last executing test programs: 4m40.81385491s ago: executing program 32 (id=155): socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x2, 0xc9, 0xb}}}, 0x7) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040)=0x80000001, 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x3}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000140)="280320000a00140000007ef506be00000000000000000000000000143baa111f1f858ce632f47042195eb3cf545a41b6d78839980700e67bee78895e16f37fe8", 0xffa9, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) recvmmsg(r0, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}, 0x4000ffff}], 0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000006c0)={'wlan1\x00', &(0x7f0000000700)=@ethtool_stats}) r3 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(0x0, &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0)="d5ed", 0x2, r3) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x4267}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x523, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, r3) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, 0x0) 4m22.16158248s ago: executing program 33 (id=186): r0 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18"], 0x18}, 0x0) r2 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffe000/0x1000)=nil) shmctl$SHM_STAT_ANY(r2, 0xf, &(0x7f0000000500)=""/176) r3 = socket(0x840000000002, 0x3, 0xff) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000040)=""/39, 0x27}], 0x52, 0x0, 0x0, 0x8000}, 0x48044) close(r1) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000300)={0x2, 0x4e22, @empty}, 0x10) 3m41.761030081s ago: executing program 5 (id=763): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080d0}, 0x4000880) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r4, 0xc0044dff, &(0x7f0000000480)=0xffff8001) 3m40.871631181s ago: executing program 5 (id=766): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x2000010, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg(r0, &(0x7f0000003500)={&(0x7f00000002c0)=@ethernet={0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x80, &(0x7f0000003200)=[{&(0x7f0000000480)="2702ee4c9d31f93a3a273bebad21e8ad8337bf98b5c5867cd37a5ec03a8d42f4c38d7b74e52ef1b0c829ff735d7cd00920cee029347280cc2aa404bc8c7d274a82b9ba0d33079e49881d51396531ad10e4e650840cd95b781e621408a676cf19191723d13ed71171f5f82a1be2b84a49bf4d7a9408cf204b0566d442e4f6570aa9f675265a255e0b691fa546e47fe718eb06b958e2a1373a27c22e4fde61274dac99f510914db1aedacc1bce70599b718dbae627d8917c2771f242593d8550321d56bd16f2ed27135a09241a654ae7f83c534c79c1aa8329b706db440ba806e4c0ae01db62ff015431400f72bee322813098fbf378201a06b79ef25f", 0xfc}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="77e9bde3dfb80ab1b25b918817", 0xd}, {&(0x7f0000001b80)="89ce5ee16dbd1fcbeb2fa7e62e9b7c1058dd3cf3727a5f5d7e0420e1b5dd25f464758b1d8615bd025ab6ce5ee760c7139a5f37b0e8a5bb9bb9c5531fbeb130a3bd6b5c07569383c3074f5f50fd8d65cf21f747c4e3067ed0a2517fed4c6a88e2a5d14dce4e30516326ff468bb65cc4defb61a9fb4e6812adc69a5193e3c9fd6d86af40f8d4137e5598c73711570af26fd52771e413a37b242cd943e7ce38b2b9c420d47ae75d1cbd4b287cbaac7efb0a7790afbbf1ba8bafc2702b7d02a6a192ab0419bc69ec58e16e97", 0xca}, {&(0x7f0000001c80)="7cb027eee61801c52c5caa4cdafa9c9bfb8abdef82f5146f4645836722dbaa7257545c8a992bad4979d4ecf9c0afd3690a4815dc5201ff84033bbaa2e943703e5a11b3d6d1af", 0x46}, {&(0x7f0000001d00)="9cbe85a9f44d31bbcacb591290921a5253405fcb38c1a6576a4410cfae9870714d5808eceea0a672a2c5ef84e838fd07fd3d441043aba06a782099fc32b2a13b5b6ae217110103d7208edbc1e7b43d89524c14b820c2fcdcd45fb7cfb264617b88eba6c8984166e133d037615579a784ddf39e74583521eb0a8d754cf2cf009a8cbd0c9c5b1ec1a0c0c9ca5b0189a76fffa512cbcd1dc309d0cba41f4303c8015fd990", 0xa3}, {&(0x7f0000001dc0)="c5a21c21bdba99cf62adb309c15d37f727e58d6fe69a35a7361a4aaaeac50f8dc7a0fc1bedecb7e0a21caba4038d848dab", 0x31}, {&(0x7f0000002100)="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", 0x1000}, {&(0x7f0000003100)="a8e2024562cffc9d42052d2be2cfe2e8631d5645e8452c99b5a926f090b7732407a05b1cc491ffb4594a8a293e4379f1ddceefd1ac54aeb7c78da9a169ad5edc7c61ce3b7826ff2fad", 0x49}, {&(0x7f0000003180)="3186309af42abd8ffd7ea2023028adb563346227c64f60a4d606f2f26409610a8a6a0e67c7ef12b4e9b1ec1fd88428fc36a3f7cc6d72fb8f05be19d7a6d5851e2bd3f8f5307fdd8b58b7c5d273226fa3", 0x50}], 0xa, &(0x7f00000032c0)=[{0x20, 0x118, 0x5, "fe648e6bafbe7a4fee6bb785"}, {0x80, 0x10a, 0x18000, "78e7de39ad4f374c0b3a5ac019e2db0c4ba280cac47aba8728697c5404a2c6a358b9e872828e402b33246f2269dd9edcda1c7692912ec9b9689f8fc2568ba1f7f14990cd12791074f9fb1421aa8873c4b518c3420bb46c5773f9a4a026e2b157123f8bd12ee39a074ae195825b150086"}, {0x58, 0x109, 0x0, "2fe63a4fb0d6884073448013c19432270ed9dc89cd96885a39dc6616e680655695abf397ef0ecc74f5d1fb02d965bb8fb82e750546fd025e41dd93977eaca058536623"}, {0xc8, 0x101, 0x40, "f67f4129027507d91643540b56d9bcee7668382e383747e3b3b1cccd1937650ae440c43bbf6a39222a27d8b1fd40801e54cad0531fe2a50bf3ceb1929391ed3fb317e9924e6b17ca27be4500674c5b4826711d23b2a6c08f9f18cfa8229dbf0281b14e6f2c7136717a82cf44cf721ba2b02602ae3e2a2eb760a004e054150a067f3b60e7214c21c93e735bf26ac3ef35eaba6644bb76755806b728d695ba6c8eacee0168f8fc7a0b020535dd852f65e1a26e6af1"}, {0x80, 0x113, 0x20400, "b42782cf55ad6c2c5f5a73f200deda09111e3e58c933ca60670748e5c969c874ebf0dcdd1ca7811e1cc28bb94c89c22f134a3a9746b15ca8cc06d1daf79d7e264337cfd5bd4349e0abd01c75a59530584d7ca2287536860d6ba43cdc0957e3a025c82cb7d94a14dc5f82314d998d"}], 0x240}, 0x4814) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20040) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00'}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000010000304000000000300000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002c00128009000100766c616e000000001c0002800600010004000000100003800c000100f7ffffff0300000008000500", @ANYBLOB="e35919ce8e5a89051b49a48cbdf1e2cdf2e547f401ce87b8313790c2f101d02b8cd86177307bdc39ac11d5ddfb9cb233563aabf800a4c4ccefb01fbe672eff32bdeaacb29d3f6f131b13efa5e7d5554193", @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) 3m40.800893972s ago: executing program 5 (id=768): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffbf, 0x9}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/platform/vhci_hcd.0/detach\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) (async) mount$cgroup(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4000, &(0x7f0000000200)={[{@release_agent={'release_agent', 0x3d, './file1'}}, {@release_agent={'release_agent', 0x3d, './file0'}}]}) 3m40.800129717s ago: executing program 5 (id=769): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount$9p_virtio(&(0x7f0000000440), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@isdn, 0x80, &(0x7f0000000680)=[{&(0x7f0000000840)=""/184, 0xb8}, {&(0x7f00000007c0)=""/84, 0x54}, {&(0x7f0000000280)=""/225, 0xe1}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000500)=""/147, 0x93}, {&(0x7f00000005c0)=""/184, 0xb8}], 0x6, &(0x7f0000000700)=""/83, 0x53}, 0x10200) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)={'trans=virtio,', {[{@version_u}, {@privport}]}}) chdir(&(0x7f0000000140)='./file0\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0xffff88806a40e000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.kill\x00', 0x275a, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000004100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) recvmsg$kcm(r3, &(0x7f0000000900)={&(0x7f0000000140)=@generic, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/62, 0x3e}], 0x1, &(0x7f0000000980)=""/74, 0x4a}, 0x20) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000000240)={{0x1, 0x1, 0x18, r2, {r5, r6}}, './file0\x00'}) mkdir(&(0x7f0000000940)='./file0\x00', 0x38) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x88800, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x5, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 3m39.851307156s ago: executing program 5 (id=777): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @private=0xa010103}}, 0x1}, &(0x7f0000000300)=0x90) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) 3m39.52107719s ago: executing program 5 (id=778): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x225d4e1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {0x8, 0xe}, {0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}]}, 0x2c}}, 0x20000001) 3m39.422500614s ago: executing program 34 (id=778): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x225d4e1, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmmsg$alg(r2, &(0x7f00000000c0), 0x492492492492627, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd2c, 0x0, {0x0, 0x0, 0x12, r1, {0x8, 0xe}, {0xffff}, {0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0xfffffffc}]}, 0x2c}}, 0x20000001) 3m34.300826563s ago: executing program 2 (id=825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000a000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 3m34.299977453s ago: executing program 2 (id=826): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) mq_open(&(0x7f0000000040)='\xeb\xac\xa5\x03\x00\x00\x00\x00', 0x842, 0x18, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fda000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000d8a000/0x1000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x84, r4, 0x10, 0x70bd26, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x5}, 0xc001) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000580)={'netdevsim0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r6, 0x25, 0x0, @val=@netkit}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r6, @ANYBLOB="000000002c12070008000400a1"], 0x28}}, 0x4004090) 3m34.22179743s ago: executing program 2 (id=827): r0 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000800)={0x0, 0x0, 0x1000, 0x40001, 0x7c}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x3) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) syz_ublk_setup_io_uring(0x21, &(0x7f0000000800)={0x0, 0x0, 0x1000, 0x40001, 0x7c}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) (async) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x1}) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r5], 0x3c}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x8000) (async) setsockopt$inet_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000080), 0x3) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) (async) 3m34.170613215s ago: executing program 2 (id=828): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r2, 0x8000000000000003, {0x0, 0xf}, 0xff}, 0x18) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={0x0, 0x1e0}, 0x1, 0x0, 0x0, 0x8005}, 0x40084) r3 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100d1000000fbdbdf3a3300000018000180140002007665746831"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4008800) mkdir(&(0x7f00000001c0)='./file1\x00', 0xb) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r6 = creat(&(0x7f0000000000)='./file0\x00', 0x40) r7 = syz_open_dev$sg(&(0x7f0000005980), 0x0, 0x80201) write(r7, &(0x7f0000000540)="19888f3d240000005043b5c7ed4a46be89d283b02d1fee60faffffffffffffffffc0fac97ffcedaa797e1bff1ff0a69d", 0x30) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r6, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460104028d0400000000000000020006"], 0x58) close(r6) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) write$selinux_attr(r3, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100"/48, @ANYRES32=r8, @ANYBLOB="0100000002"], 0x40) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r9}, &(0x7f00000000c0)=0x2000000, &(0x7f0000000140)='%+9llu \x00'}, 0x20) r10 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) r11 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r11, &(0x7f0000001ac0)={&(0x7f0000000200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, 0x80, &(0x7f0000001a40)=[{&(0x7f0000000340)=""/118, 0x76}, {&(0x7f0000000880)=""/4096, 0x1000}, {&(0x7f0000001880)=""/225, 0xe1}, {&(0x7f0000001980)=""/29, 0x1d}, {&(0x7f00000019c0)=""/105, 0x69}], 0x5}, 0x40000001) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 3m34.101545649s ago: executing program 2 (id=829): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setns(0xc9, 0x0) r2 = socket(0x8, 0x5, 0x5) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x2, 0x30, 0x5, 0x0, 0x0, 0x1ff, 'syz0\x00', 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000180), 0x3ff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="36d2a7981224c866440f38806e2b0f20a00f9a8705d88eed660f38820f0f1ca20600000066bad004ecb9ce0200000f3266b827010f00d8b9d80a0000b882000000ba000000000f30", 0x48}], 0x1, 0x6e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0xe9b, 0x2, 0xd, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x100000000, 0x1005, 0x4, 0x5, 0x40, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m33.831910325s ago: executing program 2 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1\x00\x00\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) lseek(r1, 0x49e6, 0x3) 3m33.742411241s ago: executing program 35 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) syz_clone(0xa4009800, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)='1\x00\x00\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) process_vm_readv(r0, &(0x7f0000000280)=[{&(0x7f0000000140)=""/255, 0xff}], 0x1, &(0x7f0000000240)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x519c02, 0x0) lseek(r1, 0x49e6, 0x3) 1m46.27110307s ago: executing program 4 (id=2237): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000400)={0x9, 0x6, 0x1}, 0x10) (async) ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) (async) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000000c0)={[{@workdir}]}) 1m46.210400627s ago: executing program 4 (id=2238): ioctl$DVB_DEMUX_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000000)={0x7, 0x0, 0xffffffffffffffff}) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000040)=[0x8000, 0x9]) r1 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) ioctl$CDROMREADMODE1(r1, 0x530d, &(0x7f00000000c0)={0xc5, 0x7f, 0x8, 0x7, 0x5, 0x7f}) r2 = add_key$keyring(&(0x7f0000000b40), &(0x7f0000000b80)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000bc0)={0x1, 0x7, {0xffffffffffffffff}, {0xee00}, 0x5, 0xff}) r4 = getgid() keyctl$chown(0x4, r2, r3, r4) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x16) r5 = fsmount(r0, 0x0, 0x0) ioctl$CDROMSTOP(r5, 0x5307) getpeername$packet(r5, &(0x7f0000000c40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000c80)=0x14) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000cc0)=0x0, &(0x7f0000000d00)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'tunl0\x00', 0x0, 0x700, 0x7, 0x10000, 0xfffffffe, {{0x17, 0x4, 0x1, 0x3, 0x5c, 0x64, 0x0, 0x5, 0x2f, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x10, 0xbd, 0x0, 0x6, [0xa, 0x2, 0x1000]}, @ssrr={0x89, 0x17, 0xd5, [@multicast2, @dev={0xac, 0x14, 0x14, 0x3f}, @dev={0xac, 0x14, 0x14, 0x13}, @multicast2, @private=0xa010102]}, @ssrr={0x89, 0x1f, 0x1e, [@dev={0xac, 0x14, 0x14, 0x23}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @local, @loopback, @private=0xa010101]}]}}}}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000e00)=0x0, &(0x7f0000000e40)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000e80)={'wg1\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000f40)={r0, 0x58, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000001000)={'ip6_vti0\x00', &(0x7f0000000f80)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x0, 0x7ff, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev={0xfe, 0x80, '\x00', 0x14}, 0xa8, 0x8000, 0x3ff, 0x3}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000001040)=0x0, &(0x7f0000001080)=0x4) getsockopt$inet6_mreq(r0, 0x29, 0x3c, &(0x7f00000010c0)={@loopback, 0x0}, &(0x7f0000001100)=0x14) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000001340)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001300)={&(0x7f0000001140)={0x1a4, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000001380)={0x0, 'veth1_to_bond\x00', {0x1}}) sendmsg$kcm(r5, &(0x7f0000002800)={&(0x7f00000013c0)=@ieee802154={0x24, @none={0x0, 0x3}}, 0x80, &(0x7f0000002640)=[{&(0x7f0000001440)="e06eb25d545b2e4db2b1af336c5ec4f526b330c8a73ce9bfadf147c42437d1c01a76fb510af704b88777ae5a20af5d3b2ae4bc4445280870449f9d877d048482431a911c99a0a02dc576972b35ea68e01ab4d9a0ae293412864c04f3e86897bfdd57bdb27231bb57b3b0a299a8d837a23b94823f4d61800e1f1ced32e7b15e666dbfa6070a5571a3dd5469adce182e7f60da579d2e14d859abc2efb79df8df1d9c", 0xa1}, {&(0x7f0000001500)="e9490a791e13445b35b8729acab1bb112ebc50a66489f2d116f5056cf590ea1a2a48cd1b0a8f9901ef1390e74fc48225a277f44847e5043a664202a172a7d5f9e5073e789090412452097e6f8c07f0c36281743d008c4ea993a2bd4d050ff45627e0a44d1b7112e37cc87c4c678aa7a9ce32e6144ff73153392787b8957796f554ed9df82c0d625f5d242cbe53851a7c4795358f380ac593e5aaba10f23b73b08217e66471e4b29f09fdfb4865627b7337c9db1e15ebd6c8030029", 0xbb}, {&(0x7f00000015c0)="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", 0x1000}, {&(0x7f00000025c0)="ebb9ec9534933aed028169c76b535c92b5e56c099dc5a6a154682a040e2ce67c7224ba7b39f97a3d37638aa174befeaa2ae1efcd88ec8b32a8438c7d56c2b388024a736dbf", 0x45}], 0x4, &(0x7f0000002680)=[{0xf8, 0x117, 0x7ff, "7eeb1302da1ba964af6386153dbac9d8f76084fcbe82c40702a44836246465b3873faa83125839fd203861199a37e922e98aefd3d24a34b71d282154bb2625914f863bd3759d2bf62d3a512a56313e7aa59cf8ffa5578c44e510f6677e9087b1b92537decaccde45fe9f38aa61fbec4c6c5d9d09d3e0d28fa0a06447f70ceeb9567a4486c7bc2c96d1dd918116b429c70e915912713ee6afa1380932a8f1f6579ead48ac1bba09047005600fc335ba3773cb0c8ea622560702d2984398c8567cbb0bb97f2f92b03bef27c28de3f8876660ff5a110d641683592d842fb76a07ed786ba0f52b"}, {0x50, 0x102, 0x6, "c0b501c26b90ba37cdee24414f20155971ad91e25ce2398d2e0d16115d56bdbcdb62f7450f9a307e8416104e08af9c37b685c2a3845785374933"}, {0x18, 0x112, 0x0, "872f42537e78c6"}], 0x160}, 0x4040801) lstat(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r5, &(0x7f0000002900)={0x62, 0x7d, 0x2, {{0x0, 0x3d, 0x882, 0x80000000, {0x80, 0x3, 0x7}, 0x6010000, 0x0, 0x6, 0xdbc, 0x3, '!