last executing test programs: 13m16.961172161s ago: executing program 32 (id=65): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000680)={0x7, 0x8, 0xfa00, {r1, 0x5}}, 0x10) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x50009404, &(0x7f0000000140)) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xca) bind$ax25(r4, &(0x7f0000000000)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$gtp(&(0x7f0000000340), r4) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_INIT(r5, 0x29, 0xc8, &(0x7f0000000000), 0x4) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) 12m23.674822898s ago: executing program 33 (id=810): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x3}]}}]}, 0x40}}, 0x4048000) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2b00b8, &(0x7f00000002c0)=ANY=[@ANYBLOB='hugd=nevez,\x00']) 10m32.256965762s ago: executing program 34 (id=2026): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205647, &(0x7f0000000100)={0xf030000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x10001, '\x00', @p_u16=0x0}}) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000002000080080002"], 0x1c}], 0x1}, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x2000) 10m24.186913241s ago: executing program 35 (id=1928): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer=relative:\f\x00']) (async) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000001c0)=ANY=[@ANYBLOB='mpol=prefer=relative:\f\x00']) r0 = socket$inet_udp(0x2, 0x2, 0x0) sync_file_range(r0, 0x6, 0x4, 0x2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x80002, 0x0) r2 = socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x3, 0x3a) (async) r3 = socket(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x29, 0xd1, 0x0, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) connect(r5, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) (async) connect(r5, &(0x7f0000000000)=@un=@abs={0x0, 0x0, 0x4e21}, 0x80) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x4893a, 0x904a}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x7}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 9m47.45440772s ago: executing program 36 (id=2354): ptrace(0x10, 0x0) (async) ptrace(0x10, 0x0) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="fdfe04012f2005"], 0x7) (async) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="fdfe04012f2005"], 0x7) socket$inet6(0xa, 0x1, 0x0) (async) r0 = socket$inet6(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xfffffe28) setuid(r2) syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') (async) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/igmp6\x00') preadv(r3, &(0x7f0000000840)=[{&(0x7f00000001c0)=""/168, 0xa8}], 0x1, 0x180, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0xffffff1f, 0xffffff7b, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x1020, 0x8100}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x3}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1000}]}}}]}, 0x58}}, 0x40804) ppoll(0x0, 0xfffffffffffffd20, 0x0, 0x0, 0xff96) setpriority(0x2, 0xff, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000002080)='wg2\x00', 0x4) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="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", 0x118) r5 = syz_open_procfs(0x0, &(0x7f0000002040)='net/tcp\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) (async) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d2, &(0x7f0000000100)) read$FUSE(r5, &(0x7f0000000000)={0x2020}, 0x96) read$FUSE(r5, &(0x7f0000004440)={0x2020}, 0x2020) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000c, @loopback, 0xfffff803}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e25, 0x80a0000c, @loopback, 0xfffff803}, 0x1c) 9m30.342503517s ago: executing program 6 (id=2542): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000380)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@ipv4_newrule={0x24, 0x20, 0x1, 0x2000000, 0x20000, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_GOTO={0x8, 0x4, 0xfffffffb}]}, 0x24}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, 0x0, 0x0, &(0x7f00000008c0)=[@mask_fadd={0x58, 0x114, 0x8, {{0x7, 0xff}, 0x0, 0x0, 0x100000000000000, 0x8, 0xffffffff, 0x3, 0x8, 0x400}}], 0x58}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_sctp(0x2, 