last executing test programs: 3m9.056997763s ago: executing program 1 (id=396): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet6(0xa, 0x6, 0x51) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000180), 0x4) 3m8.987003053s ago: executing program 1 (id=397): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0x150, 0x0, 0x3, [{{0x4, 0x3, 0x28000, 0x3, 0x9, 0x10001, {0x6, 0x9, 0x4, 0xb, 0x6, 0x0, 0x2, 0x1, 0x6, 0x8000, 0xde, 0x0, 0x0, 0x8001, 0x80000000}}, {0x400000000000001, 0x1, 0x1, 0x32540194, '\x00'}}, {{0x4, 0x3, 0x7ff, 0x7fffffffffffffff, 0xfff, 0x7ff, {0x3, 0x9, 0x3, 0x6, 0x5, 0x2, 0x2, 0x6, 0x7, 0x6000, 0x0, r2, r3, 0x1, 0x3}}, {0x0, 0x7, 0x1, 0x300, '\x00'}}]}, 0x0, 0x0, 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000100)=@phonet={0x23, 0x0, 0x0, 0x37}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="2705020059feff000600002f88a8", 0xe}], 0x1}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f00000002c0)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r7, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f0000000500)="0f214fb91c0600000f3266b818018ec02e7bca66bad004b86ebc554fef660f38175048c4e27906750466baf80cb848554e8aef66bafc0ced660f388271b666baf80cb8e03a598cef66bafc0cb81b1f0000ef", 0x52}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getdents64(r4, &(0x7f0000000100)=""/134, 0x86) 3m8.697253539s ago: executing program 1 (id=404): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000042000100000000000000000003010000060000002600010000112233445566778899aabb88a8450088a80000000001170000010203040506070800000c00020006002000080000000c0003"], 0x68}}, 0x0) syz_emit_ethernet(0xb6, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x23, 0x4, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x11, 0x0, @empty, @dev, {[@rr={0x7, 0xb, 0x0, [@rand_addr=0x64010101, @rand_addr=0x64010100]}, @end, @timestamp_prespec={0x44, 0x6c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@loopback, 0x200}, {@local}, {}, {@multicast2}, {@dev={0xac, 0x14, 0x14, 0x28}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@local, 0x10001}, {@local, 0x9}, {@local, 0xff}, {@loopback, 0x3}, {@multicast1, 0x5}]}]}}}}}}}, 0x0) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x30000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x1}}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x3c, 0x2c, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2}}]}}]}, 0x3c}}, 0x0) nanosleep(&(0x7f0000000900)={0x1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8, 0x0, 0x4}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x7, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}}, 0x4000000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0xd1, 0x14, &(0x7f0000000180)="86f49c9614e8e710e2865353ef4f5c6f7642d98375d702bf1688ffcd16f87ba47167c122d1d164634f95820d1a258310c88608388438433a2799c8bb3e82bd70b7a2af3b47ea055e04d1a674e90efb540d26a758e057a4a32a126dca12ec3ad3d7245b8a0baf628d1347b6de5928c499cb99f68f34df4b18706c53918e562583dd59b481eb80a18a83d23772b8ed67b7d3f9a0dc88a53c822c9347820a44128cd8f740b71f409c534878f62cab207e2720c0df0a9e20be60ddada75e426e06dc85237e25440cb783807b2d0fe6821f19a1", &(0x7f0000000280)=""/20, 0x4e84, 0x0, 0xac, 0xbe, &(0x7f00000002c0)="e93e260bd615141fcaf529155b5ba5c67f5da131d3651e384286b3f1f8fee0d2663fb70c52294a5d098ac13f246fe570a7dbadcc22a6eca13f0b8994e115f12bcfc89ef97fac2803ec7de82752f5e72da39686a609dc7a4bf17497478f097b668ea222b5225a18810d2c842c82afb01389e58920580721f770b441caa47cb019fe270e01c8577430bc9afc7ed912f19d0984e2d1ee0843c06c3952ce220d594c912260fa2f559abbce49d267", &(0x7f0000000380)="3f8ddffd46ed7249379db83ce30ec16bb849eb3de0e2313184dcdbc996710563dc894399fdc9282009db250cfd359f8d068754df9024414ba8f433714f61e0d2d2010798786d90cdfa63defeab596d73254d2e66d53e70e6a7b4a9f3b053b4e431e0ad0e72978fdc2e182b2253ec14648896a18a2cf2a0506dad549bf62f6b402f14839f87599de6a650f2a73363cb1984ec3659307331eeaca24ad253cac365212514a80a3c676f00660039384f76f6f076b17d820bc8dc5884330a7d19", 0x4, 0x0, 0xd827}, 0x50) 3m7.822882345s ago: executing program 1 (id=413): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000200000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0xcf43, 0x4c9, 0xa3d4, 0x9dff, 0xe, "3d52e3ff00"}) (async) write$binfmt_aout(r0, &(0x7f00000002c0)=ANY=[], 0xff2e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2404, 0x9}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x40, 0x3, 0x100007, 0x16, "b0bf2ebb48c8040018bfef400000000500"}) r2 = syz_open_pts(r0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r5, &(0x7f00000001c0)='p', 0x1) (async) r6 = dup3(r2, r0, 0x80000) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xff) (async) ioctl$TIOCSTI(r6, 0x5412, &(0x7f00000001c0)=0xa) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, 0x0, &(0x7f0000000540)) (async) r8 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000380)=0xf) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r9, &(0x7f0000000140)={0x10, 0x30, 0xfa00, {0x0, 0x4, {0xa, 0x4e23, 0x80000001, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x59}}}, 0x38) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0xa9c, '\x00', r10, r6, 0x1, 0x4, 0x3}, 0x50) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r8, 0xc01864c6, &(0x7f0000000080)={0x0}) (async) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000080)=[{r11, 0x210a}, {r11, 0x120}], 0x2, 0x0, 0x0, 0x0) (async) dup(0xffffffffffffffff) 3m7.616280976s ago: executing program 1 (id=415): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4700ed362770364a24000000190241749b132be5718b1eca0c904d6680002cbd70000000800080200040000400050000000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x12) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x58, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)='&', 0x1}], 0x1) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) write$P9_RLERRORu(r1, 0x0, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) 3m7.615848076s ago: executing program 1 (id=416): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x2000, 0x6, '9P2000'}, 0x13) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x177f, {0x80, 0x10000000}, 0x416d, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffd, 0x8, 0x4, 0x80000000000d, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, 0x20000000000000}}, 0xa0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r8, 0xffffffffffffffff, 0x200000000000000) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0xa7) (async) creat(&(0x7f0000000140)='./file0\x00', 0xa7) 2m52.126984576s ago: executing program 32 (id=416): pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) (async) pipe2$9p(&(0x7f0000000000)={0x0, 0x0}, 0x0) pipe2$9p(&(0x7f0000000010)={0x0, 0x0}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) (async) mount$9p_fd(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) (async) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$P9_RVERSION(r1, &(0x7f00000002c0)={0x13, 0x65, 0xffff, 0x2000, 0x6, '9P2000'}, 0x13) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2, 0x4}}}]}, 0x3c}}, 0x4000010) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f00000000c0)={0xa0, 0x19, 0x0, {0x177f, {0x80, 0x10000000}, 0x416d, 0x0, 0x0, 0x0, 0x0, 0x9, 0xffd, 0x8, 0x4, 0x80000000000d, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x9, 0x20000000000000}}, 0xa0) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r5, 0x5386, &(0x7f0000000080)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x200000000000000) (async) close_range(r8, 0xffffffffffffffff, 0x200000000000000) symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00') creat(&(0x7f0000000140)='./file0\x00', 0xa7) (async) creat(&(0x7f0000000140)='./file0\x00', 0xa7) 2m44.426973931s ago: executing program 2 (id=663): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) mprotect(&(0x7f000012e000/0x1000)=nil, 0x1000, 0x5) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_ublk_setup_io_uring(0x1f93, &(0x7f0000000280)={0x0, 0x5a66, 0x1, 0x0, 0xf7}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) r2 = syz_io_uring_setup(0x11d, &(0x7f0000010400)={0x0, 0x86df, 0x8000, 0x3, 0x2e1, 0x0, r1}, &(0x7f0000000240), &(0x7f0000000000), &(0x7f00000003c0)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, 0xfffffffffffffffe, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r4 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r4, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000140)={0x2, 0x0, {&(0x7f0000000000)=""/184, 0xb8, &(0x7f00000000c0)=""/29, 0x1a8d20e3d30351d7, 0x3}}, 0x48) splice(r5, 0x0, r3, 0x0, 0x7fffffffffffffff, 0xf) connect$bt_rfcomm(r0, &(0x7f00000001c0)={0x1f, @any, 0x6}, 0xa) getpeername(r0, 0x0, &(0x7f0000000200)) 2m43.537002586s ago: executing program 2 (id=667): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000738856d5a3489d0b000008000300", @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2m43.535090749s ago: executing program 2 (id=669): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000080)={0x2001080, 0x0, 0x0, 0x0, {0x25}, 0x0, 0x0, 0x0, 0x0}, 0x58) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) 2m43.435511078s ago: executing program 2 (id=670): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x50) ioctl$int_out(r0, 0xa8c2, &(0x7f0000000180)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000040)=@delchain={0x24, 0x65, 0x100, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe}, {0xa, 0xb}, {0x10, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m43.364997149s ago: executing program 2 (id=671): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000240)={0x2, 0xf8, 0x200}) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) (async) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60c580, 0x80a0a1240160183d) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000100)=[{0x4, 0x7, 0x0, 0x5, @time={0x1, 0xa}, {0x0, 0xb8}, {0x4, 0x6}, @control={0x2, 0x7f, 0x6}}, {0x0, 0x3, 0x0, 0x4, @tick=0x8, {0x2, 0x4}, {0x0, 0x2}, @control={0x8, 0x4, 0x4ca}}, {0x7, 0x33, 0x3, 0x2, @tick=0x10, {0x6, 0x9}, {0x1, 0x7}, @raw8={"d363b5c823850feac80b2ee5"}}, {0x55, 0x2, 0x3d, 0x7f, @tick=0x7, {0x5, 0xee}, {0x40, 0x9}, @time=@time={0xb}}, {0x7, 0x31, 0x3, 0x13, @tick, {0x0, 0x9}, {0xf1, 0xcd}, @queue={0x24, {0x5, 0x595}}}, {0x0, 0x1, 0x4, 0x9, @tick=0x8, {0x6, 0x5}, {0xf, 0xf2}, @queue={0x4, {0x1, 0xa}}}], 0xa8) umount2(&(0x7f0000000280)='./file0\x00', 0xd) (async) umount2(&(0x7f0000000280)='./file0\x00', 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xc}, {0xfff2, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) socket(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f0000000000000000020000000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0x0) utimes(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) (async) sendmsg$inet6(r4, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x3, 0x10}, 0xc) write$P9_RSETATTR(r5, &(0x7f0000000140)={0x7, 0x1b, 0x7}, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) r6 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$selinux_load(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) (async) write$selinux_load(r6, &(0x7f0000000140)=ANY=[@ANYBLOB="8cff7cf908"], 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mmap(&(0x7f0000800000)=nil, 0x0, 0x0, 0x11, r7, 0x2000000) (async) mmap(&(0x7f0000800000)=nil, 0x0, 0x0, 0x11, r7, 0x2000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2m43.275745941s ago: executing program 2 (id=674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000002000)=""/4096) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x26, 0x0, 0xe, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000500)=r0}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000300)='syzkaller\x00', 0x10001, 0x22, &(0x7f0000000340)=""/34, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xfffffffe, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x5, 0x3, 0x7, 0x1}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x2, 0x4b, 0x3}, {0x2, 0x5, 0x1, 0x99e7f51c28e1fc65}, {0x2, 0x1, 0x6, 0x9}, {0x4, 0x2, 0x0, 0xa}], 0x10, 0x80000001}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x1000, 0x7, 0x201, 0x1, 0x100, 0x5d8, 0x0, 0x6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, r0, 0x13, 0x14, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/168) 2m28.230310393s ago: executing program 33 (id=674): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x8, 0x8031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mysys/class/i2c-dev/i2c-0/device/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='typec_fusb302 0x22\n\x00', 0x13) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000002000)=""/4096) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@ifindex, 0x26, 0x0, 0xe, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000500)=r0}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0xa, &(0x7f0000000240)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xf}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}], &(0x7f0000000300)='syzkaller\x00', 0x10001, 0x22, &(0x7f0000000340)=""/34, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xfffffffe, 0x6, 0x3}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000400)=[{0x5, 0x3, 0x7, 0x1}, {0x5, 0x5, 0xc, 0x7}, {0x2, 0x2, 0x4b, 0x3}, {0x2, 0x5, 0x1, 0x99e7f51c28e1fc65}, {0x2, 0x1, 0x6, 0x9}, {0x4, 0x2, 0x0, 0xa}], 0x10, 0x80000001}, 0x94) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000004c0)={0x1000, 0x7, 0x201, 0x1, 0x100, 0x5d8, 0x0, 0x6}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback, r0, 0x13, 0x14, 0x0, @void, @value=r4, @void, @void, r2}, 0x20) mincore(&(0x7f0000ffb000/0x2000)=nil, 0x2000, &(0x7f0000000140)=""/168) 2m1.807230456s ago: executing program 0 (id=1026): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="05000000738856d5a3489d0b000308000300", @ANYRES32=r2, @ANYBLOB="080005"], 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 2m1.737206682s ago: executing program 0 (id=1028): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat(r0, &(0x7f0000000400)='test\x00', 0x42, 0x1ff) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r2, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x28, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) write(r1, &(0x7f0000000500)='A', 0x1000) 2m1.656719057s ago: executing program 0 (id=1029): r0 = socket$inet_udp(0x2, 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) (async) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast1}, {0xa, 0x0, 0xff8a, @mcast2={0xff, 0x5}}, r2}}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000ffffffff0000"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r4}, 0xc) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000001040)={0x12, 0x10, 0xfa00, {&(0x7f0000000580), r2, r1}}, 0x18) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) (async) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, 0x0) accept4$alg(r6, 0x0, 0x0, 0x0) (async) r8 = accept4$alg(r6, 0x0, 0x0, 0x0) sendmmsg$sock(r8, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000780)="646262a6d9745ba0bd63d7494773690f40c8435e4b4473d46fe26d59dfe17f04acc32eaa1bb0038e468e0bedc8d2bcb8a3f95fe9915497684d15261d6f1db5df", 0x40}], 0x1}}], 0x1, 0x0) r9 = socket$nl_crypto(0x10, 0x3, 0x15) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) prctl$PR_SET_TSC(0x1a, 0x2) (async) prctl$PR_SET_TSC(0x1a, 0x2) r10 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$tcp_congestion(r10, 0x0, 0x0) sendmsg$nl_crypto(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001200"], 0xf0}}, 0x0) 2m1.55725212s ago: executing program 0 (id=1031): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) umount2(&(0x7f0000000100)='./file0\x00', 0x4) 2m1.556325176s ago: executing program 0 (id=1032): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xffff2153, 0x2, 0xa, 0xd, 0x1c4, 0x7, 0x2, 0x6}}}}]}, 0x58}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_pedit={0x48, 0x1, 0x0, 0x0, {{0xa}, {0x1c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r7, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r5, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x14}], 0x1}, 0x20000885) 2m1.14508073s ago: executing program 0 (id=1035): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0xfc, 0x9, 0xfffff028}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffff}}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa4000000041020000000000000000000000c128fd5f7f2cdba7543f7603c63be3c5cb649ee74acb1414aa05019078e000000241a00004000000000289000064010111e0000002441c611cd9e28d91b75f74341bb5f59571ac1e0101000020000a0100"/122], 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000180)=""/112, 0x70}], 0x2, &(0x7f0000000240)=""/78, 0x4e}, 0x40) 2m1.018434683s ago: executing program 34 (id=1035): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x28, 0xfc, 0x9, 0xfffff028}, {0x6, 0x0, 0x0, 0x2}]}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x7fffffff}}]}}) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r2, &(0x7f0000003480)={0x2020}, 0x2020) syz_emit_ethernet(0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa4000000041020000000000000000000000c128fd5f7f2cdba7543f7603c63be3c5cb649ee74acb1414aa05019078e000000241a00004000000000289000064010111e0000002441c611cd9e28d91b75f74341bb5f59571ac1e0101000020000a0100"/122], 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r3, &(0x7f00000002c0)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/27, 0x1b}, {&(0x7f0000000180)=""/112, 0x70}], 0x2, &(0x7f0000000240)=""/78, 0x4e}, 0x40) 1m25.836809472s ago: executing program 6 (id=1298): r0 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'dh\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'sh\x00', 0x5, 0x9, 0x77}, {@remote, 0x4e20, 0x4, 0xcd}}, 0x44) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x3, 0x3, 0x301, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6c4}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0xc0}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xee}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x7}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) 1m25.836317369s ago: executing program 6 (id=1299): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r1, 0x80108907, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a, 0x10000}, 0x9c) r3 = open(&(0x7f0000000240)='./file1\x00', 0x4d142, 0xa0) fsetxattr$security_capability(r3, &(0x7f00000000c0), &(0x7f0000000200)=@v2={0x2000000, [{0x0, 0x7ff}, {0x8, 0x440}]}, 0x14, 0x1) (async) ftruncate(r3, 0x2007ffc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0xffff, 0x6, 0x4, 0x24c, 0xc0, 0x8, 0x4}, &(0x7f0000000480)=0x9c) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x14) r5 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x8003, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc4c85512, &(0x7f0000000280)={{0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x2, 0x4) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x1, 0x54, 0x0, 0x1}, 0x9c) 1m25.723175801s ago: executing program 6 (id=1300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (async) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e6963766630000000000000000000000800050006000000140017"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m25.722725465s ago: executing program 6 (id=1301): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r3, 0x4}}, 0x10) r4 = timerfd_create(0x1, 0x80000) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1e, 0x1c, &(0x7f0000001840)=ANY=[@ANYBLOB="1800000000000000000000000300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b9af8ff00000000b7080000080000007b00020000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000006200000076000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x13f, 0x3}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f00000001c0)={0x4, 0x8, 0xfa00, {r3, 0x4}}, 0x10) (async) timerfd_create(0x1, 0x80000) (async) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) (async) readv(r4, &(0x7f0000000740)=[{&(0x7f0000000040)=""/52, 0x34}], 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) 1m25.615535691s ago: executing program 6 (id=1302): r0 = userfaultfd(0x80000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="761c517d8749a6fc550e852026c7d3986a4efac7a00a51c0b7e47fd84124f397d1d259338a6f46a0a0996f2b08a8c4cb8b32c69ffd457c13943ec58d5875dd02e50ecf139171e0b8a44c1543baafacaf014d64057e6ae0eae2c62578eaee09fb6ff6ca74601352eaf5da69c100c2f8ce43a74cfdcdda4fac8cac2c6c0432e5d6c0b3ee1657112d84548e482a9c16383d1a5c94589d46eed9e7", 0x99, 0x20000010, &(0x7f0000000300)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00', 0x10}, 0x1c) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000700)={'syz0\x00', {0x0, 0xe5e4, 0x0, 0x9}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0xfffffffc, 0x4, 0xfffffefe, 0x0, 0xf6, 0x0, 0x0, 0x3, 0x1, 0x9, 0x0, 0x0, 0x80001ff, 0x4, 0x0, 0x1, 0x7fffffff, 0x2, 0x4000000, 0xfffffffd, 0x5, 0x0, 0xfdfffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0xfffffffe, 0xffffffff, 0x7b67], [0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x9b05, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0xfffffff8, 0xfffffffc, 0x2, 0x7, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x0, 0xc33, 0xffffffff, 0x1a0d, 0x39, 0xaecd, 0x10, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xffffffff], [0x1, 0x0, 0x567, 0x4, 0x0, 0x0, 0x0, 0x9, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000005, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x101, 0xfffffffe, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x4000000d, 0xffffffff, 0x0, 0x9, 0x3, 0x0, 0x14, 0x1, 0x0, 0x400a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x1d, 0x400, 0x0, 0x8, 0x4000002, 0x0, 0x100000], [0x0, 0x1ff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xf7b, 0x0, 0x0, 0x0, 0xaad, 0x10000, 0x80000, 0x0, 0x8, 0x0, 0x3e8, 0xfffffffd, 0x10000001, 0x0, 0x0, 0x5861, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x101, 0xfffffffe, 0x0, 0x5, 0x0, 0x1]}, 0x45c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="40000000180015ffe0000000ffffffff0a2000000002000000000000240009801c00000008000000140005"], 0x40}], 0x1}, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r3, 0x4b63, 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./nfsd/portlist\x00', 0x1, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r6, &(0x7f00000013c0)=[{&(0x7f0000000100)='}', 0xffffffd5}], 0x1, 0x0) fcntl$setpipe(r5, 0x407, 0x3) r7 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) ioctl$AUTOFS_IOC_PROTOSUBVER(r7, 0x40049366, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000680)={'gre0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x700, 0x80, 0xc42, 0x3ff, {{0x1d, 0x4, 0x2, 0x1, 0x74, 0x68, 0x0, 0xfe, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@noop, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x68, [@multicast2, @empty, @empty, @multicast1]}, @lsrr={0x83, 0x1f, 0xf7, [@broadcast, @rand_addr=0x64010100, @multicast2, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @local]}, @timestamp_addr={0x44, 0x24, 0xe, 0x1, 0xc, [{@multicast2, 0x10}, {@multicast2, 0x2}, {@multicast1, 0x1}, {@broadcast, 0xffffffa9}]}, @noop, @noop]}}}}}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000d00)={r7, 0x20, &(0x7f0000000cc0)={&(0x7f0000000b80)=""/112, 0x70, 0x0, &(0x7f0000000c00)=""/140, 0x8c}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000dc0)={{r6, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x7, 0x1a, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5d}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_val={0x18, 0x5, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000540)='GPL\x00', 0x8, 0x11, &(0x7f0000000580)=""/17, 0x41100, 0x4, '\x00', r8, @fallback=0x18, r5, 0x8, &(0x7f00000006c0)={0x4, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, r6, 0x3, &(0x7f0000000e00)=[r4, r5, r10], &(0x7f0000000e40)=[{0x4, 0x3, 0x0, 0x9}, {0x4, 0x5, 0x6, 0x5}, {0x0, 0x3, 0x1, 0x7}], 0x10, 0xa}, 0x94) ioctl$OCFS2_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000040)={0x1, 0x1, 0x33, 0x4, 0xb, 0x3e}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000781000/0x3000)=nil, 0x400000, 0x3, 0x2}) 1m25.505293626s ago: executing program 6 (id=1303): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) mount$nfs(&(0x7f0000000040)='@\\:@$@**:\xb9](#%&@-\x00', &(0x7f00000000c0)='./pipefs\x00', &(0x7f0000000140), 0x301010, &(0x7f0000000180)={[{'rpc_pipefs\x00'}, {'rpc_pipefs\x00'}, {'sec\x00'}], [{@fsname={'fsname', 0x3d, '/h}.