\x86.', 0x3, '\'(,', 0x0, '', 0x4, 'wg1\x00'}, 0x10, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', r3, r4, r15}}, 0x62) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000002a00)={'virt_wifi0\x00', &(0x7f0000002980)=@ethtool_coalesce={0xf, 0x6, 0x1000, 0x3, 0x40, 0x4, 0x1000, 0x3, 0x400, 0x9, 0xfffffff7, 0xd, 0x4, 0x3d, 0x1ff, 0x4fd, 0x8, 0xff, 0xc, 0x10000, 0x5, 0x3a, 0x2}}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f0000002a40)={0x3, 0x10}) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000002a80)={0x54a23b508c47a353, 0x0, "6a2684faea113cee7636e2c12cae8e14"}) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002ac0)={@broadcast, @multicast2, r7}, 0xc) write$P9_RGETATTR(r5, &(0x7f0000002b00)={0xa0, 0x19, 0x1, {0x4, {0x2, 0x1, 0x7}, 0x4, 0xee00, r16, 0x9, 0x1, 0x8, 0xfffffffffffffff8, 0x400, 0x3, 0x9, 0xd70, 0x100000000, 0xc3, 0x3, 0x2, 0x3, 0x101, 0xd}}, 0xa0) 1m46.210053095s ago: executing program 4 (id=2239): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x80e9c, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000840)=0x473e, 0x4) (async, rerun: 64) r1 = getpid() (async, rerun: 64) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x75, 0x109301) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x7, 0x20, &(0x7f0000000140)="a756", 0x2, 0x7ff, 0x2, 0x0, 0xffffffff, 0x1000005, 0x0}) (async, rerun: 64) kcmp(r1, r1, 0x3, 0xffffffffffffffff, 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000300)=0xffffff7f, 0x4) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x21, 0x37, 0x1, {0x2, 0x2, 0x9, r1, 0x3, '\'\'\xd3'}}, 0x21) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x3f, 0x0, &(0x7f0000000040)) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140004001800010324bd7002fadbdf250ff360ae179712d29ae321dda082011c8b50c72884789a319c1ae64cb99263b4617a35c4e9176e8f053db6d3df12f2816605000000000000006349bf8d33fc06b7"], 0x14}}, 0x0) sendmmsg$inet(r0, &(0x7f0000003240)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, 0x0}}], 0x1, 0x4000800) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}, 0x75}], 0x1, 0x2100, 0x0) (async) r5 = open$dir(&(0x7f0000000200)='./file0\x00', 0x800, 0x40) openat(r5, &(0x7f0000000280)='./file0\x00', 0x80, 0xf3) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000074b3f4354aa0e82feca6659baddcb8d33f7b7703df2d6bb6321d227b0922be551c0a1d42611603d607"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000040)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xc5}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m46.070460487s ago: executing program 4 (id=2240): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a00000002010600"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m45.998745631s ago: executing program 4 (id=2242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/fcloop/ctl/add_target_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='wwnn=0x3333333333333333,wwpn=0x4444444444444444', 0x2f) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000004000000140005000303000a000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f00000001c0)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x67, 0x4, 0x80000000, 0xdf, 0x101, 0x10, "83f68247cfd7c8f7696e4f15c1a7ae7eaa9b1182ba9ff55226f97fb2da50f91d121b296144c2c06caa7e18b2fefd1da6371773073b388f2a74a10da4d8d70a939e1adedff02d1c52c121e1ebce475416524192abb036c771de7e6e985072cd56b783d736f20f23"}}, 0x17f) 1m45.770975938s ago: executing program 4 (id=2243): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1m32.980689328s ago: executing program 0 (id=2323): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8bf0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, r0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x6, 0x0, 0xb}, {0x65}}, [@printk={@lld, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xc, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x4}}], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m32.900536595s ago: executing program 0 (id=2324): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x814) r3 = socket$inet(0x2, 0x6, 0x2) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40881}, 0x4048010) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000400), r0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x2, 0x8e7, 0x42, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2={0xfc, 0x2, '\x00', 0x2}, 0x20, 0x1, 0x6b01, 0xc0}}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'syztnl0\x00', &(0x7f00000005c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x79, 0xa, 0x9, 0x1c, @private2={0xfc, 0x2, '\x00', 0x1}, @local, 0x7800, 0x20, 0x7, 0x1}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000680)={@mcast1, 0x0}, &(0x7f00000006c0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000700)={'erspan0\x00', 0x0, 0x7, 0x7800, 0x6, 0x0, {{0x21, 0x4, 0x2, 0x5, 0x84, 0x66, 0x0, 0x2, 0x29, 0x0, @empty, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xec, 0x1, 0x2, [{@rand_addr=0x64010100, 0x6}, {@multicast1}, {@empty, 0x8000}]}, @end, @rr={0x7, 0xb, 0xe2, [@dev={0xac, 0x14, 0x14, 0x26}, @multicast1]}, @lsrr={0x83, 0x13, 0xce, [@private=0xa010101, @local, @private=0xa010102, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x69, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x37}, 0x3}, {@rand_addr=0x64010100, 0x83b5}, {@dev={0xac, 0x14, 0x14, 0x1a}, 0x3}, {@loopback, 0xa7c6}, {@multicast2, 0x6}, {@broadcast, 0xfffffffe}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000900)={'gretap0\x00', &(0x7f0000000800)={'syztnl1\x00', 0x0, 0x80, 0x8, 0x10001, 0xfc, {{0x34, 0x4, 0x1, 0x6, 0xd0, 0x64, 0x0, 0x2, 0x2f, 0x0, @remote, @local, {[@timestamp_addr={0x44, 0x4c, 0x58, 0x1, 0x8, [{@remote}, {@remote}, {@broadcast, 0x31}, {@multicast1, 0xdb}, {@multicast2, 0x5}, {@empty, 0x1}, {@multicast1, 0xe}, {@rand_addr=0x64010101, 0xff}, {@multicast1, 0x2}]}, @ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x6b, 0x3, [{0x1, 0x12, "959595f8e86774484af315a49e640c1e"}, {0x2, 0x4, "511a"}, {0x1, 0x8, "037e0867f0d1"}, {0x5, 0x8, "75ad3579f07e"}, {0x6, 0x12, "3fe7aa1b15f5c42093e72504235dd479"}, {0x2, 0xc, "aeb74fbeb8fb2b21d86b"}, {0x6, 0xb, "0489a31da8bcb40d61"}, {0x2, 0xa, "9b01b1a47011053f"}, {0x6, 0xc, "b3af94ea1ffc788c42b3"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000009c0)={'syztnl0\x00', &(0x7f0000000940)={'ip_vti0\x00', 0x0, 0x7800, 0x10, 0xd, 0xa9ce, {{0x18, 0x4, 0x0, 0x8, 0x60, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast1, @private=0xa010100, {[@ra={0x94, 0x4}, @cipso={0x86, 0x38, 0x2, [{0x2, 0xf, "8dd448d57cec5d1589912ab25b"}, {0x7, 0xd, "c0c6be6cf19ea695dec724"}, {0x1, 0xd, "224793e731dfe40600e601"}, {0x5, 0x7, "146f253b00"}, {0x1, 0x2}]}, @end, @noop, @timestamp_prespec={0x44, 0xc, 0x66, 0x3, 0x6, [{@multicast1, 0x6}]}]}}}}}) getsockname$packet(r3, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000a40)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000a80)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000b40)={'syztnl2\x00', &(0x7f0000000ac0)={'ip6tnl0\x00', 0x0, 0x2f, 0x4, 0x9, 0x3, 0x12, @mcast1, @remote, 0x7, 0x20, 0x6, 0x1}}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001200)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000b80)={0x620, r5, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8, 0x1, r9}, {0x88, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1a}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0xe4, 0x2, 0x0, 0x1, [{0x6c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x3c, 0x4, [{0x5, 0x2, 0xc0, 0x7}, {0xe5d, 0x7, 0x9, 0x81}, {0x7, 0x6, 0xee, 0x2d}, {0xd7, 0x2b, 0x7, 0x2}, {0x8, 0x6, 0x4, 0x7fffffff}, {0xda7, 0x3, 0x2, 0x8}, {0x9, 0x40, 0x5}]}}}, {0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0x1b4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r13}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x6a4e}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0x6, 0xf7, 0x3, 0x9}, {0x0, 0xe0, 0x9, 0x40}, {0x0, 0x6, 0x9, 0x4}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8b}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8, 0x1, r15}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r16}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9fcf}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x95}}, {0x8}}}]}}]}, 0x620}, 0x1, 0x0, 0x0, 0x44000}, 0x20008840) r18 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r19 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000012c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001300)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r18, &(0x7f0000001440)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001400)={&(0x7f0000001380)={0x50, r19, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r20}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r21}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r22}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r23 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r23, &(0x7f0000001680)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001640)={&(0x7f0000001580)=@bridge_delneigh={0x9c, 0x1d, 0x2, 0x70bd25, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0x20, 0x9d, 0x1}, [@NDA_CACHEINFO={0x14, 0x3, {0x100, 0x2, 0x6, 0x7d9}}, @NDA_CACHEINFO={0x14, 0x3, {0x10, 0x5, 0x8, 0xb8}}, @NDA_SRC_VNI={0x8, 0xb, 0x7}, @NDA_CACHEINFO={0x14, 0x3, {0xa, 0x800, 0xe, 0x2}}, @NDA_VLAN={0x6, 0x5, 0x1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_PROTOCOL={0x5, 0xc, 0x4}, @NDA_MASTER={0x8, 0x9, 0x5}, @NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_DST_MAC={0xa, 0x1, @multicast}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8841}, 0x40) 1m32.79972815s ago: executing program 0 (id=2325): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000201060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m32.797272676s ago: executing program 0 (id=2326): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x1c1) mount$9p_virtio(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x2210088, &(0x7f0000000580)=ANY=[@ANYBLOB="74f5026e733d76697274696f2c70726976706f72742c646972656374696f2c63616368653d6c6f6f73652c6d73697a653d307830303030303030303030303031303030"]) chdir(&(0x7f0000000100)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x62981) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x800000, 0x0, 'queue1\x00', 0x2}) writev(r2, &(0x7f0000000580)=[{&(0x7f0000000000)="238292", 0x460}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x13, r1, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r4, 0x2b) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) mount(&(0x7f0000000040)=@sg0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000180)='ntfs3\x00', 0x0, &(0x7f0000000200)='discard') r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000004000000140005000303000a000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m32.660255886s ago: executing program 0 (id=2327): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f00000016c0)={0x37, &(0x7f0000000440)}) 1m32.490614187s ago: executing program 0 (id=2328): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000180)=0x1000400, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1500\x00', 0x5) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) socket(0x26, 0x2, 0x703) ioctl$BSG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000000000000000000000000000000000000000e2c0d91e4f687d336f2a798448dd5724d65a155cabdc2346cd4adf02adab985e71793e33c9f6adba53f48bcef8081e257f6808f4c049f8793817015cef7bbc081cee2249040f8498a48caad02ca7a49fe446a3ae9279ad1c565f4392b27aa134394cb451827e907b02c3db", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ppoll(&(0x7f0000000040)=[{r9, 0x7141}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) sched_setaffinity(r7, 0x8, &(0x7f0000000140)=0xfffffffffffffe6c) 1m32.371262428s ago: executing program 36 (id=2328): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000180)=0x1000400, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ncm.usb0/max_segment_size\x00', 0x1, 0x0) write(r3, &(0x7f0000000200)='1500\x00', 0x5) r4 = syz_open_dev$sg(&(0x7f00000001c0), 0x508d48d4, 0x40902) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) socket(0x26, 0x2, 0x703) ioctl$BSG_GET_COMMAND_Q(r4, 0x2270, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_FIOGETOWN(r6, 0x8903, &(0x7f0000000040)=0x0) r8 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000080)={0x40, 0x5, 0x5, 0x9, 0x2, 0x8, 0x0, 0xc6, 0x2, 0x80, 0x8, 0xa, 0x7, 0x3}, 0xe) sendmmsg$inet_sctp(r8, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000000000000000000000000000000000000000e2c0d91e4f687d336f2a798448dd5724d65a155cabdc2346cd4adf02adab985e71793e33c9f6adba53f48bcef8081e257f6808f4c049f8793817015cef7bbc081cee2249040f8498a48caad02ca7a49fe446a3ae9279ad1c565f4392b27aa134394cb451827e907b02c3db", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r9 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ppoll(&(0x7f0000000040)=[{r9, 0x7141}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000000140)) sched_setaffinity(r7, 0x8, &(0x7f0000000140)=0xfffffffffffffe6c) 1m30.094635232s ago: executing program 37 (id=2243): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) setns(0xc9, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) set_mempolicy(0x3, &(0x7f0000000140)=0x7, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r2) syz_open_dev$tty20(0xc, 0x4, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3], 0x90}}, 0x0) 1m26.408789417s ago: executing program 7 (id=2354): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x20, 0x15, 0xa, 0x701, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x810}, 0x40014) r2 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) ioctl$HIDIOCSREPORT(r2, 0x400c4808, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x10, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x5350a0e2ad0fd2e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) sendmsg$ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_AUTONEG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m26.170494096s ago: executing program 7 (id=2355): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/image_size', 0x20202, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f00000000c0)={&(0x7f0000000000), &(0x7f0000000080)=""/16, 0x10}) recvfrom(r0, &(0x7f0000000100)=""/67, 0x43, 0x2041, &(0x7f0000000180)=@generic={0x1, "751098e61ac86c65d94f6a62f741c3f5e0c313783be608fed3480fcc2ebb9e8f48485221f5001ca4f8ae708e04079863e9b49db1ba021464f0b12256d0cb8d16169ef281e2def2f3abddc9f1c3bc6c0fcfe28db744da7da75be7ea13fce66208bda24b5ed0b1a58b961f38ceb279ffe00107d539684e49302a9e0681ce09"}, 0x80) sendfile(r0, r0, 0x0, 0xc3) 1m26.110008272s ago: executing program 7 (id=2357): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt(r0, 0x3323, 0xfffffffd, &(0x7f0000000000)="64760c61d8fa4a622b8a9d1c129479eee43a2c943464c74abca20099ae289470eccbfa9340d9c536d035cca834352d0e656131e09f3dbe95bc1738e4cd8d70df2c7b3c70cb8a01d8f683941826b0d1198aa0f76ce607dcacaa9ea58a69c26c4a4bc8df84f3bfbc", 0x67) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r1, 0xc0c0583b, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) close(0x3) 1m26.109484701s ago: executing program 7 (id=2358): epoll_create1(0x0) (async, rerun: 64) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, 0x0}, 0x68) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1600000004", @ANYRES8], 0x50) (async, rerun: 64) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async, rerun: 64) r3 = io_uring_setup(0x44d4, &(0x7f0000000200)={0x0, 0x6570, 0x10, 0x3, 0x20f}) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x15, &(0x7f00000003c0)=[{0x0, 0x0, 0x0}], 0x1) (async, rerun: 32) recvmsg$can_j1939(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40) (async, rerun: 32) connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e21}, 0x6e) r4 = syz_clone(0x4380400, &(0x7f0000000540)="724f161e05e1edcd76a7f1324c696caccbc4b4d4b3ebc95f632277b147e613816d373977e85e082a0b1c4d3283bb1c86b1b5f2e0fd7ed68fe33ab449618d8c6278fddf46cbccfc735713c4ab4bc8c8e8feaa2e48af381ef9881cc3ac81cf5cfbcb0b9896c570d823d55cf6a1e15c4c80101db744c3b457248204f5c577685e75de49b330a34b4421cc4f3dab95f511e93f1cb18d939f0e0541d6980cfbccae7bc9215435f6290489497808005f40b4ed450e8fdee6f6f7cd690d115ebbfe20e0df9a1c257249e47a83", 0xc9, &(0x7f0000000140), &(0x7f0000000200), &(0x7f0000000300)="54982f00000000b4db7510322818153b5da9f46e090f8566957a4ed1de97a9ccb1d449bd4f00007b3e4bdc87d3d6b83ef6175916cf951c20d82e465d1f5f6f3dd0a44d08969aa2ff2f104e4385bd0e242119ac2d0141924752bec2a8c007c247a74816a065d648ebc221e5528b8dac4459291ead096074764ac6381bd8181269cca23d43c1b4662d7ee2ac875f50029cf615d2448d6552c53d4dd3185ffa68090f39321a44c1a091a79250bbd9b572060f4630ba6df10000300a061a67bed07d471c7c80956e413f37eb7bd67f80a4c36325dff247e49d0c583161c3e3940f0e59c9a13753d3f6379b444f1d203efdf4") (async, rerun: 64) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r2, 0x400c6615, &(0x7f0000000500)={0x0, @aes256, 0x0, @desc3}) (async, rerun: 64) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) (async) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) (async) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x27, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0) write$P9_RREADLINK(r5, 0x0, 0x0) (async, rerun: 32) socket$phonet(0x23, 0x2, 0x1) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) r8 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_ENUMINPUT(r8, 0xc050561a, &(0x7f0000000280)={0x0, "051f9a29fd70d6c420ad27dc44f87cd82489481664fa394e17bc4297c672b716", 0x1, 0x7, 0x2, 0x2000000, 0x0, 0x2}) (async, rerun: 64) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="240000001a0001000000ff7f000000008094"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async, rerun: 64) syz_open_procfs$pagemap(r4, &(0x7f00000002c0)) 1m24.700453775s ago: executing program 7 (id=2366): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) getsockopt$inet_buf(r3, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r4, 0x0, 0xa, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r6, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x121583, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40081271, &(0x7f0000000980)=0x200) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=ANY=[@ANYBLOB="b00000000802110000010802110000000802110000001000471f8f06440f"], 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=ANY=[@ANYBLOB="100000000802110000010802110000000802110000002000010000000100010882848b1be973b824"], 0x28) 1m22.680209533s ago: executing program 7 (id=2372): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async, rerun: 32) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '#{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000008}, 0x4040000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async, rerun: 64) ppoll(&(0x7f00000002c0)=[{r0, 0x200}, {r1, 0x226}, {r0, 0xa000}, {r0, 0x112}, {r0, 0x4100}], 0x5, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x25c40]}, 0x8) (async, rerun: 64) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) 1m22.582882868s ago: executing program 38 (id=2372): r0 = socket(0x2, 0x80805, 0x0) (async) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0xc0686611, &(0x7f0000000180)={0x900, 0x0, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async, rerun: 32) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$NLBL_MGMT_C_LISTALL(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x3c, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '#{\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000008}, 0x4040000) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) (async, rerun: 64) ppoll(&(0x7f00000002c0)=[{r0, 0x200}, {r1, 0x226}, {r0, 0xa000}, {r0, 0x112}, {r0, 0x4100}], 0x5, &(0x7f0000000300)={0x0, 0x3938700}, &(0x7f0000000340)={[0x25c40]}, 0x8) (async, rerun: 64) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) (async) recvmmsg$unix(r0, &(0x7f0000005cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) (async) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000140)) 1m19.366521712s ago: executing program 6 (id=2395): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd27, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8, 0x5, 0x0, 0xfffffffc, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x4, 0x0, 0x8000000}, {0x0, 0xffffffff, 0x0, 0x0, 0xfffffffd}, {0x2, 0x0, 0x400000, 0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x20}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x9}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x5}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {0x80}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x15, 0x0, 0x48510}, {0x0, 0x8000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xd, 0xffffffff}, {}, {}, {0x4, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, {0x0, 0x0, 0x200}, {}, {}, {0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb4}, {}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x4, 0x9}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2}, {}, {}, {}, {0x800000, 0x0, 0x0, 0x0, 0x0, 0x56}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x6, 0x0, 0x4}, {}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {}, {0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x2, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffe, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x8000}, {0x0, 0xe3, 0x10000}, {0x0, 0x80000000, 0x0, 0x7dff800}], [{}, {}, {0x0, 0x1}, {}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x4}, {}, {0x5, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {0x2, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {0x0, 0x1}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000280)=0xfffffffffffffff8) r2 = getpid() fcntl$setownex(r1, 0xf, &(0x7f0000000080)={0x2, r2}) socketpair(0x21, 0x800, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000000c0)=r2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x2, 0x1, 0x80000001, 0x2, r2}) 1m19.220396358s ago: executing program 6 (id=2396): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r1, 0x400, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000064}, 0x0) nanosleep(&(0x7f0000000180)={0x77359400}, &(0x7f00000001c0)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) close(r2) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) fsetxattr$security_ima(r3, &(0x7f0000000280), &(0x7f00000002c0)=@ng={0x4, 0x12, "6343c24181f65f7864e119318c5f136c8e8ce5d4"}, 0x16, 0x3) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x1000, 0x80, 0x4, 0x4781}, {0x1, 0x3, 0x5, 