0x5, 0x84) gettid() bind$inet(r3, &(0x7f00000003c0)={0x2, 0x4e24, @multicast2}, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_FLUSH(r2, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x21c, r4, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfc000000}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}, @TIPC_NLA_MEDIA={0x64, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xc588}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0xc4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "0431829540408809e8a4d3a2ad005624f82efa8f970d07b5ba6ef7a7974a83841948"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x4b, 0x4, {'gcm(aes)\x00', 0x23, "7239d4416a25ac755f812b002424d115569ae62df13bea8a57986de47d3c2040013096"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9179}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xf4df}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x38, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_CON={0x4}]}, @TIPC_NLA_PUBL={0x4}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x81}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffff7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffff}]}]}, 0x21c}, 0x1, 0x0, 0x0, 0x80}, 0x20000005) 9m30.236634405s ago: executing program 6 (id=2544): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000000000329f4b336abfde4ab2eaf570f11c859d2413ae8d48623e8a96723bde88451a21f260098171cb9913a51308d559ed61cc27405bc81604677b16438e00acba4c5b7e333b75ffff1b7eaf347607ba15fca9184e47ed95583bd638d8d21963820d72ef720f86b8fc684551563bd414836c452b8a3bb118b08f749a23de8387de72df334c1997"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r0 = syz_open_dev$cec(&(0x7f0000000480), 0x0, 0x3402) ioctl$CEC_ADAP_G_PHYS_ADDR(r0, 0x80026101, &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x7ff, 0x6, 0x4, 0x1, 0x14b2, 0x3]}, &(0x7f0000000280)=0x78) 9m29.301999372s ago: executing program 6 (id=2554): set_mempolicy(0x2002, &(0x7f0000000000)=0x9, 0x9) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$kcm(0x10, 0x100000000002, 0x4) (async) set_mempolicy(0x4000, &(0x7f0000000580)=0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x150, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x509e, 0x46}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x101}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xef, 0x1, "d06f0043e3507013596e2dbec35a9fb9a07edb1ed67b01843b35ac7800ff98fb69aefea92fdc880e8f63488a6220fcf8d260f90192ccda314547308cbd5d6bcf41cd170b1814e4db1f5c4535b1b80b7ccf436e286a3bbcf56848e68d87519157f7bbe0e42ae116b60172b04d7343f54d7b9c740a35be1af0233bad2650c5f0ec5cbb5e58c878eda47d2a5bcd89914909ece69d1c57fdf33aa294db26217e4bf8623db5ded4b4ad5daeefbbe20616c686bb1dd6b3c0fc53df02c8db1d512577ce6f9ebeddcacec2501f3fc73bec70bbd0b49355d44aa59fe6d670ae8f0d6e0661d1f401ec1084d70557fb22"}}]}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x20000810) futex(&(0x7f00000040c0), 0x7, 0x8000004, 0x0, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000180)='wlan1\x00', &(0x7f0000000540)="b201c3fdf076117345b71b5cf963baeb55add511aae4c6e813169cd84e8151bc0a4d6159", 0x24) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000039c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)="a3740ed821240b9bcd264a16a56e8b64d97e40d5035c274f24811d5d1fc87b2ed28f86239649492fe6bb036b47788764d1a08580501ba8c4b2132e207877bbadfe7d38739a4ddda57b1f03368f43379027bf6d99d81dea425ad6facd029432ea15043ddda5f06fc86dca61dfbb63d323ccd33f951385034b28729767bd844b53304c5ccab0ec5b9ea7c566ad82f4bbe63b4d38e42aef226e21b371ae61aca6b77daed3fdad428d12975ec2e9a3ed52a369c916f4", 0xb4}, {&(0x7f00000000c0)="085bfa1a0c739fbf56a291cde91c854565b1627d326e", 0x16}, {&(0x7f0000000100)="104d8b4000000000", 0x8}, {&(0x7f0000000200)="0205f5aad4fc6cbd3b624cc96a9d2ead12d34fe4863516223059c7449cd94c8a54d8af0e96760bd032d438ea32cca93324d86485879fc7d7478779f123741bc4c85dca69bbd357be4e495806cba9f47fabbc8a65c5c656c68e4dadccbb9ff6579c1bc0ddbbfc3e2d64deb58ce9b356aa5cad47336671cae8413d21140c92117369377f5f3854bec1ab5904bcf3991dbf0e522735a6b43d2d46102ad39597b38cb495289457c2fb24b71e646b6abe58a0133ab1b4ff56de34fb50603e6ad86b908c80043e5dcfe9389790762e0fbbf383f0847f00"/222, 