-*%$'}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = fsopen(&(0x7f0000000240)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x20, 0x19, "a82bbbc5c36c21c71db8ea059df404a4616fece28d9fd881b76176021313998e54b425c31eff01c5226d6f31bdbb9c07d985258d7f840e91f35f11cda24905b3", "c6b92f288152f0629990dd9d1d709fa3f42082dd702724d918779f0930bae987", [0x2, 0xffffffff80000001]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 1m19.255226624s ago: executing program 4 (id=1365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c000580050019"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000080)={0x1, 0xd, 0x8563, 0x5}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24044040) 1m19.044345708s ago: executing program 4 (id=1367): r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x1000, &(0x7f0000000400)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r2, 0xf503, 0x0) ioctl$GIO_UNIMAP(r4, 0x4b66, &(0x7f0000000100)={0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m18.914707481s ago: executing program 4 (id=1369): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x40000}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_virt_wifi\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0)=0x109, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x800000000000207, 0x0, 0x5, 0x2, 0xc, "fee8a2ab78b304a0c960a2fb2c2000001ea89de2b7fb0000e60080b8785d960001004d35a7386700", "28094cf00000000000004ad54afac11d873c5240f45f819e01177d2d458dd4992861ac000000000000000000080000000000000000001900", "90be8b1c55080021000c547d03daa0f4bd00", [0x7e, 0x7]}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000000)={0x1}) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) 1m18.046272582s ago: executing program 4 (id=1376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_PAN_ID(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x20, r1, 0x21, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={0x154, r3, 0x100, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10000, 0x45}}}}, [@NL80211_ATTR_TESTDATA={0x45, 0x45, "a23b9441a08d0433b3d9d1be9bd37aceb617ef8284331831d8619605907260a304c777569f6beb9ba4796ee4c0bbf6d2a73802154578b18ae5aceffdd6e4e0e1e5"}, @NL80211_ATTR_TESTDATA={0x98, 0x45, "7383f8949f6a809b49b027f868ca05e7c0801311eb120c1dca3ea1357ea3ec45de6a85bdb4e3afa8f8fc826fb7efe600a8a96dafeb853b13eb449f56535cbbab8ebce2967073c3a4f830e8d195cc82a0d9748966f55d857b7b208c9986e73d057c3f3fb5daf2dc0b52969696d53504a20ea88a7df4da305b6159069e06b66a4a69aa88edf24051d62f5178c14bbcf93a11ccc5f5"}, @NL80211_ATTR_TESTDATA={0x49, 0x45, "8d113c969937b1976793f8eeb8d20cbc39cae2d9e51fc87608cec2bd358b0c996fe1c3fd80406c266c54ad4d26c2e99fa7cc663d7f13e3b3451b7102214f3eac9fb4b9f4de"}]}, 0x154}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000090900010073797a300000000044000000090a010400000000000000000100100008000a40000000000900010073797a3000000000080005400000001e090002"], 0x8c}}, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, 0x0, 0x0, 0x80000, 0x0) r5 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r5, 0x31f, &(0x7f0000000040)={0x22, 0xfe, 0xdc, 0x1}) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x7, 0x9}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=@base={0xd, 0xa, 0x4, 0x801, 0x1, r6, 0x15b4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r7, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)=r6}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000a80)={r8, &(0x7f00000001c0), &(0x7f0000000a00)=""/75}, 0x20) chroot(&(0x7f0000000380)='./file0/../file0\x00') pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') 1m17.966124691s ago: executing program 4 (id=1378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x48, r1, 0x7, 0x70bd2d, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, "cd360000"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000800}, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x23) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="494d495820274d61737465722043617074757265fabef40b3030303038303030"], 0x2b) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="fc", 0x1}], 0x1}, 0x20040d4) close(r6) close(r5) sendmsg$NET_DM_CMD_STOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r3, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m17.687079324s ago: executing program 4 (id=1381): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd26, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x24040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 1m17.657717362s ago: executing program 35 (id=1381): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x70bd26, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x20, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x2}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x7}}}}]}]}, 0x70}}, 0x20040000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x100, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x24040000) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r4], 0x90}}, 0x0) 1m15.005337025s ago: executing program 5 (id=1395): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000200)={0x2, 0x1234, @local}, 0x10) syz_emit_ethernet(0x11e, &(0x7f00000002c0)={@local, @multicast, @void, {@mpls_uc={0x8847, {[{0x9, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xff, 0x0, 0x1}], @ipv4=@tcp={{0x2e, 0x4, 0x3, 0x2, 0x104, 0x65, 0x0, 0xb1, 0x6, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}, {[@end, @timestamp_addr={0x44, 0x24, 0xa6, 0x1, 0x3, [{@empty, 0x4}, {@local, 0x3}, {@local, 0xd}, {@rand_addr=0x64010102, 0x7}]}, @ssrr={0x89, 0xf, 0x1, [@loopback, @multicast2, @multicast1]}, @timestamp_prespec={0x44, 0x14, 0x70, 0x3, 0x1, [{@local, 0x4e}, {@private=0xa010100, 0x7}]}, @cipso={0x86, 0x56, 0x0, [{0x1, 0x6, "8ef8cce0"}, {0x0, 0x9, "30b9d26207af3a"}, {0x2, 0x10, "a6e615b07acc7fa4b2245f3f120c"}, {0x1, 0xf, "4fdf30e48ec77b436333baaf1d"}, {0x7, 0x6, "6c220e11"}, {0x5, 0xf, "d3f6d68c3c748c8272c1d896ab"}, {0x2, 0xd, "a68c924a5e768cba951715"}]}, @end, @generic={0x88, 0x4, 'r>'}]}}, {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x11, 0x4, 0x0, 0x9, {[@mss={0x2, 0x4, 0xff}, @mss={0x2, 0x4, 0x7}, @timestamp={0x8, 0xa, 0x125, 0x7}]}}, {"bfd494971b9ab2edb1ee171d4e5b1f8349d3c60ee308d9868d1d8c3d70c9651174469c04"}}}}}}}, 0x0) r2 = memfd_create(&(0x7f0000000b40)='\xdbaP\x88\xf6i-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97\t\x00\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b~\xc4\xc1_\x1c#z\x84\r\xe7\x98\xd1\xf5P\x00\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8fc9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89\x9f\xd3\xfe\x86f\xbdu\xb1\x85\xf3\x16=\xd6\xfb\xff\\2K\xb5\xb0\x9e\xee/\x9b3v\x11\x16?^\x86Z\x1eh\xd7\xf9r\x00\x19\xd6\xd41\x99\x80\xfdB\x9bjJr\xd3F\x15\bp!\xde\xa3T\x82x38K\x0f\x96\xa4\xbf\t!5\xc6\xd1\xf0\xb8\x9a\xee\xa9\xd7\x1f\xe7G\fL\t\xac*\xd9vc\bb\xcd\xf6\x8aPh\x98\x05\xdc\xce\xe3\xb7\x8c\xdf\x7feNPYC\xdc\xcd;\xa3\x12:O?h\xb4M >\x8e\xaa\xbe\x13a\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00{\x83\xe5v\xb7\x17\x86ts\x98\x17H\x82Y\xa2\x8b\xb6(\x1a\xa1-RP\x06\x0f\xf9\x0e\xa4.\xca\x1a\x84\xb1\xc1\x00T\xb6\x93\xba\x1d\x04IGS\xbe<7\xb5\xd3\xff\xb4\xb6E\xad\xf6\x1cB\x8b{P\xfa\xe0\xa7,\x12\x12\xf9\xfbN\x8d\xce0\xbf \x83\x0f\xd12\x8e\xa6\xdb\x85\xac;\x03\x89@\xfd\xe4+\x11\xff\xa1A\xb3\xdaY`\xed\\\x11\xf0\x05\xa0\x0f\xd1\xe0\xf4\xff\xdc\xa7\xa5\xb4\xfcx\xb0@6\xf0\xd8}a\xf8)\xdc\xaf\xe6\x17T;\x9d\x8f\x1d:@4\xdeS\xf1\xda\x17\x81(&', 0x0) r3 = dup(r2) syz_usb_connect(0x1, 0x36, &(0x7f0000000100)=ANY=[], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = dup3(r4, r5, 0x80000) r7 = dup(r6) pwrite64(r4, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) read(r7, &(0x7f00000014c0)=""/4096, 0x1000) timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000040)=0xd) r9 = dup(r8) write$6lowpan_enable(r9, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$TIOCVHANGUP(r8, 0x5437, 0x0) r10 = dup(r3) write$binfmt_elf64(r10, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x23e, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10000, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0xff, 0xff5, 0x5, 0x1b8, 0x7}]}, 0x78) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000200)}, 0x20) mprotect(&(0x7f000004f000/0x800000)=nil, 0x800000, 0x0) 1m12.726442131s ago: executing program 5 (id=1420): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa08000209"], 0x0) syz_emit_ethernet(0x96, &(0x7f0000000780)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200040086dd6018232500602c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa890a02"], 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) pselect6(0x517, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x700}, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)={&(0x7f0000000280), 0x8}) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) (async) mkdirat(0xffffffffffffff9c, 0x0, 0x1d7) openat$dir(0xffffffffffffff9c, &(0x7f00000006c0)='./bus\x00', 0x490082, 0x8) 1m12.723718258s ago: executing program 5 (id=1421): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = fsopen(&(0x7f0000000080)='debugfs\x00', 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r2, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0xffffff3f, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000180)={0x3d2, @time={0xffffff3f, 0xffffff}, 0x3, {0x1, 0xfc}, 0x8}) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000340)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'sit0\x00'}) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e20, 0x8001, @private2, 0x1}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000440)={0x7}, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e21, 0xd, @loopback, 0xc}], 0x1c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000400)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000480)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x943d3e4b8e72df55, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r6, 0x84, 0x22, &(0x7f0000000040)={0xfff, 0x6, 0x53a3, 0x2, r8}, 0x10) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r8, 0xcb, 0x3}, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580000000206050004770000000000000a0000000900020073797a30000001000500010007000000050005000a0000000c00078008000b400000cb5705fd0300000000001100030068b373683a69702c6d61726b00964a76996220da3d6e60e6edfd34948e77fa5a8525e79d531af3e21798a330ee0d5d1eadd8c6b271c7febc7a604731c5ed9744c090c862f030ad0cac1274804ada2996c9eaf473588739965bdd5b21b7d6bf8428f58b5a2a6c0360d2d7c323275bdce9ca164c8e9febbfcfa14262f40381ad8be494084b1b8c747eae8b2e82345838000000e63f46d913b49ed9775d064a2ceae5315867f53287d1e490d3f2d276c11e0f7c72b96188fdd27f4cd1b150dc4fc14c08a43c44305f042dd8aba661b5daaa5769ceb5c6885ef410f3bab6120313013b93c544c7fa5d79c78751fde95d24b0240e07cdda547176662c57e49c83e76169a397fdeae232e87e9bdcefcdba756932f222842b1b668704b5911169984389091a60cbf08c1546448bee4aa94feb6de1cd0109635d25143ef8ae5f017d2f12041e57c5c21587100412d1bf92e071d5454791268f528635dc946a6b43e2c09c0ff5229b0bd2f3df55d6eee43f003b75c7eb3534430a1b57975c43f3320dd27d6a5b386499ad552c196aef50b9112a4b8dc6f274ba74cc439480623040fb2676e36a7a568fb1fcf72e168011e630e5791d3529964c58be22e70adef19eef877622b370900a8e730a8cf015fd5307a0aed3bf775ed3ecce61641c0f39b3e53cbc70a0984cdaa928d8b026208a7c1c2398645962d00d3a1b00"/589], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x8800) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="d6303616b290ea184cbb6d5c6b16c3c09b1f288e", 0x14, 0x20000080, &(0x7f0000000140)={0xa, 0x4e22, 0xc, @local, 0x6}, 0x1c) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000280)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x24}}, 0x40) 1m12.616662704s ago: executing program 5 (id=1422): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newtaction={0x194, 0x30, 0xb, 0x0, 0xfffffffd, {}, [{0x180, 0x1, [@m_ife={0x17c, 0x2, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, @TCA_IFE_METALST={0x28, 0x6, [@IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x8}, @IFE_META_PRIO={0x4, 0x3, @void}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x6, 0x5, @val=0x400}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x1}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x81, 0xfa2e, 0x20000000, 0x7, 0x5}}}, @TCA_IFE_DMAC={0xa, 0x3, @multicast}]}, {0xf6, 0x6, "f5c957c0ad343075fc0157888e28b47ebd2656ad7e932095c518e765031a9a886822e07b368969f28a617487cb901400c502598796e24a71725840a423ace018e4fb3b2b7ba77408d14b5e15155b93d83801c0aaedfefc6fbc81655fe5aaba8cd476fd7e068be1cc1e873b4d128c82a51e1d5d32035878d71236740d89deefd9bd48ddd9585335773415c87e2f45d70b9a6b44ad36821b4050655cdaa4d3c12f3b08e82bfe032da09f3a868cbf218e0e32ac3680c4c837267388a10869d0a6a105ee27b8192c1b56a925f9c0ccb20ce6638690103f076d9ba78925d42a67baeb662bb1446f2c537ec5bcb090e3629d5c2173"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = mq_open(&(0x7f0000000000)=']!+({&)^-)%\x00', 0x40, 0x23, 0x0) (async) r2 = socket(0x11, 0x3, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) (async) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) copy_file_range(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) (async) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f00000000c0)={0x1}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) (async) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0) pwritev2(r4, &(0x7f0000000980)=[{&(0x7f0000000040)="a8fc7b04bd136c6034ef8b52a07de93f4aae2bb70f8def643940d786be6bbd390d220c500382eaa77810676321558e9227902a1ebf2592534974ec94b4c6be257070d6b540a1d33553433fe13a", 0x4d}], 0x1, 0x6, 0x200, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) ioctl$TUNSETIFINDEX(r6, 0x400454da, &(0x7f0000000040)=r8) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) write$cgroup_subtree(r5, &(0x7f0000000000)=ANY=[], 0xfe33) 1m12.615298046s ago: executing program 5 (id=1424): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x8000026, r0, 0x0) fanotify_mark(r1, 0x221, 0x40000010, r0, 0x0) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x4420) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', 0x0, 0x40, 0x8000, 0x0, 0x1, {{0x11, 0x4, 0x3, 0x37, 0x44, 0x68, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xbc, 0x3, 0x5, [{@rand_addr=0x64010102, 0x7}, {@multicast1, 0x8001}]}, @rr={0x7, 0x17, 0xbc, [@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @local]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xd, 0x1e, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ldst={0x1, 0x0, 0x3, 0x2, 0xc, 0x4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @alu={0xa3ca84f6b0e0c5ab, 0x0, 0x4, 0x3, 0x9, 0xc, 0xfffffffffffffff0}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9c8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x30}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x400000b3, 0x0, 0xffffffffffffff7f}]}) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @private2={0xfc, 0x2, '\x00', 0x3}, @mcast2, [], "8029335287b7a081"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write$cgroup_pid(r7, &(0x7f00000001c0), 0x12) sendmsg$nl_route_sched(r2, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)=@newtclass={0x9c, 0x28, 0x400, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x10, 0x7}, {0x7, 0x10}, {0xffef, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0x6a, 0x7}}, @TCA_RATE={0x6, 0x5, {0x7, 0x3}}, @tclass_kind_options=@c_hfsc={{0x9}, {0x54, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x4, 0x3, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0xc, 0x7, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0x5, 0x7}}, @TCA_HFSC_FSC={0x10, 0x2, {0xdb, 0x3, 0x4}}, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x10000, 0x7f}}]}}]}, 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@struct={0x0, 0x2, 0x0, 0x13, 0x0, 0x2, [{0x5}, {0x5}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x43}, 0x20) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$assume_authority(0x10, r8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) get_robust_list(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="40000000fe000304000000002472df2500047400", @ANYRES32=0x0, @ANYBLOB="00000000f3b20500200012800b0001006272696467650000100002800c0023000200000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x2000c014) 1m12.496093004s ago: executing program 5 (id=1425): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="35fd80b79d2a47f9f1569e6ac044b56e98d17351121036af0437c3aa13fe032b1bd525366e313b87a75a039eab1e6cf90da4e66bfc4dad2b38026f58d7b3d39c9224b8ceaecf6eb3cabada4d85eb30cb2d46c72704bd8b3933506655baa84a9ff625157f47b8b911d7f6fda140e7d276235b731a0d6f985c5a907236ffac1efd36933342c9ba71fbdcff74faad21a0ddf1609ce26ac345c6928ee236a3b721ddcd7e7a8794448e4c6d431a6ae712551364e2716bad580652b9a3806f505c7e342fc38d636c1c571c33fdd4475b7498c4a611970bed768842e8ad", 0xda, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '\x04\x00z', 0x20, 0xfd0}, 0x2f, 0xfffffffffffffffa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) (rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) (async) write(r1, 0x0, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 1m10.442705773s ago: executing program 36 (id=1303): r0 = memfd_create(&(0x7f0000000a40)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-j\xa9L\xfe)\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x06t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\x04n0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81\xbd\xd5\x00\x00C6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`{\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x1c\xd11\xfc\xa7\x93E\xff\xff\xd0\xac\b\x01\x10\xcc\xcd\x9a0\xd83\xb6\r\xbb\xe1u_KUd3l\x862\xa8I\xa7\x8f\xfb\xed\xdbn\xbd\xbe\xf0+a\xc8JC\x03:&9\xae\xb8\xd8TdMf[\x1c\n#\x87\xfc\x81O`\x19P\x142~|\xdf\xbc\xaf\xe4^\xac\xa5\xfbyy\xcb\f\x14}g\xa7\xc2\xe1\xa9\xdf\xbf\xdbV\x94:\xa6I\xa9\x15\x0f', 0x7) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r2, 0xee01) mount$nfs(&(0x7f0000000040)='@\\:@$@**:\xb9](#%&@-\x00', &(0x7f00000000c0)='./pipefs\x00', &(0x7f0000000140), 0x301010, &(0x7f0000000180)={[{'rpc_pipefs\x00'}, {'rpc_pipefs\x00'}, {'sec\x00'}], [{@fsname={'fsname', 0x3d, '/h}.-*%$'}}, {@appraise_type}, {@uid_eq={'uid', 0x3d, r2}}]}) r3 = fsopen(&(0x7f0000000240)='hfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000400)='source\x00', &(0x7f0000000500)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000600)='addr\x00', &(0x7f0000000700)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000280)={0x0, {}, 0x0, {}, 0x5, 0x0, 0x20, 0x19, "a82bbbc5c36c21c71db8ea059df404a4616fece28d9fd881b76176021313998e54b425c31eff01c5226d6f31bdbb9c07d985258d7f840e91f35f11cda24905b3", "c6b92f288152f0629990dd9d1d709fa3f42082dd702724d918779f0930bae987", [0x2, 0xffffffff80000001]}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 57.14099783s ago: executing program 37 (id=1425): r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000001c0)="35fd80b79d2a47f9f1569e6ac044b56e98d17351121036af0437c3aa13fe032b1bd525366e313b87a75a039eab1e6cf90da4e66bfc4dad2b38026f58d7b3d39c9224b8ceaecf6eb3cabada4d85eb30cb2d46c72704bd8b3933506655baa84a9ff625157f47b8b911d7f6fda140e7d276235b731a0d6f985c5a907236ffac1efd36933342c9ba71fbdcff74faad21a0ddf1609ce26ac345c6928ee236a3b721ddcd7e7a8794448e4c6d431a6ae712551364e2716bad580652b9a3806f505c7e342fc38d636c1c571c33fdd4475b7498c4a611970bed768842e8ad", 0xda, 0xfffffffffffffffd) keyctl$instantiate(0xc, r0, &(0x7f0000000100)=@encrypted_load={'load ', 'default', 0x20, 'trusted:', '\x04\x00z', 0x20, 0xfd0}, 0x2f, 0xfffffffffffffffa) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) (async, rerun: 32) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) (rerun: 32) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r2, &(0x7f0000000080)={0x2020}, 0x2020) (async) write(r1, 0x0, 0x0) (async) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) 6.57408202s ago: executing program 9 (id=2139): ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x0, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000000000000, 0x7, 0x1, 0x8, 0x77, 0x6a8, 0x102, 0xe, 0x83, 0x538a, 0x6, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xffffffff, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x0, 0x2000000000000006, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfb, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x3, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x2300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x5, 0x1, 0x3, 0x10000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x5245, 0x1c080, 0xa, 0x20002f7}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[0x2000000000, 0xb, 0x80005, 0x4000000000000e51, 0x6, 0x547a, 0x103d, 0x200000000006, 0x0, 0x3aa, 0x7, 0xffffffffffffffff, 0x7, 0x40000000009, 0x40000000080a8c, 0x9], 0x6000, 0x4000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, [0xfffffc01, 0x3]}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000001608000240000000000800044000000008080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=[{0x38, 0x107, 0xff, "00b149a413d22effdbe6d29a9c722c7a97c34730711b6490633dbc58c2fa305df021d21196a1ce"}], 0x38}}], 0x1, 0x10000001) ioctl$KVM_RUN(r4, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.076125667s ago: executing program 9 (id=2147): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0500000002000000060000000400000000000000", @ANYRES32, @ANYBLOB="030000000000e7ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000000, 0x204031, 0xffffffffffffffff, 0x6b543000) r1 = memfd_create(0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r2, &(0x7f0000001300)="92", 0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mq_open(&(0x7f00000001c0)='..