] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.839360][ T9983] ? __lock_acquire+0x49f/0x1a40 [ 138.839412][ T9983] ? get_pid_task+0x106/0x250 [ 138.839470][ T9983] __sys_sendmsg+0x160/0x210 [ 138.839492][ T9983] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.839525][ T9983] do_syscall_64+0x115/0x870 [ 138.839612][ T9983] ? clear_bhb_loop+0x40/0x90 [ 138.839635][ T9983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.839652][ T9983] RIP: 0033:0x7fb0d659de99 [ 138.839668][ T9983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.839685][ T9983] RSP: 002b:00007fb0d753d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.839711][ T9983] RAX: ffffffffffffffda RBX: 00007fb0d6825fa0 RCX: 00007fb0d659de99 [ 138.839722][ T9983] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 138.839733][ T9983] RBP: 00007fb0d753d090 R08: 0000000000000000 R09: 0000000000000000 [ 138.839742][ T9983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.839752][ T9983] R13: 00007fb0d6826038 R14: 00007fb0d6825fa0 R15: 00007fffaf67be68 [ 138.839774][ T9983] [ 138.844592][ T847] usb 12-1: Using ep0 maxpacket: 8 [ 138.866455][ T42] audit: type=1400 audit(1785337561.319:28151): avc: denied { append } for pid=9985 comm="syz.2.1073" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 138.887638][ T847] usb 12-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 138.902794][ T9976] comedi comedi3: s526: a I/O base address must be specified [ 138.902897][ T9990] romfs: Unknown parameter 'acl' [ 138.903146][ T847] usb 12-1: config 1 interface 0 has no altsetting 0 [ 138.959955][ T847] usb 12-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 138.963142][ T847] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.965826][ T847] usb 12-1: Product: syz [ 138.967205][ T847] usb 12-1: Manufacturer: syz [ 138.969367][ T847] usb 12-1: SerialNumber: syz [ 139.005857][ T9992] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1075'. [ 139.453488][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1083'. [ 139.575108][T10020] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1082'. [ 139.579176][T10020] bridge_slave_1: left allmulticast mode [ 139.581594][T10020] bridge_slave_1: left promiscuous mode [ 139.585145][T10020] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.594145][T10022] netlink: 'syz.2.1084': attribute type 2 has an invalid length. [ 139.596676][T10022] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1084'. [ 139.598891][T10020] bridge_slave_0: left allmulticast mode [ 139.602139][T10020] bridge_slave_0: left promiscuous mode [ 139.605481][T10020] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.630937][ T847] usbhid 12-1:1.0: can't add hid device: -71 [ 139.641967][ T847] usbhid 12-1:1.0: probe with driver usbhid failed with error -71 [ 139.648209][ T847] usb 12-1: USB disconnect, device number 6 [ 139.725063][T10026] bridge_slave_1: left allmulticast mode [ 139.726903][T10026] bridge_slave_1: left promiscuous mode [ 139.729143][T10026] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.738545][T10026] bridge_slave_0: left allmulticast mode [ 139.740840][T10026] bridge_slave_0: left promiscuous mode [ 139.743953][T10026] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.878617][ T42] audit: type=1400 audit(1785337563.334:28152): avc: denied { mounton } for pid=10028 comm="syz.2.1086" path="/dev/sequencer" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 140.038602][T10036] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1087'. [ 140.082007][T10038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1088'. [ 140.084328][ T42] audit: type=1400 audit(1785337563.534:28153): avc: denied { read } for pid=10037 comm="syz.2.1088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 140.091897][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 140.095393][T10039] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1088'. [ 140.198284][T10042] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1089'. [ 140.321308][ T42] audit: type=1107 audit(1785337563.774:28154): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 140.346920][T10052] FAULT_INJECTION: forcing a failure. [ 140.346920][T10052] name failslab, interval 1, probability 0, space 0, times 1 [ 140.388728][T10052] CPU: 3 UID: 0 PID: 10052 Comm: syz.5.1093 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.388760][T10052] Tainted: [L]=SOFTLOCKUP [ 140.388766][T10052] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.388785][T10052] Call Trace: [ 140.388802][T10052] [ 140.388810][T10052] dump_stack_lvl+0x100/0x190 [ 140.388916][T10052] should_fail_ex.cold+0x5/0xa [ 140.388966][T10052] should_failslab+0xc2/0x120 [ 140.389013][T10052] __kmalloc_noprof+0xfc/0x820 [ 140.389045][T10052] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 140.389118][T10052] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 140.389146][T10052] genl_family_rcv_msg_doit+0xc7/0x300 [ 140.389169][T10052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.389198][T10052] ? bpf_lsm_capable+0x9/0x10 [ 140.389228][T10052] ? security_capable+0x80/0x260 [ 140.389281][T10052] ? ns_capable+0xd2/0xf0 [ 140.389322][T10052] genl_rcv_msg+0x560/0x800 [ 140.389346][T10052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.389366][T10052] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 140.389439][T10052] ? __pfx_nl80211_connect+0x10/0x10 [ 140.389461][T10052] ? __pfx_nl80211_post_doit+0x10/0x10 [ 140.389492][T10052] netlink_rcv_skb+0x159/0x420 [ 140.389512][T10052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.389534][T10052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.389562][T10052] ? netlink_deliver_tap+0x1ae/0xcc0 [ 140.389594][T10052] genl_rcv+0x28/0x40 [ 140.389635][T10052] netlink_unicast+0x585/0x850 [ 140.389657][T10052] ? __pfx_netlink_unicast+0x10/0x10 [ 140.389682][T10052] netlink_sendmsg+0x8b0/0xda0 [ 140.389703][T10052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.389724][T10052] ? selinux_socket_sendmsg+0x198/0x2f0 [ 140.389778][T10052] ____sys_sendmsg+0xa4d/0xbe0 [ 140.389823][T10052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.389842][T10052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.389880][T10052] ___sys_sendmsg+0x190/0x1e0 [ 140.389911][T10052] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.389936][T10052] ? __lock_acquire+0x49f/0x1a40 [ 140.389973][T10052] ? get_pid_task+0x106/0x250 [ 140.390029][T10052] __sys_sendmsg+0x160/0x210 [ 140.390060][T10052] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.390097][T10052] do_syscall_64+0x115/0x870 [ 140.390141][T10052] ? clear_bhb_loop+0x40/0x90 [ 140.390165][T10052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.390184][T10052] RIP: 0033:0x7efd97d9de99 [ 140.390202][T10052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.390218][T10052] RSP: 002b:00007efd95ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.390242][T10052] RAX: ffffffffffffffda RBX: 00007efd98025fa0 RCX: 00007efd97d9de99 [ 140.390254][T10052] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 140.390264][T10052] RBP: 00007efd95ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 140.390274][T10052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.390285][T10052] R13: 00007efd98026038 R14: 00007efd98025fa0 R15: 00007ffe0cfaa778 [ 140.390309][T10052] [ 140.391479][T10053] lo speed is unknown, defaulting to 1000 [ 140.464794][ T42] audit: type=1400 audit(1785337563.924:28155): avc: denied { write } for pid=10049 comm="syz.7.1092" name="functions" dev="configfs" ino=21038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 140.594918][T10050] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.597042][T10050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.607908][T10050] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.612711][T10050] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.614866][T10050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.620287][T10050] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.719282][T10067] netlink: 1752 bytes leftover after parsing attributes in process `syz.7.1098'. [ 140.760227][T10069] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=10069 comm=syz.7.1099 [ 140.943832][ T24] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 141.062757][T10084] netlink: 'syz.8.1106': attribute type 11 has an invalid length. [ 141.067216][T10084] dlm: non-version read from control device 4096 [ 141.102613][ T24] usb 10-1: Using ep0 maxpacket: 8 [ 141.110841][ T24] usb 10-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 141.115665][ T24] usb 10-1: config 1 interface 0 has no altsetting 0 [ 141.120291][ T24] usb 10-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 141.125105][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.129108][ T24] usb 10-1: Product: syz [ 141.130832][ T24] usb 10-1: Manufacturer: syz [ 141.132721][T10084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.132902][T10084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.135961][ T24] usb 10-1: SerialNumber: syz [ 141.288816][T10094] FAULT_INJECTION: forcing a failure. [ 141.288816][T10094] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.303553][T10094] CPU: 1 UID: 0 PID: 10094 Comm: syz.7.1108 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.303574][T10094] Tainted: [L]=SOFTLOCKUP [ 141.303578][T10094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 141.303585][T10094] Call Trace: [ 141.303589][T10094] [ 141.303594][T10094] dump_stack_lvl+0x100/0x190 [ 141.303617][T10094] should_fail_ex.cold+0x5/0xa [ 141.303634][T10094] _copy_to_user+0x32/0xd0 [ 141.303664][T10094] simple_read_from_buffer+0xcb/0x170 [ 141.303687][T10094] proc_fail_nth_read+0x1af/0x230 [ 141.303708][T10094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.303726][T10094] ? rw_verify_area+0xce/0x6d0 [ 141.303751][T10094] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.303769][T10094] vfs_read+0x1e4/0xb40 [ 141.303788][T10094] ? __pfx_vfs_read+0x10/0x10 [ 141.303805][T10094] ? __fget_files+0x215/0x3d0 [ 141.303820][T10094] ? __fget_files+0x21f/0x3d0 [ 141.303837][T10094] ksys_read+0x12a/0x250 [ 141.303856][T10094] ? __pfx_ksys_read+0x10/0x10 [ 141.303877][T10094] do_syscall_64+0x115/0x870 [ 141.303892][T10094] ? clear_bhb_loop+0x40/0x90 [ 141.303907][T10094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.303919][T10094] RIP: 0033:0x7f71aad5e6ce [ 141.303929][T10094] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 141.303940][T10094] RSP: 002b:00007f71abc2ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.303952][T10094] RAX: ffffffffffffffda RBX: 00007f71abc306c0 RCX: 00007f71aad5e6ce [ 141.303959][T10094] RDX: 000000000000000f RSI: 00007f71abc300a0 RDI: 0000000000000004 [ 141.303966][T10094] RBP: 00007f71abc30090 R08: 0000000000000000 R09: 0000000000000000 [ 141.303972][T10094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.303979][T10094] R13: 00007f71ab026038 R14: 00007f71ab025fa0 R15: 00007fff8502de68 [ 141.303993][T10094] [ 141.351544][ T24] usbhid 10-1:1.0: can't add hid device: -71 [ 141.373657][ T24] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 141.379972][ T24] usb 10-1: USB disconnect, device number 9 [ 141.684163][T10115] BIDI support in bsg has been removed. [ 141.689279][ T5750] Bluetooth: hci3: unexpected event for opcode 0x0411 [ 141.837862][ T42] audit: type=1400 audit(1785337565.294:28156): avc: denied { write } for pid=10116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.188641][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 142.188659][ T42] audit: type=1400 audit(1785337565.644:28162): avc: denied { write } for