0xde}, {&(0x7f0000000300)="2be39c45888a56d71f93c3d2bd8e83e7d3089f11e2b5176baf5b33b51206e028641a65835c82dafd718ca304a68c9c84bff736dadc0dfd4bf37520c1fa599e64a93d4b0b4e308eaf2e7c09302e50b554806fdedeb2b05b142d0a56faf1d5", 0x5e}, {&(0x7f0000000380)="fba288cbce07a2fd18f8dfbfee2131db1439c9528ef06b91b49cfb7db27f4c2b89d706232c7ee9ac88d44fd08d2ff11acb149379829aa5f7020000009fb8decf4cda55c3319eab4075e8902d8f75e6660b24", 0x52}, {&(0x7f0000000400)="b9e397b8a5c517dd4557815d605a8fd2a41b62622582998c93083802dc8d52c72d87f35d12e25e43da02d1a09ce13185eb6c050eb0f8296281a4073a0c2f1cd186c08cb26d62fed317a7969e3de3e5f76fc71cc33bce858eaa4e3648cdde9f5f8524d9b3c6aee8c1cb618cc378687ead17f727122f5781e646753bea1eb0acce1941bbf6d7f634f2e86735ab52", 0x8d}], 0x7, 0x0, 0x0, 0xc00e}, 0x3fbbb0fbf31bdc4f) 9m29.147421286s ago: executing program 6 (id=2555): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) r1 = userfaultfd(0x80001) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_COPY(r1, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) 9m28.901052784s ago: executing program 6 (id=2558): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001280)='./file0\x00', 0x80000, 0x100) fsync(r1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@initdev}}, &(0x7f0000000240)=0xe8) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x400, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000b00)={0x4, "abacd211119ca94c633774262eb5ab2c7b9c5cff6ce78185d8c4dc064744e042", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000780)={"d1ed39d8de344002b9e581a3a3bb0d5d5f307e5600", r4}) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=@ipv4_delroute={0x2c, 0x19, 0x200, 0x70bd27, 0x25dfdbfb, {0x2, 0x80, 0x1e, 0x5, 0xfd, 0x4, 0x0, 0xa, 0x1c00}, [@RTA_FLOW={0x8, 0xb, 0x3275}, @RTA_UID={0x8, 0x19, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) pselect6(0xfe41, &(0x7f0000000040)={0xd, 0x0, 0x0, 0x8000000}, 0x0, 0x0, 0x0, 0x0) 9m28.622644268s ago: executing program 6 (id=2563): r0 = socket$inet(0x2, 0x3, 0x2c6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 9m28.531203179s ago: executing program 37 (id=2563): r0 = socket$inet(0x2, 0x3, 0x2c6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000004000/0x3000)=nil, 0x3000) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) 8m21.523073899s ago: executing program 7 (id=3229): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0xfffffffd, 0x0, "8100e1c8e80b598c36ff000800"}) r2 = syz_open_pts(r1, 0x40601) ioctl$TIOCCONS(r2, 0x541d) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8m21.452364747s ago: executing program 7 (id=3231): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) pread64(r2, &(0x7f0000005580)=""/4096, 0x1000, 0x1) readv(r1, &(0x7f0000001800)=[{&(0x7f0000000680)=""/42, 0x2a}], 0x1) pread64(r2, &(0x7f0000000300)=""/121, 0x79, 0x4) 8m21.373146968s ago: executing program 7 (id=3232): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfc) 8m21.299394035s ago: executing program 7 (id=3233): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b141a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) timerfd_gettime(0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x0, 0x0) 8m21.242175417s ago: executing program 7 (id=3234): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014", 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a3000000000140000001100"], 0xf8}, 0x1, 0x0, 0x0, 0x2040441}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x22, 0x9, 0xfffffffffffffffd, 0x76, 0x2, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m20.969328214s ago: executing program 7 (id=3236): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x11012, r0, 0x10c000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 8m20.904183756s ago: executing program 38 (id=3236): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x8, 0x11012, r0, 0x10c000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 7m51.670362838s ago: executing program 3 (id=3559): r0 = syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r1, 0x2}], 0x1, 0x9f) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004dfa00480066000004069078ac1414bbac1414aa441c0db3e000000200000004ac14144100000002ffffffff000000050703c0004e214e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="710d0800007805903a2d2f0e5572a398af1398185585dc"], 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000040000009e"]) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000600)={0x0, 