\x00', 0x840, 0x184, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="bdd3bb90180900bfe9000000000000010018110002", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000066090600000003e70400000006000000180100002020702500000000002020207b9bf8ff00000000ac9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000005d93000000000000b503020000000000850000008b000000b70000000000000095", @ANYBLOB="fee7ac2e09520aae4db4d542dc98f6da12d4565a8e30f66c978df70e998bd3be62e534a19957ec0623"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4e, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 4.735417993s ago: executing program 7 (id=2154): r0 = socket$kcm(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400400016f58d54415a80641095d5631d7e31adb13d53c13b7cae8800a7f90224fc05", 0x23}], 0x1, 0x0, 0x0, 0x10}, 0x20008894) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x0, 0x9, 0xffffffff, 0x40}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x18, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x3, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0x8000) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x10080, 0x0) 4.665830462s ago: executing program 7 (id=2156): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='westwood', 0x8) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async, rerun: 32) r2 = socket(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001400)="7f4ba13c5a27118dc920175650f0c9ba1809dd13a6e2d5b38f40adfa278c09e0e3bd05add4d780cd753b50f06f3b51f43761c7783f38ceaefc2dad57889d8b3a2d21314410f64ec2fa92e3a14b0141b39c020021d1edd011fbccb808a317fff4cf49aab12da619d67102048ec43c76cdb9d395e8b7b6e589d788aeeecb5080fc3d5ec6ccd656e49c0a642671d3fc363b46240bbc46ad965399b71db3c8f2b269b20870a3d2a6a8de5213b0f9d41c510c827056b7284391da244ec7653648b670f9a3483b314d861992ed7fb369eda093e1643c300b94d996fc592adb22c379be070ce5cd806da85a492dd4199cceb4c5b750222485325cf1073bf87e93bdf7da8af8f5f626541afd142e24ee8f4be9f038453c0edf500deabfe4d1a7a9de51df012bc2f3b767b3c03be6ace8c37ad571323cd363116e01f98a8ff8148d3900a65b788e99ddf9d9a2383f1730c7868d2dd031034bce5a77bd1ef3385105968be7bd830bde788092f657be36f89ea55ced486e18982d01339ed04a934a43c7b3be5e6bd03cbe773a938f621809345ec07cfceb013e3d76d500d97c8bee6ff54980ac3d221fcb35724ba64adb29ae8db909e097d78ff9542196635a14266944b850c9d436e96cc806a88090cbfc9db7ce83231bc043ded67966cfd68b800f6030a85f6bb070a2a5b372be2dacea7884b42e76e164af04e47f90ce0694623dce23cd1471f1a6029f68331317073e1a2d8cfb16f821c867d35a609649cf36aa781fa0a381f934844366d4e3ab8dd239c6ec35c15f307a7ed07869aacec38d787fd9c08e9dda1a28bf1a15b004bb1d88aa429ee8e927f5a1e1445685d8923cad92c90c79726d5e73dfe741de35498842cf51a4f09b97b1c14d33213705b95e84a8853fab4e1ced6faecea9d9203b038594bceb202a9d47f862c4f1853db9a0a7bf98ed9d2e3012358b38d092bd1ed7efb1a9e582ac5ef30c9b476e185f537f40ae8189528b480436122a939967e8d862e01172245ebced9f5251dd302e7e974c1db40be1e9e79799c27384caf6485e7c469b77cd6b28f71e39f84d2adbe074dd2bed6636e6853655adc3d1a47eff697e8edba53e6b281aea94798d82da7d3e86d09d869e5e345316eeeced4e15fc39234a0b0104e0b205c95eda632d0e86b095b284f441a62cb0e7262bc1967ee75f5c2d459011b0c15f4c85b02150a8834eda7f84cc96dde04e4abbdf5985a9c7218797820251b5804cae80c9a726afddf36793ae52cfb38e4e19740d6e07e4ed7c01001ab87b7fb12d5b70a75938d234c83d863b1763aec37b41d204fc319c6e802734ed681ea179fe6cad4857c3ca0e236e7b9867688d8bd7749e919f2d4f57f2249c9ccaf76a23760569b0fbde2db12ca0169e74982c1f4f0494aae13f4838b3f50d9ab0f6e328250d6fc34c0156e4b754c5c648b4ef8af32c91859f9706048f029634cefd0d767e8b7743262cb8a468ad37dfa47a745495e3f03cfa1d4ed71af55453c0a25fa1122a9054bcc4d9960c9a54f36b6db55154ab7dd19890d9f8ff3549e0fbd5a655319566b7f9c72be0242e7ffb59020356c3ffb5b9c43858e69d7b677a9bc5b8a64721a51b75a254e07199a73726834bea05901455ad53b38116b953c970b2002d0d1f91deb73ccb7266fbb21aa8555599daed7585575ef3efbd737f2523018ba4645d862889d5c3d91b12f04166db8bffecde54ee278d0d5351f3bf1f8902ff3f4c24a8c0c8a4e6addc9baadc471813589324d3128a1b193137c15c01be9f367317b1c885301ff8e9df728efa37df27f65eb0464055091f2ed469fdab48f413e3978f73ff9dffeb85453e841f86594612ac91b50add8d14910748bfa903033662f3e735ce6d299ce52338a96035aa89f63bd59d151fb20c38125236cbc0d795ac6f8da4cafc74714ed62a23b017e15adcaade58385b78c6945fb30a2539c42b1e415879433b9fb6966c6d19ed19f9f90cbd360d936a8b9f8e03bca5a83c063651b4636a7783bbda6417c83e470a16dfb115344a527436242ace9341432b5816b5e6609d97d600e142ca3cf74cbc00e1d9ee203cdfad339ce460b294f3931c5bd8ae6da8fc14d66a01bae4a212ef3d914e58c13217c8ad91628636b56257c7ca41b404cc2d4b5d50e26ebefc74656c62b1b4e9b6c5b6cc8d79101460f719d95925630bf99e042018439c50026513d680ea573620132ded57dea9e2da4e16f17dbc171642b1e80a3f41311ee73441302285668792160db6614fdb30d25a5719d2ae03ab98ea167597c48dd8197e7faf6189d801134462027901506c5ff1ae2558d96722217f65131d2f429693ae9fae19c101319473608976d08cc1c0d98f789b0c364e8aca574321ab2857af1015f1588afd313503085db4d99961a9391db06c10477ceb44199f1648594e8f9b452fafdab49b1962d02ee77ebd31b7931174a729fa943cb18102130e7e08eaba77df066069c2c3564fc85881ba0dad12c4f06a9e6dea9fea53931ff85e38505eb7ad60a52e2a8a248b3f4d0d55eee31f75f110c70e3b12409a79a5a98b0156c6d2a5d94604b8fa202b12746a365c708c671316cc0ffff6e9b7139b337953be22672a4910e1eb28cccc023b77028e20a6d377a339372f0dc235069f41c2692b0a3a7e0f315f4aebeef435a46b2e8b8462739293f9184c01b1434e87bf3fd48be54bf437056a1d2cff0c7aa52578013f96b1d5100ca936ff029cfd6f9a093621f684196ed7e1d363a97c647c34fe5f2370e7ab9dc718a1fc317779ab8a04bc12c01b778d17eea0b546bce03475fc6373c860714df0322dde550186c553ebd61ed18c0b80655f0827a63d209117ca23b026c1ad30bac4d43a4611292c7049f855b829a3a17fd2b83c142078beed8ca07b7cb7cd624705ccc160246c81174a4d3a9f2057caffe84b1ac073375e065c1ff4e9e22e7d87b3adb40ff796132e4ed86e5fc9f9616f8e4116be96497621692fb516e9316cfd15ad01742a1de4aa35fe02861236295823edf4c48fc37faf55226044e393a3733d58e8ef0f0c7941bc30f09739f37dea2f395f2e9e9b2c31a11923a2d6c9b14f1bacce15094cbbd6445f3581c6d45b76943b4d0db8fd4d4acbdb91780f57c872827abd7a1f13290a0d17dda220493476c92ce65e33f07afcf763aec0e67450f547101f1a5ada0f760c8f12137679324e22c7a13fdf78575115acb0ae4a2818b7b3ead27eea5eccba6f7a34c61819382eebfad742a3c603c6d2f332726996b3e8fcbdfd56b436c1173b1b3bc1ab66a717e31f2f918f0bea3f4801e04c14c881c59324fd9bc38745dd0e47da6bc8e98fe74a760304d74f17cd3cfceb33503397cf592d2b6a51b641d559ba8d6dc449e19b289fd1a4b3772b3998181e787723fe3893362d8f3e346c0ab0abe933e9bdd9a82b377914018377af9d2cbc58ab4fc08cea2623174239cea585603b8acd20da923a44799b1745c3bd65640508f96a0d92a6a2fd8314573f10b4f6e6cbf61e8828bd6e69b1b0c47f5795917a5035b3424dc3cadd2aadbbafb9d18349fab41d79ba13660f2c9400ff87784b26c3e88785db8522c93d3d4f12608736a235c8b9fff98a17934fe36792cb1992ea1b72b5e151cfe82b4ebc4f", 0xa19}], 0x1}, 0x0) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback, 0x8}}, {{0xa, 0x4e08, 0x40, @local, 0x4f1}}}, 0x108) (async) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000001a00)=ANY=[@ANYBLOB="03000000000000000a004e2300000010ff010000000000000000000000000001f8ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b0000000a004e2000000008fe8000000000000000000000000000aa05000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000010000000c0000000000000000000000000000000104000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ad94e2100000073fe8000000000000000000000000000aa"], 0x610) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r3 = socket(0xa, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) mkdir(0x0, 0x102) (async) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) fstat(r4, 0x0) prctl$PR_GET_DUMPABLE(0x3) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @mcast1, 0xfffffffe}}, {{0xa, 0x4e08, 0x4a3, @private2, 0x4f0}}}, 0x108) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000100)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f00001ca000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r5 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000340)=[@in={0x2, 0x4e23, @local}, @in={0x2, 0x4e24, @empty}], 0x20) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000040), &(0x7f00000001c0)=0x30) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) (async) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000060a09040000000000000000020000000900020073797a32000000000900010073797a3000000000200004801c0001800a00010071756575650000000c000280080004"], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 4.663767858s ago: executing program 7 (id=2157): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r0, 0x65, 0x3, &(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 64) r1 = socket$unix(0x1, 0x5, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) (async, rerun: 32) r3 = socket(0x10, 0x3, 0x0) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, r5, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x48050) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf19, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0xffff, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async, rerun: 32) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffbffff, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x11}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) (rerun: 32) 4.656507742s ago: executing program 7 (id=2158): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000280)) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000000)) 4.556239943s ago: executing program 7 (id=2159): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r1, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}], 0x1) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xa, @raw_data="3aee44a9c226a51c91d96d057945493d62731d82b7b243ac2b8c09e616fac25ae19d22dde9f23f852c3c3ccc3a9bd805898c9b2332eefd90a8a3ec23a13d253cf99691b813d8bfe75bfd83c66b56546b67a6d49ef1aa41cd5fb1faa24fd3f04c0551ed1ce90da7f3c55d1722a954283520a13b98bbbda5d490614b0b944b44d09086680a995a0ef055c7b45c50f7096e53c69a5af5d8af27a799d80635b87bb98d78c265cc91f11d80f3215cb8e27902ded8695717e1bc25acbcb5f28d2e5cddcd7b000000009cae"}) 3.781090535s ago: executing program 9 (id=2165): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r1, 0x1) recvfrom$inet(r1, 0x0, 0xfffffd4e, 0x41, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r2, 0x542e, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030500000025bd7000fcdbdf250200090040390000001cdc0dca1d9f6884030006000000000002004e230a0101020000000000000000020001000000000001000702010000400300050000000000020046200a0101020000000000000000010016004e2200000a00080010020000aad8b72cae1c5934e6d203463a7ec0e7711c95674d2735651db9051e7cff1d61a800b26f6e170037522ff58665fab99d6d6f010c0cfdee63df9631a0a45bc4f81af20000000000"], 0x7e2375007a013d15}, 0x1, 0x7}, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl(r4, 0x40405514, &(0x7f0000000200)="000000000200000000000000000000004c696e6520566f6c756d") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="123c94000c001c000800002bb210000000000800", @ANYRES32, @ANYBLOB="008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) ftruncate(0xffffffffffffffff, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, 0x0, 0x0, 0xf0ffff}, 0x20) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000000)=0x0) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x2, 0x6}, 0x1c) syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_tables_targets\x00') bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b000004000000b7a1af4b30d868fd0a4889afb60000000000090000000100833c311af870c7d66a3b2af83bee6dd9ecf0e980c610adabc246020c61ad564cda24b14be5040a77a861ad7022b7c0912236e40e8ceb404eda397708be4abd8355c31f931c57e88d4801ece015fb2648cd5ec7d52d1e1caa0529139bc46b9f2bbd665ece02905deba40c61dd010cb6fdeafb508f42762787eaa66b2a5c9c453288a2bd3c0ccc8fe96ad04e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = syz_open_procfs(0x0, &(0x7f0000000280)='fdinfo/4\x00') preadv(r8, &(0x7f0000000300)=[{&(0x7f00000001c0)=""/51, 0x33}], 0x1, 0x0, 0x0) r9 = socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="39000000140081ae10003c000500018311001f9f660fcf066505acb612f691f3bd3508abca1be6eeb89c44ebb37358582bdbb7d553b4e92155", 0x39}], 0x1}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r11, @ANYBLOB, @ANYRES32=r12, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000"], 0x80}}, 0x0) mq_notify(r2, &(0x7f0000000040)={0x0, 0x3, 0x2, @tid=r6}) 1.231230628s ago: executing program 7 (id=2167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xf, {[@global, @local=@item_4={0x3, 0x2, 0x0, "45501821"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000540), 0xffffffffffffffff, 0x400480) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000040)={0x3, 0x100, 0x7}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x400000f1, 0x0, 0xca}]}) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000980)=0x4000) mount(&(0x7f00000001c0)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='btrfs\x00', 0x4418, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000080)={0x1, 0x0, 0x40000006, 0x0}) setsockopt$llc_int(r1, 0x10c, 0x4, &(0x7f0000000400)=0x3c, 0x4) r9 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1.230503825s ago: executing program 3 (id=2168): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x9, &(0x7f0000000080)=[{0x0, 0x3, 0xd, 0x6}, {0x2a, 0x6, 0xd, 0x80000000}, {0x1000, 0xd, 0x13}, {0x0, 0xea, 0x77, 0x7}, {0xc37, 0x1, 0x37, 0x1}, {0x3ff, 0xd, 0x6, 0x1}, {0x8000, 0xaa, 0x0, 0x1}, {0xff, 0x1, 0x7, 0x3}, {0x1, 0x8, 0x3, 0xffffff6d}]}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r1, 0xc01864cd, &(0x7f00000002c0)={&(0x7f0000000240)=[r2], &(0x7f0000000280)=[0x5ea4c147], 0x1}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000100)={0x0, 0x80000}) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r1, 0xc02064cc, &(0x7f0000000180)={r2, r2, 0x7ff, 0x5, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 1.106171761s ago: executing program 3 (id=2170): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x402, 0x0) io_setup(0x222, &(0x7f0000000180)=0x0) io_submit(r1, 0x3, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x5, r0, &(0x7f0000000c00)="1c", 0x1, 0x200}, 0x0, 0x0]) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r3, 0x50dc85624ea6cf59, 0x0, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 1.044418401s ago: executing program 9 (id=2172): setuid(0xee00) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1d, 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="8520000004000000", @ANYRESOCT], &(0x7f0000000780)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0x8, &(0x7f00000001c0), 0x0) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000000000050009"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000180), 0x670401, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./dlmfs\x00', 0x0) mount(0x0, &(0x7f0000000700)='./dlmfs\x00', &(0x7f0000000740)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000780)='./dlmfs/mydomain\x00', 0x1b7) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r2, 0x407, 0x0) write$FUSE_INIT(r2, &(0x7f0000000340)={0x50, 0x2f, 0x0, {0x7, 0x29, 0x0, 0x800006, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1f, 0x0) write(r0, &(0x7f0000000480)='0x0', 0x3) 1.043906472s ago: executing program 3 (id=2173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x5f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/53, 0x35}], 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x19, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc041) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) ioctl$KDDELIO(r1, 0x4b34, 0x3bf) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r4, @ANYBLOB="080026040a000100000000000000000008000f0005"], 0x30}, 0x1, 0x0, 0x0, 0x240400c0}, 0x80c0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x5f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x10c}}, 0x0) (async) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) (async) rmdir(&(0x7f00000002c0)='./file2\x00') (async) chdir(&(0x7f0000000040)='./file0\x00') (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) (async) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0x20800, 0x0) (async) readv(r5, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/53, 0x35}], 0x1) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x19, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0x8ccdef3e8cce1dee}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYRES8=r0], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc041) (async) 916.478598ms ago: executing program 3 (id=2174): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='task\x00') lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r1, &(0x7f0000000040)=[{'IMIX', @val={' \'', 'Master Capture'}}], 0x2b) close(r1) getdents(r0, &(0x7f0000000180)=""/152, 0x98) r2 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r6 = epoll_create(0x1) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x9, 0x0, r6, r2, &(0x7f0000000040)={0x4000001a}}) io_uring_enter(r2, 0x2000, 0xfffffffd, 0x9, 0x0, 0x2000) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080), 0x40000, 0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, 0xee00) 844.680838ms ago: executing program 8 (id=2176): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000340)='blkio.bfq.idle_time\x00', 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{&(0x7f0000001640)=""/244, 0xf4}], 0x1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000400006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 844.258996ms ago: executing program 3 (id=2177): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000ff0000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 843.301183ms ago: executing program 3 (id=2178): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201fcffffff00407f04ffff000000000001090224000100000000090400000903000000092100000001222900090581030000000000"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r2 = eventfd2(0x7, 0x1) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000040)={0x0, r2}) 752.650455ms ago: executing program 8 (id=2179): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x10600, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r1, 0x0, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x66}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0xa}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x4c}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x16}]}, 0x60}, 0x1, 0x0, 0x0, 0x448d4}, 0x4008080) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000200)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xc0, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) write$selinux_validatetrans(r0, &(0x7f0000000500)={'system_u:object_r:tzdata_exec_t:s0', 0x20, 'system_u:object_r:update_modules_exec_t:s0', 0x20, 0x1, 0x20, '/sbin/dhclient\x00'}, 0x72) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000580)={0x0, 0x0, 0x5, 0x0, '\x00', [{0xa47, 0x7, 0x9, 0x7, 0x7, 0x6}, {0xfffffff7, 0x6, 0x7, 0x40, 0xffffffffffffffff, 0x9}], ['\x00', '\x00', '\x00', '\x00', '\x00']}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x82000, 0x0) ioctl$TUNGETSNDBUF(r6, 0x800454d3, &(0x7f00000007c0)) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000800)={'veth0_to_batadv\x00', 0x600}) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000880), r5) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000980)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x48, r7, 0x102, 0x70bd25, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040010}, 0x800) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000ac0)={0x0, 0x5, &(0x7f00000009c0)=[0xe, 0x24, 0xb, 0x2, 0x7], &(0x7f0000000a00)=[0x5, 0x10000, 0x5, 0x77, 0x4, 0x29a, 0x8, 0x1, 0xf22], 0x20, 0x2, 0x4, &(0x7f0000000a40)=[0x2, 0x7ff], &(0x7f0000000a80)=[0x5, 0x5]}) recvmmsg$unix(r0, &(0x7f0000001000)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b00)=""/233, 0xe9}, {&(0x7f0000000c00)=""/172, 0xac}], 0x2, &(0x7f0000000d00)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000000f80)=[{&(0x7f0000000dc0)=""/230, 0xe6}, {&(0x7f0000000ec0)=""/142, 0x8e}], 0x2, &(0x7f0000000fc0)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x18}}], 0x2, 0x40000040, &(0x7f0000001080)={0x0, 0x3938700}) ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f00000010c0)={0xd, 0x2, 0x1, {0x7, 0x200, 0x5b2, 0x9}}) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x34, r7, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x404a000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r9, 0x84, 0x6c, &(0x7f0000001200)={0x0, 0xac, "db9c336f65534f0e25029afc488acc7ec35a7acad90ed804d633f9d8fe3d8495455df203a910b5ffb1be13420147f086f13b5cb7c55c3bb7272d4841b5cd7c5ca67852a44d6aae14ffd8133f5c41300733f82bb0fd4dfde8f3525872d2a57a1731dd294698c1e0ddfb4ff81ed4c3b8310dbb0632880a7fb5b5800cab9381a8a7b0de1755c89864368f3153a9b3c4ce8cbaff19df6677074cf5630d9cde3dca8ff4afe8373a0bc192971c8b06"}, &(0x7f00000012c0)=0xb4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000001300)={0x8, 0x1, 0x548f17a8, 0x9, r10}, &(0x7f0000001340)=0x10) write$char_usb(r9, &(0x7f0000001380)="db29f4f46242a9e8fb910796d445ca3d28bc578b0fb62d304891bf9bfa896558e6effcfa067001cc936986c2f6549b52459301e4a6707a83072ade723b8ebd61836987e4cabe3b0737713e6e2bdad2074c6a61d4579e191a80d8ff427406f60f6c5a6695a60e6bd41cd4f0aa6eaa47ba17d8002534bfb398bc0fd01aea2c3e19fee33695193aea568759269b618a31f6ab0df73e8466c49a004422ad101ea9e1d13f0f98875373992275a513947ded848aceaf32603c43f8558813fbd53b47348e0ed403331d51082a9219d84c0bd770", 0xd0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r8, 0x117, 0x5, 0x0, 0x4) symlinkat(&(0x7f0000001480)='./file0\x00', r8, &(0x7f00000014c0)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x4, 0x12, &(0x7f0000001500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}]}, &(0x7f00000015c0)='GPL\x00', 0x7, 0x1e, &(0x7f0000001600)=""/30, 0x40f00, 0x8, '\x00', r3, @fallback=0xd, r9, 0x8, &(0x7f0000001640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000001680)={0x5, 0xa, 0xffffff01, 0x3}, 0x10, r4, r9, 0x5, &(0x7f00000016c0)=[r9], &(0x7f0000001700)=[{0x5, 0x5, 0x0, 0x7}, {0x2, 0x2, 0x8, 0x1}, {0x3, 0x5, 0x5, 0x7}, {0x5, 0x4, 0x4, 0x9}, {0x2, 0x1, 0x5, 0x7}], 0x10, 0x6}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001840)=@base={0x11, 0x1ff, 0xa, 0x8, 0x1000, 0x1, 0x7, '\x00', r3, r9, 0x5, 0x2, 0x2}, 0x50) setns(r9, 0x20000000) setsockopt$inet_int(r9, 0x0, 0x22, &(0x7f00000018c0)=0x6, 0x4) syz_clone(0x800000, &(0x7f0000001900)="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", 0x1000, &(0x7f0000002900), &(0x7f0000002940), &(0x7f0000002980)="3db2640ce0c09c33a708e0205fcae0337510ff0dd3403ac17c1494e2fcbae70355cdf12a386d636f73327de3ffbd3ffa392df1f5580b1bdf154444714f675e1fc91d8000cde93f3b2d30176e5cdfbc24928afe") ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000002a00)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PANTHOR_DEV_QUERY_TIMESTAMP_INFO(r11, 0xc0106440, &(0x7f0000002a80)={0x2, 0x3, &(0x7f0000002a40)}) 663.664631ms ago: executing program 8 (id=2180): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000280)={0xd, @raw_data="421efeeb5ad8529b0b06dba1f5d392ba39a2423ec981e48287c15b05d975db0478789d6fca20bb0e337b5fa40ac4166fd92584ca33c4470d05d5bb2dd381f0b7f3c8277dad1828089140a4ca9a9bb4797d15b70cee9269f9bbe269cd87efc45e37fb761c2fddedcbf956c4903b61ac4e61edd83acceffa59ee4fd4f3335e62b1fe9ed587fdff3e759fd0dd21e2e18922bf5994cd1887b7d501bb099fd3ee7bfde4e95a71b9ab39b7c9f735ec03d663f2a2bdcc676a7328fa2fe86065e950864aae8755fd2db4586f"}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x4000850) (async) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x4800, 0x0) (async) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000000280)={0xd, @raw_data="421efeeb5ad8529b0b06dba1f5d392ba39a2423ec981e48287c15b05d975db0478789d6fca20bb0e337b5fa40ac4166fd92584ca33c4470d05d5bb2dd381f0b7f3c8277dad1828089140a4ca9a9bb4797d15b70cee9269f9bbe269cd87efc45e37fb761c2fddedcbf956c4903b61ac4e61edd83acceffa59ee4fd4f3335e62b1fe9ed587fdff3e759fd0dd21e2e18922bf5994cd1887b7d501bb099fd3ee7bfde4e95a71b9ab39b7c9f735ec03d663f2a2bdcc676a7328fa2fe86065e950864aae8755fd2db4586f"}) (async) socket(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@gettaction={0x18, 0x32, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}}, 0x800) (async) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) (async) 604.529189ms ago: executing program 8 (id=2181): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x1}], 0x1}, 0x2401c041) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r4, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4) bind$inet(r4, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debug/lru_gen\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='# 1 0 0', 0x7) ioctl$PIO_UNIMAP(r5, 0x4b67, &(0x7f0000000080)={0x8, &(0x7f0000000040)=[{0x2, 0x6}, {0xfff7, 0x80}, {0x10, 0x40}, {0x2b90, 0x5}, {0x1ff}, {0x80, 0x3}, {0x9aa, 0x4}, {0x7, 0x490}]}) r6 = syz_open_dev$dvb_demux(&(0x7f0000000000), 0x0, 0x141200) ioctl$DVB_DEMUX_DMX_GET_PES_PIDS(r6, 0x800a6f2f, &(0x7f0000000100)) recvmmsg(r4, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) 476.292638ms ago: executing program 8 (id=2182): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x93818f54be748ec5) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000000c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x2, r4, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r1, 0x3b89, &(0x7f0000000040)={0x28, 0x1, r5, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000780)={0x0, 0x80, 0x1, 'queue0\x00', 0x101}) 395.002401ms ago: executing program 8 (id=2183): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) listen(0xffffffffffffffff, 0x8b) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e20, @broadcast}], 0x10) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$P9_RREAD(r1, &(0x7f00000009c0)={0xb, 0x75, 0x1}, 0xb) r2 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000000c0)={0x0, @reserved}) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0x10001, 0x2) 119.170836ms