pid=10136 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.312452][ T42] audit: type=1400 audit(1785337565.764:28163): avc: denied { mount } for pid=10145 comm="syz.8.1122" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 142.321743][ T42] audit: type=1400 audit(1785337565.774:28164): avc: denied { write } for pid=10144 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.375731][ T42] audit: type=1400 audit(1785337565.834:28165): avc: denied { write } for pid=10149 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.523873][ T42] audit: type=1400 audit(1785337565.984:28166): avc: denied { read } for pid=10157 comm="syz.2.1125" name="trace_pipe" dev="tracefs" ino=6203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 142.612510][ T10] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 142.650214][ T42] audit: type=1400 audit(1785337566.104:28167): avc: denied { mounton } for pid=10170 comm="syz.2.1130" path="/288/dir0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 142.694018][T10174] gadgetfs: bound to dummy_udc driver [ 142.764745][ T10] usb 13-1: config 0 has no interfaces? [ 142.767212][ T10] usb 13-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 142.770971][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.781704][ T10] usb 13-1: config 0 descriptor?? [ 142.784398][ T2328] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 142.885225][T10189] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 142.918655][ T42] audit: type=1400 audit(1785337566.374:28168): avc: denied { write } for pid=10188 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.947991][T10199] hugetlbfs: syz.5.1137 (10199): Using mlock ulimits for SHM_HUGETLB is obsolete [ 142.952524][ T2328] usb 12-1: Using ep0 maxpacket: 32 [ 142.954838][ T2328] usb 12-1: config 0 has an invalid interface number: 49 but max is -1 [ 142.959370][ T2328] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 142.962231][ T2328] usb 12-1: config 0 has no interface number 0 [ 142.966636][ T2328] usb 12-1: config 0 interface 49 has no altsetting 0 [ 142.970694][ T2328] usb 12-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 142.976742][ T2328] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.981781][ T2328] usb 12-1: Product: syz [ 142.985647][ T2328] usb 12-1: Manufacturer: syz [ 142.988803][ T2328] usb 12-1: SerialNumber: syz [ 142.999030][ T2328] usb 12-1: config 0 descriptor?? [ 143.001024][ T42] audit: type=1400 audit(1785337566.454:28169): avc: denied { write } for pid=10201 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.009355][T10147] Cannot find add_set index 65532 as target [ 143.019806][ T1350] usb 13-1: USB disconnect, device number 5 [ 143.109735][ T42] audit: type=1400 audit(1785337566.564:28170): avc: denied { write } for pid=10206 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.195655][ T42] audit: type=1400 audit(1785337566.654:28171): avc: denied { write } for pid=10212 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 143.223662][ T2328] radio-usb-si4713 12-1:0.49: Si4713 development board discovered: (10C4:8244) [ 143.236315][ T2328] radio-usb-si4713 12-1:0.49: probe with driver radio-usb-si4713 failed with error -71 [ 143.239583][ T2328] usbhid 12-1:0.49: couldn't find an input interrupt endpoint [ 143.250970][ T2328] usb 12-1: USB disconnect, device number 7 [ 143.417655][T10217] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 143.420263][T10217] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 143.424045][T10217] vhci_hcd vhci_hcd.0: Device attached [ 143.453457][T10221] loop5: detected capacity change from 0 to 2640 [ 143.457240][T10221] buffer_io_error: 13 callbacks suppressed [ 143.457270][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.463493][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.467110][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.470593][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.474118][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.477648][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.481194][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.484958][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.488810][T10221] ldm_validate_partition_table(): Disk read failed. [ 143.490996][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.493634][T10221] Buffer I/O error on dev loop5, logical block 0, async page read [ 143.496194][T10221] Dev loop5: unable to read RDB block 0 [ 143.498866][T10221] loop5: unable to read partition table [ 143.512496][T10221] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 143.722766][ T1350] usb 42-1: SetAddress Request (2) to port 0 [ 143.727967][ T1350] usb 42-1: new SuperSpeed USB device number 2 using vhci_hcd [ 144.068780][T10239] overlayfs: upper fs does not support tmpfile. [ 144.243354][T10218] vhci_hcd: connection reset by peer [ 144.246001][ T5977] vhci_hcd vhci_hcd.2: stop threads [ 144.260847][ T5977] vhci_hcd vhci_hcd.2: release socket [ 144.264986][ T5977] vhci_hcd vhci_hcd.2: disconnect device [ 144.454016][T10215] Set syz0 is full, maxelem 65536 reached [ 144.596706][T10262] kvm: kvm [10261]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 144.600777][T10262] kvm: kvm [10261]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 144.906208][T10286] __nla_validate_parse: 3 callbacks suppressed [ 144.906222][T10286] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1158'. [ 144.960819][T10293] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20001 [ 144.987539][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 144.990390][T10296] netlink: 'syz.5.1160': attribute type 20 has an invalid length. [ 144.994624][T10296] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1160'. [ 145.010738][ T5977] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.014821][ T5977] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.019261][ T5977] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.022131][ T5977] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.212640][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 145.368940][ T24] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 145.372983][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.376163][ T24] usb 7-1: Product: syz [ 145.377563][ T24] usb 7-1: Manufacturer: syz [ 145.379302][ T24] usb 7-1: SerialNumber: syz [ 145.730717][ T5095] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 145.739131][ T5095] Bluetooth: hci3: Injecting HCI hardware error event [ 145.751822][ T5750] Bluetooth: hci3: hardware error 0x00 [ 146.648521][ T24] rtl8150 7-1:1.0: couldn't reset the device [ 146.650542][ T24] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 147.362451][T10260] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.368439][ T24] usb 7-1: USB disconnect, device number 23 [ 147.531468][T10317] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1166'. [ 147.807411][ T5750] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 147.912609][ T5837] usb 12-1: new full-speed USB device number 8 using dummy_hcd [ 147.918971][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 147.918989][ T42] audit: type=1400 audit(1785337571.374:28178): avc: denied { getopt } for pid=10348 comm="syz.2.1177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 147.964628][T10353] overlayfs: conflicting options: userxattr,metacopy=on [ 147.983410][ T42] audit: type=1800 audit(1785337571.434:28179): pid=10349 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.5.1176" name="/newroot/171/file0" dev="tmpfs" ino=918 res=0 errno=0 [ 148.060201][T10358] loop2: detected capacity change from 0 to 7 [ 148.063284][T10358] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 148.063829][ T5837] usb 12-1: not running at top speed; connect to a high speed hub [ 148.066444][T10358] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 148.066505][T10358] Dev loop2: unable to read RDB block 7 [ 148.071010][ T5837] usb 12-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 148.072089][T10358] loop2: unable to read partition table [ 148.074582][ T5837] usb 12-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 148.079888][T10358] loop2: partition table beyond EOD, [ 148.080360][ T5837] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.083380][T10358] truncated [ 148.089241][T10358] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 148.092511][ T5830] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 148.095440][ T5837] garmin_gps 12-1:1.0: Garmin GPS usb/tty converter detected [ 148.099136][T10358] netlink: 'syz.5.1179': attribute type 1 has an invalid length. [ 148.124715][ T5837] usb 12-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 148.242628][ T5830] usb 13-1: Using ep0 maxpacket: 8 [ 148.246038][ T5830] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 148.249286][ T5830] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 148.252824][ T5830] usb 13-1: config 16 interface 0 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86 [ 148.256608][ T5830] usb 13-1: config 16 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 55305, setting to 1024 [ 148.260134][ T5830] usb 13-1: config 16 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 1024 [ 148.263355][ T5830] usb 13-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 148.267454][ T5830] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 148.270258][ T5830] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.298409][ T5821] usb 12-1: USB disconnect, device number 8 [ 148.309890][ T5821] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 148.313398][ T5821] garmin_gps 12-1:1.0: device disconnected [ 148.476575][ T5830] usb 13-1: GET_CAPABILITIES returned 0 [ 148.478407][ T5830] usbtmc 13-1:16.0: can't read capabilities [ 148.775268][ T1350] usb 42-1: device descriptor read/8, error -110 [ 148.873102][ T42] audit: type=1400 audit(1785337572.334:28180): avc: denied { append } for pid=10371 comm="syz.7.1184" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 148.876841][T10373] bond0: entered promiscuous mode [ 148.882288][T10373] bond_slave_0: entered promiscuous mode [ 148.884312][T10373] bond_slave_1: entered promiscuous mode [ 148.887325][T10373] batadv0: entered promiscuous mode [ 148.889432][T10373] debugfs: 'hsr1' already exists in 'hsr' [ 148.891279][T10373] Cannot create hsr debugfs directory [ 148.895221][T10373] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 148.898255][T10373] bond0: left promiscuous mode [ 148.899873][T10373] bond_slave_0: left promiscuous mode [ 148.901707][T10373] bond_slave_1: left promiscuous mode [ 148.904256][T10373] batadv0: left promiscuous mode [ 148.926707][T10374] input: syz0 as /devices/virtual/input/input24 [ 148.965713][ T42] audit: type=1400 audit(1785337572.424:28181): avc: denied { mount } for pid=10377 comm="syz.2.1185" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.974127][ T42] audit: type=1400 audit(1785337572.434:28182): avc: denied { remount } for pid=10377 comm="syz.2.1185" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 148.974151][T10378] devpts: Unknown parameter 'ma' [ 149.100317][ T42] audit: type=1400 audit(1785337572.554:28183): avc: denied { connect } for pid=10379 comm="syz.7.