0x46, 0x6f, 0x1}) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a00)={r2, "b71d6600ced3c8cf64fe1a15eb6c08e5"}) syz_open_dev$sg(&(0x7f0000000080), 0xffff0000, 0x40) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) (async) poll(&(0x7f00000001c0)=[{r1, 0x2}], 0x1, 0x9f) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004dfa00480066000004069078ac1414bbac1414aa441c0db3e000000200000004ac14144100000002ffffffff000000050703c0004e214e24", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="710d0800007805903a2d2f0e5572a398af1398185585dc"], 0x0) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000005c0)=ANY=[@ANYBLOB="00000000040000009e"]) (async) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000600)={0x0, 0x46, 0x6f, 0x1}) (async) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000a00)={r2, "b71d6600ced3c8cf64fe1a15eb6c08e5"}) (async) 7m51.352639817s ago: executing program 3 (id=3562): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async, rerun: 32) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @local}, 0x1c) (rerun: 32) sendfile(r0, r0, 0x0, 0x4) 7m51.193837279s ago: executing program 3 (id=3563): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x40, 0x1c0862) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'prefer', '=relative', @void}}}]}) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000003c0)={r1, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000010100ffe, 0x0, 0x0, 0x1a, 0xc, "faf98317e5a1149989fc8dbe53ea6abad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e0000000000000000000000000000000000ffff", "32d8cc26f7061a74df2cfc06c89f3d9a234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7a93300", [0xfffffffffffffce6, 0x7]}}) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000040)={0x29, 0x4, 0x0, {0x6, 0x4, 0x1, 0x0, [0x0]}}, 0x29) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000080)={0x0, 0x1, 0x100c}) 7m51.023405574s ago: executing program 3 (id=3565): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x7cdbc3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7, 0x7}}]}}]}, 0x48}}, 0x24000040) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffe0, 0x10}}]}}]}, 0x3c}}, 0x2) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0815000000051104000000000000000001000005540201"], 0x1508}, 0x1, 0x0, 0x0, 0x240408d1}, 0x0) r3 = socket$inet(0x2, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000001c0)={'ip_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x800, 0x8001, {{0x17, 0x4, 0x2, 0x4, 0x5c, 0x68, 0x0, 0x81, 0x2f, 0x0, @loopback, @private=0xa010102, {[@generic={0x94, 0x7, "b705219b98"}, @lsrr={0x83, 0x1b, 0x3e, [@rand_addr=0x64010101, @multicast1, @empty, @empty, @loopback, @empty]}, @noop, @lsrr={0x83, 0x23, 0xac, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @multicast2, @rand_addr=0x64010100, @rand_addr=0x64010101, @loopback, @rand_addr=0x64010100, @empty]}]}}}}}) sendmsg$inet(r3, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @local, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_retopts={{0x10}}], 0x30}, 0x24008004) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, &(0x7f0000000000)=0x4, 0x4) r5 = socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$RNDGETENTCNT(r6, 0x80045200, &(0x7f0000000380)) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000540)='./file0/../file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000046c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r8 = semget$private(0x0, 0x20000000102, 0x0) semop(r8, &(0x7f0000000380)=[{0x2, 0xffff}], 0x1) semctl$SETALL(r8, 0x0, 0x11, &(0x7f0000000100)=[0x81]) semctl$SEM_STAT(r8, 0x1, 0x12, &(0x7f0000000400)=""/221) semtimedop(r8, &(0x7f0000000000)=[{}, {}], 0x2, 0x0) semctl$IPC_RMID(r8, 0x0, 0x10) 7m50.098795332s ago: executing program 3 (id=3573): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x3a, 0x1, 0x0, 0x20) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000010000000300001801300030454d1f600000000000000ffffe0000001060002000000000006000100020000000600040000000000"], 0x44}}, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000d06000)=0xffffffff, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4e23, @multicast2}, 