ago: executing program 9 (id=2184): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x16c, 0x10, 0x713, 0x2, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20, 0x0, 0x4e21, 0x202, 0x2, 0x20, 0x0, 0x6c, 0x0, 0xee00}, {@in6=@remote, 0xfc, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x0, 0x0, 0xc, 0x8, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0x2, 0x4, 0x0, 0x10}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @encap={0x1c, 0x4, {0x2, 0x4e24, 0x4e24, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}}}]}, 0x16c}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd27, 0x20000000, {0x0, 0x0, 0x0, 0x0, 0x631df, 0x100}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5}, @IFLA_BOND_AD_LACP_RATE={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) 0s ago: executing program 9 (id=2185): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f00000000c0)) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000040), 0x0, 0x100) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000200)={0x2f, &(0x7f0000000080)=[{0x4, '\x00', @st={0x4, [{0x2, @svalue=0x8}, {0x0, @uvalue=0x3}, {0x3, @svalue=0x9}, {0x2, @svalue=0x77f75780}]}}]}) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000040000701feffffff02000000017c00000c00018006b4d24b9a0a00000800028004"], 0x28}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000040)="d80000001a0081044e81f782db4cb904021d08007b490d4f1e81f8d815001000ff05143a13600e12080005007a010401a80016002000034004", 0x39}], 0x1}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[], 0xfe33) open(&(0x7f00000002c0)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x241, 0x1ff) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000380)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdir(&(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) r2 = open(0x0, 0x241, 0x1ff) write(r2, &(0x7f0000000540)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000600)='720', 0x3) r3 = open(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/dwMaxVideoFrameBufferSize\x00', 0x241, 0x1ff) write(r3, &(0x7f00000006c0)='1843', 0x4) write(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x4010744d, &(0x7f0000000000)=0x20000002) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f00000000c0), 0xfdef) splice(r5, 0x0, r6, 0x0, 0x80, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000100)={'veth1_to_bridge\x00', 0x1000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x18, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r4, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file3\x00', 0x105042, 0x0) kernel console output (not intermixed with test programs): ttyUSB0: metrousb_open - failed to configure device, error code=-8 [ 205.713732][T11649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.718441][T11649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.733761][ T5821] usb 13-1: USB disconnect, device number 2 [ 205.765396][ T5821] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 205.769933][ T5820] usb 12-1: new high-speed USB device number 6 using dummy_hcd [ 205.777646][ T5821] metro_usb 13-1:100.173: device disconnected [ 205.884658][ T5732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 205.895915][ T5732] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 205.899160][ T5732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 205.902723][ T5732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.909600][ T5732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.910193][ T5820] usb 12-1: device descriptor read/64, error -71 [ 206.019740][ T5820] usb usb12-port1: attempt power cycle [ 206.109547][ T5821] usb 13-1: new high-speed USB device number 3 using dummy_hcd [ 206.209509][ T5774] net_ratelimit: 32 callbacks suppressed [ 206.209525][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 206.260433][ T5821] usb 13-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 206.264441][ T5821] usb 13-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 206.267422][ T5821] usb 13-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 206.271583][ T5821] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 206.274477][ T5821] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 206.277992][ T5821] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 206.285866][ T5821] usb 13-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 206.288437][ T5821] usb 13-1: Product: syz [ 206.290072][ T5821] usb 13-1: Manufacturer: syz [ 206.296845][ T5821] cdc_wdm 13-1:1.0: skipping garbage [ 206.298952][ T5821] cdc_wdm 13-1:1.0: skipping garbage [ 206.302280][ T5821] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device [ 206.304232][ T5821] cdc_wdm 13-1:1.0: Unknown control protocol [ 206.321705][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 206.324805][T11656] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.327775][T11656] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.331428][T11656] bridge_slave_0: entered allmulticast mode [ 206.335203][T11656] bridge_slave_0: entered promiscuous mode [ 206.340253][T11656] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.342871][T11656] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.345584][T11656] bridge_slave_1: entered allmulticast mode [ 206.349316][T11656] bridge_slave_1: entered promiscuous mode [ 206.369772][ T5820] usb 12-1: new high-speed USB device number 7 using dummy_hcd [ 206.380314][T11656] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.386621][T11656] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.390910][ T5820] usb 12-1: device descriptor read/8, error -71 [ 206.414560][T11656] team0: Port device team_slave_0 added [ 206.419161][T11656] team0: Port device team_slave_1 added [ 206.443366][T11656] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.445795][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.455079][T11656] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.460416][T11656] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.462996][T11656] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 206.471948][T11656] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.495823][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 206.495837][ T42] audit: type=1400 audit(1786884336.776:10633): avc: denied { getopt } for pid=11652 comm="syz.8.1535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 206.504000][T11656] hsr_slave_0: entered promiscuous mode [ 206.504510][T11656] hsr_slave_1: entered promiscuous mode [ 206.508637][T11656] debugfs: 'hsr0' already exists in 'hsr' [ 206.511254][T11656] Cannot create hsr debugfs directory [ 206.629451][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 206.639494][ T5820] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 206.646579][T11656] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 206.651622][T11656] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 206.654432][T11656] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 206.658234][T11656] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 206.661391][T11656] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 206.670118][ T5820] usb 12-1: device descriptor read/8, error -71 [ 206.672331][T11656] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 206.675244][T11656] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 206.682770][T11656] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 206.704755][T11656] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.707055][T11656] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.709474][T11656] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.710955][ T9] usb 13-1: USB disconnect, device number 3 [ 206.711695][T11656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.739787][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 206.763483][T11656] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.775192][T11656] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.778703][ T7091] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.779940][ T5820] usb usb12-port1: unable to enumerate USB device [ 206.785212][ T7091] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.797499][ T7091] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.799822][ T7091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.808052][ T7091] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.810369][ T7091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.869648][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 206.979558][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 207.089538][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 207.104582][T11656] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.199565][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 207.280699][T11656] veth0_vlan: entered promiscuous mode [ 207.287292][T11656] veth1_vlan: entered promiscuous mode [ 207.316068][T11656] veth0_macvtap: entered promiscuous mode [ 207.328162][T11656] veth1_macvtap: entered promiscuous mode [ 207.346199][T11656] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.352333][T11656] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 207.366425][T11700] serio: Serial port ptm0 [ 207.369611][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 207.379527][ T5800] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.382764][ T5800] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.385581][ T5800] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.434296][ T5800] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.488024][ T7086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.491611][ T7086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.506551][ T7084] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 207.509175][ T7084] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 207.513724][T11700] serio: Serial port ptm0 [ 207.521668][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 207.629898][ T5724] Bluetooth: hci0: command tx timeout [ 207.809501][ T848] usb 14-1: new high-speed USB device number 2 using dummy_hcd [ 207.949666][ T5724] Bluetooth: hci5: command tx timeout [ 207.970326][ T848] usb 14-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 207.974806][ T848] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.978106][ T848] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 207.983217][ T848] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.986307][ T848] usb 14-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 207.991356][ T848] usb 14-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 207.995423][ T848] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.003613][T11704] raw-gadget.6 gadget.9: fail, usb_ep_enable returned -22 [ 208.010939][ T848] keyspan 14-1:1.0: Keyspan 2 port adapter converter detected [ 208.017664][ T848] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 84 [ 208.020428][ T848] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 2 [ 208.024701][ T848] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 208.034394][ T848] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 88 [ 208.040425][ T848] keyspan 14-1:1.0: found no endpoint descriptor for endpoint 6 [ 208.049092][ T848] usb 14-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 208.270222][T11566] usbtmc 8-1:16.0: stb usb_control_msg returned -110 [ 208.293383][ T8145] usb 8-1: USB disconnect, device number 24 [ 208.360396][ T848] usb 13-1: new high-speed USB device number 4 using dummy_hcd [ 208.367143][T11030] usb 14-1: USB disconnect, device number 2 [ 208.377903][T11030] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 208.408376][T11030] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 208.416047][T11030] keyspan 14-1:1.0: device disconnected [ 208.443381][T11736] TCP: TCP_TX_DELAY enabled [ 208.532270][ T848] usb 13-1: Using ep0 maxpacket: 32 [ 208.538014][ T848] usb 13-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 208.544270][ T848] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.549554][ T848] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.557899][ T848] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 208.565756][ T848] usb 13-1: New USB device strings: Mfr=229, Product=129, SerialNumber=131 [ 208.568621][ T848] usb 13-1: Product: syz [ 208.571692][ T848] usb 13-1: Manufacturer: syz [ 208.575396][ T848] usb 13-1: SerialNumber: syz [ 208.590333][ T848] input: appletouch as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:1.0/input/input15 [ 208.779660][ T8145] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 208.901890][T11743] jffs2: notice: (11743) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 208.907687][T11743] jffs2: fork failed for JFFS2 garbage collect thread: -EINTR [ 208.929844][ T8145] usb 8-1: Using ep0 maxpacket: 16 [ 208.940261][ T8145] usb 8-1: unable to get BOS descriptor or descriptor too short [ 208.944949][ T8145] usb 8-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 208.955657][ T8145] usb 8-1: config 1 has an invalid interface number: 232 but max is 0 [ 208.962244][ T8145] usb 8-1: config 1 has no interface number 0 [ 208.964247][ T8145] usb 8-1: config 1 interface 232 altsetting 93 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 208.972469][ T8145] usb 8-1: config 1 interface 232 altsetting 93 endpoint 0xE has invalid wMaxPacketSize 0 [ 208.979510][ T8145] usb 8-1: config 1 interface 232 has no altsetting 0 [ 208.992964][ T8145] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.999657][ T8145] usb 8-1: Product: syz [ 209.001119][ T8145] usb 8-1: Manufacturer: syz [ 209.004508][ T9991] usb 13-1: USB disconnect, device number 4 [ 209.006465][ T8145] usb 8-1: SerialNumber: syz [ 209.055894][ T9991] appletouch 13-1:1.0: input: appletouch disconnected [ 209.089384][T11760] input: 2m as /devices/virtual/input/input16 [ 209.167746][T11768] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 209.171592][ T848] IPVS: starting estimator thread 0... [ 209.219399][T11736] tcf_pedit_act: 7 callbacks suppressed [ 209.219412][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.225202][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.227932][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.230720][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.233534][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.236291][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.238965][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.241778][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.244545][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.247218][T11736] tc action pedit unable to extract header offset for header type (0x4) [ 209.258272][ T8145] hub 8-1:1.232: bad descriptor, ignoring hub [ 209.260793][ T8145] hub 8-1:1.232: probe with driver hub failed with error -5 [ 209.263766][ T8145] option 8-1:1.232: GSM modem (1-port) converter detected [ 209.274914][T11771] IPVS: using max 43 ests per chain, 103200 per kthread [ 209.288932][T11769] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.298906][ T8145] usb 8-1: USB disconnect, device number 25 [ 209.304415][ T8145] option 8-1:1.232: device disconnected [ 209.448941][T11773] kvm: emulating exchange as write [ 209.500349][T11769] block nbd7: shutting down sockets [ 209.692960][T11794] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input17 [ 209.782482][T11800] sg_write: data in/out 808464396/14 bytes for SCSI command 0x0-- guessing data in; [ 209.782482][T11800] program syz.8.1566 not setting count and/or reply_len properly [ 209.876067][T11803] netlink: 'syz.3.1567': attribute type 10 has an invalid length. [ 209.879008][T11803] lapb2: left allmulticast mode [ 209.931431][ T42] audit: type=1400 audit(1786884340.206:10634): avc: denied { write } for pid=11804 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.988270][T11819] netlink: 'syz.7.1571': attribute type 26 has an invalid length. [ 209.997065][ T42] audit: type=1400 audit(1786884340.276:10635): avc: denied { write } for pid=11815 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.031592][ T5724] Bluetooth: hci5: command tx timeout [ 210.113000][ T42] audit: type=1400 audit(1786884340.396:10636): avc: denied { write } for pid=11824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.197027][ T42] audit: type=1400 audit(1786884340.476:10637): avc: denied { write } for pid=11834 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.259419][ T42] audit: type=1400 audit(1786884340.536:10638): avc: denied { write } for pid=11836 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.337093][ T42] audit: type=1400 audit(1786884340.616:10639): avc: denied { write } for pid=11841 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.396611][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1575'. [ 210.399628][ T50] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 210.552404][ T50] usb 12-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 210.557370][ T50] usb 12-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 210.563091][ T50] usb 12-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 210.573159][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.576417][ T50] usb 12-1: Product: syz [ 210.577883][ T50] usb 12-1: Manufacturer: syz [ 210.580381][ T50] usb 12-1: SerialNumber: syz [ 210.595166][T11846] kvm: kvm [11845]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 210.607876][T11846] kvm: kvm [11845]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 210.635923][ T8145] usb 12-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 210.656189][T11851] hugetlbfs: Bad value 'x' for mount option 'size' [ 210.656189][T11851] [ 210.663686][ T42] audit: type=1400 audit(1786884340.936:10640): avc: denied { remount } for pid=11850 comm="syz.8.1578" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 210.802987][T11854] netlink: 'syz.8.1579': attribute type 21 has an invalid length. [ 210.813551][T11854] netlink: 'syz.8.1579': attribute type 6 has an invalid length. [ 210.821462][T11854] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1579'. [ 210.838883][ T42] audit: type=1326 audit(1786884341.116:10641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11853 comm="syz.8.1579" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbca99e0d9 code=0x0 [ 210.862283][ T50] usb 12-1: USB disconnect, device number 9 [ 210.903415][T11858] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1579'. [ 210.906977][ T42] audit: type=1400 audit(1786884341.186:10642): avc: denied { map } for pid=11853 comm="syz.8.1579" path="/proc/70/attr/current" dev="proc" ino=53524 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 210.916615][T11858] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1579'. [ 211.028890][T11871] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1585'. [ 211.109281][T11873] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1586'. [ 211.113073][T11873] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.115479][T11873] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.118845][T11873] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.121703][T11873] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.169515][ T1354] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 211.259498][ T5800] net_ratelimit: 33 callbacks suppressed [ 211.259537][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 211.288211][T11878] Option 'Í'M•O§±' to dns_resolver key: bad/missing value [ 211.320283][ T1354] usb 8-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 211.324369][ T1354] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 64 [ 211.327497][ T1354] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 64 [ 211.330698][ T1354] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 211.334378][ T1354] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 211.338214][ T1354] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 64 [ 211.342282][ T1354] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xD has invalid maxpacket 64 [ 211.346690][ T1354] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 211.349313][ T1354] usb 8-1: Product: syz [ 211.350767][ T1354] usb 8-1: Manufacturer: syz [ 211.356873][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.360609][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.363312][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.365918][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.368467][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.370928][T11860] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 211.370947][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 211.375673][ T1354] usb 8-1: USB2VGA dongle found at address 26 [ 211.392801][ T1354] usb 8-1: Allocated 8 output buffers [ 211.397476][ T5724] Bluetooth: Frame is too long (len 34, expected len 4) [ 211.399870][ T1354] usb 8-1: Failed to early initialize device [ 211.489505][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 211.585168][T11860] usb 8-1: Failed to initialize device [ 211.589130][T11860] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 211.593853][ T9991] usb 8-1: USB disconnect, device number 26 [ 211.609479][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 211.709697][ T8145] ath9k_htc 12-1:1.0: ath9k_htc: Target is unresponsive [ 211.714890][ T8145] ath9k_htc: Failed to initialize the device [ 211.720377][ T50] usb 12-1: ath9k_htc: USB layer deinitialized [ 211.732097][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 211.790465][T11895] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1592'. [ 211.994793][T11906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.999443][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 212.019632][ T50] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 212.099527][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 212.120403][ T5724] Bluetooth: hci5: command tx timeout [ 212.167063][T11908] xs_local_setup_socket: unhandled error (13) connecting to /var/run/gssproxy.sock [ 212.169537][ T50] usb 12-1: Using ep0 maxpacket: 32 [ 212.173504][ T50] usb 12-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 212.178205][ T50] usb 12-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 212.184788][ T50] usb 12-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 212.195682][ T50] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.199022][ T50] usb 12-1: Product: syz [ 212.200905][ T50] usb 12-1: Manufacturer: syz [ 212.202682][ T50] usb 12-1: SerialNumber: syz [ 212.209509][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 212.232781][ T50] ldusb 12-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 212.266982][T11911] CIFS: Attempting to mount //::1/share [ 212.320817][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 212.402154][T11915] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1598'. [ 212.424805][T11831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.429667][T11831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.435645][ T50] usb 12-1: USB disconnect, device number 10 [ 212.438115][ C3] ldusb 12-1:1.0: usb_submit_urb failed (-19) [ 212.440113][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 212.448237][ T50] ldusb 12-1:1.0: LD USB Device #0 now disconnected [ 212.525255][ T42] kauditd_printk_skb: 3 callbacks suppressed [ 212.525269][ T42] audit: type=1400 audit(1786884342.806:10646): avc: denied { accept } for pid=11917 comm="syz.9.1599" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 212.585011][ T42] audit: type=1400 audit(1786884342.866:10647): avc: denied { bind } for pid=11921 comm="syz.8.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 212.602382][ T42] audit: type=1400 audit(1786884342.866:10648): avc: denied { setopt } for pid=11921 comm="syz.8.1601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 212.641811][T11831] ldusb: No device or device unplugged -19 [ 212.713355][ T42] audit: type=1400 audit(1786884342.996:10649): avc: denied { setopt } for pid=11927 comm="syz.8.