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 149.158891][ T42] audit: type=1400 audit(1785337572.614:28184): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 149.166145][ T1350] usb usb42-port1: attempt power cycle [ 149.334093][T10387] netlink: 'syz.2.1188': attribute type 9 has an invalid length. [ 149.342593][ T5837] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 149.445453][T10391] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config [ 149.449913][T10392] comedi comedi1: driver 'ni_daq_700' does not support attach using comedi_config [ 149.494861][ T5837] usb 10-1: unable to get BOS descriptor or descriptor too short [ 149.501442][ T5837] usb 10-1: config 8 has an invalid interface number: 60 but max is 0 [ 149.504737][ T5837] usb 10-1: config 8 has no interface number 0 [ 149.506839][ T5837] usb 10-1: config 8 interface 60 has no altsetting 0 [ 149.519619][ T5837] usb 10-1: string descriptor 0 read error: -22 [ 149.521852][ T5837] usb 10-1: New USB device found, idVendor=1b3d, idProduct=01da, bcdDevice=37.13 [ 149.524879][ T5837] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.540409][ T5837] ftdi_sio 10-1:8.60: FTDI USB Serial Device converter detected [ 149.544044][ T5837] ftdi_sio ttyUSB0: unknown device type: 0x3713 [ 149.568621][T10392] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1189'. [ 149.743025][ T5837] usb 10-1: USB disconnect, device number 10 [ 149.743237][ T1350] usb usb42-port1: unable to enumerate USB device [ 149.746077][ T5837] ftdi_sio 10-1:8.60: device disconnected [ 149.756816][T10397] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1190'. [ 149.946855][ T42] audit: type=1400 audit(1785337573.404:28185): avc: denied { create } for pid=10401 comm="syz.7.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.948696][T10402] openvswitch: netlink: Duplicate key (type 6). [ 149.958373][ T42] audit: type=1400 audit(1785337573.414:28186): avc: denied { getopt } for pid=10401 comm="syz.7.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.965292][ T42] audit: type=1400 audit(1785337573.414:28187): avc: denied { write } for pid=10401 comm="syz.7.1192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 149.989549][T10402] openvswitch: netlink: Duplicate key (type 6). [ 150.478062][T10452] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1208'. [ 150.638336][T10466] syz.2.1213(10466): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 150.662563][T10466] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.669366][T10466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1213'. [ 150.672922][T10466] netlink: 'syz.2.1213': attribute type 10 has an invalid length. [ 150.675787][T10466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1213'. [ 150.687876][T10466] geneve4: entered promiscuous mode [ 150.689896][T10466] geneve4: entered allmulticast mode [ 150.803333][ T1350] usb 13-1: USB disconnect, device number 6 [ 150.946978][T10485] netlink: 'syz.8.1219': attribute type 5 has an invalid length. [ 150.955679][ C0] Illegal XDP return value 16128 on prog (id 76) dev veth0_to_bond, expect packet loss! [ 151.220099][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1222'. [ 151.306960][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1225'. [ 151.320783][T10506] XFS (nbd7): SB validate failed with error -5. [ 151.582201][T10532] syzkaller1: entered promiscuous mode [ 151.584261][T10532] syzkaller1: entered allmulticast mode [ 151.621154][T10530] netlink: 'syz.2.1231': attribute type 4 has an invalid length. [ 151.643675][ T2328] lo speed is unknown, defaulting to 1000 [ 151.648215][ T2328] syz1: Port: 1 Link DOWN [ 151.655478][ T2328] lo speed is unknown, defaulting to 1000 [ 151.705180][T10533] xt_hashlimit: invalid rate [ 151.721590][T10540] ceph: Path missing in source [ 151.722262][T10541] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1234'. [ 151.754288][T10541] syzkaller1: entered promiscuous mode [ 151.762491][T10541] syzkaller1: entered allmulticast mode [ 151.916101][T10521] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 152.028444][T10556] openvswitch: netlink: VXLAN extension 19 out of range max 1 [ 152.042526][ T1350] usb 12-1: new full-speed USB device number 9 using dummy_hcd [ 152.213735][ T1350] usb 12-1: config index 0 descriptor too short (expected 28277, got 36) [ 152.222410][ T1350] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.225803][ T1350] usb 12-1: config 0 has no interfaces? [ 152.227746][ T1350] usb 12-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 152.230599][ T1350] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.235705][ T1350] usb 12-1: config 0 descriptor?? [ 152.346317][T10581] hfsplus: unable to find HFS+ superblock [ 152.423227][T10588] comedi comedi3: unsupported base address 0x2000 [ 152.438219][T10591] loop3: detected capacity change from 0 to 7 [ 152.473282][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.476472][ C2] buffer_io_error: 11 callbacks suppressed [ 152.476484][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.488582][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.491710][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.494954][ C3] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.498058][ C3] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.506958][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.511184][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.513346][T10592] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 152.516883][ T1350] usb 12-1: string descriptor 0 read error: -71 [ 152.517485][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.517596][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.518949][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.527389][ T1350] usb 12-1: USB disconnect, device number 9 [ 152.530338][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.539506][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.543510][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.546699][T10591] ldm_validate_partition_table(): Disk read failed. [ 152.552174][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.556359][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.560171][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.564283][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.567802][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 152.571709][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 152.576022][T10591] Dev loop3: unable to read RDB block 0 [ 152.578662][T10591] loop3: unable to read partition table [ 152.584389][T10591] loop3: partition table beyond EOD, truncated [ 152.592485][T10591] loop_reread_partitions: partition scan of loop3 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 152.669499][T10602] loop5: detected capacity change from 0 to 7 [ 152.673602][T10602] Dev loop5: unable to read RDB block 7 [ 152.675423][T10602] loop5: AHDI p2 [ 152.676793][T10602] loop5: partition table partially beyond EOD, truncated [ 152.774718][T10611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1255'. [ 153.205582][T10626] macvtap1: entered allmulticast mode [ 153.207858][T10626] bond0: entered allmulticast mode [ 153.209971][T10626] bond_slave_0: entered allmulticast mode [ 153.213634][T10626] bond_slave_1: entered allmulticast mode [ 153.216057][T10626] bond_slave_1: entered promiscuous mode [ 153.219712][T10626] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 153.225509][T10626] bond0: left allmulticast mode [ 153.227534][T10626] bond_slave_0: left allmulticast mode [ 153.229673][T10626] bond_slave_1: left allmulticast mode [ 153.255920][T10627] macvtap1: entered allmulticast mode [ 153.258124][T10627] bond0: entered allmulticast mode [ 153.260149][T10627] bond_slave_0: entered allmulticast mode [ 153.262632][T10627] bond_slave_1: entered allmulticast mode [ 153.265625][T10627] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 153.269690][T10627] bond0: left allmulticast mode [ 153.271619][T10627] bond_slave_0: left allmulticast mode [ 153.273907][T10627] bond_slave_1: left allmulticast mode [ 153.291592][ T5821] bond_slave_1: left promiscuous mode [ 153.303698][T10630] syzkaller1: entered promiscuous mode [ 153.305887][T10630] syzkaller1: entered allmulticast mode [ 153.406313][T10633] openvswitch: netlink: Actions may not be safe on all matching packets [ 153.467247][T10636] netlink: 112 bytes leftover after parsing attributes in process `syz.7.1260'. [ 153.501235][ T42] kauditd_printk_skb: 10 callbacks suppressed [ 153.501248][ T42] audit: type=1400 audit(1785337576.954:28198): avc: denied { ioctl } for pid=10647 comm="syz.5.1266" path="socket:[37800]" dev="sockfs" ino=37800 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 153.640686][T10668] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1270'. [ 153.659941][T10664] TC_ACT_REPEAT abuse ? [ 153.672824][ T5837] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 153.758175][T10677] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1275'. [ 153.783923][ T42] audit: type=1400 audit(1785337577.244:28199): avc: denied { setattr } for pid=10676 comm="syz.7.1275" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 153.822496][ T5837] usb 13-1: Using ep0 maxpacket: 32 [ 153.829459][ T5837] usb 13-1: unable to get BOS descriptor or descriptor too short [ 153.838041][ T5837] usb 13-1: string descriptor 0 read error: -22 [ 153.840178][ T5837] usb 13-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 153.846554][ T5837] usb 13-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 153.859183][ T5837] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 153.864524][ T5837] dw2102: su3000_power_ctrl: 1, initialized 0 [ 153.870262][ T5837] dvb-usb: bulk message failed: -22 (2/0) [ 153.895485][ T5837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 153.902828][ T5837] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 153.906137][ T5837] usb 13-1: media controller created [ 153.908180][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 153.910326][ T5837] dw2102: i2c transfer failed. [ 153.912112][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 153.915248][ T5837] dw2102: i2c transfer failed. [ 153.916735][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 153.918509][ T5837] dw2102: i2c transfer failed. [ 153.920029][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 153.921814][ T5837] dw2102: i2c transfer failed. [ 153.925253][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 153.927119][ T5837] dw2102: i2c transfer failed. [ 153.928653][ T5837] dvb-usb: bulk message failed: -22 (6/0) [ 153.930442][ T5837] dw2102: i2c transfer failed. [ 153.931956][ T5837] dvb-usb: MAC address: 02:02:02:02:02:02 [ 153.939992][ T5837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.970676][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 153.972684][ T5837] dw2102: command 0x0e transfer failed. [ 153.974982][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 153.976802][ T5837] dw2102: command 0x0e transfer failed. [ 154.109326][T10683] comedi comedi2: comedi_test: 320 microvolt, 100000 microsecond waveform attached [ 154.149786][T10681] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03 [ 154.282609][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 154.287961][ T5837] dw2102: command 0x0e transfer failed. [ 154.293910][ T5837] dvb-usb: bulk message failed: -22 (3/0) [ 154.296534][ T5837] dw2102: command 0x0e transfer failed. [ 154.299089][ T5837] dvb-usb: bulk message failed: -22 (1/0) [ 154.301522][ T5837] dw2102: command 0x51 transfer failed. [ 154.306424][T10633] dvb-usb: bulk message failed: -22 (5/0) [ 154.311306][T10633] dw2102: i2c transfer failed. [ 154.338601][ T5837] DVB: Unable to find symbol ds3000_attach() [ 154.341329][ T5837] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 154.402516][ T5837] rc_core: IR keymap rc-su3000 not found [ 154.405143][ T5837] Registered IR keymap rc-empty [ 154.415210][T10691] kvm: pic: non byte write [ 154.420077][ T5837] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0 [ 154.433103][ T5837] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.8/usb13/13-1/rc/rc0/input25 [ 154.439716][ T5837] dvb-usb: schedule remote query interval to 150 msecs. [ 154.443293][ T5837] dw2102: su3000_power_ctrl: 0, initialized 1 [ 154.445858][ T5837] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 154.454392][ T5837] usb 13-1: USB disconnect, device number 7 [ 154.472258][T10697] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 154.489809][ T42] audit: type=1400 audit(1785337577.944:28200): avc: denied { create } for pid=10696 comm="syz.2.1280" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 154.525113][ T42] audit: type=1400 audit(1785337577.964:28201): avc: denied { associate } for pid=10696 comm="syz.2.1280" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 154.568740][ T42] audit: type=1400 audit(1785337578.004:28202): avc: denied { rmdir } for pid=5737 comm="syz-executor" name="file0" dev="tmpfs" ino=1868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 154.573603][ T5837] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 154.770527][ T42] audit: type=1400 audit(1785337578.224:28203): avc: denied { ioctl } for pid=10702 comm="syz.2.1282" path="socket:[36651]" dev="sockfs" ino=36651 ioctlcmd=0x586a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 154.781566][ T42] audit: type=1400 audit(1785337578.234:28204): avc: denied { mounton } for pid=10711 comm="syz.5.1284" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 154.842680][ T42] audit: type=1400 audit(1785337578.294:28205): avc: denied { setattr } for pid=10716 comm="syz.2.1286" name="trace_marker" dev="tracefs" ino=6251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 154.965427][T10724] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 154.988661][T10723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.187389][ T42] audit: type=1400 audit(1785337578.644:28206): avc: denied { map } for pid=10743 comm="syz.2.1295" path="socket:[38745]" dev="sockfs" ino=38745 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 155.260371][ T42] audit: type=1400 audit(1785337578.714:28207): avc: denied { unmount } for pid=9430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 155.334316][T10762] netlink: 'syz.7.1298': attribute type 7 has an invalid length. [ 155.520923][T10779] macvlan1: entered promiscuous mode [ 155.523370][T10779] macvlan1: entered allmulticast mode [ 155.525152][T10779] veth1_vlan: entered allmulticast mode [ 155.532820][T10783] __nla_validate_parse: 1 callbacks suppressed [ 155.532833][T10783] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1306'. [ 155.555825][T10785] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 155.739657][T10809] bond1: (slave batadv0): Device is not bonding slave [ 155.741879][T10809] bond1: option active_slave: invalid value (batadv0) [ 155.749141][T10809] bond1 (unregistering): Released all slaves [ 155.962880][ T10] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 155.982498][ T5837] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 156.077467][T10819] netlink: 'syz.5.1319': attribute type 10 has an invalid length. [ 156.080177][T10820] netlink: 'syz.5.1319': attribute type 10 has an invalid length. [ 156.112691][ T10] usb 13-1: Using ep0 maxpacket: 8 [ 156.117574][ T10] usb 13-1: config 1 interface 0 altsetting 9 endpoint 0x2 has an invalid bInterval 179, changing to 11 [ 156.123851][ T10] usb 13-1: config 1 interface 0 has no altsetting 0 [ 156.128079][ T10] usb 13-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40 [ 156.131110][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.135258][ T10] usb 13-1: Product: syz [ 156.136814][ T10] usb 13-1: Manufacturer: syz [ 156.138375][ T10] usb 13-1: SerialNumber: syz [ 156.144284][ T5837] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.149754][ T5837] usb 7-1: config 0 interface 0 has no altsetting 0 [ 156.155762][ T5837] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 156.159300][ T5837] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 156.161866][ T5837] usb 7-1: Product: syz [ 156.164211][ T5837] usb 7-1: Manufacturer: syz [ 156.165699][ T5837] usb 7-1: SerialNumber: syz [ 156.169265][ T5837] usb 7-1: config 0 descriptor?? [ 156.175720][ T5837] usb 7-1: selecting invalid altsetting 0 [ 156.384151][ T5886] usb 7-1: USB disconnect, device number 24 [ 156.468935][T10837] kernel read not supported for file /policy (pid: 10837 comm: syz.7.1325) [ 156.498301][T10837] program syz.7.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.498311][T10839] program syz.7.1325 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 156.544367][T10845] usb usb2: usbfs: process 10845 (syz.7.1327) did not claim interface 10 before use [ 156.570801][T10850] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.571182][T10850] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.802443][ T5837] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 156.837146][ T10] usbhid 13-1:1.0: can't add hid device: -71 [ 156.837201][ T10] usbhid 13-1:1.0: probe with driver usbhid failed with error -71 [ 156.839499][ T10] usb 13-1: USB disconnect, device number 8 [ 156.946810][ T5837] usb 12-1: device descriptor read/64, error -71 [ 157.016686][T10858] Invalid logical block size (-1) [ 157.193148][ T5837] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 157.332616][ T5837] usb 12-1: device descriptor read/64, error -71 [ 157.442924][ T5837] usb usb12-port1: attempt power cycle [ 157.486499][T10862] loop5: detected capacity change from 0 to 2640 [ 157.501949][T10861] input: syz1 as /devices/virtual/input/input26 [ 157.542736][T10862] buffer_io_error: 10 callbacks suppressed [ 157.542757][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.577507][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.588028][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.592769][T10861] /dev/nullb0: Can't open blockdev [ 157.604161][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604202][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604248][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604292][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604318][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604333][T10862] ldm_validate_partition_table(): Disk read failed. [ 157.604357][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604381][T10862] Buffer I/O error on dev loop5, logical block 0, async page read [ 157.604421][T10862] Dev loop5: unable to read RDB block 0 [ 157.604577][T10862] loop5: unable to read partition table [ 157.604910][T10862] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 157.730256][T10865] ldm_validate_partition_table(): Disk read failed. [ 157.740066][T10865] Dev loop5: unable to read RDB block 0 [ 157.743556][T10865] loop5: unable to read partition table [ 157.870909][ T5837] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 157.974565][ T5837] usb 12-1: device descriptor read/8, error -71 [ 158.266285][ T5837] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 158.320672][ T5837] usb 12-1: device descriptor read/8, error -71 [ 158.461461][ T5837] usb usb12-port1: unable to enumerate USB device [ 158.508351][T10882] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1337'. [ 158.911283][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 158.911304][ T42] audit: type=1400 audit(1785337582.344:28217): avc: denied { write } for pid=5737 comm="syz-executor" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 158.978593][ T42] audit: type=1400 audit(1785337582.344:28218): avc: denied { write } for pid=5737 comm="syz-executor" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.006870][ T5737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.010068][ T42] audit: type=1400 audit(1785337582.344:28219): avc: denied { write } for pid=5737 comm="syz-executor" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.033338][ T42] audit: type=1400 audit(1785337582.344:28220): avc: denied { write } for pid=5737 comm="syz-executor" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.036477][ T5737] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 159.073203][ T5750] Bluetooth: hci1: unexpected event for opcode 0x8005 [ 159.075337][ T42] audit: type=1400 audit(1785337582.374:28221): avc: denied { write } for pid=5737 comm="syz-executor" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.078205][ T5737] audit: backlog limit exceeded [ 159.137732][ T5737] audit: audit_backlog=65 > audit_backlog_limit=64 [ 159.139918][ T42] audit: type=1400 audit(1785337582.374:28222): avc: denied { write } for pid=5737 comm="syz-executor" name="/" dev="configfs" ino=2087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 159.464795][T10878] bond0: (slave syz_tun): Releasing backup interface [ 159.694551][ T13] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.722628][ T24] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 159.751094][T10900] overlayfs: failed to resolve './file2': -2 [ 159.971499][ T24] usb 13-1: too many configurations: 9, using maximum allowed: 8 [ 159.975727][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.980048][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.993046][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.036557][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.042467][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.069507][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.074072][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.080154][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.087605][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.093270][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.099736][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.106873][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.113370][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.120060][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.124699][ T13] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.126645][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.127970][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.128015][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.128038][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.128961][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.129001][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.129025][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.131798][ T24] usb 13-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 160.178751][ T24] usb 13-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 160.187347][ T24] usb 13-1: config 0 interface 0 has no altsetting 0 [ 160.204813][ T24] usb 13-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 160.211230][ T24] usb 13-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 160.218953][ T24] usb 13-1: Product: syz [ 160.244227][ T24] usb 13-1: Manufacturer: syz [ 160.250637][ T24] usb 13-1: SerialNumber: syz [ 160.345314][ T24] usb 13-1: config 0 descriptor?? [ 160.401961][ T24] yurex 13-1:0.0: USB YUREX device now attached to Yurex #0 [ 160.415418][ T13] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.572639][ T5095] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.582214][T10910] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1348'. [ 160.587778][ T5095] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.611120][T10911] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1348'. [ 160.639354][ T5095] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.649834][ T5095] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.655810][ T5095] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.657354][ T13] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.862519][T10918] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1349'. [ 161.304252][ T13] dvmrp0: left allmulticast mode [ 161.471361][ T5830] usb 13-1: USB disconnect, device number 9 [ 161.483235][ T5830] yurex 13-1:0.0: USB YUREX #0 now disconnected [ 161.979652][ T13] bond0 (unregistering): left promiscuous mode [ 161.983498][ T13] bond_slave_0: left promiscuous mode [ 161.986924][ T13] bond_slave_1: left promiscuous mode [ 161.993614][ T13] veth0_to_bond: left promiscuous mode [ 162.139137][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.468545][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.499155][ T13] bond0 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 162.536112][ T13] bond0 (unregistering): Released all slaves [ 162.551652][ T13] bond1 (unregistering): Released all slaves [ 162.580836][ T13] bond2 (unregistering): Released all slaves [ 162.604204][ T5449] 8021q: adding VLAN 0 to HW filter on device eth9 [ 162.854478][ T5095] Bluetooth: hci0: command tx timeout [ 162.961672][T10912] lo speed is unknown, defaulting to 1000 [ 163.915920][ T5449] 8021q: adding VLAN 0 to HW filter on device eth10 [ 164.752871][T10981] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1360'. [ 164.782850][T10982] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1360'. [ 165.022668][ T5095] Bluetooth: hci0: command tx timeout [ 165.444278][ T42] kauditd_printk_skb: 156 callbacks suppressed [ 165.444322][ T42] audit: type=1400 audit(1785337588.904:28293): avc: denied { write } for pid=10994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.451907][T10990] lo speed is unknown, defaulting to 1000 [ 165.627283][ T42] audit: type=1400 audit(1785337589.084:28294): avc: denied { write } for pid=11002 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 165.808859][ T5449] 8021q: adding VLAN 0 to HW filter on device eth11 [ 165.978822][T11014] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1366'. [ 165.986490][T11014] netlink: 60 bytes leftover after parsing attributes in process `syz.8.1366'. [ 166.033091][T10912] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.048744][T10912] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.054338][T10912] bridge_slave_0: entered allmulticast mode [ 166.074404][T10912] bridge_slave_0: entered promiscuous mode [ 166.116976][T10912] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.133341][T10912] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.162671][ T42] audit: type=1400 audit(1785337589.614:28295): avc: denied { write } for pid=11015 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.172868][T10912] bridge_slave_1: entered allmulticast mode [ 166.184496][T10912] bridge_slave_1: entered promiscuous mode [ 166.304593][T10912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.320225][ T42] audit: type=1400 audit(1785337589.734:28296): avc: denied { write } for pid=11020 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 166.381570][T10912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.748449][ T13] batadv0: left promiscuous mode [ 166.834377][ T13] hsr_slave_0: left promiscuous mode [ 166.877887][ T13] hsr_slave_1: left promiscuous mode [ 166.897617][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.915323][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.927045][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.943438][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.965925][ T13] veth1_macvtap: left promiscuous mode [ 166.970245][ T13] veth0_macvtap: left promiscuous mode [ 166.974285][ T13] veth1_vlan: left promiscuous mode [ 166.978130][ T13] veth0_vlan: left promiscuous mode [ 167.087580][ T5095] Bluetooth: hci0: command tx timeout [ 168.089841][ T13] team0 (unregistering): Port device team_slave_1 removed [ 168.144295][ T1306] block nbd1: Possible stuck request ffff8880290f5080: control (read@0,1024B). Runtime 60 seconds [ 168.162046][ T13] team0 (unregistering): Port device team_slave_0 removed [ 168.382724][ T6338] smc: removing ib device syz1 [ 168.515854][ T5449] 8021q: adding VLAN 0 to HW filter on device eth12 [ 168.642309][T10912] team0: Port device team_slave_0 added [ 168.715083][T10912] team0: Port device team_slave_1 added [ 168.800072][ T6338] smbdirect: ib_dev[syz1] removed [ 169.111772][T10912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.128294][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.155874][T10912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.182564][ T5095] Bluetooth: hci0: command tx timeout [ 169.500231][T10912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.522589][T10912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 169.548522][T10912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.914817][T11041] ieee802154 phy1 wpan1: encryption failed: -22 [ 169.923147][ T42] audit: type=1400 audit(1785337593.364:28297): avc: denied { write } for pid=11040 comm="syz.8.1371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 169.974635][T10912] hsr_slave_0: entered promiscuous mode [ 170.004556][T10912] hsr_slave_1: entered promiscuous mode [ 170.027134][T10912] debugfs: 'hsr0' already exists in 'hsr' [ 170.057687][T10912] Cannot create hsr debugfs directory [ 171.023642][T11055] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1374'. [ 171.028022][T11055] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1374'. [ 171.701926][T10912] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 171.761528][T10912] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 171.842780][T10912] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 171.869302][T10912] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 171.898023][T10912] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 171.937933][T10912] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 172.028995][T10912] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 172.068220][T10912] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 172.468529][T10912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.520718][T10912] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.522618][ T5750] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 172.572320][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.576795][ T5750] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 172.579673][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.645279][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.650048][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.672539][ T5750] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 172.706804][ T5750] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 172.732470][T11081] binder: Bad value for 'max' [ 172.741366][T10912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 172.766758][ T5750] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 173.251465][T11095] xt_policy: output policy not valid in PREROUTING and INPUT [ 173.386274][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1381'. [ 173.743207][T10912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.236740][T11135] nbd: must specify at least one socket [ 174.445691][T11140] netlink: 'syz.8.1385': attribute type 1 has an invalid length. [ 174.610543][T11146] bond1: (slave geneve2): making interface the new active one [ 174.620736][T11146] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 174.641408][ T5977] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 174.698917][ T5977] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 174.713431][ T5977] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 174.717497][ T5977] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 174.732782][T11076] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.749556][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.754109][T11076] bridge_slave_0: entered allmulticast mode [ 174.758755][T11076] bridge_slave_0: entered promiscuous mode [ 174.767094][T11076] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.769843][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.786362][T11076] bridge_slave_1: entered allmulticast mode [ 174.798220][T11076] bridge_slave_1: entered promiscuous mode [ 174.879406][T11076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.920735][T11076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 175.002622][ T5750] Bluetooth: hci4: command tx timeout [ 175.087598][T11076] team0: Port device team_slave_0 added [ 175.096681][T11076] team0: Port device team_slave_1 added [ 175.283027][T10912] veth0_vlan: entered promiscuous mode [ 175.543841][T11076] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 175.547255][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.568255][T11076] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 175.590595][T11076] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 175.620292][T11076] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 175.679552][T11076] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.686122][T11167] tipc: Started in network mode [ 175.703693][T11167] tipc: Node identity d6ecdcde3e07, cluster identity 4711 [ 175.719566][T11167] tipc: Enabled bearer , priority 0 [ 175.796184][T11172] syzkaller0: entered promiscuous mode [ 175.799894][T11172] syzkaller0: entered allmulticast mode [ 175.831299][T11170] tipc: Resetting bearer [ 175.890691][T11166] tipc: Resetting bearer [ 176.001694][T11166] tipc: Disabling bearer [ 176.089207][T10912] veth1_vlan: entered promiscuous mode [ 176.138756][T11184] Context (ID=0x0) not attached to queue pair (handle=0x0:0x8) [ 176.326375][T11076] hsr_slave_0: entered promiscuous mode [ 176.347306][T11076] hsr_slave_1: entered promiscuous mode [ 176.352205][T11076] debugfs: 'hsr0' already exists in 'hsr' [ 176.365793][T11076] Cannot create hsr debugfs directory [ 176.717032][T10912] veth0_macvtap: entered promiscuous mode [ 176.790790][T10912] veth1_macvtap: entered promiscuous mode [ 176.896333][T10912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.977452][T10912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.029780][ T1350] IPVS: starting estimator thread 0... [ 177.102623][ T5750] Bluetooth: hci4: command tx timeout [ 177.144835][T11076] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.158275][T11199] IPVS: using max 29 ests per chain, 69600 per kthread [ 177.478670][ T5822] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.538342][ T5822] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.834188][ T5822] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.897093][ T5822] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.112152][T11215] 9pnet_virtio: no channels available for device syz [ 178.126868][ T94] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.126898][ T94] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.153414][T11211] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1401'. [ 178.378033][ T6335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.378063][ T6335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.129727][T11076] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 179.164751][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 179.178484][ T5750] Bluetooth: hci4: command tx timeout [ 179.204683][T11076] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 179.232568][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 179.249549][T11076] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 179.280980][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 179.288915][T11076] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 