0x10) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) pread64(r4, &(0x7f0000000040)=""/203, 0xcb, 0x3) lstat(&(0x7f0000000080)='./file0\x00', 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000500)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00'], 0x2c}, 0x1, 0x0, 0x0, 0x42}, 0x2810) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r6, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r6}, &(0x7f0000001a40), &(0x7f0000001bc0)=r5}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r6, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), r0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$ppp(r0, &(0x7f0000000280)="4c0785ed8a9309a82e3f4bd29daf7e1c62c767fcf24c3586ab16c509ec8fe0c4b7e117adc393ca5a2f257c0941a34f55b993d927ab29c08703fe31baa3baf6242b17ba432a85533ccec0ad6ab6d40ed30416e8fce9f378b9981677f019a7ce89e2e5213ad3943b1f44f800235d5a5fac44914608eac8fa4066d2cf5b296d6c4d3e9444b2a9e662fdc83e1828ee14286aeaee33dd686aac52f425a78cbac55693ff4dd3b6ce58e5e5d19fb6a9ec057f03e5ffff2e5ec8da16d01dbe22a4dd3a8d50589cf4c6abd61c4b809f4f92b9d6b49fec2deae0fb9987461952785de2a02fb41835da03a6b452b9a43d07c8ca79501837", 0xf2) setsockopt$MRT_DONE(r9, 0x0, 0xc9, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xb080020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r7, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xd}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x810) 7m49.73395391s ago: executing program 3 (id=3576): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f00000005c0)={0x1, 0x2, @raw_data=[0xb, 0x8, 0x101, 0x1, 0x8, 0x9, 0xff, 0x6, 0x7, 0x8, 0x1, 0xd60, 0x80000004, 0x6, 0x1, 0xed]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES32=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x5}, 0x10}, 0x94) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) r4 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2e, 0x639ad587beb9ea67, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0xa, 0x2, 0x0, 0x0, @binary="7a25b390ad66"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000000c0)={'wlan1\x00', 0xfffffff8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xcbb}}, './file0\x00'}) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f0000000900)={0x1000, "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"}) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000001c0)={0x0, 0xfffffffe}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000040)=0x1f) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x4, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f00000002c0)={0x4, 0x8, [0x0, 0x5]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 7m49.642894331s ago: executing program 39 (id=3576): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f00000005c0)={0x1, 0x2, @raw_data=[0xb, 0x8, 0x101, 0x1, 0x8, 0x9, 0xff, 0x6, 0x7, 0x8, 0x1, 0xd60, 0x80000004, 0x6, 0x1, 0xed]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x49, 0x0, &(0x7f0000000680)="755bb05395201ad875a81f08fbf73c46403cbcf9922ed5e124d4576314b9d703e2270ea77e8be9b7d6a78d90f5cd95c2293b2397fd6fbb743e63ffe5e2e2d924e7f40180f4b1704f0f", 0x0}, 0x50) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYRES32=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000100)={0x0, 0x10, 0x0, 0x5}, 0x10}, 0x94) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) (async) r4 = socket(0xa, 0x802, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x6}, 0x1c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x2e, 0x639ad587beb9ea67, 0x70bd25, 0x25dfdbfc, {0xb}, [@typed={0xa, 0x2, 0x0, 0x0, @binary="7a25b390ad66"}]}, 0x20}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r2, 0x8934, &(0x7f00000000c0)={'wlan1\x00', 0xfffffff8}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xcbb}}, './file0\x00'}) ioctl$HIDIOCGSTRING(r6, 0x81044804, &(0x7f0000000900)={0x1000, "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"}) ioctl$VHOST_SET_VRING_BASE(r6, 0x4008af12, &(0x7f00000001c0)={0x0, 0xfffffffe}) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) (async) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) (async) ioctl$FS_IOC_SETFLAGS(r7, 0x40186f40, &(0x7f0000000040)=0x1f) (async) r9 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x4, 0x10000) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r9, 