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 212.722296][T11928] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1603'. [ 212.752556][ T42] audit: type=1400 audit(1786884343.036:10650): avc: denied { write } for pid=11927 comm="syz.8.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 212.758925][T11928] futex_wake_op: syz.8.1603 tries to shift op by -1; fix this program [ 212.883405][T11936] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 212.941829][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1607'. [ 212.949901][ T42] audit: type=1400 audit(1786884343.236:10651): avc: denied { write } for pid=11941 comm="syz.8.1608" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 212.965034][T11942] fuse: Unknown parameter 'g€' [ 213.072436][T11951] Driver unsupported XDP return value 0 on prog (id 169) dev N/A, expect packet loss! [ 213.106100][T11911] CIFS: VFS: Error connecting to socket. Aborting operation. [ 213.108535][T11911] CIFS: VFS: cifs_mount failed w/return code = -4 [ 213.121290][T11954] sit1: entered promiscuous mode [ 213.135996][T11949] 9pnet_virtio: no channels available for device syz [ 213.254814][T11965] jffs2: notice: (11965) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 213.264632][ T42] audit: type=1400 audit(1786884343.546:10652): avc: denied { setattr } for pid=11964 comm="syz.3.1617" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 213.275458][ T5724] Bluetooth: hci3: unexpected event for opcode 0x0c2d [ 213.418166][T11989] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 213.420645][T11990] xt_TCPMSS: Only works on TCP SYN packets [ 213.423413][T11990] Bluetooth: MGMT ver 1.23 [ 213.585991][T11996] netlink: 'syz.7.1625': attribute type 10 has an invalid length. [ 213.618899][T11996] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.623537][T11996] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 213.752112][T12002] erspan1: entered promiscuous mode [ 214.069445][ T848] usb 14-1: new high-speed USB device number 3 using dummy_hcd [ 214.105013][T12009] ieee802154 phy0 wpan0: encryption failed: -22 [ 214.189899][ T5724] Bluetooth: hci5: command tx timeout [ 214.196223][T12013] trusted_key: encrypted_key: hex blob is missing [ 214.229870][ T848] usb 14-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 214.233919][ T848] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.237474][ T848] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.242837][ T848] usb 14-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 214.249102][ T848] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.256520][ T848] usb 14-1: config 0 descriptor?? [ 214.444477][ T42] audit: type=1400 audit(1786884344.726:10653): avc: denied { map } for pid=11991 comm="syz.7.1625" path="socket:[53821]" dev="sockfs" ino=53821 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 214.590357][ C2] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 214.665844][ T848] hid_parser_main: 18 callbacks suppressed [ 214.665865][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.681188][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.684396][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.687511][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.691678][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.696810][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.701790][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.706087][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.711870][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.717328][ T848] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 214.736536][ T848] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.9-1/input0 [ 214.760368][ T10] usb 13-1: new high-speed USB device number 5 using dummy_hcd [ 214.864004][ T7599] usb 14-1: USB disconnect, device number 3 [ 214.921023][ T10] usb 13-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 214.926268][ T10] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.945462][ T10] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 214.949757][ T10] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 214.953888][ T10] usb 13-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 214.959236][ T10] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.971706][T12020] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 214.974570][T12020] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 214.978089][ T10] keyspan 13-1:1.0: Keyspan 2 port adapter converter detected [ 214.982628][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 84 [ 214.987978][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 2 [ 214.995401][ T10] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 215.002639][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 88 [ 215.009033][ T10] keyspan 13-1:1.0: found no endpoint descriptor for endpoint 6 [ 215.012368][ T10] usb 13-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 215.182068][ T42] audit: type=1400 audit(1786884345.466:10654): avc: denied { read } for pid=12019 comm="syz.8.1636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 215.418231][T12043] qnx6: unable to set blocksize [ 215.468559][T12048] sctp: [Deprecated]: syz.3.1643 (pid 12048) Use of int in maxseg socket option. [ 215.468559][T12048] Use struct sctp_assoc_value instead [ 215.733339][T12063] netlink: 'syz.3.1648': attribute type 12 has an invalid length. [ 216.279528][ T8496] net_ratelimit: 34 callbacks suppressed [ 216.279543][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 216.399580][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 216.522373][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 216.640523][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 216.702730][ T42] audit: type=1400 audit(1786884346.986:10655): avc: denied { ioctl } for pid=12125 comm="syz.9.1656" path="/40/my_tracefs/events/task/task_rename/filter" dev="tracefs" ino=19680823 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 216.755274][T12131] syzkaller1: entered allmulticast mode [ 216.819610][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 216.916178][T12139] __nla_validate_parse: 8 callbacks suppressed [ 216.916192][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1662'. [ 216.925203][T12139] openvswitch: netlink: Missing key (keys=40, expected=80) [ 216.929635][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 216.974896][T12141] netlink: 52 bytes leftover after parsing attributes in process `syz.9.1663'. [ 216.996180][T12145] loop6: detected capacity change from 0 to 2640 [ 217.007647][T12145] buffer_io_error: 11 callbacks suppressed [ 217.007665][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.014679][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.018695][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.022118][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.025288][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.028453][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.032181][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.035449][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.041811][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 217.042343][T12145] ldm_validate_partition_table(): Disk read failed. [ 217.051670][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.056783][T12145] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.061298][T12145] Dev loop6: unable to read RDB block 0 [ 217.064562][T12145] loop6: unable to read partition table [ 217.068454][T12145] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 217.102677][ T5135] ldm_validate_partition_table(): Disk read failed. [ 217.105379][ T5135] Dev loop6: unable to read RDB block 0 [ 217.107563][ T5135] loop6: unable to read partition table [ 217.127398][T12154] program syz.9.1668 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.154716][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 217.299550][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 217.354281][T12175] SELinux: Context system_u:object_r:sshd_key_t:s0 is not valid (left unmapped). [ 217.587163][T12183] block2mtd: too many arguments [ 217.597754][T12183] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1676'. [ 217.751860][T11030] usb 13-1: USB disconnect, device number 5 [ 217.756118][T11030] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 217.775407][T11030] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 217.798843][ T5774] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 217.807233][T11030] keyspan 13-1:1.0: device disconnected [ 217.823446][T12193] tmpfs: Unknown parameter './binderfs/binder0' [ 217.921707][T12204] netlink: 'syz.7.1683': attribute type 9 has an invalid length. [ 217.925394][T12203] netlink: 'syz.7.1683': attribute type 9 has an invalid length. [ 217.974923][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1685'. [ 217.989425][T12211] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1685'. [ 218.005937][T12220] loop5: detected capacity change from 0 to 7 [ 218.020355][T12220] Dev loop5: unable to read RDB block 7 [ 218.024656][T12220] loop5: AHDI p1 p2 p3 [ 218.026033][T12220] loop5: partition table partially beyond EOD, truncated [ 218.033187][T12226] gfs2: not a GFS2 filesystem [ 218.040943][T12220] loop5: p1 start 1601398130 is beyond EOD, truncated [ 218.044237][T12220] loop5: p2 start 1702059890 is beyond EOD, truncated [ 218.067433][ T42] audit: type=1400 audit(1786884348.346:10656): avc: denied { append } for pid=12228 comm="syz.9.1692" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 218.130471][ T42] audit: type=1400 audit(1786884348.416:10657): avc: denied { attach_queue } for pid=12237 comm="syz.9.1693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 218.189228][T12244] binder: 12242:12244 ioctl 400c620e 200000000180 returned -22 [ 218.259520][ T8145] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 218.303271][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1699'. [ 218.393432][T12268] can0: slcan on ttyS3. [ 218.408491][T12269] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=258 sclass=netlink_xfrm_socket pid=12269 comm=syz.9.1702 [ 218.409873][ T8145] usb 8-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 218.416805][ T8145] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.422732][ T8145] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.452785][ T8145] as10x_usb: device has been detected [ 218.454847][ T8145] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 218.464709][T12267] can0 (unregistered): slcan off ttyS3. [ 218.478357][ T8145] usb 8-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 218.499560][ T8145] as10x_usb: error during firmware upload part1 [ 218.501966][ T8145] Registered device Abilis Systems DVB-Titan [ 218.513047][T12274] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 218.518314][T12274] netlink: 'syz.8.1705': attribute type 1 has an invalid length. [ 218.530015][ T7599] usb 12-1: new high-speed USB device number 11 using dummy_hcd [ 218.537072][T12274] bond1: option mode: invalid value (7) [ 218.540909][T12274] bond1 (unregistering): Released all slaves [ 218.638606][T12274] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input18 [ 218.696344][ T7599] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.700524][ T7599] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.704041][ T7599] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.707158][ T7599] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 218.711354][ T7599] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.718278][ T7599] usb 12-1: config 0 descriptor?? [ 218.897468][T12301] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1711'. [ 218.993644][T12303] i2c i2c-1: dtv_property_process_set: SET cmd 0x0000007a undefined [ 219.148337][ T7599] plantronics 0003:047F:FFFF.0009: hiddev1,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 219.210896][T12324] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:0 [ 219.340049][ T8145] usb 12-1: USB disconnect, device number 11 [ 219.396022][T12329] vim2m vim2m.0: vidioc_s_fmt queue busy [ 219.571641][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 219.586551][T12336] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1720'. [ 219.666935][T12344] block2mtd: too many arguments [ 219.696356][T12347] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1724'. [ 219.699310][T12348] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1724'. [ 220.244619][T12223] [U]  [ 220.247301][ T8145] usb 8-1: USB disconnect, device number 27 [ 220.262100][ T8145] Unregistered device Abilis Systems DVB-Titan [ 220.263402][ T8145] as10x_usb: device has been disconnected [ 220.570505][T12359] random: crng reseeded on system resumption [ 220.733204][ T42] audit: type=1400 audit(1786884351.016:10658): avc: denied { write } for pid=12366 comm="syz.9.1730" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 220.809450][ T42] audit: type=1400 audit(1786884351.096:10659): avc: denied { write } for pid=12384 comm="syz.3.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 220.918402][T12394] netlink: 'syz.9.1739': attribute type 1 has an invalid length. [ 220.948427][T12394] 8021q: adding VLAN 0 to HW filter on device bond1 [ 221.023286][T12402] NILFS (nullb0): couldn't find nilfs on the device [ 221.160444][T12410] CIFS mount error: No usable UNC path provided in device string! [ 221.160444][T12410] [ 221.169218][T12410] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 221.176288][T12413] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(6) [ 221.178450][T12413] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.181006][T12412] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(3) [ 221.183128][T12412] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 221.186968][T12409] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.187186][T12412] vhci_hcd vhci_hcd.0: Device attached [ 221.188318][T12413] vhci_hcd vhci_hcd.0: Device attached [ 221.204157][ T5807] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 221.209691][T12414] vhci_hcd: connection closed [ 221.209786][T12416] vhci_hcd: connection closed [ 221.214578][ T5800] vhci_hcd vhci_hcd.9: stop threads [ 221.220802][ T5800] vhci_hcd vhci_hcd.9: release socket [ 221.222565][ T5800] vhci_hcd vhci_hcd.9: disconnect device [ 221.227597][ T5800] vhci_hcd vhci_hcd.9: stop threads [ 221.229603][ T5800] vhci_hcd vhci_hcd.9: release socket [ 221.231537][ T5800] vhci_hcd vhci_hcd.9: disconnect device [ 221.289035][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.303974][T12409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.350433][ T5807] usb 13-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 221.356042][ T5807] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.360756][ T5807] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.364907][ T5807] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 221.369683][ T5807] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.374592][ T5807] usb 13-1: config 0 descriptor?? [ 221.408783][T12409] gre1: left promiscuous mode [ 221.412097][T12409] gre1: left allmulticast mode [ 221.449648][ T8496] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.452589][ T8496] netdevsim netdevsim7 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.455559][ T8496] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.458371][ T8496] netdevsim netdevsim7 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.462161][ T8496] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.465290][ T8496] netdevsim netdevsim7 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.468136][ T8496] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.472493][ T8496] netdevsim netdevsim7 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 221.499698][ T8496] net_ratelimit: 33 callbacks suppressed [ 221.499722][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 221.580389][T12398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.583281][T12398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.589754][T12437] block2mtd: error: cannot open device /dev/loop0 [ 221.592100][T12437] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 221.596281][T12437] block2mtd: error: cannot open device /dev/loop0 [ 221.598462][T12439] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 221.619997][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 221.694191][T12445] random: crng reseeded on system resumption [ 221.730349][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 221.772539][ T42] audit: type=1400 audit(1786884352.056:10660): avc: denied { shutdown } for pid=12450 comm="syz.9.1755" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 221.840851][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 221.950326][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 222.043044][T12460] __nla_validate_parse: 1 callbacks suppressed [ 222.043106][T12460] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1740'. [ 222.059571][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 222.077637][ T42] audit: type=1400 audit(1786884352.356:10661): avc: denied { write } for pid=12461 comm="syz.9.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 222.129561][T12468] tmpfs: User quota block hardlimit too large. [ 222.169616][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 222.282531][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 222.390466][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 222.501493][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 222.596252][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.613955][T12493] bridge_slave_0 (unregistering): left allmulticast mode [ 222.616239][T12493] bridge_slave_0 (unregistering): left promiscuous mode [ 222.618439][T12493] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.629915][T12496] 9pnet_virtio: no channels available for device syz [ 222.679411][T12498] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 223.049770][ T41] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 223.199614][ T41] usb 8-1: Using ep0 maxpacket: 8 [ 223.203762][ T41] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.210804][ T41] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 223.215945][ T41] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.225137][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.229974][ T41] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.233148][ T41] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.237247][ T41] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.250627][ T5807] usbhid 13-1:0.0: can't add hid device: -71 [ 223.252824][ T5807] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 223.263286][ T5807] usb 13-1: USB disconnect, device number 6 [ 223.447073][ T41] usb 8-1: usb_control_msg returned -32 [ 223.448960][ T41] usbtmc 8-1:16.0: can't read capabilities [ 223.699988][ T42] audit: type=1400 audit(1786884353.986:10662): avc: denied { accept } for pid=12523 comm="syz.7.1776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 223.799510][T11030] usb 14-1: new high-speed USB device number 4 using dummy_hcd [ 223.827223][T12526] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2064 sclass=netlink_route_socket pid=12526 comm=syz.7.1777 [ 223.929486][T11030] usb 14-1: device descriptor read/64, error -71 [ 224.000714][T12533] jffs2: notice: (12533) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 4 of xref (0 dead, 0 orphan) found. [ 224.077214][T12540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.084266][T12540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.161947][T12542] usbtmc 8-1:16.0: usb_control_msg returned -32 [ 224.170176][ T41] hid_parser_main: 66 callbacks suppressed [ 224.170197][ T41] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 224.180129][T11030] usb 14-1: new high-speed USB device number 5 using dummy_hcd [ 224.180859][ T41] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz1] on syz0 [ 224.299497][ T5807] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 224.319485][T11030] usb 14-1: device descriptor read/64, error -71 [ 224.353600][ T42] audit: type=1400 audit(1786884354.636:10663): avc: denied { append } for pid=12502 comm="syz.3.1769" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 224.429655][ T5807] usb 13-1: device descriptor read/64, error -71 [ 224.430370][T11030] usb usb14-port1: attempt power cycle [ 224.521322][ T41] usb 8-1: USB disconnect, device number 28 [ 224.669770][ T5807] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 224.779937][T11030] usb 14-1: new high-speed USB device number 6 using dummy_hcd [ 224.799433][ T5807] usb 13-1: device descriptor read/64, error -71 [ 224.800057][T11030] usb 14-1: device descriptor read/8, error -71 [ 224.829668][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 224.910395][ T5807] usb usb13-port1: attempt power cycle [ 225.049597][T11030] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 225.070809][T11030] usb 14-1: device descriptor read/8, error -71 [ 225.180043][T11030] usb usb14-port1: unable to enumerate USB device [ 225.249590][ T5807] usb 13-1: new high-speed USB device number 9 using dummy_hcd [ 225.270260][ T5807] usb 13-1: device descriptor read/8, error -71 [ 225.509579][ T5807] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 225.531673][ T5807] usb 13-1: device descriptor read/8, error -71 [ 225.640788][ T5807] usb usb13-port1: unable to enumerate USB device [ 226.012366][T12551] gadgetfs: bound to dummy_udc driver [ 226.259485][ T10] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 226.268722][ C0] gadgetfs: connected [ 226.271432][T11030] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 226.274636][ T10] gadgetfs: disconnected [ 226.431999][T11030] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 226.432073][ C0] gadgetfs: connected [ 226.437519][ T10] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 226.442310][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.445902][T11030] usb 8-1: config index 0 descriptor too short (expected 8192, got 116) [ 226.450289][T11030] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.455272][ C0] gadgetfs: configuration #1 [ 226.461312][ T10] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input19 [ 226.466006][T11030] usb 8-1: config 0 has no interfaces? [ 226.473561][T11030] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.482946][T11030] usb 8-1: Product: syz [ 226.484638][T11030] usb 8-1: Manufacturer: syz [ 226.489520][T11030] usb 8-1: SerialNumber: syz [ 226.503515][T11030] usb 8-1: config 0 descriptor?? [ 226.512750][ C3] usbtouchscreen 5-1:1.0: usbtouch_irq - usb_submit_urb failed with result: -1 [ 226.519634][ T12] net_ratelimit: 31 callbacks suppressed [ 226.519648][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 226.639890][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 226.719830][T12550] gadgetfs: suspended from state 3 [ 226.721929][T11030] usb 8-1: USB disconnect, device number 29 [ 226.724313][ T10] usb 5-1: USB disconnect, device number 31 [ 226.729025][T12550] gadgetfs: disconnected [ 226.749954][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 226.777442][T12558] __vm_enough_memory: pid: 12558, comm: syz.9.1784, bytes: 4503599627366400 not enough memory for the allocation [ 226.781983][T12558] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1784'. [ 226.833299][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1784'. [ 226.859713][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 226.972149][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 227.004570][T12562] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 227.012868][T12562] CPU: 3 UID: 0 PID: 12562 Comm: syz.7.