0x9}]}) syz_80211_inject_frame(&(0x7f0000000380)=@device_b, &(0x7f00000003c0)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x8, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @broadcast, @random="b03be549de14", @from_mac, {0x8, 0xbc8}, "", @value={0x5, 0x0, 0x2, 0x1, 0x8}}, @random="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"}, 0x772) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b80), r0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x2c, r5, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x1}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x7fc6}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044800}, 0x20004801) r6 = socket$inet6(0xa, 0x80000, 0x9) close_range(r4, r6, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r0, 0x8070587c, &(0x7f0000000d00)) ioctl$XFS_IOC_FSGROWFSLOG(r3, 0x4008586f, &(0x7f0000000d80)={0xc, 0xee09}) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000dc0), 0xa0080, 0x0) ioctl$TUNGETDEVNETNS(r7, 0x54e3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)={0x2c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'IPVS\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x9, 0x14, 'IPVS\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40050}, 0x24000000) 1m17.79061334s ago: executing program 6 (id=2406): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl(r2, 0x4048aec9, &(0x7f0000000100)="03000000000000000100000002000000000000000100000000000000ffffffff") close_range(r0, 0xffffffffffffffff, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) r6 = syz_open_dev$vim2m(&(0x7f0000000100), 0xe1de, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_QBUF(r6, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3}) close_range(r5, 0xffffffffffffffff, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1bd040, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="6764430f01f866b82d018ec0f3490f2c94ea20df28190f3566ba2100ec66ba4200ed2e0f32c442fd22d366460f3881010f20d835200000000f22d8"}], 0xaaaaaaaaaaaad37, 0x4a, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYRESOCT=0x0], 0x28}}, 0x4041090) r11 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r12 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r12, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r12, 0x4008af03, &(0x7f0000000040)) ioctl$VHOST_SET_FEATURES(r12, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv(r12, &(0x7f0000001480)=[{&(0x7f00000002c0)=""/220, 0xdc}], 0x1, 0x10002, 0x77) ioctl$VHOST_VSOCK_SET_RUNNING(r12, 0x4004af61, &(0x7f0000002140)=0x1) close_range(r11, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m17.560622298s ago: executing program 6 (id=2407): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1c5) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x560d, &(0x7f0000000140)={0x5, 0x899, 0x1006}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/dlm/cluster/comms/1/local\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='1', 0x1) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000005c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x2) 1m17.435275775s ago: executing program 6 (id=2408): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x2, 0x1000, 0x1, 0xfffffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000002, 0x0, 0x0, 0x16}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@any_dev={0x1, 0xe50, 0x0, 0x0, 0x1000, 0x2000002, 0x0, 0x0, 0x16}}}, &(0x7f0000000300)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002100)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) syz_ublk_setup_queues(r0, r5, &(0x7f0000000540)={0x0, 0xb685, 0x1, 0x2, 0xa3, 0x0, r0}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd139, 0x2000, 0x3, 0x3b4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2d2c, 0x58018, 0x1, 0x11e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf91b, 0x400, 0x2, 0x3e, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4cdf, 0x1000, 0x0, 0x38d}}], 0x4, &(0x7f00000025c0)={0x2e, 0x9, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x8}, 0x0, r4, '\x00', {0x1, 0xe53, 0x0, 0x0}}, &(0x7f0000002640)) 1m17.127982591s ago: executing program 6 (id=2410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="9f544e4dc43e032562c1696d77d65661fa5e9321b5d86928d040b5e85318a6b77cb1ba0d2161506786b0f80491dd2d097fff16f50a6876798bb6b54519dd8ffa6cd1a6bcecd3ed6833bed2c0768a28068ce69e8b30af0bc8b989c8f84f65e3399e965dbc1752f763e06541fe3f255647be884e90ef3a2edc0eb5c9") sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="9f544e4dc43e032562c1696d77d65661fa5e9321b5d86928d040b5e85318a6b77cb1ba0d2161506786b0f80491dd2d097fff16f50a6876798bb6b54519dd8ffa6cd1a6bcecd3ed6833bed2c0768a28068ce69e8b30af0bc8b989c8f84f65e3399e965dbc1752f763e06541fe3f255647be884e90ef3a2edc0eb5c9") (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) (async) 1m16.995906723s ago: executing program 39 (id=2410): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="9f544e4dc43e032562c1696d77d65661fa5e9321b5d86928d040b5e85318a6b77cb1ba0d2161506786b0f80491dd2d097fff16f50a6876798bb6b54519dd8ffa6cd1a6bcecd3ed6833bed2c0768a28068ce69e8b30af0bc8b989c8f84f65e3399e965dbc1752f763e06541fe3f255647be884e90ef3a2edc0eb5c9") sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) (async) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="9f544e4dc43e032562c1696d77d65661fa5e9321b5d86928d040b5e85318a6b77cb1ba0d2161506786b0f80491dd2d097fff16f50a6876798bb6b54519dd8ffa6cd1a6bcecd3ed6833bed2c0768a28068ce69e8b30af0bc8b989c8f84f65e3399e965dbc1752f763e06541fe3f255647be884e90ef3a2edc0eb5c9") (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a80)=@ipv6_deladdrlabel={0x38, 0x48, 0x309, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x80, 0x0, 0x0, 0xfffffff9}, [@IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x0) (async) 2.83041089s ago: executing program 9 (id=2802): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x141000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xc4, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x160}, 0x1, 0x0, 0x0, 0x40}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) memfd_create(&(0x7f0000000b00)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x01\x83y\xf3\xb2\xe6b$\a\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\b\x00\x00\x00LR\xa1\x00\x00\x17\x1f$^\xe1\x00\x04\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\xce\xd5O\xcc\b\x9e\x19\x19#\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\xfd\xc7\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$h\x0ew\x00&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x01\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xff\x06\xe7j\x9fTJ;T\xf3\xfa\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x00\x00\x00\x00\x00\x00\x00\x0f\x81\xf3\x05\xa3{\x96\xf9\xba\x9em\xe9\"\x03\x933P\xbb\xd6\x9b\f\xa7\x8f9\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10\x00\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x131\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\r\xd5)\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I\xfa\x12\xfc\x96\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW\x00\x00\x00\x8fw\xa9A\xf7m\xeec\xb6\\\xa4T\xeej\xe2\xba\xb2V\xacc\xc6|\xae]\xdb\x10\xb3\x80z\xd5\n\xa3u\xfb\b\x03\xe5\xca;\xe5uH<\x9a\x12\x84(\x9f\xd2\xe1k\x955;J\xa4\x81Lm\x90\x1a\xfdI}\xb0\xa1\xfa9\x17\xd1\xa2\xc7\xca\x98\xaeS\x92Ew`\xd2\x02\xda\xc9\xd4\xea\x02\x1d\xd3\xd5\x81\xdb\xd9~\xd6-:\xee\xe8\t\xf7\xe6\xf1\x88\x86\xb0\x04\x9ep\xb1\x93\x16\xf9\xdb\x15\x8a\xa3h<\xaf\xa0\xb5\xb0\x05ir\xff\xff\xff\xff\x00\x00\x00\x00\x83\x91\xad\x11\xf4\xbcz\x9b\x8bp]o\au\x175I\x1d\xe2\x97\xb6\x06\xdc\x14\x9b>\xd7F\xdb?\xc7%0n/\xf5S\xb5\xe8\xa5\xd1\xddN\xf9ir\xd1r\xf4L\t3\xadDz\\\xf4`\x13\xf7)\x91w\a\xcc+E\xdd\xe9\xdbb\x9c\xff\x98\x03\xb7\x0e=\xba\xa3um\xde\xff$|\xb7\x86j+\x00\x00\x00\x00\x00\x00\x00Z\xef\xd6\xf4Zs\xfc\ro\x03\xabB\x18\xdc\a\xe3\r\x00\x00\x00\x00\x00\x00', 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x674b, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x200, 0x4003ffff, 0xfe}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdc2, 0x4000, 0xffffffff, 0x176, 0x0, r5}}], 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=ANY=[@ANYBLOB="12000000020000000800000002"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) close(r9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r10}, &(0x7f0000000000), &(0x7f00000002c0)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r10}, &(0x7f00000014c0), &(0x7f0000001500)=r9}, 0x20) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000080)={0x37, &(0x7f0000000140)=[{0x11, '\x00', @buffer={"29a5609751d4df0b74cc51dc1ea194e81cbbfabffb37000000c7b1de00", 0x20}, 0x804}]}) 2.720345901s ago: executing program 3 (id=2803): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {@in=@local, 0x1234, 0x6c}, @in=@remote, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0x2, 0x1}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)={0x34, r3, 0x321, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x42}, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x198, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x6d}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "9a5dbeb507bbb97cd4d8fd4ddef0eb5529238a4bae0f380b"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d07daab7c82847234b55cf9e96c4ea7d2d2386048a0cecdf"}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5b0e0acdb4a53236ac77ff4d77555278a0d886f2efdcc76e"}], @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "82fb197ac9ea16272b26b552af780b724fa5364ffbf5e62f"}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b1b908cb1d026a2446ce67567f18a4700b9093438127545b"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}], @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}]}, 0x198}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) syz_emit_ethernet(0x27, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x6c, 0x0, @remote, @local}, "0000123412"}}}}, 0x0) 2.720035159s ago: executing program 9 (id=2804): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x34, r1, 0x1, 0x170bf2a, 0x25dfdc01, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4920}, 0x20048e4) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) 2.667170192s ago: executing program 1 (id=2805): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000040)={0x0, 0x6, 0x8}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000640)=@allocspi={0x100, 0x16, 0x401, 0x0, 0x0, {{{@in=@local, @in6=@mcast1, 0x0, 0xfd1, 0x0, 0x2, 0x2, 0x0, 0x0, 0xc}, {@in=@broadcast, 0x0, 0x33}, @in6=@loopback, {0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x80000001}, {0x101, 0x0, 0x0, 0x800}, {0x4, 0x6, 0x400}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x94}, 0x0, 0x4ad}, [@XFRMA_IF_ID={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20040080}, 0x0) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x10002, r0}, 0x38) r2 = io_uring_setup(0x2b32, &(0x7f0000000080)={0x0, 0x17a3, 0x800, 0x1, 0x336}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r2, 0x13, &(0x7f0000000100)=[0x7fff, 0x520e], 0x2) 2.607249365s ago: executing program 9 (id=2806): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000240)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}], 0x1) sendto$inet6(r0, &(0x7f0000000140)="96", 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x2, 0x4) close(0x3) 2.440824721s ago: executing program 1 (id=2808): keyctl$link(0x8, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcde) 2.354625043s ago: executing program 1 (id=2810): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000340), 0x800, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5201) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010400000000000000000a0000000900010073797a31000000000900030073797a310000000034000000030a010400000000000000000a0000000900010073797a31000000000900030073797a320000000008000a000000000440000000060a010400000000000000000a0000000900010073797a31000000000900020073797a320000000014000480100001800c000100636f756e746572006c000000060a010400000000000000000a0000000900010073797a31000000000900020073797a3100000000400004803c0001800e000100696d6d6564696174650000002800028008000100000000001c0002801800028008000100fffffffd0900020073797a3200000000140000001100010000000000000000000a00000a"], 0x15c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a20000000080a010000000000000000000a0000000900010073797a31000000000900020073797a310000000020000000020a010000000000000000000a0000000900010073797a3100000000140000001100010000000000000000000a00000a"], 0x68}}, 0x0) 2.250200561s ago: executing program 8 (id=2811): r0 = socket(0xa, 0x3, 0x3a) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000040)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) 2.249728788s ago: executing program 9 (id=2812): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) (async) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) dup(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001a00010000000100000000001c140000fe004001000000000800010000000100"], 0x24}}, 0x2000a000) (async) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x68, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x3a3, {0x5, 0x4, 0x1, 0x3d, 0x9, 0x67, 0x1c, 0x8, 0x33, 0x8, @empty, @remote}}}}}}, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="64670feea1096f00003e660f38054c880f323e26640fb9a9c94f660fc7b27f1a360f09366764f4660fdd40e69a3a00e300baa000b0e5ee", 0x37}], 0x1, 0x6, 0x0, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) r8 = gettid() (async) r9 = getpid() ioctl$KVM_GET_MSR_FEATURE_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000280)={0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}) kcmp(r8, r9, 0x0, r7, r7) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000700)={'#! ', './file1'}, 0xb) (async) close(0xffffffffffffffff) (async) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) (async) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r10, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x5, 0x0, 'queue0\x00', 0x5}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x4, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r10, 0x404c534a, &(0x7f0000000380)) (async) ioctl$TIOCL_BLANKSCREEN(r0, 0x4b67, &(0x7f0000000000)) 2.149170643s ago: executing program 1 (id=2813): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80, 0x0, 0x0, 0x9}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x7ff, r3, 0x4}, 0x38) write$char_usb(r1, 0x0, 0x0) 2.148746238s ago: executing program 3 (id=2814): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c00000002060108000000000000000000000101050005000a000000050001000700000005000400000000000900020073797a310000000016000300686173683a6e65742c706f72742c6e65740000000c00078008000640"], 0x5c}}, 0x0) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x100000000006, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000400)={0x1, 0x0, {0x4, 0x800002, 0x3011, 0x0, 0x8, 0x2, 0x1, 0xf45b5a29ee9ca46}}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff0000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 2.136811504s ago: executing program 8 (id=2815): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0a00000007000000ff0f000007"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2, @ANYRES16=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f00000001c0)='bbr', 0x3) write$binfmt_script(r3, &(0x7f0000000200), 0xfffffd9d) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r4, 0x2285, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) write$sndseq(r5, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick=0x1000, {}, {}, @quote}], 0x38) write$sndseq(r5, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x80, @time={0x4, 0x4}, {}, {}, @connect={{0x5, 0xf0}, {0x1, 0x2}}}, {0x0, 0x0, 0x0, 0x20, @time, {}, {0x0, 0x4}, @time=@time}, {0x0, 0x0, 0x0, 0x0, @time={0x10}, {}, {}, @control={0x0, 0x8001}}, {0x0, 0x0, 0x0, 0x0, @time, {}, {0xfe}, @note={0xf, 0x1, 0x7f, 0x7, 0xec}}, {0x0, 0x0, 0x0, 0x0, @time, {0xfc}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0x8c) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x110) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]}) r9 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r9, &(0x7f0000002280)=""/4096, 0x1000, 0xd33) sendmsg$nl_route_sched(r0, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@delchain={0x24, 0x65, 0x101, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x5, 0xf}, {0xdae3fccaeee4ba5, 0x2}, {0xa, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1.939185125s ago: executing program 3 (id=2816): r0 = syz_open_dev$sndpcmp(&(0x7f0000001840), 0x1, 0x200) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @mcast2, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000000000000005", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x103200, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) r5 = epoll_create1(0x80000) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, r4, 0x7, r3, &(0x7f00000002c0)={r5, r0, 0x2}) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r8 = inotify_init() r9 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_TENBIT(r9, 0x704, 0x1) openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.299954453s ago: executing program 9 (id=2817): syz_usb_connect(0x1, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32, @ANYRESHEX], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = dup3(r1, r0, 0x80000) r3 = dup(r2) pwrite64(r0, &(0x7f0000000100)="8612e4191774a1e37f8ed72564692a1638bf612ec36b3fe69c30d76a86c3a6145145144e28a71f45e08b8454641b602fa164bc43659d4c57a26f21a20c5dd038ca862bf3cf41146936c274190d3c6bc1", 0x50, 0x2) read(r3, &(0x7f00000014c0)=""/4096, 0x1000) timer_create(0x3, &(0x7f00000003c0)={0x0, 0x23, 0x4, @thr={&(0x7f0000000280)="14aaed556b847670a36871357e6f8cadc76e427b89d23d9d4c429cb450425db431300214f0671d6a3058cab8d5b7783a7862dbe4934a169e43f7fa23b0eef12feb88d725bd512c7308155e9565c70730df1dc9d5", &(0x7f0000000300)="3114921ecfc3414ad8f4d0f1b99541de14bd23f4e350d9a8abf5e0e254229849628d590f2685a76374ee03e767993e4cb8e305ab79bc9df7c41ae19d53c42207a5dac5948432b2f486bc1e9dd9fb8651eb10496b1daa5805ed7ecfefaf1ef5d6d9ac8b84ad7939550770b196dbfa476f75988c4003b91a9f652db45db5102cd73d0ab0756f3a9ebf9d255feab61edaa468f9417923ebfe178cb2f6b7a6e4cb9e025393479ef4ff62b5"}}, &(0x7f0000000400)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x3938700}}, 0x0) 1.090953538s ago: executing program 8 (id=2818): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) (async) listen(r0, 0xc) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) clock_gettime(0x0, &(0x7f0000000580)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000000540)=[{{&(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/133, 0x85}, {&(0x7f0000000240)=""/83, 0x53}, {&(0x7f0000000440)=""/174, 0xae}], 0x4}, 0x6}], 0x1, 0x100, &(0x7f00000005c0)={r2, r3+60000000}) (async) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) 1.066388219s ago: executing program 3 (id=2819): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) socket$kcm(0x29, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) write$FUSE_INIT(r2, &(0x7f0000000000)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x2d, 0x9, 0x100848, 0x9, 0x6, 0x7, 0x80000001, 0x0, 0x0, 0x40, 0x5}}, 0x50) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[@ANYBLOB="680000001000390400000000fbdbdf2500000000", @ANYRES32=r3, @ANYBLOB="019b0000419a0400480012800b1a0100697036746e6c000038000280060010000200000014000300fe8000000000000000000000000000aa080008002e00000008000800050000000500090029000000"], 0x68}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r3, 0x1, 0x4, 0x6, @local}, 0x14) 870.23099ms ago: executing program 3 (id=2820): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) (async) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) (async) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'pim6reg0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4c840) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x84, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtfilter={0x84, 0x2c, 0xf3f, 0x30bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x2, 0x5}, {0x0, 0xfff3}, {0xb, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0x58, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'veth1_vlan\x00'}, @TCA_FW_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x4, 0x20000000, 0x0, 0x1, 0x7, {0x19, 0x2, 0x8000, 0x3, 0x7}, {0x5, 0x1, 0xedf3, 0xfffa, 0xa9, 