179.330404][T11076] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 179.471500][T11242] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1408'. [ 179.548794][T11246] bond2: (slave batadv0): Device is not bonding slave [ 179.579255][T11246] bond2: option active_slave: invalid value (batadv0) [ 179.594271][T11245] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=11245 comm=syz.7.1408 [ 179.624727][T11246] bond2 (unregistering): Released all slaves [ 179.920346][ T42] audit: type=1400 audit(1785337603.374:28298): avc: denied { mounton } for pid=11258 comm="syz.7.1410" path="/file0" dev="ramfs" ino=41792 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 179.925532][T11076] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.959393][T11259] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 179.994308][T11259] overlayfs: failed to set xattr on upper [ 180.000665][T11259] overlayfs: ...falling back to redirect_dir=nofollow. [ 180.025286][T11259] overlayfs: ...falling back to metacopy=off. [ 180.073274][T11259] overlayfs: ...falling back to index=off. [ 180.076106][T11259] overlayfs: ...falling back to uuid=null. [ 180.179506][T11076] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.221486][ T94] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.227036][ T94] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.247111][ T94] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.257017][ T94] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.633203][ T5837] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 180.649689][ T42] audit: type=1400 audit(1785337604.104:28299): avc: denied { write } for pid=11269 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.827394][ T5837] usb 12-1: Using ep0 maxpacket: 8 [ 180.831833][ T5837] usb 12-1: unable to get BOS descriptor or descriptor too short [ 180.845140][ T42] audit: type=1400 audit(1785337604.304:28300): avc: denied { write } for pid=11277 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 180.852706][ T5837] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 180.875211][ T5837] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 180.880837][ T5837] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 180.895697][ T5837] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 180.910454][ T5837] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 180.916794][ T5837] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 44 [ 180.935352][ T5837] usb 12-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 180.952641][ T5837] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.958179][ T5837] usb 12-1: Product: syz [ 180.960221][ T5837] usb 12-1: Manufacturer: syz [ 180.963161][ T5837] usb 12-1: SerialNumber: syz [ 180.967977][ T5837] usb 12-1: config 0 descriptor?? [ 181.001880][T11265] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 181.022510][T11265] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 181.074219][ T5837] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 181.256694][ T42] audit: type=1400 audit(1785337604.714:28301): avc: denied { write } for pid=11283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.259744][ T5095] Bluetooth: hci4: command tx timeout [ 181.474149][T11076] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.483194][ T5095] Bluetooth: hci5: command 0x1003 tx timeout [ 181.492052][ T5750] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 181.540773][T11290] netlink: 'syz.7.1412': attribute type 3 has an invalid length. [ 181.560383][ T42] audit: type=1400 audit(1785337605.004:28302): avc: denied { write } for pid=11291 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 181.623156][T11290] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1412'. [ 181.623514][T11076] veth0_vlan: entered promiscuous mode [ 181.714118][T11076] veth1_vlan: entered promiscuous mode [ 181.927105][T11076] veth0_macvtap: entered promiscuous mode [ 181.947167][T11076] veth1_macvtap: entered promiscuous mode [ 181.992982][T11076] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.000822][T11294] netlink: 232 bytes leftover after parsing attributes in process `syz.9.1414'. [ 182.013210][T11076] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.193920][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.210292][ T42] audit: type=1400 audit(1785337605.664:28303): avc: denied { lock } for pid=11300 comm="syz.8.1415" path="socket:[41925]" dev="sockfs" ino=41925 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 182.213985][ T10] usb 12-1: USB disconnect, device number 14 [ 182.298262][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.323153][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.373967][T11306] netlink: 'syz.8.1417': attribute type 1 has an invalid length. [ 182.411903][ T42] audit: type=1400 audit(1785337605.854:28304): avc: denied { name_bind } for pid=11308 comm="syz.9.1416" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 182.456831][ T42] audit: type=1400 audit(1785337605.914:28305): avc: denied { write } for pid=11299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.723837][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.767941][ T42] audit: type=1400 audit(1785337606.184:28306): avc: denied { write } for pid=11315 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.857874][ T24] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 183.161896][T11306] bond2: entered promiscuous mode [ 183.164979][ T42] audit: type=1400 audit(1785337606.614:28307): avc: denied { write } for pid=11320 comm="syz.7.1418" name="functions" dev="configfs" ino=21038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 183.188252][T11306] 8021q: adding VLAN 0 to HW filter on device bond2 [ 183.201604][T11314] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.209992][T11314] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 183.215397][ T24] usb 14-1: config index 0 descriptor too short (expected 39, got 27) [ 183.221814][T11314] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 183.243368][ T24] usb 14-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.243396][ T24] usb 14-1: config 0 has no interfaces? [ 183.246884][ T24] usb 14-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.272710][T11314] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 183.285205][ T24] usb 14-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 183.285233][ T24] usb 14-1: Product: syz [ 183.285248][ T24] usb 14-1: Manufacturer: syz [ 183.285261][ T24] usb 14-1: SerialNumber: syz [ 183.360304][ T24] usb 14-1: config 0 descriptor?? [ 183.528100][T11316] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 183.544770][T11316] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 183.567174][T11316] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 183.671789][ T24] usb 14-1: USB disconnect, device number 2 [ 183.725146][T11331] binder: 11328:11331 ioctl c0306201 200000000040 returned -14 [ 183.890597][T11329] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1420'. [ 183.921485][ T6332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.998828][ T6332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.120707][T11333] SELinux: failed to load policy [ 184.642133][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.646015][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.799390][ T5814] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 185.145668][T11366] netlink: 'syz.7.1423': attribute type 1 has an invalid length. [ 185.226217][T11367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1423'. [ 185.297808][T11367] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 185.373365][T11359] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 185.376568][T11359] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 185.422861][T11359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.451468][T11366] bond2: option mode: invalid value (9) [ 185.555935][T11366] bond2 (unregistering): Released all slaves [ 185.664006][T11359] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 185.769826][T11359] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 185.796383][T11359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.855393][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 185.855413][ T42] audit: type=1326 audit(1785337609.314:28311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.0.1425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698db9de99 code=0x7ffc0000 [ 185.903010][T11359] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 185.932244][ T42] audit: type=1326 audit(1785337609.314:28312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.0.1425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698db9de99 code=0x7ffc0000 [ 185.941525][ T42] audit: type=1326 audit(1785337609.314:28313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.0.1425" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f698db9de99 code=0x7ffc0000 [ 185.976055][ T42] audit: type=1326 audit(1785337609.314:28314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.0.1425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698db9de99 code=0x7ffc0000 [ 186.003590][ T42] audit: type=1326 audit(1785337609.314:28315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11369 comm="syz.0.1425" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f698db9de99 code=0x7ffc0000 [ 186.118700][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1428'. [ 186.277400][T11382] netlink: 'syz.9.1428': attribute type 1 has an invalid length. [ 186.279178][T11386] rdma_op ffff8880563e61f0 conn xmit_rdma 0000000000000000 [ 186.992696][T11406] comedi comedi3: pcl812: I/O port conflict (0x100,16) [ 187.346135][T11418] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 187.457570][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 187.462960][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 187.775243][T11433] veth0_to_team: entered promiscuous mode [ 187.825069][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 187.873421][T11433] veth0_to_team: left promiscuous mode [ 188.506533][T11439] syzkaller1: entered promiscuous mode [ 188.506560][T11439] syzkaller1: entered allmulticast mode [ 188.644669][T11460] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1451'. [ 188.662559][ T5830] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 188.823322][ T5830] usb 12-1: too many configurations: 9, using maximum allowed: 8 [ 188.831802][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.831855][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.831880][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.841068][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.841124][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.841148][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.864370][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.921046][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.921083][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.923468][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.923512][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.923533][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.924570][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.924613][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.924635][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.925854][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.925909][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.925932][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.927775][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.927816][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.927837][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.930303][ T5830] usb 12-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 188.930343][ T5830] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 188.930383][ T5830] usb 12-1: config 0 interface 0 has no altsetting 0 [ 188.933010][ T5830] usb 12-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 188.933037][ T5830] usb 12-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 188.933053][ T5830] usb 12-1: Product: syz [ 188.933066][ T5830] usb 12-1: Manufacturer: syz [ 188.933079][ T5830] usb 12-1: SerialNumber: syz [ 188.938338][ T5830] usb 12-1: config 0 descriptor?? [ 188.980604][ T5830] yurex 12-1:0.0: USB YUREX device now attached to Yurex #0 [ 189.038153][T11463] netlink: 'syz.9.1453': attribute type 1 has an invalid length. [ 189.354791][T11464] syzkaller0: entered promiscuous mode [ 189.354819][T11464] syzkaller0: entered allmulticast mode [ 189.482639][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.562929][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 189.770666][T11471] syz.8.1455 (11471) used obsolete PPPIOCDETACH ioctl [ 189.894609][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 190.191879][T11479] netlink: 'syz.9.1457': attribute type 1 has an invalid length. [ 190.196301][T11479] netlink: 'syz.9.1457': attribute type 12 has an invalid length. [ 190.230615][T11479] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1457'. [ 190.414718][T11484] xt_hashlimit: size too large, truncated to 1048576 [ 190.428285][ T1350] usb 12-1: USB disconnect, device number 15 [ 190.441222][ T1350] yurex 12-1:0.0: USB YUREX #0 now disconnected [ 191.164956][T11502] 9pnet_virtio: no channels available for device syz [ 191.393610][ T42] audit: type=1400 audit(1785337614.834:28316): avc: denied { remount } for pid=11499 comm="syz.7.1464" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 191.601099][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.609605][T11511] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1466'. [ 191.652867][ T5750] Bluetooth: hci0: command 0x0c1a tx timeout [ 191.716049][T11512] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1466'. [ 191.793952][T11520] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 191.840495][ T42] audit: type=1800 audit(1785337615.294:28317): pid=11520 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1467" name="max_speed" dev="configfs" ino=44218 res=0 errno=0 [ 191.853928][T11520] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 191.958601][T11520] netlink: 'syz.7.1467': attribute type 29 has an invalid length. [ 191.972761][ T5750] Bluetooth: hci4: command 0x0c1a tx timeout [ 191.981132][T11520] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 192.140221][T11534] netlink: 'syz.9.1473': attribute type 21 has an invalid length. [ 192.150191][ T5750] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 192.204790][T11534] netlink: 128 bytes leftover after parsing attributes in process `syz.9.1473'. [ 192.330034][ T42] audit: type=1400 audit(1785337615.784:28318): avc: denied { write } for pid=11536 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.484630][ T42] audit: type=1400 audit(1785337615.924:28319): avc: denied { write } for pid=11541 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.536636][T11534] netlink: 'syz.9.1473': attribute type 4 has an invalid length. [ 192.561243][T11534] netlink: 'syz.9.1473': attribute type 5 has an invalid length. [ 192.577672][T11534] netlink: 3 bytes leftover after parsing attributes in process `syz.9.1473'. [ 192.644187][T11543] 8021q: adding VLAN 0 to HW filter on device bond2 [ 192.648582][T11552] IPVS: set_ctl: invalid protocol: 50 10.1.1.1:20001 [ 192.759691][ T42] audit: type=1400 audit(1785337616.204:28320): avc: denied { write } for pid=11546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.882894][ T42] audit: type=1400 audit(1785337616.324:28321): avc: denied { write } for pid=11558 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 193.131441][T11575] 9pnet_virtio: no channels available for device syz [ 193.165264][T11577] Cannot find add_set index 0 as target [ 193.348726][ T6246] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 193.405063][ T42] audit: type=1400 audit(1785337616.864:28322): avc: denied { read } for pid=11576 comm="syz.7.1485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 193.524851][ T6246] usb 2-1: config 0 has no interfaces? [ 193.534601][ T6246] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 193.540836][ T6246] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 193.549808][ T6246] usb 2-1: Product: syz [ 193.571290][ T6246] usb 2-1: Manufacturer: syz [ 193.635237][ T6246] usb 2-1: config 0 descriptor?? [ 193.649257][ T5750] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.882224][ T847] usb 2-1: USB disconnect, device number 2 [ 193.985121][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1487'. [ 193.998997][T11586] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1487'. [ 194.019466][T11588] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1487'. [ 194.030290][T11588] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1487'. [ 194.378777][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.785616][T11605] veth0_to_team: entered allmulticast mode [ 194.796366][T11613] netdevsim netdevsim7: Firmware load for './file0/../file0/file0' refused, path contains '..' component [ 195.203423][ T42] audit: type=1400 audit(1785337618.654:28323): avc: denied { bind } for pid=11617 comm="syz.7.1497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 195.514117][ T42] audit: type=1400 audit(1785337618.964:28324): avc: denied { remount } for pid=11623 comm="syz.7.1500" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 195.540329][T11625] option changes via remount are deprecated (pid=11623 comm=syz.7.1500) [ 195.547601][T11625] cgroup: option or name mismatch, new: 0x0 "veth1_to_bond", old: 0x0 "" [ 195.895368][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1503'. [ 195.922921][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1503'. [ 196.121425][T11647] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1507'. [ 196.251412][T11647] program syz.9.1507 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 196.322092][T11653] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 196.334614][T11653] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1510'. [ 196.672549][ T9736] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 196.882626][ T9736] usb 14-1: Using ep0 maxpacket: 8 [ 196.888621][ T9736] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 196.905132][ T9736] usb 14-1: config 0 has no interface number 0 [ 196.956486][ T9736] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.005229][ T9736] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.010444][ T9736] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.033722][ T9736] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.093057][ T9736] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.108216][ T9736] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.128957][ T9736] usb 14-1: config 0 descriptor?? [ 197.177351][T11680] geneve1: entered allmulticast mode [ 197.193828][ T9736] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 197.278124][ T1350] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 197.451945][ T1350] usb 2-1: Using ep0 maxpacket: 8 [ 197.481145][ T1350] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 197.486507][ T1350] usb 2-1: config 0 has no interface number 0 [ 197.522456][ T42] audit: type=1400 audit(1785337620.974:28325): avc: denied { create } for pid=11657 comm="syz.9.1511" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.524323][ T1350] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 197.603271][ T42] audit: type=1400 audit(1785337621.054:28326): avc: denied { write } for pid=11683 comm="syz.8.1518" name="file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 197.624021][ T1350] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 197.652921][ T1350] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 197.652953][ T1350] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 197.652987][ T1350] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 197.653006][ T1350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.657092][ T1350] usb 2-1: config 0 descriptor?? [ 197.671638][ T42] audit: type=1400 audit(1785337621.054:28327): avc: denied { open } for pid=11683 comm="syz.8.1518" path="/123/file0/file0" dev="fuse" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 197.718062][ T1350] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 197.719939][ T42] audit: type=1400 audit(1785337621.084:28328): avc: denied { ioctl } for pid=11657 comm="syz.9.1511" path="socket:[44015]" dev="sockfs" ino=44015 ioctlcmd=0x52c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 197.750740][ T42] audit: type=1400 audit(1785337621.184:28329): avc: denied { write } for pid=11657 comm="syz.9.1511" name="functions" dev="configfs" ino=21038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 197.766221][T11658] file system registered [ 197.852805][ T65] block nbd7: Receive control failed (result -107) [ 198.025135][ T42] audit: type=1400 audit(1785337621.484:28330): avc: denied { mount } for pid=11657 comm="syz.9.1511" name="/" dev="functionfs" ino=45492 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 198.052120][ T847] usb 2-1: USB disconnect, device number 3 [ 198.099366][T11685] block nbd7: shutting down sockets [ 198.153698][ T847] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 198.224647][ T1306] block nbd1: Possible stuck request ffff8880290f5080: control (read@0,1024B). Runtime 90 seconds [ 198.524392][ T5750] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 198.902695][ T8071] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 198.946170][T11719] kAFS: Can only specify source 'none' with -o dyn [ 199.139914][ T8071] usb 12-1: Using ep0 maxpacket: 8 [ 199.158741][ T8071] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 199.185445][ T8071] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 199.197686][ T8071] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 199.237214][ T8071] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 199.257987][ T42] audit: type=1400 audit(1785337622.704:28331): avc: denied { write } for pid=11723 comm="syz.0.1529" name="functions" dev="configfs" ino=21038 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.278275][T11728] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 199.286847][ T8071] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 199.300878][ T8071] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 199.307501][ T8071] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.340876][ T42] audit: type=1400 audit(1785337622.784:28332): avc: denied { write } for pid=11723 comm="syz.0.1529" name="c.1" dev="configfs" ino=20275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 199.358067][ T42] audit: type=1400 audit(1785337622.784:28333): avc: denied { create } for pid=11723 comm="syz.0.1529" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 199.378326][T11725] sysfs: Unknown parameter './config/usb_gadget/g1/functions/rndis.usb0' [ 199.398245][ T42] audit: type=1800 audit(1785337622.834:28334): pid=11725 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1529" name="UDC" dev="configfs" ino=44602 res=0 errno=0 [ 199.489266][T11724] Config c/1 of g1 needs at least one function. [ 199.505254][T11724] udc dummy_udc.0: failed to start g1: -22 [ 199.516862][T11724] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 199.577316][T11724] UDC core: g1: couldn't find an available UDC or it's busy [ 199.620737][ T8071] usb 12-1: usb_control_msg returned -32 [ 199.626977][ T8071] usbtmc 12-1:16.0: can't read capabilities [ 199.688180][ T8071] usb 14-1: USB disconnect, device number 3 [ 199.768853][ T8071] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 199.827915][T10912] ffs_data_put(): freeing [ 199.955531][T11741] Bluetooth: MGMT ver 1.23 [ 199.966001][ T5750] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 200.155804][ T6246] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 200.411249][ T6246] usb 2-1: Using ep0 maxpacket: 16 [ 200.446427][ T6246] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 200.461971][ T6246] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.468873][ T6246] usb 2-1: Product: syz [ 200.497358][ T9709] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 200.509505][ T6246] usb 2-1: Manufacturer: syz [ 200.511484][ T6246] usb 2-1: SerialNumber: syz [ 200.529423][ T6246] usb 2-1: config 0 descriptor?? [ 200.672889][ T9709] usb 13-1: Using ep0 maxpacket: 8 [ 200.677313][ T9709] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.685653][ T9709] usb 13-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.694637][ T9709] usb 13-1: config 0 interface 0 has no altsetting 0 [ 200.699951][ T9709] usb 13-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 200.715568][ T9709] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.735524][ T9709] usb 13-1: config 0 descriptor?? [ 200.948267][ T6246] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 200.960390][ T6246] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 200.970372][ T6246] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 200.977823][ T6246] usb 2-1: media controller created [ 201.001723][ T6246] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.154020][ T6246] zl10353_read_register: readreg error (reg=127, ret==0) [ 201.156756][ T6246] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 201.161312][ T6246] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 201.164698][ T9709] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 201.184067][ T9709] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 201.193494][ T9709] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 201.202099][ T9709] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 201.216822][ T9709] mcp2221 0003:04D8:00DD.0009: unknown main item tag 0x0 [ 201.220508][ T9709] mcp2221 0003:04D8:00DD.0009: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 201.433942][T11762] btrfs: Unknown parameter 'discard' [ 201.467769][T11754] ------------[ cut here ]------------ [ 201.478674][T11754] usb 2-1: BOGUS control dir, pipe 80000480 doesn't match bRequestType c0 [ 201.529005][T11754] WARNING: drivers/usb/core/urb.c:411 at usb_submit_urb+0x15ff/0x19b0, CPU#1: syz.8.1540/11754 [ 201.540008][T11754] Modules linked in: [ 201.559818][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.8.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 201.568634][T11754] Tainted: [L]=SOFTLOCKUP [ 201.571294][T11754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 201.590422][T11754] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 201.594236][T11754] Code: 48 89 54 24 40 e8 73 72 89 fa 4c 89 e7 e8 bb e7 db fe 48 89 c6 48 8d 3d a1 e9 ae 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 44 72 89 fa 89 ee bf ff 00 00 00 [ 201.619443][T11754] RSP: 0018:ffffc90006f5f680 EFLAGS: 00010283 [ 201.627839][T11754] RAX: ffffffff8ca5ef40 RBX: ffff888025d36100 RCX: 0000000080000480 [ 201.635323][T11754] RDX: ffff8880227968e0 RSI: ffffffff8ca5ef40 RDI: ffffffff912fd780 [ 201.656344][T11754] RBP: ffff888026ba6058 R08: 00000000000000c0 R09: 0000000000000000 [ 201.665084][T11754] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026ba60b0 [ 201.670037][T11754] R13: ffff88803b2eef20 R14: ffff88803b2eef26 R15: ffff88803b2eef27 [ 201.677297][T11754] FS: 00007f4a95b196c0(0000) GS:ffff8880d5edc000(0000) knlGS:0000000000000000 [ 201.689819][T11754] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 201.696498][T11754] CR2: 0000200000003480 CR3: 00000000275a5000 CR4: 0000000000352ef0 [ 201.700516][T11754] DR0: 0000000000000004 DR1: 0000000000000000 DR2: 0000000000000000 [ 201.704525][T11754] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 201.708822][T11754] Call Trace: [ 201.711162][T11754] [ 201.713281][T11754] ? __init_swait_queue_head+0xca/0x150 [ 201.717484][T11754] usb_start_wait_urb+0x10e/0x580 [ 201.730594][T11754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 201.739681][T11754] ? trace_kmalloc+0xeb/0x110 [ 201.746998][T11754] ? __asan_memset+0x23/0x50 [ 201.769831][T11754] usb_control_msg+0x328/0x4b0 [ 201.772906][T11754] ? __pfx_usb_control_msg+0x10/0x10 [ 201.776741][T11754] dtv5100_i2c_msg+0x1be/0x340 [ 201.784511][T11754] dtv5100_i2c_xfer+0x131/0x3d0 [ 201.787545][T11754] __i2c_transfer+0x5d9/0x1740 [ 201.790588][T11754] ? __pfx___i2c_transfer+0x10/0x10 [ 201.794201][T11754] i2c_smbus_xfer_emulated+0x235/0x1110 [ 201.801358][T11754] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 201.807753][T11754] ? __ww_mutex_check_waiters+0x80/0x440 [ 201.811896][T11754] ? kasan_quarantine_put+0x104/0x240 [ 201.817245][T11754] __i2c_smbus_xfer+0x619/0x1100 [ 201.820916][T11754] ? mark_held_locks+0x40/0x70 [ 201.825490][T11754] ? lockdep_hardirqs_on+0x78/0x100 [ 201.829115][T11754] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 201.861259][T11754] ? rt_mutex_slowtrylock+0x93/0x100 [ 201.867016][T11754] i2c_smbus_xfer+0x185/0x3c0 [ 201.871067][T11754] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 201.876575][T11754] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 201.893545][T11754] ? __might_fault+0xc5/0x140 [ 201.897162][T11754] ? __might_fault+0xc5/0x140 [ 201.899713][T11754] i2cdev_ioctl+0x3cf/0x830 [ 201.914579][T11754] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 201.917870][T11754] ? selinux_file_ioctl+0x13b/0x290 [ 201.925383][T11754] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 201.929290][T11754] __x64_sys_ioctl+0x18e/0x210 [ 201.933114][T11754] do_syscall_64+0x115/0x870 [ 201.935608][T11754] ? clear_bhb_loop+0x40/0x90 [ 201.937908][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.940609][T11754] RIP: 0033:0x7f4a94b9de99 [ 201.944864][T11754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.962221][T11754] RSP: 002b:00007f4a95b19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.969096][T11754] RAX: ffffffffffffffda RBX: 00007f4a94e25fa0 RCX: 00007f4a94b9de99 [ 201.976059][T11754] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 0000000000000005 [ 201.980248][T11754] RBP: 00007f4a94c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 201.984340][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.989380][T11754] R13: 00007f4a94e26038 R14: 00007f4a94e25fa0 R15: 00007ffe2721a638 [ 201.996792][T11754] [ 201.998918][T11754] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 202.002455][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.8.1540 Tainted: G L syzkaller #0 PREEMPT(full) [ 202.013609][T11754] Tainted: [L]=SOFTLOCKUP [ 202.017373][T11754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 202.024707][T11754] Call Trace: [ 202.026854][T11754] [ 202.029264][T11754] dump_stack_lvl+0x100/0x190 [ 202.032010][T11754] vpanic+0x552/0x970 [ 202.034748][T11754] ? __pfx_vpanic+0x10/0x10 [ 202.038759][T11754] panic+0xd1/0xe0 [ 202.055465][T11754] ? __pfx_panic+0x10/0x10 [ 202.057591][T11754] check_panic_on_warn.cold+0x19/0x34 [ 202.059944][T11754] ? usb_submit_urb+0x15ff/0x19b0 [ 202.062233][T11754] __warn.cold+0x191/0x318 [ 202.064742][T11754] __report_bug+0x30f/0x440 [ 202.073170][T11754] ? usb_submit_urb+0x15ff/0x19b0 [ 202.075873][T11754] ? __pfx___report_bug+0x10/0x10 [ 202.078249][T11754] ? lockdep_hardirqs_on+0x78/0x100 [ 202.080612][T11754] ? kasan_save_stack+0x3f/0x50 [ 202.084226][T11754] ? kasan_save_stack+0x30/0x50 [ 202.089058][T11754] report_bug_entry+0xe1/0x290 [ 202.093992][T11754] ? usb_submit_urb+0x160d/0x19b0 [ 202.111078][T11754] handle_bug+0x1cd/0x2a0 [ 202.112857][T11754] exc_invalid_op+0x17/0x50 [ 202.114704][T11754] asm_exc_invalid_op+0x1a/0x20 [ 202.116702][T11754] RIP: 0010:usb_submit_urb+0x160d/0x19b0 [ 202.131821][T11754] Code: 48 89 54 24 40 e8 73 72 89 fa 4c 89 e7 e8 bb e7 db fe 48 89 c6 48 8d 3d a1 e9 ae 09 44 8b 44 24 20 8b 4c 24 30 48 8b 54 24 40 <67> 48 0f b9 3a e9 28 ed ff ff e8 44 72 89 fa 89 ee bf ff 00 00 00 [ 202.153144][T11754] RSP: 0018:ffffc90006f5f680 EFLAGS: 00010283 [ 202.157841][T11754] RAX: ffffffff8ca5ef40 RBX: ffff888025d36100 RCX: 0000000080000480 [ 202.171778][T11754] RDX: ffff8880227968e0 RSI: ffffffff8ca5ef40 RDI: ffffffff912fd780 [ 202.176485][T11754] RBP: ffff888026ba6058 R08: 00000000000000c0 R09: 0000000000000000 [ 202.190667][T11754] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888026ba60b0 [ 202.194007][T11754] R13: ffff88803b2eef20 R14: ffff88803b2eef26 R15: ffff88803b2eef27 [ 202.199773][T11754] ? __init_swait_queue_head+0xca/0x150 [ 202.202319][T11754] usb_start_wait_urb+0x10e/0x580 [ 202.216135][T11754] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 202.240326][T11754] ? trace_kmalloc+0xeb/0x110 [ 202.242417][T11754] ? __asan_memset+0x23/0x50 [ 202.251037][T11754] usb_control_msg+0x328/0x4b0 [ 202.252893][T11754] ? __pfx_usb_control_msg+0x10/0x10 [ 202.254977][T11754] dtv5100_i2c_msg+0x1be/0x340 [ 202.266745][T11754] dtv5100_i2c_xfer+0x131/0x3d0 [ 202.277240][T11754] __i2c_transfer+0x5d9/0x1740 [ 202.279249][T11754] ? __pfx___i2c_transfer+0x10/0x10 [ 202.281157][T11754] i2c_smbus_xfer_emulated+0x235/0x1110 [ 202.295480][T11754] ? __pfx_i2c_smbus_xfer_emulated+0x10/0x10 [ 202.305981][T11754] ? __ww_mutex_check_waiters+0x80/0x440 [ 202.320585][T11754] ? kasan_quarantine_put+0x104/0x240 [ 202.327882][T11754] __i2c_smbus_xfer+0x619/0x1100 [ 202.330802][T11754] ? mark_held_locks+0x40/0x70 [ 202.332913][T11754] ? lockdep_hardirqs_on+0x78/0x100 [ 202.337273][T11754] ? __pfx___i2c_smbus_xfer+0x10/0x10 [ 202.350882][T11754] ? rt_mutex_slowtrylock+0x93/0x100 [ 202.353385][T11754] i2c_smbus_xfer+0x185/0x3c0 [ 202.355852][T11754] i2cdev_ioctl_smbus+0x4b9/0xac0 [ 202.362882][T11754] ? __pfx_i2cdev_ioctl_smbus+0x10/0x10 [ 202.366580][T11754] ? __might_fault+0xc5/0x140 [ 202.371850][T11754] ? __might_fault+0xc5/0x140 [ 202.375093][T11754] i2cdev_ioctl+0x3cf/0x830 [ 202.378620][T11754] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 202.382029][T11754] ? selinux_file_ioctl+0x13b/0x290 [ 202.386476][T11754] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 202.391467][T11754] __x64_sys_ioctl+0x18e/0x210 [ 202.395875][T11754] do_syscall_64+0x115/0x870 [ 202.400668][T11754] ? clear_bhb_loop+0x40/0x90 [ 202.404918][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.415143][T11754] RIP: 0033:0x7f4a94b9de99 [ 202.420555][T11754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.452955][T11754] RSP: 002b:00007f4a95b19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.474948][T11754] RAX: ffffffffffffffda RBX: 00007f4a94e25fa0 RCX: 00007f4a94b9de99 [ 202.493743][T11754] RDX: 00002000000001c0 RSI: 0000000000000720 RDI: 0000000000000005 [ 202.497001][T11754] RBP: 00007f4a94c33eaf R08: 0000000000000000 R09: 0000000000000000 [ 202.515043][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.521330][T11754] R13: 00007f4a94e26038 R14: 00007f4a94e25fa0 R15: 00007ffe2721a638 [ 202.526011][T11754] [ 202.543534][T11754] Kernel Offset: disabled [ 202.550034][T11754] Rebooting in 86400 seconds..