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.012891][T12562] Tainted: [L]=SOFTLOCKUP [ 227.012896][T12562] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 227.012906][T12562] Call Trace: [ 227.012910][T12562] [ 227.012916][T12562] dump_stack_lvl+0x100/0x190 [ 227.012953][T12562] sysfs_warn_dup.cold+0x1c/0x28 [ 227.012974][T12562] sysfs_create_dir_ns+0x24b/0x2b0 [ 227.012998][T12562] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.013012][T12562] ? find_held_lock+0x2b/0x80 [ 227.013025][T12562] ? kobject_add_internal+0x25f/0x930 [ 227.013091][T12562] ? kobject_add_internal+0x25f/0x930 [ 227.013112][T12562] ? class_dir_child_ns_type+0xd/0x60 [ 227.013144][T12562] kobject_add_internal+0x2c8/0x930 [ 227.013189][T12562] kobject_add+0x16a/0x1e0 [ 227.013214][T12562] ? __pfx_kobject_add+0x10/0x10 [ 227.013232][T12562] ? get_device_parent+0x1b3/0x4c0 [ 227.013251][T12562] ? kobject_put+0xb9/0x640 [ 227.013273][T12562] device_add+0x294/0x1970 [ 227.013294][T12562] ? lockdep_init_map_type+0x5c/0x250 [ 227.013310][T12562] ? __pfx_device_add+0x10/0x10 [ 227.013326][T12562] ? lockdep_init_map_type+0x5c/0x250 [ 227.013341][T12562] ? __init_waitqueue_head+0xca/0x150 [ 227.013361][T12562] tty_register_device_attr+0x388/0x7f0 [ 227.013386][T12562] ? lockdep_init_map_type+0x5c/0x250 [ 227.013402][T12562] ? __pfx_tty_register_device_attr+0x10/0x10 [ 227.013420][T12562] ? tty_port_init+0x156/0x1c0 [ 227.013438][T12562] gsm_activate_mux+0x155/0x2a0 [ 227.013461][T12562] gsmld_ioctl+0xbbc/0x15c0 [ 227.013483][T12562] ? __pfx_gsmld_ioctl+0x10/0x10 [ 227.013504][T12562] ? __ldsem_down_read_nested+0xf3/0x890 [ 227.013524][T12562] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 227.013546][T12562] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 227.013561][T12562] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 227.013575][T12562] ? __pfx_gsmld_ioctl+0x10/0x10 [ 227.013593][T12562] tty_ioctl+0x11b4/0x1640 [ 227.013609][T12562] ? __pfx_tty_ioctl+0x10/0x10 [ 227.013623][T12562] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 227.013653][T12562] ? __fget_files+0x215/0x3d0 [ 227.013664][T12562] ? hook_file_ioctl_common+0x140/0x440 [ 227.013688][T12562] ? selinux_file_ioctl+0x13b/0x290 [ 227.013708][T12562] ? selinux_file_ioctl+0xb6/0x290 [ 227.013729][T12562] ? __pfx_tty_ioctl+0x10/0x10 [ 227.013746][T12562] __x64_sys_ioctl+0x18e/0x210 [ 227.013767][T12562] do_syscall_64+0x115/0x870 [ 227.013783][T12562] ? clear_bhb_loop+0x70/0xc0 [ 227.013808][T12562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.013821][T12562] RIP: 0033:0x7f85b079e0d9 [ 227.013833][T12562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.013847][T12562] RSP: 002b:00007f85b1646028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.013869][T12562] RAX: ffffffffffffffda RBX: 00007f85b0a26090 RCX: 00007f85b079e0d9 [ 227.013877][T12562] RDX: 0000200000000040 RSI: 00000000404c4701 RDI: 0000000000000003 [ 227.013886][T12562] RBP: 00007f85b0835024 R08: 0000000000000000 R09: 0000000000000000 [ 227.013894][T12562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.013902][T12562] R13: 00007f85b0a26128 R14: 00007f85b0a26090 R15: 00007ffe145c0dc8 [ 227.013918][T12562] [ 227.013962][T12562] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.161121][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 227.272228][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 227.380038][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 227.469048][T12583] SELinux: common does not define every permission it declares [ 227.473189][T12583] SELinux: failed to load policy [ 227.492599][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 227.527595][ T42] audit: type=1400 audit(1786884357.806:10664): avc: denied { write } for pid=12589 comm="syz.8.1793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 227.534061][ T42] audit: type=1400 audit(1786884357.806:10665): avc: denied { read } for pid=12589 comm="syz.8.1793" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 227.599626][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 227.626231][T12595] binder_alloc: binder_alloc_mmap_handler: 12594 200000ffd000-200001000000 already mapped failed -16 [ 227.631416][T12596] binder: 12594:12596 ioctl 4018620d 0 returned -22 [ 227.682117][T12601] syzkaller0: entered promiscuous mode [ 227.684111][T12601] syzkaller0: entered allmulticast mode [ 227.690230][T12601] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1797'. [ 227.767237][T12606] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1799'. [ 227.826623][T12611] binder: 12610:12611 ioctl c0306201 200000000080 returned -22 [ 227.832220][T12608] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1798'. [ 227.838620][T12608] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1798'. [ 227.871604][ T42] audit: type=1400 audit(1786884358.146:10666): avc: denied { wake_alarm } for pid=12615 comm="syz.7.1801" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 227.917345][T12619] netlink: 'syz.3.1803': attribute type 4 has an invalid length. [ 227.922565][T12619] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1803'. [ 227.928316][T12621] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1802'. [ 227.934234][T12619] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.1803'. [ 228.040397][T12626] netlink: 'syz.3.1805': attribute type 13 has an invalid length. [ 228.043086][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 228.046221][T12626] netlink: 'syz.3.1805': attribute type 13 has an invalid length. [ 228.049045][T12626] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1805'. [ 228.350015][T12655] Invalid logical block size (374) [ 228.372097][T12655] SELinux: security_context_str_to_sid (4m§sevS„:"-”„½ôXòF@) failed with errno=-22 [ 228.473046][ T42] audit: type=1400 audit(1786884358.756:10667): avc: denied { write } for pid=12676 comm="syz.9.1822" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 228.503010][T12674] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.560914][T12681] IPVS: length: 35 != 8 [ 228.609190][T12686] autofs4:pid:12686:validate_dev_ioctl: path string terminator missing for cmd(0xc0189371) [ 228.706425][T12694] netlink: 80 bytes leftover after parsing attributes in process `syz.7.1828'. [ 228.727980][ T42] audit: type=1800 audit(1786884359.006:10668): pid=12694 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.7.1828" name="enable" dev="configfs" ino=57234 res=0 errno=0 [ 228.765012][T12697] dummy0: entered allmulticast mode [ 228.780178][ T7055] rpcbind: server 127.0.0.1 not responding, timed out [ 228.881381][T12695] dummy0: left allmulticast mode [ 228.929286][T12703] syzkaller1: entered promiscuous mode [ 228.931466][T12703] syzkaller1: entered allmulticast mode [ 228.971618][T12710] block2mtd: too many arguments [ 229.153026][T12715] trusted_key: encrypted_key: insufficient parameters specified [ 229.373858][ T42] audit: type=1400 audit(1786884359.656:10669): avc: denied { setopt } for pid=12724 comm="syz.3.1840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 229.410720][T12726] syzkaller0: entered promiscuous mode [ 229.412644][T12726] syzkaller0: entered allmulticast mode [ 229.554848][T12736] fuse: Bad value for 'group_id' [ 229.558948][T12736] fuse: Bad value for 'group_id' [ 230.079108][T12765] kvm: kvm [12762]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 230.084434][T12765] kvm: kvm [12762]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 230.438648][T12744] ceph: No mds server is up or the cluster is laggy [ 230.452063][T12778] bond2 (unregistering): Released all slaves [ 230.659521][ T1354] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 230.717579][T12793] netlink: 'syz.7.1857': attribute type 21 has an invalid length. [ 230.722471][T12793] netlink: 'syz.7.1857': attribute type 4 has an invalid length. [ 230.725550][T12793] netlink: 'syz.7.1857': attribute type 5 has an invalid length. [ 230.745537][ T42] audit: type=1400 audit(1786884361.026:10670): avc: denied { unmount } for pid=10961 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 230.810654][ T1354] usb 13-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 230.819246][ T1354] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 230.824631][ T1354] usb 13-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 230.828373][ T1354] usb 13-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 230.848306][ T1354] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 230.853655][ T1354] usb 13-1: Product: syz [ 230.858871][ T1354] usb 13-1: Manufacturer: syz [ 230.861364][ T1354] usb 13-1: SerialNumber: syz [ 230.888297][T12807] tipc: Enabling of bearer rejected, failed to enable media [ 231.085070][ T1354] usblp 13-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 231.104675][T12827] jffs2: notice: (12827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 5 of xref (0 dead, 0 orphan) found. [ 231.197614][T12839] sg_read: process 1516 (syz.3.1868) changed security contexts after opening file descriptor, this is not allowed. [ 231.220472][ T42] audit: type=1400 audit(1786884361.496:10671): avc: denied { unlink } for pid=12823 comm="syz.9.1866" name="test" dev="jffs2" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.282433][ T42] audit: type=1400 audit(1786884361.566:10672): avc: denied { read write } for pid=12775 comm="syz.8.1852" name="lp0" dev="devtmpfs" ino=3577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 231.295826][ T42] audit: type=1400 audit(1786884361.566:10673): avc: denied { open } for pid=12775 comm="syz.8.1852" path="/dev/usb/lp0" dev="devtmpfs" ino=3577 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 231.308984][T12852] netlink: 'syz.7.1873': attribute type 1 has an invalid length. [ 231.326384][ T41] usb 13-1: USB disconnect, device number 11 [ 231.330593][ T41] usblp0: removed [ 231.578739][T12870] syz_tun: entered allmulticast mode [ 231.584746][T12869] syz_tun: left allmulticast mode [ 231.620055][ T13] net_ratelimit: 33 callbacks suppressed [ 231.620071][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 231.742426][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 231.810796][ T7009] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.816498][ T7009] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.823095][ T9991] usb 13-1: new high-speed USB device number 12 using dummy_hcd [ 231.825614][ T7009] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.829830][ T7009] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 231.849572][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 231.865131][ T41] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 231.960239][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 231.965554][T12906] nilfs2: Unknown parameter 'discard' [ 231.966283][T12905] overlayfs: conflicting lowerdir path [ 231.982086][T12904] Process accounting resumed [ 231.989871][ T9991] usb 13-1: Using ep0 maxpacket: 16 [ 231.992450][ T9991] usb 13-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 231.996744][ T9991] usb 13-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 232.003346][ T9991] usb 13-1: config 0 interface 0 has no altsetting 0 [ 232.006202][ T9991] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.021023][ T9991] usb 13-1: config 0 descriptor?? [ 232.026844][ T9991] usbhid 13-1:0.0: couldn't find an input interrupt endpoint [ 232.069813][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 232.130984][ T9991] libceph: mon0 (1)[c::]:6789 socket error on write [ 232.149292][ T42] audit: type=1400 audit(1786884362.426:10674): avc: denied { write } for pid=12909 comm="syz.7.1889" name="mouse0" dev="devtmpfs" ino=3360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 232.179892][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 232.219819][ T1354] IPVS: starting estimator thread 0... [ 232.225960][ T9991] usb 13-1: USB disconnect, device number 12 [ 232.292802][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 232.309622][T12916] IPVS: using max 29 ests per chain, 69600 per kthread [ 232.322363][T12918] syzkaller0: entered promiscuous mode [ 232.324180][T12918] syzkaller0: entered allmulticast mode [ 232.400377][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 232.510272][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 232.620704][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 232.640347][ T9991] libceph: mon0 (1)[c::]:6789 socket error on write [ 232.674129][T12889] ceph: No mds server is up or the cluster is laggy [ 232.683548][T12933] netlink: 'syz.7.1895': attribute type 26 has an invalid length. [ 232.755143][ T42] audit: type=1400 audit(1786884363.016:10675): avc: denied { append } for pid=12934 comm="syz.7.1897" dev="sockfs" ino=58911 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 232.872316][ T42] audit: type=1400 audit(1786884363.156:10676): avc: denied { getopt } for pid=12955 comm="syz.3.1901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 232.976121][T12961] 9pnet_virtio: no channels available for device syz [ 232.989507][T12965] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 232.991372][T12965] [U] J"—e:ÀÆ" [ 233.037258][T12972] __nla_validate_parse: 18 callbacks suppressed [ 233.037280][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1905'. [ 233.042727][T12972] netlink: 'syz.8.1905': attribute type 21 has an invalid length. [ 233.045222][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1905'. [ 233.053728][T12972] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1905'. [ 233.056657][T12972] netlink: 'syz.8.1905': attribute type 21 has an invalid length. [ 233.059166][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1905'. [ 233.070988][ T12] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.075199][ T12] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.088815][ T12] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.099236][ T12] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 233.203137][T12988] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=12988 comm=syz.8.1911 [ 233.204168][T12987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=24 sclass=netlink_audit_socket pid=12987 comm=syz.8.1911 [ 233.287045][T12993] fuse: Bad value for 'group_id' [ 233.288636][T12993] fuse: Bad value for 'group_id' [ 233.295225][T12995] netlink: 'syz.8.1920': attribute type 1 has an invalid length. [ 233.297928][T12993] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1912'. [ 233.346602][ T42] audit: type=1400 audit(1786884363.626:10677): avc: denied { accept } for pid=12997 comm="syz.3.1913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 233.426387][T12995] veth3: entered allmulticast mode [ 233.436173][T12995] bond1: (slave veth3): Enslaving as an active interface with a down link [ 233.441751][T12993] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1912'. [ 233.505223][T13003] tipc: Started in network mode [ 233.510827][T13003] tipc: Node identity 2007ff, cluster identity 4711 [ 233.518126][T13003] tipc: Node number set to 2099199 [ 233.655872][T13011] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1917'. [ 233.660401][T13010] netlink: 'syz.9.1917': attribute type 10 has an invalid length. [ 233.661333][T13011] netlink: 'syz.9.1917': attribute type 10 has an invalid length. [ 233.666439][T13011] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1917'. [ 233.742827][ T42] audit: type=1400 audit(1786884364.016:10678): avc: denied { view } for pid=13016 comm="syz.9.1919" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 233.760297][ T42] audit: type=1400 audit(1786884364.046:10679): avc: denied { getopt } for pid=13016 comm="syz.9.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 233.768446][T13017] tipc: MTU too low for tipc bearer [ 233.832870][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1923'. [ 233.841766][T13027] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1923'. [ 233.879067][T13031] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 233.885336][T13031] overlayfs: failed lookup in lower (newroot/183, name='bus', err=-40): overlapping layers [ 233.894281][T13036] overlayfs: failed lookup in lower (newroot/183, name='bus', err=-40): overlapping layers [ 234.016291][T13046] 9pnet_virtio: no channels available for device syz [ 234.032598][T13039] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 7 out of range (1000000..45000000) [ 234.388958][ T42] audit: type=1400 audit(1786884364.666:10680): avc: denied { watch } for pid=13077 comm="syz.9.1940" path="/proc/383/fdinfo" dev="proc" ino=59163 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 234.398333][ T42] audit: type=1400 audit(1786884364.666:10681): avc: denied { watch_sb watch_reads } for pid=13077 comm="syz.9.1940" path="/proc/383/fdinfo" dev="proc" ino=59163 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 234.427585][T13080] netlink: 'syz.7.1941': attribute type 21 has an invalid length. [ 234.486731][T13083] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 234.523894][ T42] audit: type=1400 audit(1786884364.806:10682): avc: denied { read write } for pid=13082 comm="syz.9.1942" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 234.541753][ T42] audit: type=1400 audit(1786884364.806:10683): avc: denied { open } for pid=13082 comm="syz.9.1942" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 235.216683][T13112] team_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 235.263176][T13119] 9pnet_virtio: no channels available for device syz [ 235.316702][T13121] netlink: 'syz.9.1952': attribute type 101 has an invalid length. [ 235.330679][T13121] 9pnet_virtio: no channels available for device syz [ 235.452762][T13141] 9pnet_virtio: no channels available for device syz [ 235.455168][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.465528][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.470532][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.473949][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.476499][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.478948][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.485251][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.491442][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.499473][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.503730][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: unknown main item tag 0x0 [ 235.515027][ T848] hid-generic 01FF:FFFFFF1D:0003.000B: hidraw1: HID v0.08 Device [syz1] on syz0 [ 235.719477][ T1486] usb 8-1: new full-speed USB device number 30 using dummy_hcd [ 235.776438][T13161] netlink: 'syz.7.1966': attribute type 21 has an invalid length. [ 235.779697][T13161] netlink: 'syz.7.1966': attribute type 22 has an invalid length. [ 235.782841][T13161] netlink: 'syz.7.1966': attribute type 23 has an invalid length. [ 235.873734][ T1486] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 235.882113][ T1486] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.899436][ T1486] usb 8-1: config 0 has no interfaces? [ 235.903651][ T1486] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 235.907003][ T1486] usb 8-1: Product: syz [ 235.908806][ T1486] usb 8-1: SerialNumber: syz [ 235.914577][ T1486] usb 8-1: config 0 descriptor?? [ 236.122472][T13193] lo speed is unknown, defaulting to 1000 [ 236.126954][T13193] lo speed is unknown, defaulting to 1000 [ 236.130552][T13193] lo speed is unknown, defaulting to 1000 [ 236.133336][T13193] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 236.143595][T13193] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 236.148605][T13193] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 236.156531][T13193] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 236.168205][T13193] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 236.209786][T13193] lo speed is unknown, defaulting to 1000 [ 236.215119][T13193] lo speed is unknown, defaulting to 1000 [ 236.227323][T13193] lo speed is unknown, defaulting to 1000 [ 236.234364][T13193] lo speed is unknown, defaulting to 1000 [ 236.237119][T13193] lo speed is unknown, defaulting to 1000 [ 236.239892][T13193] lo speed is unknown, defaulting to 1000 [ 236.242624][T13193] lo speed is unknown, defaulting to 1000 [ 236.245905][T13193] lo speed is unknown, defaulting to 1000 [ 236.248620][T13193] lo speed is unknown, defaulting to 1000 [ 236.323588][T13146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.333920][T13146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.340801][ T848] usb 8-1: USB disconnect, device number 30 [ 236.390247][T13210] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13210 comm=syz.7.1981 [ 236.593154][T13217] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 236.647453][ T42] audit: type=1400 audit(1786884366.926:10684): avc: denied { setopt } for pid=13216 comm="syz.9.1983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 236.649768][ T7009] net_ratelimit: 35 callbacks suppressed [ 236.649784][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 236.769570][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 236.880457][T13220] kvm: kvm [13219]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 236.884678][T13220] kvm: kvm [13219]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 236.889574][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 236.927311][T13224] overlay: ./file0 is not a directory [ 236.930727][T13224] overlay: Bad value for 'index' [ 237.000604][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 237.120847][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 237.156995][T13236] 9pnet_virtio: no channels available for device syz [ 237.257347][T13234] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 237.260877][ T41] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 237.279851][T13243] block2mtd: too many arguments [ 237.291551][ T42] audit: type=1400 audit(1786884367.566:10685): avc: denied { write } for pid=13241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.364562][ T42] audit: type=1400 audit(1786884367.646:10686): avc: denied { write } for pid=13247 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.374074][T13234] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 237.540502][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 237.606044][ T42] audit: type=1400 audit(1786884367.886:10687): avc: denied { write } for pid=13252 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 237.659486][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 237.770310][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 237.856246][ T848] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 237.880875][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 237.999887][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 241.357457][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 241.357476][ T42] audit: type=1400 audit(1786884371.636:10697): avc: denied { write } for pid=13299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.426919][ T42] audit: type=1400 audit(1786884371.706:10698): avc: denied { write } for pid=13302 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 241.709856][ T8496] net_ratelimit: 32 callbacks suppressed [ 241.709881][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 241.819532][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 241.929602][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 242.039591][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 242.149729][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 242.259874][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 242.369622][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 242.479575][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 242.590020][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 242.699985][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 245.591813][ T42] audit: type=1400 audit(1786884375.876:10699): avc: denied { write } for pid=13305 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.667608][ T42] audit: type=1400 audit(1786884375.946:10700): avc: denied { write } for pid=13308 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.749929][ T5774] net_ratelimit: 35 callbacks suppressed [ 246.749954][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 246.859883][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 246.979595][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 247.089661][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 247.199614][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 247.309742][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 247.429562][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 247.549869][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 247.659504][ T5774] bond3: (slave dummy0): failed to get link speed/duplex [ 247.769541][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 247.936316][T13334] __nla_validate_parse: 9 callbacks suppressed [ 247.936349][T13334] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2003'. [ 247.960171][T13334] fuse: Bad value for 'user_id' [ 247.968384][T13334] fuse: Bad value for 'user_id' [ 248.085287][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 248.105480][T13352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2006'. [ 248.269851][T11030] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 248.301829][T13368] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2012'. [ 248.305512][T13370] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2012'. [ 248.308686][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2012'. [ 248.312392][T13370] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2012'. [ 248.429590][T11030] usb 12-1: Using ep0 maxpacket: 8 [ 248.436121][T11030] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.444311][T11030] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 248.447154][T11030] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.450369][T11030] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.453334][T11030] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.456307][T11030] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.463813][T11030] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.533287][T13387] bond2: entered promiscuous mode [ 248.535047][T13387] bond2: entered allmulticast mode [ 248.537105][T13387] 8021q: adding VLAN 0 to HW filter on device bond2 [ 248.605037][T13391] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2020'. [ 248.612295][T13391] validate_nla: 2 callbacks suppressed [ 248.612314][T13391] netlink: 'syz.9.2020': attribute type 1 has an invalid length. [ 248.621369][T13395] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2021'. [ 248.647496][T13391] bond3: option mode: invalid value (8) [ 248.654173][T13391] bond3 (unregistering): Released all slaves [ 248.675570][T13397] type: 65537 invalid [ 248.681139][T13395] IPv6: sit2: Disabled Multicast RS [ 248.682153][T11030] usb 12-1: GET_CAPABILITIES returned 0 [ 248.683336][T13395] sit2: entered allmulticast mode [ 248.688036][T11030] usbtmc 12-1:16.0: can't read capabilities [ 248.691823][T13392] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 248.695839][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2021'. [ 248.877356][ T42] audit: type=1400 audit(1786884379.156:10701): avc: denied { accept } for pid=13403 comm="syz.3.2023" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 248.903852][ T10] usb 12-1: USB disconnect, device number 12 [ 248.988114][ T42] audit: type=1400 audit(1786884379.266:10702): avc: denied { getopt } for pid=13416 comm="syz.8.2027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 249.028657][T13422] 9pnet_virtio: no channels available for device syz [ 249.104324][ T5724] Bluetooth: hci3: unexpected event for opcode 0x0419 [ 249.108691][T13428] cgroup: release_agent respecified [ 249.392307][ T5807] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 249.540230][ T5807] usb 13-1: Using ep0 maxpacket: 32 [ 249.543301][ T5807] usb 13-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 249.548396][ T5807] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.573809][ T5807] usb 13-1: config 0 descriptor?? [ 249.622968][ T5807] as10x_usb: device has been detected [ 249.629023][ T5807] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 249.642666][ T42] audit: type=1400 audit(1786884379.926:10703): avc: denied { write } for pid=13445 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.667307][ T5807] usb 13-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 249.681870][ T5807] as10x_usb: error during firmware upload part1 [ 249.689680][ T5807] Registered device nBox DVB-T Dongle [ 249.699590][ T1486] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 249.748334][ T42] audit: type=1400 audit(1786884380.026:10704): avc: denied { write } for pid=13463 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 249.783862][ T7599] usb 13-1: USB disconnect, device number 13 [ 249.861745][ T7599] Unregistered device nBox DVB-T Dongle [ 249.873056][ T7599] as10x_usb: device has been disconnected [ 249.881830][ T1486] usb 12-1: Using ep0 maxpacket: 8 [ 249.884468][ T1486] usb 12-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 249.901855][ T1486] usb 12-1: config index 0 descriptor too short (expected 301, got 45) [ 249.909895][ T1486] usb 12-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 249.913979][ T1486] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 249.922712][ T1486] usb 12-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 249.926601][ T1486] usb 12-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.931679][ T1486] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.174475][ T1486] usb 12-1: GET_CAPABILITIES returned 0 [ 250.176789][ T1486] usbtmc 12-1:16.0: can't read capabilities [ 250.243388][T13489] bond11: ARP target 9.0.0.0 is already present [ 250.246001][T13489] bond11: option arp_ip_target: invalid value (9) [ 250.254160][T13489] bond11 (unregistering): Released all slaves [ 250.297039][T13495] vxcan0: tx address claim with different name [ 250.385686][ T5807] usb 12-1: USB disconnect, device number 13 [ 250.581840][T13506] netlink: 'syz.3.2049': attribute type 11 has an invalid length. [ 250.679508][ T42] audit: type=1400 audit(1786884380.956:10705): avc: denied { getopt } for pid=13508 comm="syz.9.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 250.687086][T13509] orangefs_devreq_write_iter: total:0: must be at least:8240: [ 250.689269][ T42] audit: type=1400 audit(1786884380.966:10706): avc: denied { read write } for pid=13508 comm="syz.9.2050" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 250.700058][ T42] audit: type=1400 audit(1786884380.966:10707): avc: denied { open } for pid=13508 comm="syz.9.2050" path="/161/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 250.961771][T13529] IPv6: sit2: Disabled Multicast RS [ 250.965444][T13529] sit2: entered allmulticast mode [ 250.973499][T13529] type: 65537 invalid [ 251.109767][ T13] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.120163][ T13] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.122865][ T13] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.125436][ T13] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.150671][T13541] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 251.193508][ T42] audit: type=1400 audit(1786884381.476:10708): avc: denied { write } for pid=13542 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.261328][ T42] audit: type=1400 audit(1786884381.546:10709): avc: denied { write } for pid=13545 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.405543][T13556] Bluetooth: MGMT ver 1.23 [ 251.442919][ T42] audit: type=1400 audit(1786884381.726:10710): avc: denied { write } for pid=13552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.804589][T13573] netlink: 'syz.7.2061': attribute type 4 has an invalid length. [ 251.816082][T13573] netlink: 'syz.7.2061': attribute type 4 has an invalid length. [ 251.820010][ T8496] net_ratelimit: 33 callbacks suppressed [ 251.820023][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 251.845170][T13590] netlink: 'syz.8.2068': attribute type 1 has an invalid length. [ 251.849646][ T10] lo speed is unknown, defaulting to 1000 [ 251.854247][ T10] syz0: Port: 1 Link ACTIVE [ 251.929671][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 252.052234][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 252.066074][T13602] netlink: 'syz.9.2071': attribute type 1 has an invalid length. [ 252.133884][T13608] o2cb: This node has not been configured. [ 252.136564][T13608] o2cb: Cluster check failed. Fix errors before retrying. [ 252.144905][T13608] (syz.3.2072,13608,3):user_dlm_register:674 ERROR: status = -22 [ 252.171224][T13608] (syz.3.2072,13608,0):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "mydomain" [ 252.175384][T13602] bridge1: entered promiscuous mode [ 252.183000][T13602] bond3: (slave bridge1): making interface the new active one [ 252.187147][T13602] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 252.214330][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 252.220583][T13608] netlink: 'syz.3.2072': attribute type 2 has an invalid length. [ 252.234615][T13602] bridge0: entered promiscuous mode [ 252.340054][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 252.355412][T13617] loop4: detected capacity change from 0 to 7 [ 252.392569][T13617] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 252.395022][T13617] loop4: partition table partially beyond EOD, truncated [ 252.398250][T13617] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 252.445513][T13619] batman_adv: batadv0: Adding interface: dummy0 [ 252.448332][T13619] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.455165][T13456] udevd[13456]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 252.461262][T13619] batman_adv: batadv0: Interface activated: dummy0 [ 252.479673][ T10] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 252.482042][T13619] batadv0: mtu less than device minimum [ 252.487512][T13619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.494661][T13619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.501666][T13619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.507151][T13619] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 252.651232][ T10] usb 13-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 252.654794][ T10] usb 13-1: config 0 has no interfaces? [ 252.658363][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.661085][ T10] usb 13-1: Product: syz [ 252.662452][ T10] usb 13-1: Manufacturer: syz [ 252.664260][ T10] usb 13-1: SerialNumber: syz [ 252.670335][ T10] usb 13-1: config 0 descriptor?? [ 252.981336][T13662] dlm: no local IP address has been set [ 252.986199][T13662] dlm: cannot start dlm midcomms -107 [ 252.990104][T13662] SELinux: policydb version 0 does not match my version range 15-35 [ 252.992716][T13662] SELinux: failed to load policy [ 253.056519][T13670] __nla_validate_parse: 16 callbacks suppressed [ 253.056533][T13670] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2093'. [ 253.134341][T13658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.147793][T13658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.155891][ T5724] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 253.164098][ T5724] Bluetooth: hci3: Injecting HCI hardware error event [ 253.168266][ T5724] Bluetooth: hci3: hardware error 0x00 [ 253.362726][T13690] bridge2: entered promiscuous mode [ 253.373834][T13690] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 253.449607][T13693] 9pnet_virtio: no channels available for device syz [ 253.457324][T13694] 9p: Bad value for 'version' [ 253.658675][T13710] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 253.669666][T13710] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2104'. [ 253.724380][T13711] xt_connbytes: Forcing CT accounting to be enabled [ 253.728436][T13711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.099835][ T7599] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 254.132319][ T42] kauditd_printk_skb: 82 callbacks suppressed [ 254.132338][ T42] audit: type=1400 audit(1786884384.416:10793): avc: denied { map } for pid=13720 comm="syz.7.2108" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.142525][ T42] audit: type=1400 audit(1786884384.416:10794): avc: denied { read write } for pid=13720 comm="syz.7.2108" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=63932 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 254.150382][ T42] audit: type=1400 audit(1786884384.426:10795): avc: denied { create } for pid=13720 comm="syz.7.2108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.156947][ T42] audit: type=1400 audit(1786884384.426:10796): avc: denied { ioctl } for pid=13720 comm="syz.7.2108" path="socket:[63012]" dev="sockfs" ino=63012 ioctlcmd=0x8906 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 254.181574][T13723] netlink: 'syz.7.2109': attribute type 1 has an invalid length. [ 254.184089][T13723] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2109'. [ 254.210682][ T42] audit: type=1400 audit(1786884384.496:10797): avc: denied { read write } for pid=13724 comm="syz.7.2110" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 254.218918][ T42] audit: type=1400 audit(1786884384.496:10798): avc: denied { open } for pid=13724 comm="syz.7.2110" path="/dev/uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 254.227400][ T42] audit: type=1400 audit(1786884384.516:10799): avc: denied { ioctl } for pid=13724 comm="syz.7.2110" path="/dev/uinput" dev="devtmpfs" ino=942 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 254.260175][ T7599] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 254.264082][ T7599] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.267110][ T7599] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.270719][ T7599] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.276187][ T7599] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 254.278703][ T7599] usb 8-1: Product: syz [ 254.280188][ T7599] usb 8-1: Manufacturer: syz [ 254.282259][ T7599] usb 8-1: SerialNumber: syz [ 254.287227][T13726] input: syz1 as /devices/virtual/input/input21 [ 254.292018][ T42] audit: type=1400 audit(1786884384.576:10800): avc: denied { read } for pid=5120 comm="acpid" name="event4" dev="devtmpfs" ino=3747 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.300750][ T42] audit: type=1400 audit(1786884384.576:10801): avc: denied { open } for pid=5120 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3747 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.309273][ T42] audit: type=1400 audit(1786884384.576:10802): avc: denied { ioctl } for pid=5120 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=3747 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 254.510895][ T7599] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 254.721082][T13730] dlm: non-version read from control device 23 [ 254.721312][ T7599] usb 8-1: USB disconnect, device number 31 [ 254.726443][T13730] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13730 comm=syz.9.2112 [ 254.730588][T13718] ip6gretap1: entered promiscuous mode [ 254.732477][T13718] ip6gretap1: entered allmulticast mode [ 254.734816][ T7599] usblp0: removed [ 254.788471][T13734] netlink: 'syz.9.2113': attribute type 4 has an invalid length. [ 254.897684][T13742] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 255.039458][ T8145] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 255.154648][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.158785][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.158799][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.158937][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.165113][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.168125][T13754] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.170878][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2120'. [ 255.190230][ T8145] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 255.195275][ T8145] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.199843][ T8145] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 255.204084][ T8145] usb 12-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 255.210401][ T8145] usb 12-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 255.215912][ T8145] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.222879][T13736] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 255.225329][T13736] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 255.228744][ T8145] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 255.232568][ T8145] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 255.235056][ T8145] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 255.238257][ T8145] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 255.241505][ T5724] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 255.242175][ T8145] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 255.247015][ T8145] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 255.250681][ T8145] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 255.285855][ T8145] usb 13-1: USB disconnect, device number 14 [ 255.378679][T13765] comedi comedi1: Minor 4 could not be opened [ 255.381839][T13765] comedi comedi1: Minor 4 could not be opened [ 255.385172][T13765] comedi comedi1: Minor 4 could not be opened [ 255.391818][T13765] comedi comedi1: Minor 4 could not be opened [ 255.396241][T13765] comedi comedi1: Minor 4 could not be opened [ 255.399010][T13765] comedi comedi1: Minor 4 could not be opened [ 255.402270][T13765] comedi comedi1: Minor 4 could not be opened [ 255.407312][T13765] comedi comedi1: Minor 4 could not be opened [ 255.409518][T13765] comedi comedi1: Minor 4 could not be opened [ 255.411598][T13765] comedi comedi1: Minor 4 could not be opened [ 255.417320][T13765] comedi comedi1: Minor 4 could not be opened [ 255.420088][T13765] comedi comedi1: Minor 4 could not be opened [ 255.422245][T13765] comedi comedi1: Minor 4 could not be opened [ 255.424255][T13765] comedi comedi1: Minor 4 could not be opened [ 255.426215][T13765] comedi comedi1: Minor 4 could not be opened [ 255.428330][T13765] comedi comedi1: Minor 4 could not be opened [ 255.430834][T13765] comedi comedi1: Minor 4 could not be opened [ 255.433213][T13765] comedi comedi1: Minor 4 could not be opened [ 255.435827][T13765] comedi comedi1: Minor 4 could not be opened [ 255.438803][T13765] comedi comedi1: Minor 4 could not be opened [ 255.442056][T13765] comedi comedi1: Minor 4 could not be opened [ 255.445225][T13765] comedi comedi1: Minor 4 could not be opened [ 255.447878][T13765] comedi comedi1: Minor 4 could not be opened [ 255.451069][T13765] comedi comedi1: Minor 4 could not be opened [ 255.453885][T13765] comedi comedi1: Minor 4 could not be opened [ 255.456760][T13765] comedi comedi1: Minor 4 could not be opened [ 255.463925][T13765] comedi comedi1: Minor 4 could not be opened [ 255.466698][T13765] comedi comedi1: Minor 4 could not be opened [ 255.471303][T13765] comedi comedi1: Minor 4 could not be opened [ 255.474091][T13765] comedi comedi1: Minor 4 could not be opened [ 255.476874][T13765] comedi comedi1: Minor 4 could not be opened [ 255.480530][T13765] comedi comedi1: Minor 4 could not be opened [ 255.482935][T13765] comedi comedi1: Minor 4 could not be opened [ 255.526313][T13777] netlink: 'syz.8.2127': attribute type 64 has an invalid length. [ 255.556198][ T1439] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.559023][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.708360][T13789] loop4: detected capacity change from 0 to 2640 [ 255.720996][T13789] buffer_io_error: 27 callbacks suppressed [ 255.721020][T13789] Buffer I/O error on dev loop4, logical block 0, lost async page write [ 255.725539][T13789] Buffer I/O error on dev loop4, logical block 1, lost async page write [ 255.728245][T13789] Buffer I/O error on dev loop4, logical block 2, lost async page write [ 255.732879][T13789] Buffer I/O error on dev loop4, logical block 3, lost async page write [ 255.739700][T13789] Buffer I/O error on dev loop4, logical block 4, lost async page write [ 255.743128][T13789] Buffer I/O error on dev loop4, logical block 5, lost async page write [ 255.747786][T13789] Buffer I/O error on dev loop4, logical block 6, lost async page write [ 255.754274][T13789] Buffer I/O error on dev loop4, logical block 7, lost async page write [ 255.758370][T13789] Buffer I/O error on dev loop4, logical block 8, lost async page write [ 255.762841][T13789] Buffer I/O error on dev loop4, logical block 9, lost async page write [ 255.814213][T13789] 9pnet: Found fid 0 not clunked [ 255.870267][ T10] usb 13-1: new low-speed USB device number 15 using dummy_hcd [ 256.043561][T13796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2565 sclass=netlink_route_socket pid=13796 comm=syz.9.2133 [ 256.048657][T13796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2562 sclass=netlink_route_socket pid=13796 comm=syz.9.2133 [ 256.050130][ T10] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 256.054106][T13796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=13796 comm=syz.9.2133 [ 256.061105][ T10] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 256.063496][T13796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2571 sclass=netlink_route_socket pid=13796 comm=syz.9.2133 [ 256.065749][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.070474][T13796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=13796 comm=syz.9.2133 [ 256.070491][T13796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=13796 comm=syz.9.2133 [ 256.082812][ T10] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.086670][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.090909][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.095410][ T10] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 256.097822][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.105047][ T10] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.108731][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.112662][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.117502][ T10] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 256.120862][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 256.124901][ T10] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 256.128799][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 256.133154][ T10] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 256.140638][ T10] usb 13-1: string descriptor 0 read error: -22 [ 256.142744][ T10] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.162731][ T10] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 256.433201][T13823] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 256.436506][T13824] bpf: Bad value for 'gid' [ 256.890512][ T8496] net_ratelimit: 58 callbacks suppressed [ 256.890597][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 257.009572][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 257.124659][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 257.239697][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 257.273284][T13839] comedi: valid board names for 8255 driver are: [ 257.275393][T13839] 8255 [ 257.276328][T13839] comedi: valid board names for vmk80xx driver are: [ 257.278459][T13839] vmk80xx [ 257.279704][T13839] comedi: valid board names for usbduxsigma driver are: [ 257.281906][T13839] usbduxsigma [ 257.283106][T13839] comedi: valid board names for usbduxfast driver are: [ 257.285565][T13839] usbduxfast [ 257.286894][T13839] comedi: valid board names for usbdux driver are: [ 257.289212][T13839] usbdux [ 257.292034][T13839] comedi: valid board names for ni6501 driver are: [ 257.294415][T13839] ni6501 [ 257.295455][T13839] comedi: valid board names for dt9812 driver are: [ 257.297672][T13839] dt9812 [ 257.298697][T13839] comedi: valid board names for ni_labpc_cs driver are: [ 257.301880][T13839] ni_labpc_cs [ 257.303090][T13839] comedi: valid board names for ni_daq_700 driver are: [ 257.305524][T13839] ni_daq_700 [ 257.306664][T13839] comedi: valid board names for labpc_pci driver are: [ 257.308980][T13839] labpc_pci [ 257.310285][T13839] comedi: valid board names for adl_pci9118 driver are: [ 257.312741][T13839] pci9118dg [ 257.313914][T13839] pci9118hg [ 257.315094][T13839] pci9118hr [ 257.316340][T13839] comedi: valid board names for 8255_pci driver are: [ 257.318532][T13839] 8255_pci [ 257.319935][T13839] comedi: valid board names for s526 driver are: [ 257.322388][T13839] s526 [ 257.323594][T13839] comedi: valid board names for multiq3 driver are: [ 257.325923][T13839] multiq3 [ 257.326927][T13839] comedi: valid board names for pcmuio driver are: [ 257.329121][T13839] pcmuio48 [ 257.330389][T13839] pcmuio96 [ 257.331505][T13839] comedi: valid board names for pcmmio driver are: [ 257.333678][T13839] pcmmio [ 257.334804][T13839] comedi: valid board names for pcmda12 driver are: [ 257.337100][T13839] pcmda12 [ 257.338100][T13839] comedi: valid board names for pcmad driver are: [ 257.340630][T13839] pcmad12 [ 257.341722][T13839] pcmad16 [ 257.342813][T13839] comedi: valid board names for ni_labpc driver are: [ 257.345023][T13839] lab-pc-1200 [ 257.346198][T13839] lab-pc-1200ai [ 257.347406][T13839] lab-pc+ [ 257.348479][T13839] comedi: valid board names for atmio16 driver are: [ 257.349681][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 257.354072][T13839] atmio16 [ 257.355170][T13839] atmio16d [ 257.356571][T13839] comedi: valid board names for ni_at_ao driver are: [ 257.358726][T13839] at-ao-6 [ 257.360358][T13839] at-ao-10 [ 257.361669][T13839] comedi: valid board names for ni_at_a2150 driver are: [ 257.364417][T13839] ni_at_a2150 [ 257.365801][T13839] comedi: valid board names for adq12b driver are: [ 257.368349][T13839] adq12b [ 257.371254][T13839] comedi: valid board names for mpc624 driver are: [ 257.374025][T13839] mpc624 [ 257.375954][T13839] comedi: valid board names for c6xdigio driver are: [ 257.378648][T13839] c6xdigio [ 257.380345][T13839] comedi: valid board names for aio_iiro_16 driver are: [ 257.385199][T13839] aio_iiro_16 [ 257.386608][T13839] comedi: valid board names for aio_aio12_8 driver are: [ 257.399608][T13839] aio_aio12_8 [ 257.403005][T13839] aio_ai12_8 [ 257.404396][T13839] aio_ao12_4 [ 257.407891][T13839] comedi: valid board names for fl512 driver are: [ 257.410702][T13839] fl512 [ 257.411981][T13839] comedi: valid board names for dmm32at driver are: [ 257.414702][T13839] dmm32at [ 257.416044][T13839] comedi: valid board names for dt282x driver are: [ 257.418743][T13839] dt2821 [ 257.420227][T13839] dt2821-f [ 257.421636][T13839] dt2821-g [ 257.422997][T13839] dt2823 [ 257.424283][T13839] dt2824-pgh [ 257.425722][T13839] dt2824-pgl [ 257.427172][T13839] dt2825 [ 257.428466][T13839] dt2827 [ 257.430163][T13839] dt2828 [ 257.431463][T13839] dt2829 [ 257.432534][T13839] dt21-ez [ 257.433525][T13839] dt23-ez [ 257.434905][T13839] dt24-ez [ 257.436271][T13839] dt24-ez-pgl [ 257.437687][T13839] comedi: valid board names for dt2817 driver are: [ 257.441950][T13839] dt2817 [ 257.443332][T13839] comedi: valid board names for dt2815 driver are: [ 257.445904][T13839] dt2815 [ 257.446839][T13839] comedi: valid board names for dt2814 driver are: [ 257.449916][T13839] dt2814 [ 257.451253][T13839] comedi: valid board names for dt2811 driver are: [ 257.453997][T13839] dt2811-pgh [ 257.455452][T13839] dt2811-pgl [ 257.456913][T13839] comedi: valid board names for dt2801 driver are: [ 257.459919][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 257.462264][T13839] dt2801 [ 257.463222][T13839] comedi: valid board names for das6402 driver are: [ 257.465804][T13839] das6402-12 [ 257.467251][T13839] das6402-16 [ 257.468699][T13839] comedi: valid board names for das1800 driver are: [ 257.472367][T13839] das-1701st [ 257.473830][T13839] das-1701st-da [ 257.475418][T13839] das-1702st [ 257.476927][T13839] das-1702st-da [ 257.478431][T13839] das-1702hr [ 257.480037][T13839] das-1702hr-da [ 257.481572][T13839] das-1701ao [ 257.482774][T13839] das-1702ao [ 257.484209][T13839] das-1801st [ 257.485655][T13839] das-1801st-da [ 257.487244][T13839] das-1802st [ 257.488711][T13839] das-1802st-da [ 257.490404][T13839] das-1802hr [ 257.491870][T13839] das-1802hr-da [ 257.493399][T13839] das-1801hc [ 257.494850][T13839] das-1802hc [ 257.496303][T13839] das-1801ao [ 257.497788][T13839] das-1802ao [ 257.499238][T13839] comedi: valid board names for das800 driver are: [ 257.502019][T13839] das-800 [ 257.503378][T13839] cio-das800 [ 257.504832][T13839] das-801 [ 257.506166][T13839] cio-das801 [ 257.507604][T13839] das-802 [ 257.508991][T13839] cio-das802 [ 257.510652][T13839] cio-das802/16 [ 257.511962][T13839] comedi: valid board names for isa-das08 driver are: [ 257.514221][T13839] isa-das08 [ 257.515332][T13839] das08-pgm [ 257.516458][T13839] das08-pgh [ 257.517566][T13839] das08-pgl [ 257.518705][T13839] das08-aoh [ 257.520308][T13839] das08-aol [ 257.521387][T13839] das08-aom [ 257.522591][T13839] das08/jr-ao [ 257.523985][T13839] das08jr-16-ao [ 257.525436][T13839] pc104-das08 [ 257.526824][T13839] das08jr/16 [ 257.528194][T13839] comedi: valid board names for das16m1 driver are: [ 257.531107][T13839] das16m1 [ 257.532435][T13839] comedi: valid board names for dac02 driver are: [ 257.535053][T13839] dac02 [ 257.536240][T13839] comedi: valid board names for rti802 driver are: [ 257.538817][T13839] rti802 [ 257.540635][T13839] comedi: valid board names for rti800 driver are: [ 257.542748][T13839] rti800 [ 257.544608][T13839] rti815 [ 257.545899][T13839] comedi: valid board names for pcm3724 driver are: [ 257.548499][T13839] pcm3724 [ 257.549784][T13839] comedi: valid board names for pcl818 driver are: [ 257.552163][T13839] pcl818l [ 257.553502][T13839] pcl818h [ 257.554711][T13839] pcl818hd [ 257.555997][T13839] pcl818hg [ 257.557229][T13839] pcl818 [ 257.558416][T13839] pcl718 [ 257.560050][T13839] pcm3718 [ 257.561387][T13839] comedi: valid board names for pcl816 driver are: [ 257.564086][T13839] pcl816 [ 257.565368][T13839] pcl814b [ 257.566677][T13839] comedi: valid board names for pcl812 driver are: [ 257.569023][T13839] pcl812 [ 257.570229][T13839] pcl812pg [ 257.570518][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 257.571291][T13839] acl8112pg [ 257.571297][T13839] acl8112dg [ 257.571302][T13839] acl8112hg [ 257.571306][T13839] a821pgl [ 257.571310][T13839] a821pglnda [ 257.571314][T13839] a821pgh [ 257.571318][T13839] a822pgl [ 257.571322][T13839] a822pgh [ 257.585447][T13839] a823pgl [ 257.586796][T13839] a823pgh [ 257.588184][T13839] pcl813 [ 257.589681][T13839] pcl813b [ 257.591087][T13839] acl8113 [ 257.592429][T13839] iso813 [ 257.593636][T13839] acl8216 [ 257.594940][T13839] a826pg [ 257.596298][T13839] comedi: valid board names for pcl730 driver are: [ 257.598963][T13839] pcl730 [ 257.600279][T13839] iso730 [ 257.601515][T13839] acl7130 [ 257.602772][T13839] pcm3730 [ 257.604050][T13839] pcl725 [ 257.605257][T13839] p8r8dio [ 257.606645][T13839] acl7225b [ 257.608004][T13839] p16r16dio [ 257.609518][T13839] pcl733 [ 257.610732][T13839] pcl734 [ 257.611982][T13839] opmm-1616-xt [ 257.613405][T13839] pearl-mm-p [ 257.614773][T13839] ir104-pbf [ 257.616102][T13839] comedi: valid board names for pcl726 driver are: [ 257.618763][T13839] pcl726 [ 257.620100][T13839] pcl727 [ 257.621361][T13839] pcl728 [ 257.622574][T13839] acl6126 [ 257.623858][T13839] acl6128 [ 257.625122][T13839] comedi: valid board names for pcl724 driver are: [ 257.627698][T13839] pcl724 [ 257.629014][T13839] pcl722 [ 257.631096][T13839] pcl731 [ 257.632373][T13839] acl7122 [ 257.633717][T13839] acl7124 [ 257.634981][T13839] pet48dio [ 257.636227][T13839] pcmio48 [ 257.637348][T13839] onyx-mm-dio [ 257.638583][T13839] comedi: valid board names for pcl711 driver are: [ 257.641318][T13839] pcl711 [ 257.642556][T13839] pcl711b [ 257.643899][T13839] acl8112hg [ 257.645236][T13839] acl8112dg [ 257.647451][T13839] comedi: valid board names for amplc_pc263 driver are: [ 257.650432][T13839] pc263 [ 257.651767][T13839] comedi: valid board names for amplc_pc236 driver are: [ 257.654562][T13839] pc36at [ 257.655783][T13839] comedi: valid board names for amplc_dio200 driver are: [ 257.658545][T13839] pc212e [ 257.659843][T13839] pc214e [ 257.661055][T13839] pc215e [ 257.662352][T13839] pc218e [ 257.663566][T13839] pc272e [ 257.664728][T13839] comedi: valid board names for comedi_parport driver are: [ 257.667580][T13839] comedi_parport [ 257.669082][T13839] comedi: valid board names for comedi_test driver are: [ 257.672257][T13839] comedi_test [ 257.673760][T13839] comedi: valid board names for comedi_bond driver are: [ 257.676562][T13839] comedi_bond [ 257.680666][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 257.801203][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 257.909772][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 257.936897][T13857] 9pnet_virtio: no channels available for device syz [ 258.018940][ T5820] usb 12-1: USB disconnect, device number 14 [ 258.027419][ T5820] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 258.039083][ T5820] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 258.044628][ T5820] keyspan 12-1:1.0: device disconnected [ 258.059191][T13860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 258.119987][ T7599] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 258.291155][ T7599] usb 14-1: Using ep0 maxpacket: 8 [ 258.296966][ T7599] usb 14-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 258.310719][ T7599] usb 14-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.313376][ T7599] usb 14-1: config 0 has no interface number 0 [ 258.315330][ T7599] usb 14-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 258.318755][ T7599] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.325808][ T7599] usb 14-1: config 0 descriptor?? [ 258.330254][ T7599] iowarrior 14-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 258.409290][T13896] syzkaller0: entered promiscuous mode [ 258.411240][T13896] syzkaller0: entered allmulticast mode [ 258.517122][ T1486] usb 13-1: USB disconnect, device number 15 [ 258.575333][ T7599] usb 14-1: USB disconnect, device number 8 [ 258.796678][T13900] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 259.140931][T13911] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 259.143075][T13911] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 259.146133][T13911] vhci_hcd vhci_hcd.0: Device attached [ 259.285972][ T42] kauditd_printk_skb: 444 callbacks suppressed [ 259.285993][ T42] audit: type=1400 audit(1786884389.566:11247): avc: denied { create } for pid=13916 comm="syz.9.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 259.297210][ T42] audit: type=1400 audit(1786884389.566:11248): avc: denied { write } for pid=13916 comm="syz.9.2165" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 259.352716][T13914] vhci_hcd: connection closed [ 259.353029][ T5800] vhci_hcd vhci_hcd.8: stop threads [ 259.356103][ T5800] vhci_hcd vhci_hcd.8: release socket [ 259.369926][ T5800] vhci_hcd vhci_hcd.8: disconnect device [ 259.946292][ T42] audit: type=1400 audit(1786884390.226:11249): avc: denied { bind } for pid=13927 comm="syz.8.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.955472][ T42] audit: type=1400 audit(1786884390.226:11250): avc: denied { listen } for pid=13927 comm="syz.8.2166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 259.981703][ T42] audit: type=1400 audit(1786884390.266:11251): avc: denied { write } for pid=13927 comm="syz.8.2166" path="socket:[65225]" dev="sockfs" ino=65225 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 260.097381][ T5820] usb usb54-port1: attempt power cycle [ 260.709666][ T5820] usb usb54-port1: unable to enumerate USB device [ 261.818464][ T42] audit: type=1400 audit(1786884392.096:11252): avc: denied { append } for pid=13943 comm="syz.3.2170" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 261.890003][ T42] audit: type=1400 audit(1786884392.166:11253): avc: denied { setopt } for pid=13945 comm="syz.8.2171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 261.940547][T13946] lo speed is unknown, defaulting to 1000 [ 261.948526][ T42] audit: type=1400 audit(1786884392.226:11254): avc: denied { unlink } for pid=13949 comm="syz.3.2173" name="#2f" dev="tmpfs" ino=3054 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 261.957398][ T42] audit: type=1400 audit(1786884392.236:11255): avc: denied { mount } for pid=13949 comm="syz.3.2173" name="/" dev="overlay" ino=3050 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 261.961918][ T9991] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 261.980397][ T5800] net_ratelimit: 5 callbacks suppressed [ 261.980418][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 261.997414][ T42] audit: type=1400 audit(1786884392.276:11256): avc: denied { unmount } for pid=5736 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 262.101727][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 262.120926][T13966] __nla_validate_parse: 32 callbacks suppressed [ 262.120947][T13966] netlink: 1047 bytes leftover after parsing attributes in process `syz.8.2176'. [ 262.126172][T13966] veth0_to_bond: default FDB implementation only supports local addresses [ 262.132709][ T9991] usb 12-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.152734][ T9991] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.160537][ T9991] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.164910][ T9991] usb 12-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 262.170504][ T9991] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.176169][ T9991] usb 12-1: config 0 descriptor?? [ 262.209979][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 262.263322][T13973] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2180'. [ 262.268827][T13973] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2180'. [ 262.321662][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 262.443223][ T7599] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 262.450901][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 262.483492][T13981] iommufd_mock iommufd_mock0: Adding to iommu group 1 [ 262.559637][ T8496] bond3: (slave dummy0): failed to get link speed/duplex [ 262.602187][ T9991] plantronics 0003:047F:FFFF.000C: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 262.669757][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 262.687487][ T7599] usb 8-1: unable to get BOS descriptor or descriptor too short [ 262.693093][ T7599] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 262.697815][ T7599] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 262.701119][ T7599] usb 8-1: can't read configurations, error -71 [ 262.779618][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 262.833675][T13988] bond5: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 262.837792][T13988] bond5 (unregistering): Released all slaves [ 262.890227][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 262.939417][T13994] netlink: 'syz.9.2185': attribute type 16 has an invalid length. [ 262.946156][T13994] netlink: 'syz.9.2185': attribute type 3 has an invalid length. [ 262.949011][T13994] netlink: 'syz.9.2185': attribute type 1 has an invalid length. [ 262.957184][T13994] netlink: 112 bytes leftover after parsing attributes in process `syz.9.2185'. [ 262.966446][ T10] usb 12-1: USB disconnect, device number 15 [ 262.994720][T13994] [ 262.995560][T13994] ====================================================== [ 262.997718][T13994] WARNING: possible circular locking dependency detected [ 263.000358][T13994] syzkaller #0 Tainted: G L [ 263.003028][T13994] ------------------------------------------------------ [ 263.005977][T13994] syz.9.2185/13994 is trying to acquire lock: [ 263.008295][T13994] ffffffff903ca328 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.013000][T13994] [ 263.013000][T13994] but task is already holding lock: [ 263.015749][T13994] ffff88802ba01b70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 263.019141][T13994] [ 263.019141][T13994] which lock already depends on the new lock. [ 263.019141][T13994] [ 263.023102][T13994] [ 263.023102][T13994] the existing dependency chain (in reverse order) is: [ 263.026522][T13994] [ 263.026522][T13994] -> #3 (&p->frag_sem){++++}-{4:4}: [ 263.029413][T13994] lock_acquire+0x1b9/0x370 [ 263.031313][T13994] down_write_killable+0x93/0x250 [ 263.033556][T13994] configfs_rmdir+0x3fa/0x950 [ 263.035599][T13994] vfs_rmdir+0x328/0x8a0 [ 263.037520][T13994] filename_rmdir+0x31a/0x5c0 [ 263.039511][T13994] __x64_sys_rmdir+0x46/0x70 [ 263.041563][T13994] do_syscall_64+0x115/0x870 [ 263.043516][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.045997][T13994] [ 263.045997][T13994] -> #2 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 263.049238][T13994] lock_acquire+0x1b9/0x370 [ 263.051189][T13994] down_write+0x8b/0x1f0 [ 263.053039][T13994] configfs_depend_item_unlocked+0xf3/0x6a0 [ 263.055419][T13994] usbg_make_tpg+0x261/0x620 [ 263.057379][T13994] target_fabric_make_tpg+0xab/0x8c0 [ 263.059607][T13994] configfs_mkdir+0x51e/0xb70 [ 263.061623][T13994] vfs_mkdir+0x361/0x850 [ 263.063455][T13994] filename_mkdirat+0x48b/0x5e0 [ 263.065481][T13994] __x64_sys_mkdirat+0x89/0xc0 [ 263.067506][T13994] do_syscall_64+0x115/0x870 [ 263.069449][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.071936][T13994] [ 263.071936][T13994] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 263.074939][T13994] lock_acquire+0x1b9/0x370 [ 263.076955][T13994] __mutex_lock+0x1a4/0x1bd0 [ 263.078957][T13994] tcm_set_name+0x29/0xb0 [ 263.080921][T13994] function_make+0x21c/0x3f0 [ 263.082956][T13994] configfs_mkdir+0x51e/0xb70 [ 263.084976][T13994] vfs_mkdir+0x361/0x850 [ 263.086888][T13994] filename_mkdirat+0x48b/0x5e0 [ 263.089028][T13994] __x64_sys_mkdirat+0x89/0xc0 [ 263.091101][T13994] do_syscall_64+0x115/0x870 [ 263.093094][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.095456][T13994] [ 263.095456][T13994] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 263.098649][T13994] check_prev_add+0xeb/0xe60 [ 263.100710][T13994] __lock_acquire+0x136c/0x1a40 [ 263.102815][T13994] lock_acquire+0x1b9/0x370 [ 263.104720][T13994] __mutex_lock+0x1a4/0x1bd0 [ 263.106663][T13994] uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.109812][T13994] configfs_write_iter+0x302/0x4e0 [ 263.111904][T13994] vfs_write+0x6ac/0x1050 [ 263.113823][T13994] ksys_write+0x12a/0x250 [ 263.115790][T13994] do_syscall_64+0x115/0x870 [ 263.117804][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.120269][T13994] [ 263.120269][T13994] other info that might help us debug this: [ 263.120269][T13994] [ 263.124214][T13994] Chain exists of: [ 263.124214][T13994] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#24 --> &p->frag_sem [ 263.124214][T13994] [ 263.129610][T13994] Possible unsafe locking scenario: [ 263.129610][T13994] [ 263.132504][T13994] CPU0 CPU1 [ 263.134637][T13994] ---- ---- [ 263.136771][T13994] rlock(&p->frag_sem); [ 263.138405][T13994] lock(&sb->s_type->i_mutex_key#24); [ 263.141493][T13994] lock(&p->frag_sem); [ 263.144088][T13994] lock(gadget_subsys.su_mutex); [ 263.146036][T13994] [ 263.146036][T13994] *** DEADLOCK *** [ 263.146036][T13994] [ 263.149037][T13994] 4 locks held by syz.9.2185/13994: [ 263.151063][T13994] #0: ffff888034e6b270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 263.154531][T13994] #1: ffff888024c2e450 (sb_writers#13){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 263.158044][T13994] #2: ffff88803e11d480 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 263.161872][T13994] #3: ffff88802ba01b70 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 263.165599][T13994] [ 263.165599][T13994] stack backtrace: [ 263.167886][T13994] CPU: 3 UID: 0 PID: 13994 Comm: syz.9.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.167908][T13994] Tainted: [L]=SOFTLOCKUP [ 263.167913][T13994] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.167928][T13994] Call Trace: [ 263.167934][T13994] [ 263.167942][T13994] dump_stack_lvl+0x100/0x190 [ 263.167961][T13994] print_circular_bug.cold+0x178/0x1c7 [ 263.167982][T13994] check_noncircular+0x146/0x160 [ 263.168002][T13994] ? kernel_text_address+0x8d/0x100 [ 263.168019][T13994] check_prev_add+0xeb/0xe60 [ 263.168035][T13994] __lock_acquire+0x136c/0x1a40 [ 263.168054][T13994] lock_acquire+0x1b9/0x370 [ 263.168070][T13994] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.168088][T13994] ? __pfx___might_resched+0x10/0x10 [ 263.168106][T13994] __mutex_lock+0x1a4/0x1bd0 [ 263.168121][T13994] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.168135][T13994] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.168153][T13994] ? _kstrtoull+0x13c/0x1f0 [ 263.168172][T13994] ? __pfx___mutex_lock+0x10/0x10 [ 263.168185][T13994] ? __might_fault+0xc5/0x140 [ 263.168198][T13994] ? __pfx_kstrtouint+0x10/0x10 [ 263.168209][T13994] ? __pfx___might_resched+0x10/0x10 [ 263.168224][T13994] ? uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.168239][T13994] uvcg_frame_dw_max_video_frame_buffer_size_store+0x12d/0x370 [ 263.168254][T13994] ? __pfx_uvcg_frame_dw_max_video_frame_buffer_size_store+0x10/0x10 [ 263.168270][T13994] ? configfs_write_iter+0x388/0x4e0 [ 263.168285][T13994] configfs_write_iter+0x302/0x4e0 [ 263.168300][T13994] vfs_write+0x6ac/0x1050 [ 263.168310][T13994] ? __pfx_configfs_write_iter+0x10/0x10 [ 263.168324][T13994] ? __pfx_vfs_write+0x10/0x10 [ 263.168338][T13994] ksys_write+0x12a/0x250 [ 263.168348][T13994] ? __pfx_ksys_write+0x10/0x10 [ 263.168359][T13994] do_syscall_64+0x115/0x870 [ 263.168372][T13994] ? clear_bhb_loop+0x70/0xc0 [ 263.168384][T13994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.168397][T13994] RIP: 0033:0x7f0ec899e0d9 [ 263.168409][T13994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.168421][T13994] RSP: 002b:00007f0ec9886028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 263.168434][T13994] RAX: ffffffffffffffda RBX: 00007f0ec8c25fa0 RCX: 00007f0ec899e0d9 [ 263.168441][T13994] RDX: 0000000000000004 RSI: 00002000000006c0 RDI: 0000000000000005 [ 263.168448][T13994] RBP: 00007f0ec8a35024 R08: 0000000000000000 R09: 0000000000000000 [ 263.168454][T13994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.168461][T13994] R13: 00007f0ec8c26038 R14: 00007f0ec8c25fa0 R15: 00007ffc0b8cca68 [ 263.168472][T13994] [ 263.254700][ T7009] bond3: (slave dummy0): failed to get link speed/duplex [ 267.069793][ T12] net_ratelimit: 33 callbacks suppressed [ 267.069820][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 267.179620][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 267.289599][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 267.409520][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 267.529683][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 267.639903][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 267.759582][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 267.869642][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 267.979645][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 268.090026][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 272.139569][ T13] net_ratelimit: 35 callbacks suppressed [ 272.139587][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 272.249523][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 272.359512][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 272.479509][ T5800] bond3: (slave dummy0): failed to get link speed/duplex [ 272.591403][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 272.709668][ T12] bond3: (slave dummy0): failed to get link speed/duplex [ 272.819492][ T13] bond3: (slave dummy0): failed to get link speed/duplex [ 272.939552][ T7009] bond3: (slave dummy0): failed to get link speed/duplex