0xffffff00}, 0x91, 0x10001, 0x2}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24041091}, 0x0) setuid(0xee00) socket$kcm(0x10, 0x2, 0x4) (async) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d000200390001400400446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = getpgrp(0x0) tkill(r3, 0x33) (async) tkill(r3, 0x33) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, &(0x7f0000000040)=0x9, 0x8, 0x3) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x4, 0x0, 0x0, 0x2) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') fstat(r7, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x40, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r8}}]}) (async) mount$bpf(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000180), 0x40, &(0x7f0000000140)={[{@uid={'uid', 0x3d, r8}}]}) ioprio_get$uid(0x3, r8) 746.872909ms ago: executing program 8 (id=2821): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfd, {0x3}, [@NHA_OIF={0x8}]}, 0x20}}, 0x8004) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x400200, 0x0) 690.704854ms ago: executing program 8 (id=2822): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x7530}, 0x10) connect$llc(r1, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) writev(r2, &(0x7f0000000b00)=[{&(0x7f0000000940)='\r', 0x2000}], 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x0, 0x7f}, 0x20) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc601}) syz_emit_ethernet(0x78, &(0x7f0000000380)={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f4adf7", 0x42, 0x2c, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x4, {0x8, 0x6, "cd85b5", 0x7, 0x84, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, [], "aad25a7f302d4579b298392ccf95e1e48f10"}}}}}}}, 0x0) connect$llc(r1, &(0x7f0000000240)={0x1a, 0x311, 0x0, 0x4, 0x6a, 0x1}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r4, 0x0, 0x4000040) fallocate(0xffffffffffffffff, 0x3, 0x9100, 0x3) memfd_create(0x0, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd090328000500300003006000fa3af905"], 0xfdef) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x9c960000, 0x1, 0x3, 0xa, 0x1, 0xfffe}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x2, 0x80805, 0x0) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r9, 0x2}], 0x1, 0x9f) ioctl$sock_inet_SIOCGIFNETMASK(r6, 0x891b, &(0x7f0000000200)={'bridge_slave_1\x00', {0x2, 0x0, @local}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r7, 0x84, 0x1b, &(0x7f0000000b40)={r10}, &(0x7f0000000c40)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r10, @in={{0x2, 0x4e22, @multicast2}}, 0x5, 0xd7c4, 0x5, 0x86, 0x8, 0x1, 0x1}, &(0x7f0000000180)=0x9c) 308.303459ms ago: executing program 3 (id=2823): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000180), 0x101, 0x58000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000480)={{0xffffffff, 0x0, 0x0, 0xfffffffc, 'syz0\x00'}, 0x0, 0x400, 0x6, 0x0, 0x23, 0xb, 'syz0\x00', 0x0}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x20000006, 0xe9b, 0x2, 0xf, 0x7f, 0x44233, 0x7, 0x81, 0x941, 0x100000000, 0x1005, 0x4, 0x5, 0x40, 0xfffffdfffffffffd], 0x2, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x82, 0x2, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 228.264654ms ago: executing program 1 (id=2824): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000000102010800001700000000000a00000818000180149b859aeed325dd6023cd320800026b7f000001"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="800000000a0a010800000000000000000500000635000d40ca656b71ae2b3e5b4203fce8e81d0479eeab8cbd8af3078bb044b89b96106ea1f39d4db18395b1ebd11123ce5bded43f0f0000000c00104000000000000000030900020073797a3200000000080003400000009d080005400000002d0c000b4000000000000000a3"], 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x8051) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 148.003881ms ago: executing program 9 (id=2825): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan3\x00'}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4008084}, 0x4040000) 57.237393ms ago: executing program 8 (id=2826): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbip-host/rebind\x00', 0x1, 0x0) write(r0, &(0x7f0000000940)='1', 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f00000000c0)) write(r1, &(0x7f0000000140)="0312dcd18e0dc212016dd12a93cc8e4aee718e6ee847b3c8c6e8d373217689888a9ceb27b7c264edc1bb91b851b23c19128de97d6730a4a5bd345252ef6a34db563dd60e416ac631177036fc5a6cba9559bcd7f3aaa100deb44565fd4801a78ca3971787451ca59a01d13b0293eb19444debb9e5dc446d0199995fb33806456117be51384e184c47610bf56c72990be7add7c67b60cfd66171b461395251d798f0670d7dca19", 0xa6) 0s ago: executing program 1 (id=2827): setns(0xc9, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='ra', 0x2) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000200)}}], 0x1, 0x4404c880) sendto$inet6(r0, &(0x7f00000003c0)="91b1", 0x2, 0x4000000, 0x0, 0x0) kernel console output (not intermixed with test programs): f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.784600][T15991] RSP: 002b:00007fbdcd0cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 282.784619][T15991] RAX: ffffffffffffffda RBX: 00007fbdcc425fa0 RCX: 00007fbdcc19e159 [ 282.784632][T15991] RDX: 0000000004040000 RSI: 0000200000000100 RDI: 0000000000000004 [ 282.784644][T15991] RBP: 00007fbdcd0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 282.784655][T15991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 282.784666][T15991] R13: 00007fbdcc426038 R14: 00007fbdcc425fa0 R15: 00007ffd9c775ab8 [ 282.784693][T15991] [ 282.793239][T15993] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2511'. [ 283.036933][T16000] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 283.942974][T16028] xt_l2tp: missing protocol rule (udp|l2tpip) [ 283.949712][ T25] usb 14-1: new high-speed USB device number 7 using dummy_hcd [ 284.006817][T16030] dlm: Unknown command passed to DLM device : 33 [ 284.006817][T16030] [ 284.099347][ T25] usb 14-1: Using ep0 maxpacket: 32 [ 284.103219][ T25] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 284.109407][ T25] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 284.109474][ T25] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 284.109526][ T25] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.109585][ T25] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 284.135883][ T25] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.135940][ T25] usb 14-1: Product: syz [ 284.136000][ T25] usb 14-1: Manufacturer: syz [ 284.136035][ T25] usb 14-1: SerialNumber: syz [ 284.160595][ C2] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 284.170477][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input38 [ 284.267796][T16034] Context (ID=0x1) not attached to queue pair (handle=0x2:0x80009) [ 284.389928][ T25] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 284.389977][ T25] (id 0x00) [ 284.434317][T16039] FAULT_INJECTION: forcing a failure. [ 284.434317][T16039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 284.434715][T16039] CPU: 0 UID: 0 PID: 16039 Comm: syz.3.2529 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.434735][T16039] Tainted: [L]=SOFTLOCKUP [ 284.434739][T16039] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.434747][T16039] Call Trace: [ 284.434752][T16039] [ 284.434757][T16039] dump_stack_lvl+0x100/0x190 [ 284.434779][T16039] should_fail_ex.cold+0x5/0xa [ 284.434796][T16039] _copy_to_user+0x32/0xd0 [ 284.434815][T16039] simple_read_from_buffer+0xcb/0x170 [ 284.434830][T16039] proc_fail_nth_read+0x1af/0x230 [ 284.434843][T16039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.434857][T16039] ? rw_verify_area+0xce/0x6d0 [ 284.434872][T16039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 284.434885][T16039] vfs_read+0x1e4/0xb40 [ 284.434903][T16039] ? lock_acquire+0x1d1/0x380 [ 284.434914][T16039] ? __fget_files+0x34/0x3d0 [ 284.434927][T16039] ? __pfx_vfs_read+0x10/0x10 [ 284.434943][T16039] ? find_held_lock+0x2b/0x80 [ 284.434959][T16039] ? __fget_files+0x215/0x3d0 [ 284.434973][T16039] ? __fget_files+0x21f/0x3d0 [ 284.434989][T16039] ksys_read+0x12a/0x250 [ 284.435006][T16039] ? __pfx_ksys_read+0x10/0x10 [ 284.435027][T16039] do_syscall_64+0x123/0x790 [ 284.435042][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.435054][T16039] RIP: 0033:0x7fadaf35e98e [ 284.435064][T16039] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 284.435076][T16039] RSP: 002b:00007fadb031bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 284.435087][T16039] RAX: ffffffffffffffda RBX: 00007fadb031c6c0 RCX: 00007fadaf35e98e [ 284.435095][T16039] RDX: 000000000000000f RSI: 00007fadb031c0a0 RDI: 0000000000000003 [ 284.435102][T16039] RBP: 00007fadb031c090 R08: 0000000000000000 R09: 0000000000000000 [ 284.435109][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 284.435116][T16039] R13: 00007fadaf626038 R14: 00007fadaf625fa0 R15: 00007ffdaf280958 [ 284.435130][T16039] [ 284.442281][ C3] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 284.461955][ T25] rc_core: IR keymap rc-imon-pad not found [ 284.461974][ T25] Registered IR keymap rc-empty [ 284.462040][ T25] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 284.462059][ T25] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 284.590924][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 284.603858][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input39 [ 284.607693][ T25] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:7> initialized [ 284.778740][T16018] imon:vfd_write: invalid payload size [ 284.784023][T13133] usb 14-1: USB disconnect, device number 7 [ 284.818535][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.818638][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.818735][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.818804][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.818869][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.818933][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.819060][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.819165][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.819264][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.819370][T16051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=16051 comm=syz.1.2530 [ 284.824772][T16046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2531'. [ 284.824808][T16046] netlink: 'syz.3.2531': attribute type 5 has an invalid length. [ 284.824822][T16046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2531'. [ 284.933048][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.933221][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 284.999438][T13990] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.000024][T13990] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.068729][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 285.069031][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 285.133966][T13990] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.134112][T13990] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.134167][T13990] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.146326][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2533'. [ 285.146349][T16057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2533'. [ 285.149210][T13990] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.273516][T16057] bond1: Unable to set up delay as MII monitoring is disabled [ 285.421886][T16057] bond1 (unregistering): Released all slaves [ 285.519165][T16086] netlink: 'syz.8.2539': attribute type 7 has an invalid length. [ 285.524687][T16086] netlink: 'syz.8.2539': attribute type 8 has an invalid length. [ 285.543892][T16081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.204731][T16126] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 2, id = 0 [ 286.259210][ T5820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 286.419143][ T5820] usb 6-1: Using ep0 maxpacket: 32 [ 286.420281][ T5820] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 286.421301][ T5820] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 286.421339][ T5820] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 286.421359][ T5820] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 286.421380][ T5820] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 286.423965][ T5820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.423987][ T5820] usb 6-1: Product: syz [ 286.424000][ T5820] usb 6-1: Manufacturer: syz [ 286.424013][ T5820] usb 6-1: SerialNumber: syz [ 286.438013][ C0] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 286.438627][ T5820] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input40 [ 286.454607][ T43] kauditd_printk_skb: 406 callbacks suppressed [ 286.454627][ T43] audit: type=1400 audit(1788585569.854:33327): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 286.461623][ T43] audit: type=1400 audit(1788585569.864:33328): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 286.467077][ T43] audit: type=1400 audit(1788585569.864:33329): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 286.611330][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.611499][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.611600][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.611688][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.611781][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.611870][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.611963][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612051][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612149][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612244][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612332][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612421][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612508][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612604][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.612696][T16139] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620314][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620408][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620490][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620577][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620668][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620755][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620843][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.620926][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621008][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621091][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621180][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621261][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621345][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621426][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621506][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621615][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621704][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621788][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.621939][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.622021][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.622104][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.622185][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.622266][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.622348][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.625986][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626089][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626185][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626283][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626383][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626480][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626580][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.626678][T16140] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 286.671504][ T5820] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 286.671522][ T5820] (id 0x00) [ 286.769511][ T5820] rc_core: IR keymap rc-imon-pad not found [ 286.769576][ T5820] Registered IR keymap rc-empty [ 286.769675][ T5820] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 286.769703][ T5820] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 286.910398][ T5820] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 286.912784][ T5820] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input41 [ 286.914244][ T43] audit: type=1400 audit(1788585570.314:33330): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 286.920257][ T5820] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:4> initialized [ 287.012634][ T43] audit: type=1400 audit(1788585570.414:33331): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 287.047433][ T43] audit: type=1400 audit(1788585570.444:33332): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 287.072995][ T43] audit: type=1400 audit(1788585570.474:33333): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 287.121067][T16116] imon:vfd_write: invalid payload size [ 287.122911][T13133] usb 6-1: USB disconnect, device number 4 [ 287.182796][ T43] audit: type=1400 audit(1788585570.584:33334): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 287.289686][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2556'. [ 287.289757][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2556'. [ 287.289816][T16157] netlink: 'syz.8.2556': attribute type 6 has an invalid length. [ 287.331127][T13990] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.331323][T13990] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.331375][T13990] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.331424][T13990] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.731579][ T43] audit: type=1400 audit(1788585571.134:33335): avc: denied { setcurrent } for pid=16168 comm="syz.3.2559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 287.862335][ T43] audit: type=1400 audit(1788585571.264:33336): avc: denied { bind } for pid=16173 comm="syz.1.2562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.876017][T16178] hsr_slave_0: left promiscuous mode [ 287.880656][T16178] hsr_slave_1: left promiscuous mode [ 287.914021][T16180] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.942878][T16178] bond0: entered promiscuous mode [ 287.945176][T16178] bond_slave_0: entered promiscuous mode [ 287.948377][T16178] bond_slave_1: entered promiscuous mode [ 287.958644][T16178] gretap0: entered promiscuous mode [ 287.962183][T16178] dummy0: entered promiscuous mode [ 287.975349][T16178] debugfs: 'hsr0' already exists in 'hsr' [ 287.977876][T16178] Cannot create hsr debugfs directory [ 287.982497][T16178] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2563'. [ 288.000186][T16183] macsec0: entered allmulticast mode [ 288.000239][T16183] veth1_macvtap: entered allmulticast mode [ 288.139390][T16191] netlink: 'syz.3.2566': attribute type 10 has an invalid length. [ 288.151398][T16191] team0: Port device veth0 added [ 288.669249][ T25] usb 13-1: new high-speed USB device number 6 using dummy_hcd [ 288.819254][ T25] usb 13-1: Using ep0 maxpacket: 32 [ 288.819928][ T25] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 288.820898][ T25] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 288.820941][ T25] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 288.820967][ T25] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 288.820987][ T25] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 288.823604][ T25] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.823628][ T25] usb 13-1: Product: syz [ 288.823643][ T25] usb 13-1: Manufacturer: syz [ 288.823657][ T25] usb 13-1: SerialNumber: syz [ 288.831628][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 288.835260][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input42 [ 288.926599][T12306] IPVS: starting estimator thread 0... [ 289.019200][T16210] IPVS: using max 21 ests per chain, 50400 per kthread [ 289.029129][T15310] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 289.051672][ T25] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 289.051717][ T25] (id 0x00) [ 289.129211][ T25] rc_core: IR keymap rc-imon-pad not found [ 289.131898][ T25] Registered IR keymap rc-empty [ 289.138086][ T25] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 289.142935][ T25] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 289.179137][T15310] usb 6-1: Using ep0 maxpacket: 32 [ 289.182380][T15310] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 289.189608][T15310] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 289.194445][T15310] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 289.200082][T15310] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 289.205785][T15310] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 289.217311][T15310] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.221094][T15310] usb 6-1: Product: syz [ 289.223214][T15310] usb 6-1: Manufacturer: syz [ 289.226100][T15310] usb 6-1: SerialNumber: syz [ 289.252923][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 289.264280][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input43 [ 289.273034][ C2] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 289.279322][T15310] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input44 [ 289.289574][ T25] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:6> initialized [ 289.380330][T15116] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 289.432272][T16219] netlink: NAT attribute has 5 unknown bytes [ 289.432418][T16219] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 289.435399][T16204] imon:vfd_write: invalid payload size [ 289.435421][T16204] FAULT_INJECTION: forcing a failure. [ 289.435421][T16204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 289.435523][T16204] CPU: 2 UID: 0 PID: 16204 Comm: syz.8.2568 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.435555][T16204] Tainted: [L]=SOFTLOCKUP [ 289.435563][T16204] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.435576][T16204] Call Trace: [ 289.435584][T16204] [ 289.435594][T16204] dump_stack_lvl+0x100/0x190 [ 289.435647][T16204] should_fail_ex.cold+0x5/0xa [ 289.435680][T16204] _copy_to_user+0x32/0xd0 [ 289.435714][T16204] simple_read_from_buffer+0xcb/0x170 [ 289.435741][T16204] proc_fail_nth_read+0x1af/0x230 [ 289.435767][T16204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.435801][T16204] ? rw_verify_area+0xce/0x6d0 [ 289.435832][T16204] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 289.435857][T16204] vfs_read+0x1e4/0xb40 [ 289.435890][T16204] ? lock_acquire+0x1d1/0x380 [ 289.435912][T16204] ? __fget_files+0x34/0x3d0 [ 289.435937][T16204] ? __pfx_vfs_read+0x10/0x10 [ 289.435967][T16204] ? find_held_lock+0x2b/0x80 [ 289.435996][T16204] ? __fget_files+0x215/0x3d0 [ 289.436027][T16204] ? __fget_files+0x21f/0x3d0 [ 289.436060][T16204] ksys_read+0x12a/0x250 [ 289.436094][T16204] ? __pfx_ksys_read+0x10/0x10 [ 289.436135][T16204] do_syscall_64+0x123/0x790 [ 289.436163][T16204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.436187][T16204] RIP: 0033:0x7fbdcc15e98e [ 289.436206][T16204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 289.436227][T16204] RSP: 002b:00007fbdcd0cefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 289.436250][T16204] RAX: ffffffffffffffda RBX: 00007fbdcd0cf6c0 RCX: 00007fbdcc15e98e [ 289.436265][T16204] RDX: 000000000000000f RSI: 00007fbdcd0cf0a0 RDI: 0000000000000005 [ 289.436278][T16204] RBP: 00007fbdcd0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 289.436292][T16204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 289.436304][T16204] R13: 00007fbdcc426038 R14: 00007fbdcc425fa0 R15: 00007ffd9c775ab8 [ 289.436335][T16204] [ 289.488740][ T25] usb 13-1: USB disconnect, device number 6 [ 289.529153][T15116] usb 8-1: device descriptor read/64, error -71 [ 289.599313][T15310] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 289.599380][T15310] (id 0x00) [ 289.751631][T15310] rc_core: IR keymap rc-imon-pad not found [ 289.751730][T15310] Registered IR keymap rc-empty [ 289.751837][T15310] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 289.751879][T15310] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 289.800491][T15310] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 289.813836][T15310] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input45 [ 289.814958][T15116] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 289.843781][T15310] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:5> initialized [ 289.943929][T16229] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 289.949841][T15116] usb 8-1: device descriptor read/64, error -71 [ 290.022237][T16208] imon:vfd_write: invalid payload size [ 290.024704][ T25] usb 6-1: USB disconnect, device number 5 [ 290.060403][T15116] usb usb8-port1: attempt power cycle [ 290.291844][T16238] openvswitch: netlink: Port -2146435068 exceeds max allowable 65535 [ 290.307460][T16238] KVM: debugfs: duplicate directory 16238-8 [ 290.429288][T15116] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 290.449758][T15116] usb 8-1: device descriptor read/8, error -71 [ 290.619995][T16241] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2577'. [ 290.738671][T15116] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 290.766069][T15116] usb 8-1: device descriptor read/8, error -71 [ 290.869484][T15116] usb usb8-port1: unable to enumerate USB device [ 290.870096][T16245] netlink: 'syz.9.2579': attribute type 5 has an invalid length. [ 290.871446][T16245] netlink: 65039 bytes leftover after parsing attributes in process `syz.9.2579'. [ 291.059306][T15310] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 291.109852][ T25] usb 14-1: new high-speed USB device number 8 using dummy_hcd [ 291.210121][T15310] usb 6-1: Using ep0 maxpacket: 8 [ 291.210894][T15310] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 291.212072][T15310] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 291.212108][T15310] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.259203][ T25] usb 14-1: Using ep0 maxpacket: 8 [ 291.259809][ T25] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 291.260639][ T25] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 291.260659][ T25] usb 14-1: config 0 has no interface number 0 [ 291.260696][ T25] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 291.260718][ T25] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 291.260739][ T25] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 291.260762][ T25] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 291.260781][ T25] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 291.260816][ T25] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.263262][ T25] usb 14-1: config 0 descriptor?? [ 291.276752][ T25] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 291.468555][T16245] ldusb 14-1:0.55: Couldn't submit interrupt_in_urb -90 [ 291.470421][T16245] xt_IDLETIMER: label is empty or not nul-terminated [ 291.496113][ T25] usb 14-1: USB disconnect, device number 8 [ 291.505680][ T25] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 291.828623][T16259] syzkaller0: entered promiscuous mode [ 291.828701][T16259] syzkaller0: entered allmulticast mode [ 292.494962][T16281] autofs4:pid:16281:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.768), cmd(0xc0189375) [ 292.495043][T16281] autofs4:pid:16281:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375) [ 292.609279][ T42] usb 13-1: new high-speed USB device number 7 using dummy_hcd [ 292.770549][ T42] usb 13-1: Using ep0 maxpacket: 32 [ 292.774366][ T42] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 292.779771][ T42] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 292.779837][ T42] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 292.779887][ T42] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.779929][ T42] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 292.805121][ T42] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.809342][T15116] usb 14-1: new high-speed USB device number 9 using dummy_hcd [ 292.812795][ T42] usb 13-1: Product: syz [ 292.814938][ T42] usb 13-1: Manufacturer: syz [ 292.814986][ T42] usb 13-1: SerialNumber: syz [ 292.842335][ C3] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 292.848133][ T42] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input46 [ 292.856210][ T43] kauditd_printk_skb: 18 callbacks suppressed [ 292.856361][ T43] audit: type=1400 audit(1788585576.254:33355): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 292.874683][ T43] audit: type=1400 audit(1788585576.274:33356): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 292.891060][ T43] audit: type=1400 audit(1788585576.294:33357): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 292.971994][T15116] usb 14-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 292.974207][T15116] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.975561][T15116] usb 14-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 292.978869][T15116] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.978891][T15116] usb 14-1: Product: syz [ 292.978904][T15116] usb 14-1: Manufacturer: syz [ 292.978916][T15116] usb 14-1: SerialNumber: syz [ 292.997442][T15116] ti_usb_3410_5052 14-1:2.0: TI USB 5052 2 port adapter converter detected [ 293.024138][T15116] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 293.077408][T15116] usb 14-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 293.082143][ T42] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 293.082186][ T42] (id 0x00) [ 293.141308][ T42] rc_core: IR keymap rc-imon-pad not found [ 293.141354][ T42] Registered IR keymap rc-empty [ 293.141451][ T42] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 293.141483][ T42] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 293.280349][ T42] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 293.287401][ T42] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input47 [ 293.294748][ T43] audit: type=1400 audit(1788585576.694:33358): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.308692][ T42] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:7> initialized [ 293.367212][ T43] audit: type=1400 audit(1788585576.764:33359): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.384189][ T43] audit: type=1400 audit(1788585576.784:33360): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.465215][T16277] imon:vfd_write: invalid payload size [ 293.471504][ T42] usb 13-1: USB disconnect, device number 7 [ 293.491911][ T43] audit: type=1400 audit(1788585576.894:33361): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.504006][ T5833] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 293.659457][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 293.662524][ T5833] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 293.668529][ T5833] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 293.673855][ T5833] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 293.678922][ T5833] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 293.678950][ T5833] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 293.693872][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.697806][ T5833] usb 8-1: Product: syz [ 293.700024][ T5833] usb 8-1: Manufacturer: syz [ 293.702396][ T5833] usb 8-1: SerialNumber: syz [ 293.720248][ C3] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 293.725972][ T5833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input48 [ 293.733719][ T43] audit: type=1400 audit(1788585577.134:33362): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.752136][ T43] audit: type=1400 audit(1788585577.154:33363): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.766338][ T43] audit: type=1400 audit(1788585577.164:33364): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 293.824214][ T25] usb 6-1: USB disconnect, device number 6 [ 293.906701][T16299] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 293.906737][T16299] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 293.907316][T16299] vhci_hcd vhci_hcd.0: Device attached [ 293.922930][T16300] vhci_hcd: connection closed [ 293.923191][ T13] vhci_hcd vhci_hcd.1: stop threads [ 293.933289][ T13] vhci_hcd vhci_hcd.1: release socket [ 293.935481][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 293.939670][ T5833] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 293.939740][ T5833] (id 0x00) [ 294.011705][ T5833] rc_core: IR keymap rc-imon-pad not found [ 294.014161][ T5833] Registered IR keymap rc-empty [ 294.014233][ T5833] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 294.014253][ T5833] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 294.062183][T16305] random: crng reseeded on system resumption [ 294.124776][T16296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.138275][T16296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.188236][ T5833] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 294.200537][ T5833] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input49 [ 294.217879][ T5833] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:12> initialized [ 294.347084][ T5833] usb 8-1: USB disconnect, device number 12 [ 294.626319][T16320] support for the xor transformation has been removed. [ 294.815381][T16324] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 294.936216][T16283] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -110 [ 294.970963][T16329] binder: BINDER_SET_CONTEXT_MGR already set [ 294.971022][T16329] binder: 16326:16329 ioctl 4018620d 200000004a80 returned -16 [ 294.972655][T16332] binder: 16326:16332 ioctl c0306201 2000000004c0 returned -22 [ 295.011856][ T5833] usb 14-1: USB disconnect, device number 9 [ 295.035927][ T5833] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 295.051946][ T5833] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 295.052838][ T5833] ti_usb_3410_5052 14-1:2.0: device disconnected [ 295.118354][T16334] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2604'. [ 295.268440][T16344] team0: Port device veth0 removed [ 295.272617][T16344] batman_adv: batadv0: Adding interface: veth0 [ 295.272633][T16344] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.272657][T16344] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active [ 295.439328][T10726] usb 13-1: new high-speed USB device number 8 using dummy_hcd [ 295.459648][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 295.591086][T10726] usb 13-1: Using ep0 maxpacket: 32 [ 295.595766][T10726] usb 13-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 295.604569][T10726] usb 13-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 295.609216][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 295.611254][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 295.614853][T10726] usb 13-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 295.620245][ T25] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 295.620273][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.628182][T10726] usb 13-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 295.634885][T10726] usb 13-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 295.645363][T10726] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.645471][T10726] usb 13-1: Product: syz [ 295.645571][T10726] usb 13-1: Manufacturer: syz [ 295.645602][T10726] usb 13-1: SerialNumber: syz [ 295.663319][ C2] imon 13-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 295.681262][T10726] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/input/input50 [ 295.879440][T10726] imon 13-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 295.882977][T10726] (id 0x00) [ 295.939305][T10726] rc_core: IR keymap rc-imon-pad not found [ 295.941656][T10726] Registered IR keymap rc-empty [ 295.943611][T10726] imon 13-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 295.947195][T10726] imon 13-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 295.959376][ T25] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 296.079184][ T5833] usb 14-1: new high-speed USB device number 10 using dummy_hcd [ 296.084322][T10726] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0 [ 296.086441][T10726] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.8/usb13/13-1/13-1:155.0/rc/rc0/input51 [ 296.091089][T10726] imon 13-1:155.0: iMON device (15c2:ffdc, intf0) on usb<13:8> initialized [ 296.111437][ T25] usb 8-1: Using ep0 maxpacket: 32 [ 296.112179][ T25] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 296.113539][ T25] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 296.113583][ T25] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 296.113605][ T25] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 296.113629][ T25] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 296.117824][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.117847][ T25] usb 8-1: Product: syz [ 296.117859][ T25] usb 8-1: Manufacturer: syz [ 296.117871][ T25] usb 8-1: SerialNumber: syz [ 296.138127][ C2] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 296.219899][ T25] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input52 [ 296.250754][ T5833] usb 14-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 296.260273][ T5833] usb 14-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 296.265589][ T5833] usb 14-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 296.265755][ T5833] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.272300][T16341] imon:vfd_write: invalid payload size [ 296.273992][T10726] usb 13-1: USB disconnect, device number 8 [ 296.288431][T16365] raw-gadget.3 gadget.9: fail, usb_ep_enable returned -22 [ 296.294825][ T5833] usb 14-1: Quirk or no altset; falling back to MIDI 1.0 [ 296.369180][ T25] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 296.369229][ T25] (id 0x00) [ 296.479755][ T25] rc_core: IR keymap rc-imon-pad not found [ 296.479821][ T25] Registered IR keymap rc-empty [ 296.479904][ T25] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 296.479921][ T25] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 296.572653][ T25] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 296.574340][ T25] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input53 [ 296.578659][ T25] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:13> initialized [ 296.863930][T16373] imon:vfd_write: invalid payload size [ 297.880418][T16378] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 298.059803][ T43] kauditd_printk_skb: 20 callbacks suppressed [ 298.059902][ T43] audit: type=1400 audit(1788585581.454:33385): avc: denied { listen } for pid=16380 comm="syz.8.2615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 298.068027][ T43] audit: type=1400 audit(1788585581.464:33386): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.068416][ T43] audit: type=1400 audit(1788585581.464:33387): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.068670][ T43] audit: type=1400 audit(1788585581.464:33388): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.070611][ T43] audit: type=1400 audit(1788585581.474:33389): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.070951][ T43] audit: type=1400 audit(1788585581.474:33390): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.071431][ T43] audit: type=1400 audit(1788585581.474:33391): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.072455][ T43] audit: type=1400 audit(1788585581.474:33392): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.073516][ T43] audit: type=1400 audit(1788585581.474:33393): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.074338][ T43] audit: type=1400 audit(1788585581.474:33394): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 298.145161][ T25] usb 6-1: USB disconnect, device number 7 [ 298.330985][T16387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.466274][T16397] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 298.466328][T16397] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 298.478700][T16397] vhci_hcd vhci_hcd.0: Device attached [ 298.496867][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2618'. [ 298.496947][T16396] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2618'. [ 298.507133][T16398] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 298.507706][T13990] vhci_hcd vhci_hcd.8: stop threads [ 298.507726][T13990] vhci_hcd vhci_hcd.8: release socket [ 298.507749][T13990] vhci_hcd vhci_hcd.8: disconnect device [ 298.729559][ T25] usb 13-1: new low-speed USB device number 9 using dummy_hcd [ 298.756871][T10726] usb 8-1: USB disconnect, device number 13 [ 298.883140][ T25] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 298.887919][ T25] usb 13-1: config index 0 descriptor too short (expected 8192, got 45) [ 298.887945][ T25] usb 13-1: config 0 has an invalid descriptor of length 128, skipping remainder of the config [ 298.887963][ T25] usb 13-1: config 0 has no interfaces? [ 298.887988][ T25] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.927832][ T25] usb 13-1: config 0 descriptor?? [ 299.151535][ T5833] usb 13-1: USB disconnect, device number 9 [ 299.246028][T16413] overlayfs: workdir and upperdir must reside under the same mount [ 299.303274][T16415] CacheFiles: Failed to register: -95 [ 299.619254][T10726] usb 14-1: USB disconnect, device number 10 [ 299.808211][T16427] input: syz1 as /devices/virtual/input/input54 [ 299.932491][T16431] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 300.019550][ T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 300.169217][ T25] usb 6-1: Using ep0 maxpacket: 8 [ 300.170072][ T25] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.171176][ T25] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 300.171216][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.653123][T16466] netlink: 'syz.8.2632': attribute type 1 has an invalid length. [ 300.668587][T16464] 9pnet_virtio: no channels available for device syz [ 300.705061][T16466] gretap1: entered promiscuous mode [ 301.041103][T16476] ip6gretap0: entered promiscuous mode [ 301.432944][T16484] netlink: 'syz.3.2638': attribute type 11 has an invalid length. [ 302.553356][T16496] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2642'. [ 302.728718][ T5833] usb 6-1: USB disconnect, device number 8 [ 302.739039][T13413] IPVS: starting estimator thread 0... [ 302.874090][T16500] IPVS: using max 42 ests per chain, 100800 per kthread [ 302.887675][T16502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2644'. [ 303.094439][T16507] bond0: invalid ARP target specified [ 303.125724][T16507] trusted_key: syz.1.2647 sent an empty control message without MSG_MORE. [ 303.132953][ T43] kauditd_printk_skb: 1406 callbacks suppressed [ 303.133048][ T43] audit: type=1400 audit(1788585586.534:34801): avc: denied { append } for pid=16506 comm="syz.1.2647" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 303.631701][ T43] audit: type=1400 audit(1788585587.034:34802): avc: denied { read } for pid=16513 comm="syz.1.2650" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 303.688517][T16520] hfsplus: unable to find HFS+ superblock [ 303.995482][T16528] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2655'. [ 304.029173][ T42] usb 13-1: new high-speed USB device number 10 using dummy_hcd [ 304.179261][ T42] usb 13-1: Using ep0 maxpacket: 8 [ 304.181175][ T42] usb 13-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 304.182308][ T42] usb 13-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 304.182353][ T42] usb 13-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 304.182392][ T42] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.185556][ T42] usbtmc 13-1:16.0: bulk endpoints not found [ 304.229214][ T5833] usb 14-1: new high-speed USB device number 11 using dummy_hcd [ 304.390664][ T5833] usb 14-1: Using ep0 maxpacket: 32 [ 304.391152][ T5833] usb 14-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 304.391996][ T5833] usb 14-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 304.392017][ T5833] usb 14-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 304.392031][ T5833] usb 14-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 304.392044][ T5833] usb 14-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 304.393847][ T5833] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.393867][ T5833] usb 14-1: Product: syz [ 304.393880][ T5833] usb 14-1: Manufacturer: syz [ 304.393892][ T5833] usb 14-1: SerialNumber: syz [ 304.405527][ C3] imon 14-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 304.412131][ T5833] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/input/input55 [ 304.414036][ T43] audit: type=1400 audit(1788585587.814:34803): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 304.431555][ T43] audit: type=1400 audit(1788585587.834:34804): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 304.466258][ T43] audit: type=1400 audit(1788585587.864:34805): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 304.619461][ T5833] imon 14-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 304.619540][ T5833] (id 0x00) [ 304.652671][ T43] audit: type=1400 audit(1788585588.034:34806): avc: denied { write } for pid=16540 comm="syz.3.2661" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 304.653211][ T43] audit: type=1800 audit(1788585588.044:34807): pid=16541 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2661" name="0x0000000000000000" dev="sda1" ino=2050 res=0 errno=0 [ 304.679809][ T5833] rc_core: IR keymap rc-imon-pad not found [ 304.681782][ T5833] Registered IR keymap rc-empty [ 304.681828][ T5833] imon 14-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 304.681841][ T5833] imon 14-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 304.730666][T16544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.839698][ T5833] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0 [ 304.840640][ T5833] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.9/usb14/14-1/14-1:155.0/rc/rc0/input56 [ 304.844199][ T5833] imon 14-1:155.0: iMON device (15c2:ffdc, intf0) on usb<14:11> initialized [ 304.919342][ T43] audit: type=1400 audit(1788585588.314:34808): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 304.919952][ T43] audit: type=1400 audit(1788585588.314:34809): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 304.920399][ T43] audit: type=1400 audit(1788585588.314:34810): avc: denied { search } for pid=5125 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 305.066223][T16557] imon:vfd_write: invalid payload size [ 306.058417][T16566] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 306.122187][T16566] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 306.261909][ T5740] Bluetooth: Wrong link type (-22) [ 306.351633][T16572] UBIFS error (pid: 16572): cannot open "ubi0:testvol", error -19 [ 306.773942][ T5833] usb 13-1: USB disconnect, device number 10 [ 306.956160][T16576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.043571][ T5806] usb 14-1: USB disconnect, device number 11 [ 307.058952][T16580] syzkaller0: entered promiscuous mode [ 307.061638][T16580] syzkaller0: entered allmulticast mode [ 307.335363][T16591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.465158][T16599] netlink: 15231 bytes leftover after parsing attributes in process `syz.3.2676'. [ 307.526516][T16602] FAULT_INJECTION: forcing a failure. [ 307.526516][T16602] name failslab, interval 1, probability 10, space 0, times 0 [ 307.526601][T16602] CPU: 3 UID: 0 PID: 16602 Comm: syz.3.2676 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.526640][T16602] Tainted: [L]=SOFTLOCKUP [ 307.526649][T16602] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 307.526661][T16602] Call Trace: [ 307.526669][T16602] [ 307.526677][T16602] dump_stack_lvl+0x100/0x190 [ 307.526723][T16602] should_fail_ex.cold+0x5/0xa [ 307.526750][T16602] should_failslab+0xc2/0x120 [ 307.526778][T16602] __kmalloc_noprof+0xfc/0x840 [ 307.526797][T16602] ? rcu_is_watching+0x13/0xc0 [ 307.526823][T16602] ? tomoyo_realpath_from_path+0xb6/0x690 [ 307.526851][T16602] tomoyo_realpath_from_path+0xb6/0x690 [ 307.526878][T16602] tomoyo_check_open_permission+0x2af/0x3c0 [ 307.526907][T16602] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 307.526944][T16602] ? hook_file_open+0x248/0x8e0 [ 307.526986][T16602] ? path_get+0x61/0x80 [ 307.527014][T16602] tomoyo_file_open+0x6b/0x90 [ 307.527038][T16602] security_file_open+0xb5/0x1e0 [ 307.527060][T16602] do_dentry_open+0x588/0x14d0 [ 307.527087][T16602] vfs_open+0x82/0x3f0 [ 307.527115][T16602] path_openat+0x19fa/0x2440 [ 307.527143][T16602] ? __pfx_path_openat+0x10/0x10 [ 307.527172][T16602] do_file_open+0x20e/0x430 [ 307.527204][T16602] ? __pfx_do_file_open+0x10/0x10 [ 307.527264][T16602] ? _raw_spin_unlock+0x28/0x50 [ 307.527300][T16602] ? alloc_fd+0x471/0x7a0 [ 307.527335][T16602] do_sys_openat2+0x10f/0x1e0 [ 307.527360][T16602] ? __pfx_do_sys_openat2+0x10/0x10 [ 307.527385][T16602] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.527415][T16602] __x64_sys_openat+0x12d/0x210 [ 307.527441][T16602] ? __pfx___x64_sys_openat+0x10/0x10 [ 307.527478][T16602] do_syscall_64+0x123/0x790 [ 307.527502][T16602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.527523][T16602] RIP: 0033:0x7fadaf39e159 [ 307.527541][T16602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.527559][T16602] RSP: 002b:00007fadb02da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 307.527580][T16602] RAX: ffffffffffffffda RBX: 00007fadaf626180 RCX: 00007fadaf39e159 [ 307.527593][T16602] RDX: 0000000000000000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 307.527606][T16602] RBP: 00007fadaf435024 R08: 0000000000000000 R09: 0000000000000000 [ 307.527618][T16602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.527631][T16602] R13: 00007fadaf626218 R14: 00007fadaf626180 R15: 00007ffdaf280958 [ 307.527657][T16602] [ 307.527735][T16602] ERROR: Out of memory at tomoyo_realpath_from_path. [ 308.177765][T16611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2680'. [ 308.201179][T16611] selinux_netlink_send: 56 callbacks suppressed [ 308.201528][T16611] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=16611 comm=syz.1.2680 [ 308.478626][T16621] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 308.591500][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 308.591566][ T43] audit: type=1400 audit(1788585591.994:34813): avc: denied { read write } for pid=16624 comm="syz.8.2684" name="ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 308.591627][ T43] audit: type=1400 audit(1788585591.994:34814): avc: denied { open } for pid=16624 comm="syz.8.2684" path="/dev/ptp0" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 308.677148][T16629] 9pnet_virtio: no channels available for device syz [ 308.782479][ T5740] Bluetooth: unknown link type 109 [ 308.788113][T16634] 9pnet_virtio: no channels available for device syz [ 308.790354][ T43] audit: type=1400 audit(1788585592.184:34815): avc: denied { ioctl } for pid=16624 comm="syz.8.2684" path="/dev/ptp0" dev="devtmpfs" ino=728 ioctlcmd=0x3d15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 308.794840][ T5740] Bluetooth: hci0: connection err: -111 [ 308.993095][ T25] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 309.022089][T16641] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2690'. [ 309.084790][T16643] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 309.139978][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 309.141484][ T25] usb 8-1: New USB device found, idVendor=17ef, idProduct=5008, bcdDevice=af.4b [ 309.159227][ T25] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 309.159325][ T25] usb 8-1: can't read configurations, error -61 [ 309.213303][T15310] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 309.276852][ T1479] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 309.289291][T16652] device-mapper: table: 248:1: thin-pool: Error opening metadata block device (-EBUSY) [ 309.290018][T16652] device-mapper: ioctl: error adding target to table [ 309.290520][ T25] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 309.439138][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 309.440669][ T25] usb 8-1: New USB device found, idVendor=17ef, idProduct=5008, bcdDevice=af.4b [ 309.443780][ T25] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 309.443815][ T25] usb 8-1: can't read configurations, error -61 [ 309.444053][ T25] usb usb8-port1: attempt power cycle [ 309.498076][T15310] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 309.559872][ T1479] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 309.779572][ T25] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 309.800178][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 309.800655][ T25] usb 8-1: New USB device found, idVendor=17ef, idProduct=5008, bcdDevice=af.4b [ 309.801913][ T25] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 309.801932][ T25] usb 8-1: can't read configurations, error -61 [ 309.929207][ T25] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 309.949831][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 309.950503][ T25] usb 8-1: New USB device found, idVendor=17ef, idProduct=5008, bcdDevice=af.4b [ 309.952297][ T25] usb 8-1: unable to read config index 0 descriptor/start: -61 [ 309.952325][ T25] usb 8-1: can't read configurations, error -61 [ 309.952737][ T25] usb usb8-port1: unable to enumerate USB device [ 309.958776][T16649] ceph: No mds server is up or the cluster is laggy [ 309.966060][T16645] ceph: No mds server is up or the cluster is laggy [ 310.008476][ T25] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 310.099361][ T5833] usb 13-1: new high-speed USB device number 11 using dummy_hcd [ 310.249198][ T5833] usb 13-1: Using ep0 maxpacket: 16 [ 310.252284][ T5833] usb 13-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 310.258173][ T5833] usb 13-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.264309][ T5833] usb 13-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 310.270343][ T5833] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.277790][ T43] audit: type=1400 audit(1788585593.674:34816): avc: denied { bind } for pid=16665 comm="syz.1.2697" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 310.286812][ T5833] usb 13-1: config 0 descriptor?? [ 310.297209][ T43] audit: type=1400 audit(1788585593.694:34817): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 310.299184][ T43] audit: type=1400 audit(1788585593.694:34818): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 310.299231][ T43] audit: type=1400 audit(1788585593.694:34819): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 310.299270][ T43] audit: type=1400 audit(1788585593.694:34820): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 310.302792][ T43] audit: type=1400 audit(1788585593.704:34821): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 310.302839][ T43] audit: type=1400 audit(1788585593.704:34822): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 310.305637][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2697'. [ 311.277476][T16687] nbd: couldn't find a device at index -2145452028 [ 311.419735][T16690] netlink: 52 bytes leftover after parsing attributes in process `syz.9.2698'. [ 311.780820][T16699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.890820][ T5833] usbhid 13-1:0.0: can't add hid device: -71 [ 312.890945][ T5833] usbhid 13-1:0.0: probe with driver usbhid failed with error -71 [ 312.904017][ T5833] usb 13-1: USB disconnect, device number 11 [ 313.039157][T15310] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 313.190422][T15310] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.192242][T15310] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 313.192293][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 313.192323][T15310] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.192351][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.192378][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 313.193815][T15310] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 313.193858][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 313.193933][T15310] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.193955][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.193976][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 313.197677][T15310] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 313.197715][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 313.197737][T15310] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.197758][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.197780][T15310] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 313.204398][T15310] usb 8-1: string descriptor 0 read error: -22 [ 313.204523][T15310] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.218249][T15310] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 313.429083][ T5833] usb 13-1: new low-speed USB device number 12 using dummy_hcd [ 313.604111][ T5833] usb 13-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 313.606047][ T5833] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 313.606109][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 313.606145][ T5833] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.606179][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.606211][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 313.607676][ T5833] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 313.607718][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 313.607746][ T5833] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.607773][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.607800][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 313.608730][ T5833] usb 13-1: config 168 descriptor has 1 excess byte, ignoring [ 313.608759][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 313.608779][ T5833] usb 13-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 313.608798][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 313.608817][ T5833] usb 13-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 313.616631][ T5833] usb 13-1: string descriptor 0 read error: -22 [ 313.616730][ T5833] usb 13-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.617879][ T43] kauditd_printk_skb: 2620 callbacks suppressed [ 313.617895][ T43] audit: type=1400 audit(1788585597.014:37443): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.617945][ T43] audit: type=1400 audit(1788585597.014:37444): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.617985][ T43] audit: type=1400 audit(1788585597.014:37445): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.618304][ T43] audit: type=1400 audit(1788585597.014:37446): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.629124][ T43] audit: type=1400 audit(1788585597.014:37447): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.629171][ T43] audit: type=1400 audit(1788585597.014:37448): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.629204][ T43] audit: type=1400 audit(1788585597.014:37449): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.629235][ T43] audit: type=1400 audit(1788585597.014:37450): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.629264][ T43] audit: type=1400 audit(1788585597.014:37451): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.629293][ T43] audit: type=1400 audit(1788585597.014:37452): avc: denied { search } for pid=16765 comm="rm" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 313.638253][ T5833] adutux 13-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 314.446828][T16776] tmpfs: Unknown parameter 'mask' [ 314.924529][T16785] Unsupported ieee802154 address type: 0 [ 314.927218][T16779] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 314.936707][T16783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.103178][T16787] tmpfs: Bad value for 'mpol' [ 315.108794][ T25] usb 13-1: USB disconnect, device number 12 [ 315.133883][T16787] scsi_strcpy_devinfo: vendor string '/sbin/dhclient unconfined_u' is too long [ 315.234528][T16790] kvm: pic: non byte write [ 315.247215][T16790] kvm: pic: non byte write [ 315.260937][T16790] kvm: pic: non byte write [ 315.270174][T16790] kvm: pic: non byte write [ 315.271708][T16790] kvm: pic: non byte write [ 315.283614][T16790] kvm: pic: non byte write [ 315.284913][T16790] kvm: pic: non byte write [ 315.290811][T16790] kvm: pic: non byte write [ 315.305234][T16790] kvm: pic: non byte write [ 315.306468][T16790] kvm: pic: non byte write [ 315.751608][T16804] 8021q: VLANs not supported on syzkaller0 [ 315.767676][T16805] 8021q: VLANs not supported on syzkaller0 [ 316.021574][T16812] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2730'. [ 316.099362][T16812] bridge1: port 1(veth3) entered blocking state [ 316.102356][T16812] bridge1: port 1(veth3) entered disabled state [ 316.105423][T16812] veth3: entered allmulticast mode [ 316.119445][T16812] veth3: entered promiscuous mode [ 316.137018][T16813] bridge1: port 2(veth0_to_bond) entered blocking state [ 316.137137][T16813] bridge1: port 2(veth0_to_bond) entered disabled state [ 316.137284][T16813] veth0_to_bond: entered allmulticast mode [ 316.155862][T16813] veth0_to_bond: entered promiscuous mode [ 316.210790][T15310] usb 8-1: USB disconnect, device number 18 [ 316.295631][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.317643][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.322526][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.326818][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.331673][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.337741][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.342900][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.343549][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.344123][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.348136][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.357757][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.366044][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.366526][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.366970][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.368142][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.373730][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.374257][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.374801][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.375729][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.376131][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.380261][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.384174][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.388040][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.397424][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.401883][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.406129][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.414709][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.424282][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.428229][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.437774][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.447481][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.456418][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.464239][T16820] program syz.8.2733 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.863986][T16843] misc userio: No port type given on /dev/userio [ 316.866832][T16841] misc userio: Invalid payload size [ 316.887388][T16843] misc userio: The device must be registered before sending interrupts [ 316.920097][T16844] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2740'. [ 317.084535][ T1439] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.304838][T16859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2746'. [ 317.311240][T15310] usb 14-1: new low-speed USB device number 12 using dummy_hcd [ 317.460654][T15310] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 317.467869][T15310] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 317.473685][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.473805][T15310] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.473852][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.473898][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.497189][T15310] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 317.500843][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.505522][T15310] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.514058][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.521629][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.529525][T15310] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 317.533434][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 317.538222][T15310] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 317.543261][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 317.548392][T15310] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 317.566705][T15310] usb 14-1: string descriptor 0 read error: -22 [ 317.566837][T15310] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.585861][T15310] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 317.670205][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 317.670672][T16875] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2750'. [ 317.691839][ T5833] usb 13-1: new high-speed USB device number 13 using dummy_hcd [ 317.861910][ T5833] usb 13-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 317.862505][ T5833] usb 13-1: config 0 has no interfaces? [ 317.862534][ T5833] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.864912][ T5833] usb 13-1: config 0 descriptor?? [ 318.328015][T16864] syzkaller0: entered promiscuous mode [ 318.328076][T16864] syzkaller0: entered allmulticast mode [ 319.461152][T16893] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 319.461589][T16893] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 319.461832][T16893] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 319.463679][T16893] xt_TCPMSS: Only works on TCP SYN packets [ 319.463900][T16893] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 319.464199][T16893] overlayfs: failed lookup in lower (newroot/96, name='file0', err=-40): overlapping layers [ 319.724749][T16897] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2758'. [ 320.046444][ T1479] usb 14-1: USB disconnect, device number 12 [ 320.548624][T16897] nvme nvme0: failed to connect socket: -512 [ 323.363212][ T1479] usb 13-1: USB disconnect, device number 13 [ 323.413583][T16932] tmpfs: Bad value for 'mpol' [ 323.486097][T16938] netlink: 'syz.9.2768': attribute type 9 has an invalid length. [ 323.500687][T16940] overlay: filesystem on ./file0 not supported as upperdir [ 323.720746][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 323.720818][ T43] audit: type=1400 audit(1788585607.124:37543): avc: denied { map } for pid=16943 comm="syz.9.2772" path="/86" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 323.721641][ T43] audit: type=1400 audit(1788585607.124:37544): avc: denied { execute } for pid=16943 comm="syz.9.2772" path="/86" dev="tmpfs" ino=470 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 323.729728][ T25] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 323.739102][ T42] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 323.769492][ T1479] usb 13-1: new high-speed USB device number 14 using dummy_hcd [ 323.889348][ T42] usb 6-1: Using ep0 maxpacket: 32 [ 323.889867][ T42] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 323.890981][ T42] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 323.894465][ T42] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 323.894484][ T42] usb 6-1: Product: syz [ 323.894496][ T42] usb 6-1: Manufacturer: syz [ 323.894507][ T42] usb 6-1: SerialNumber: syz [ 323.896727][ T42] usb 6-1: config 0 descriptor?? [ 323.897225][T16937] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 323.898023][ T42] hub 6-1:0.0: bad descriptor, ignoring hub [ 323.898037][ T42] hub 6-1:0.0: probe with driver hub failed with error -5 [ 323.915144][ T25] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 323.918950][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 323.919589][ T1479] usb 13-1: Using ep0 maxpacket: 8 [ 323.923704][ T1479] usb 13-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 323.925036][ T1479] usb 13-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 323.925049][ T1479] usb 13-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 323.925071][ T1479] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 323.925084][ T1479] usb 13-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 323.925103][ T1479] usb 13-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.929977][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.930001][ T25] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.930015][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.930028][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.948040][ T1479] hub 13-1:1.0: bad descriptor, ignoring hub [ 323.948060][ T1479] hub 13-1:1.0: probe with driver hub failed with error -5 [ 323.948362][ T1479] cdc_wdm 13-1:1.0: skipping garbage [ 323.948372][ T1479] cdc_wdm 13-1:1.0: skipping garbage [ 323.950120][ T1479] cdc_wdm 13-1:1.0: cdc-wdm1: USB WDM device [ 323.950132][ T1479] cdc_wdm 13-1:1.0: Unknown control protocol [ 323.974617][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 323.974701][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.974762][ T25] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.974797][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.974834][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 323.994012][ T25] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 323.996316][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 323.996436][ T25] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.996491][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 323.996520][ T25] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 324.012918][ T25] usb 8-1: string descriptor 0 read error: -22 [ 324.015386][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.019361][ T25] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux2 [ 324.357456][T16950] fuse: Bad value for 'fd' [ 324.434371][T15310] usb 13-1: reset high-speed USB device number 14 using dummy_hcd [ 324.477392][ T1479] usb 8-1: USB disconnect, device number 19 [ 324.660878][ T43] audit: type=1800 audit(1788585608.064:37545): pid=16952 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2774" name="0x0000000000000000" dev="sda1" ino=2050 res=0 errno=0 [ 324.784768][T16960] overlayfs: failed to resolve './file0': -2 [ 324.832878][T16963] ./file0: Can't lookup blockdev [ 324.837212][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.837212][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.837212][T16964] ' [ 324.837565][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.837565][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.837565][T16964] ' [ 324.837813][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.837813][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.837813][T16964] ' [ 324.838054][T16963] ./file0: Can't lookup blockdev [ 324.838068][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.838068][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.838068][T16964] ' [ 324.838335][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.838335][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.838335][T16964] ' [ 324.838599][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.838599][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.838599][T16964] ' [ 324.838872][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.838872][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.838872][T16964] ' [ 324.843959][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.843959][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.843959][T16964] ' [ 324.844235][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.844235][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.844235][T16964] ' [ 324.849511][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.849511][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.849511][T16964] ' [ 324.849799][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.849799][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.849799][T16964] ' [ 324.850060][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.850060][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.850060][T16964] ' [ 324.850318][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.850318][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.850318][T16964] ' [ 324.850567][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.850567][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.850567][T16964] ' [ 324.850846][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.850846][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.850846][T16964] ' [ 324.855444][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.855444][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.855444][T16964] ' [ 324.855822][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.855822][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.855822][T16964] ' [ 324.856155][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.856155][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.856155][T16964] ' [ 324.856503][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.856503][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.856503][T16964] ' [ 324.856825][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.856825][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.856825][T16964] ' [ 324.857144][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.857144][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.857144][T16964] ' [ 324.860357][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.860357][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.860357][T16964] ' [ 324.860726][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.860726][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.860726][T16964] ' [ 324.860967][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.860967][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.860967][T16964] ' [ 324.861244][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.861244][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.861244][T16964] ' [ 324.861544][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.861544][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.861544][T16964] ' [ 324.861831][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.861831][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.861831][T16964] ' [ 324.862084][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.862084][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.862084][T16964] ' [ 324.862359][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.862359][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.862359][T16964] ' [ 324.864080][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.864080][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.864080][T16964] ' [ 324.864456][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.864456][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.864456][T16964] ' [ 324.864987][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.864987][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.864987][T16964] ' [ 324.865248][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.865248][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.865248][T16964] ' [ 324.865544][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.865544][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.865544][T16964] ' [ 324.865810][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.865810][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.865810][T16964] ' [ 324.866073][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.866073][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.866073][T16964] ' [ 324.866326][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.866326][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.866326][T16964] ' [ 324.866570][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.866570][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.866570][T16964] ' [ 324.866823][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.866823][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.866823][T16964] ' [ 324.867082][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.867082][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.867082][T16964] ' [ 324.867334][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.867334][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.867334][T16964] ' [ 324.867584][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.867584][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.867584][T16964] ' [ 324.867836][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.867836][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.867836][T16964] ' [ 324.868098][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.868098][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.868098][T16964] ' [ 324.868383][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.868383][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.868383][T16964] ' [ 324.868636][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.868636][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.868636][T16964] ' [ 324.868893][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.868893][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.868893][T16964] ' [ 324.869704][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.869704][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.869704][T16964] ' [ 324.869968][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.869968][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.869968][T16964] ' [ 324.870235][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.870235][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.870235][T16964] ' [ 324.870480][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.870480][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.870480][T16964] ' [ 324.870729][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.870729][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.870729][T16964] ' [ 324.870978][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.870978][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.870978][T16964] ' [ 324.871232][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.871232][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.871232][T16964] ' [ 324.871546][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.871546][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.871546][T16964] ' [ 324.872543][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.872543][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.872543][T16964] ' [ 324.872805][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.872805][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.872805][T16964] ' [ 324.873086][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.873086][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.873086][T16964] ' [ 324.873344][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.873344][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.873344][T16964] ' [ 324.873615][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.873615][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.873615][T16964] ' [ 324.873874][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.873874][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.873874][T16964] ' [ 324.874167][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.874167][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.874167][T16964] ' [ 324.874422][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.874422][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.874422][T16964] ' [ 324.874668][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.874668][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.874668][T16964] ' [ 324.874988][T16964] fuse: Unknown parameter 'gupoid᷁T [ 324.874988][T16964] jgl0`0#}mC8OB_wd.ʎ3ZK[iINdY$UǍh~1 [ 324.874988][T16964] ' [ 324.887616][T16965] openvswitch: netlink: Message has 4 unknown bytes. [ 324.887644][T16965] openvswitch: netlink: Actions may not be safe on all matching packets [ 324.919720][T15310] usb 13-1: USB disconnect, device number 14 [ 325.315539][T16973] xt_bpf: check failed: parse error [ 325.442793][T16983] tmpfs: Unknown parameter '00000000000000000000003' [ 325.501916][T15310] usb 6-1: USB disconnect, device number 9 [ 325.635452][T16993] comedi comedi2: dt2817: I/O base address or length out of range [ 325.715266][ T43] audit: type=1400 audit(1788585609.114:37546): avc: denied { search } for pid=17000 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.731056][T15310] e1000 0000:00:06.0 eth0: Reset adapter [ 325.733826][T16991] e1000e 0000:00:02.0: Interrupt Throttle Rate off [ 325.749074][ T43] audit: type=1400 audit(1788585609.114:37547): avc: denied { search } for pid=17000 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.749351][ T43] audit: type=1400 audit(1788585609.144:37548): avc: denied { search } for pid=17000 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.749878][ T43] audit: type=1400 audit(1788585609.144:37549): avc: denied { search } for pid=17000 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.749922][ T43] audit: type=1400 audit(1788585609.144:37550): avc: denied { search } for pid=17000 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.749960][ T43] audit: type=1400 audit(1788585609.144:37551): avc: denied { search } for pid=17000 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.750000][ T43] audit: type=1400 audit(1788585609.144:37552): avc: denied { search } for pid=17000 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 325.774743][T17002] fuse: Unknown parameter 'Ê{A|Vђ%o/i5fwl]{gew\N qN903<ǭ0x000000000000000b' [ 325.859922][ T25] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 325.891185][T16991] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 326.010355][ T25] usb 8-1: Using ep0 maxpacket: 8 [ 326.012292][ T25] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.013506][ T25] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.013525][ T25] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.013561][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 326.013583][ T25] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 326.013616][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.030002][ T25] hub 8-1:1.0: bad descriptor, ignoring hub [ 326.030032][ T25] hub 8-1:1.0: probe with driver hub failed with error -5 [ 326.031663][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 326.031678][ T25] cdc_wdm 8-1:1.0: skipping garbage [ 326.034678][ T25] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 326.034694][ T25] cdc_wdm 8-1:1.0: Unknown control protocol [ 326.152051][T17007] /dev/sr0: Can't open blockdev [ 326.255933][T17009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.256497][T17009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.393452][T17017] 9pnet_virtio: no channels available for device syz [ 326.478014][T17020] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 326.551658][ T25] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 326.729149][ T25] usb 8-1: device descriptor read/64, error -71 [ 326.801325][ T5820] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 326.979186][ T25] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 327.109873][ T25] usb 8-1: device descriptor read/64, error -71 [ 327.349216][ T25] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 327.371929][ T25] usb 8-1: device descriptor read/8, error -71 [ 327.609124][ T25] usb 8-1: reset high-speed USB device number 20 using dummy_hcd [ 327.635126][ T25] usb 8-1: device descriptor read/8, error -71 [ 327.751716][ T25] usb 8-1: USB disconnect, device number 20 [ 328.059428][ T25] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 328.189222][ T25] usb 8-1: device descriptor read/64, error -71 [ 328.360263][T15310] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 328.429201][ T25] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 328.559320][ T25] usb 8-1: device descriptor read/64, error -71 [ 328.669523][ T25] usb usb8-port1: attempt power cycle [ 329.122323][ T43] kauditd_printk_skb: 2621 callbacks suppressed [ 329.122401][ T43] audit: type=1400 audit(1788585612.524:40174): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 329.130399][ T43] audit: type=1400 audit(1788585612.534:40175): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 329.152151][ T43] audit: type=1400 audit(1788585612.554:40176): avc: denied { search } for pid=17054 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 329.152351][ T43] audit: type=1400 audit(1788585612.554:40177): avc: denied { search } for pid=17054 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 329.420743][ T43] audit: type=1400 audit(1788585612.824:40178): avc: denied { recv } for pid=0 comm="swapper/2" saddr=10.0.2.2 src=67 daddr=255.255.255.255 dest=68 netif=eth0 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 329.443099][ T43] audit: type=1400 audit(1788585612.844:40179): avc: denied { search } for pid=17055 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 329.443235][ T43] audit: type=1400 audit(1788585612.844:40180): avc: denied { search } for pid=17055 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 330.659158][ T43] audit: type=1400 audit(1788585614.054:40181): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 330.664292][ T43] audit: type=1400 audit(1788585614.064:40182): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 330.664342][ T43] audit: type=1400 audit(1788585614.064:40183): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.825824][ T43] kauditd_printk_skb: 415 callbacks suppressed [ 334.828628][ T43] audit: type=1400 audit(1788585618.224:40599): avc: denied { search } for pid=5442 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.842520][ T43] audit: type=1400 audit(1788585618.244:40600): avc: denied { search } for pid=17063 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.845482][ T43] audit: type=1400 audit(1788585618.244:40601): avc: denied { search } for pid=17063 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.846812][ T43] audit: type=1400 audit(1788585618.244:40602): avc: denied { search } for pid=17063 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.846857][ T43] audit: type=1400 audit(1788585618.244:40603): avc: denied { search } for pid=17063 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.846897][ T43] audit: type=1400 audit(1788585618.244:40604): avc: denied { search } for pid=17063 comm="dhcpcd" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.853123][ T43] audit: type=1400 audit(1788585618.254:40605): avc: denied { search } for pid=17063 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.853170][ T43] audit: type=1400 audit(1788585618.254:40606): avc: denied { search } for pid=17063 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.853210][ T43] audit: type=1400 audit(1788585618.254:40607): avc: denied { search } for pid=17063 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 334.853250][ T43] audit: type=1400 audit(1788585618.254:40608): avc: denied { search } for pid=17063 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 337.654418][T13990] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.654524][T13990] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.757575][T13990] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.757664][T13990] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.986936][T13990] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 337.989263][T13990] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.070279][T13990] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 338.070346][T13990] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.209147][ T13] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.219160][ T13] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.293723][T13990] batman_adv: batadv0: Interface deactivated: gretap1 [ 338.449850][ T25] SELinux: failure in sel_netif_sid_slow(), invalid network interface (92) [ 338.483769][T13990] bond4 (unregistering): (slave ip6gre2): Releasing backup interface [ 338.483929][T13990] ip6gre2 (unregistering): left promiscuous mode [ 338.655213][T12303] smbdirect: ib_dev[syz1] removed [ 338.825390][T13990] batman_adv: batadv0: Removing interface: gretap1 [ 338.867064][T13990] bond0 (unregistering): Released all slaves [ 338.881604][T13990] bond1 (unregistering): Released all slaves [ 338.896647][T13990] bond2 (unregistering): Released all slaves [ 338.910774][T13990] bond3 (unregistering): Released all slaves [ 338.926810][T13990] bond4 (unregistering): Released all slaves [ 338.939387][T13990] bond5 (unregistering): Released all slaves [ 338.949948][T13990] bond6 (unregistering): Released all slaves [ 338.971153][ T5719] xfrm0 speed is unknown, defaulting to 1000 [ 338.972913][ T5719] infiniband syz1: ib_query_port failed (-19) [ 338.980041][ T5442] 8021q: adding VLAN 0 to HW filter on device eth2 [ 338.989558][T14762] netdevsim netdevsim7 eth5: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.996076][T14762] netdevsim netdevsim7 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.201695][T13990] tipc: Left network mode [ 339.238510][T13990] IPVS: stopping backup sync thread 13016 ... [ 339.578061][T17085] FAULT_INJECTION: forcing a failure. [ 339.578061][T17085] name failslab, interval 1, probability 10, space 0, times 0 [ 339.584498][T17085] CPU: 3 UID: 0 PID: 17085 Comm: syz.3.2796 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.584549][T17085] Tainted: [L]=SOFTLOCKUP [ 339.584558][T17085] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 339.584570][T17085] Call Trace: [ 339.584578][T17085] [ 339.584588][T17085] dump_stack_lvl+0x100/0x190 [ 339.584625][T17085] should_fail_ex.cold+0x5/0xa [ 339.584654][T17085] should_failslab+0xc2/0x120 [ 339.584681][T17085] __kmalloc_cache_noprof+0x91/0x6d0 [ 339.584711][T17085] ? selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 339.584748][T17085] selinux_netlbl_sock_genattr+0xe7/0x4e0 [ 339.584780][T17085] selinux_netlbl_socket_post_create+0xb0/0x1c0 [ 339.584814][T17085] selinux_socket_post_create+0x368/0x7e0 [ 339.584845][T17085] ? __pfx_selinux_socket_post_create+0x10/0x10 [ 339.584874][T17085] ? rawv6_init_sk+0x18d/0x1d0 [ 339.584909][T17085] ? __pfx_rawv6_init_sk+0x10/0x10 [ 339.584935][T17085] ? inet6_create+0xb34/0x12b0 [ 339.584967][T17085] security_socket_post_create+0xaf/0x270 [ 339.584997][T17085] __sock_create+0x70b/0x860 [ 339.585027][T17085] __sys_socket+0x14d/0x260 [ 339.585055][T17085] ? __pfx___sys_socket+0x10/0x10 [ 339.585087][T17085] __x64_sys_socket+0x72/0xb0 [ 339.585111][T17085] ? lockdep_hardirqs_on+0x7d/0x110 [ 339.585135][T17085] do_syscall_64+0x123/0x790 [ 339.585158][T17085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.585199][T17085] RIP: 0033:0x7fadaf39e159 [ 339.585217][T17085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.585237][T17085] RSP: 002b:00007fadb031c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 339.585259][T17085] RAX: ffffffffffffffda RBX: 00007fadaf625fa0 RCX: 00007fadaf39e159 [ 339.585274][T17085] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 339.585288][T17085] RBP: 00007fadaf435024 R08: 0000000000000000 R09: 0000000000000000 [ 339.585327][T17085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.585340][T17085] R13: 00007fadaf626038 R14: 00007fadaf625fa0 R15: 00007ffdaf280958 [ 339.585368][T17085] [ 339.831777][ T43] kauditd_printk_skb: 1466 callbacks suppressed [ 339.831867][ T43] audit: type=1400 audit(1788585623.234:42075): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.832368][ T43] audit: type=1400 audit(1788585623.234:42076): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.834704][ T43] audit: type=1400 audit(1788585623.234:42077): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.835318][ T43] audit: type=1400 audit(1788585623.234:42078): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.863475][ T43] audit: type=1400 audit(1788585623.264:42079): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.869793][ T43] audit: type=1400 audit(1788585623.264:42080): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.895337][ T43] audit: type=1400 audit(1788585623.294:42081): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.895841][ T43] audit: type=1400 audit(1788585623.294:42082): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.897152][ T43] audit: type=1400 audit(1788585623.294:42083): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 339.903913][ T43] audit: type=1400 audit(1788585623.304:42084): avc: denied { search } for pid=17095 comm="dhcpcd-run-hook" name="/" dev="sda1" ino=2 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_passwd_agent_exec_t:s0" [ 340.034377][T13990] hsr_slave_0: left promiscuous mode [ 340.042488][T13990] hsr_slave_1: left promiscuous mode [ 340.125380][T17116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=17116 comm=syz.8.2799 [ 340.323285][T13990] veth1_macvtap: left promiscuous mode [ 340.325750][T13990] veth0_macvtap: left promiscuous mode [ 340.338594][T13990] veth1_vlan: left promiscuous mode [ 340.342211][T13990] veth0_vlan: left promiscuous mode [ 341.062476][ T5719] SELinux: failure in sel_netif_sid_slow(), invalid network interface (51) [ 341.588622][ T5442] 8021q: adding VLAN 0 to HW filter on device eth3 [ 342.134188][T17155] pim6reg: entered allmulticast mode [ 342.226875][T13990] IPVS: stop unused estimator thread 0... [ 342.482910][ T5442] 8021q: adding VLAN 0 to HW filter on device eth4 [ 342.539172][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 342.689498][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 342.692438][ T35] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 342.698825][ T35] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 342.703799][ T35] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 342.708358][ T35] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 342.712231][ T35] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 342.720506][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.723394][ T35] usb 6-1: Product: syz [ 342.726299][ T35] usb 6-1: Manufacturer: syz [ 342.726346][ T35] usb 6-1: SerialNumber: syz [ 342.736843][ C3] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 342.758658][ T35] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input57 [ 342.990312][ T35] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 342.994175][ T35] (id 0x00) [ 343.119323][ T35] rc_core: IR keymap rc-imon-pad not found [ 343.121925][ T35] Registered IR keymap rc-empty [ 343.124483][ T35] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 343.129372][ T35] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 343.209934][ T35] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0 [ 343.215592][ T35] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/rc/rc0/input58 [ 343.230440][ T35] imon 6-1:155.0: iMON device (15c2:ffdc, intf0) on usb<6:10> initialized [ 343.339413][ T5833] usb 14-1: new low-speed USB device number 13 using dummy_hcd [ 343.378322][ T5442] 8021q: adding VLAN 0 to HW filter on device eth5 P[ 343.391715][T17199] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2819'. - H @[ 343.411421][ T5835] usb 6-1: USB disconnect, device number 10 [ 343.489955][ T5833] usb 14-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 343.494908][ T5833] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 343.494983][ T5833] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.495022][ T5833] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.495060][ T5833] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.515348][ T5833] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 343.515421][ T5833] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.515500][ T5833] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.515542][ T5833] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.535552][ T5833] usb 14-1: config 168 descriptor has 1 excess byte, ignoring [ 343.535623][ T5833] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 343.535678][ T5833] usb 14-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 343.535720][ T5833] usb 14-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 343.562287][ T5833] usb 14-1: string descriptor 0 read error: -22 [ 343.565349][ T5833] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.624328][ T5833] adutux 14-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 343.824657][ T5833] usb 14-1: USB disconnect, device number 13 [ 344.182602][T17229] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2824'. [ 344.374549][T17239] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001e: 0000 [#1] SMP KASAN NOPTI [ 344.380237][T17239] KASAN: null-ptr-deref in range [0x00000000000000f0-0x00000000000000f7] [ 344.384065][T17239] CPU: 0 UID: 0 PID: 17239 Comm: syz.8.2826 Tainted: G L syzkaller #0 PREEMPT(full) [ 344.388666][T17239] Tainted: [L]=SOFTLOCKUP [ 344.390635][T17239] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 344.396189][T17239] RIP: 0010:rebind_store+0x147/0x2d0 [ 344.399002][T17239] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 30 e4 ca 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c [ 344.407129][T17239] RSP: 0018:ffffc9000575fc38 EFLAGS: 00010206 [ 344.409706][T17239] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 344.413398][T17239] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0 [ 344.416833][T17239] RBP: ffffffff9bcae430 R08: 0000000000000000 R09: fffffbfff3795c88 [ 344.420490][T17239] R10: ffffffff9bcae443 R11: 0000000000000001 R12: 0000000000000001 [ 344.424256][T17239] R13: ffff88802ad0c460 R14: 0000000000000000 R15: ffff88802d8eb400 [ 344.427648][T17239] FS: 00007fbdcd0cf6c0(0000) GS:ffff8880d5b64000(0000) knlGS:0000000000000000 [ 344.431431][T17239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.434266][T17239] CR2: 00007fa07a708fe8 CR3: 0000000036705000 CR4: 0000000000352ef0 [ 344.437778][T17239] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000001800 [ 344.441679][T17239] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 344.445393][T17239] Call Trace: [ 344.446823][T17239] [ 344.448086][T17239] ? __pfx_rebind_store+0x10/0x10 [ 344.450322][T17239] drv_attr_store+0x74/0xb0 [ 344.452572][T17239] ? __pfx_drv_attr_store+0x10/0x10 [ 344.455291][T17239] sysfs_kf_write+0xf2/0x150 [ 344.457531][T17239] kernfs_fop_write_iter+0x3e0/0x5f0 [ 344.459786][T17239] ? __pfx_sysfs_kf_write+0x10/0x10 [ 344.462001][T17239] vfs_write+0x6af/0x1050 [ 344.463861][T17239] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 344.466400][T17239] ? __pfx_vfs_write+0x10/0x10 [ 344.468659][T17239] ? find_held_lock+0x2b/0x80 [ 344.471160][T17239] ksys_write+0x12a/0x250 [ 344.473363][T17239] ? __pfx_ksys_write+0x10/0x10 [ 344.475604][T17239] do_syscall_64+0x123/0x790 [ 344.477899][T17239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.480707][T17239] RIP: 0033:0x7fbdcc19e159 [ 344.482712][T17239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.491700][T17239] RSP: 002b:00007fbdcd0cf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 344.495440][T17239] RAX: ffffffffffffffda RBX: 00007fbdcc425fa0 RCX: 00007fbdcc19e159 [ 344.499360][T17239] RDX: 0000000000000001 RSI: 0000200000000940 RDI: 0000000000000003 [ 344.503091][T17239] RBP: 00007fbdcc235024 R08: 0000000000000000 R09: 0000000000000000 [ 344.507300][T17239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.511316][T17239] R13: 00007fbdcc426038 R14: 00007fbdcc425fa0 R15: 00007ffd9c775ab8 [ 344.514776][T17239] [ 344.516133][T17239] Modules linked in: [ 344.518184][T17239] ---[ end trace 0000000000000000 ]--- [ 344.599654][T17239] RIP: 0010:rebind_store+0x147/0x2d0 [ 344.602212][T17239] Code: 53 01 00 00 48 89 d8 48 c1 e0 07 4c 8b b0 30 e4 ca 9b 48 b8 00 00 00 00 00 fc ff df 49 8d be f0 00 00 00 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 30 01 00 00 4d 8b be f0 00 00 00 4d 85 ff 74 3c [ 344.611495][T17239] RSP: 0018:ffffc9000575fc38 EFLAGS: 00010206 [ 344.614381][T17239] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 344.618624][T17239] RDX: 000000000000001e RSI: 0000000000000004 RDI: 00000000000000f0 [ 344.623194][T17239] RBP: ffffffff9bcae430 R08: 0000000000000000 R09: fffffbfff3795c88 [ 344.627012][T17239] R10: ffffffff9bcae443 R11: 0000000000000001 R12: 0000000000000001 [ 344.627034][T17239] R13: ffff88802ad0c460 R14: 0000000000000000 R15: ffff88802d8eb400 [ 344.627047][T17239] FS: 00007fbdcd0cf6c0(0000) GS:ffff8880d5d64000(0000) knlGS:0000000000000000 [ 344.627081][T17239] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 344.627094][T17239] CR2: 000000110c480833 CR3: 0000000036705000 CR4: 0000000000352ef0 [ 344.627110][T17239] Kernel panic - not syncing: Fatal exception [ 344.647948][T17239] Kernel Offset: disabled [ 344.649801][T17239] Rebooting in 86400 seconds..