0xc008551b, &(0x7f00000002c0)={0x4, 0x8, [0x0, 0x5]}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 3m55.983382075s ago: executing program 8 (id=5750): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f0000000040)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}, '\x00\x00\x00\x00\x00\x00\x00\x00`\x00'}}}}}}}, 0x0) bpf$MAP_LOOKUP_BATCH(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x10000}, 0x38) syz_open_dev$dvb_dvr(&(0x7f0000000000), 0x0, 0x82900) 3m55.891605163s ago: executing program 8 (id=5753): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) (rerun: 32) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, r2, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c804}, 0x804) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd70000000007b280000000c00018008000100", @ANYRES32=r3], 0x20}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4044884) 3m55.672396979s ago: executing program 8 (id=5756): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (rerun: 32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$unix(0x1, 0x2, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async, rerun: 32) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYRESOCT=r2, @ANYRES8=r2, @ANYRESOCT=r3, @ANYRESHEX=r1, @ANYBLOB="0c009900ff070000780000001400040073797a6a616c6c657230000000000000080005000700"], 0x50}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) 3m55.449655731s ago: executing program 8 (id=5758): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000100)='./file0\x00') setxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)=@v2={0x2000000, [{0xdd2, 0x9}, {0x2, 0xe0}]}, 0x14, 0x3) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) 3m55.423048136s ago: executing program 8 (id=5760): ioprio_set$pid(0x2, 0x0, 0x6000) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000040)=0x0) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r0, 0x1, 0x4002) syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0x400aee2, 0x2, 0x1, 0x317}, &(0x7f0000000200), &(0x7f0000000280), &(0x7f0000000000)) 3m54.931102362s ago: executing program 8 (id=5766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c05fcec998d6f5e90a6b35b9114cfdb451c65d2d74f7ac17"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97a771c0fa9f76271af5ad6d4a01e6012e55600f38576508"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x78}}, 0xc0c4) 3m54.872639712s ago: executing program 40 (id=5766): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c05fcec998d6f5e90a6b35b9114cfdb451c65d2d74f7ac17"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "97a771c0fa9f76271af5ad6d4a01e6012e55600f38576508"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x78}}, 0xc0c4) 3m39.727679619s ago: executing program 5 (id=5908): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @multicast1}], 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, r2, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x58, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x28af}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}]}]}, 0x90}, 0x1, 0x0, 0x0, 0xd96850a76f50fbf3}, 0x1) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) recvmsg(r0, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x40010141) 3m39.596156368s ago: executing program 5 (id=5909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x13, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x60004040) openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r1, &(0x7f0000000080)={'syz0\x00', {0x3, 0x0, 0x0, 0x1}, 0x0, [0x1, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1db, 0x0, 0x10000000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffe, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1000000, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, 0x2, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x2, 0x0, 0xfffffffe, 0x5d1d8547]}, 0x45c) mount(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)='\x01') ioctl$UI_DEV_CREATE(r1, 0x5501) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) gettid() socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x454}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) read$FUSE(r1, &(0x7f0000002600)={0x2020}, 0x2020) write$uinput_user_dev(r1, &(0x7f0000000640)={'syz1\x00', {0x7, 0x6, 0x1ff, 0xfac}, 0x16, [0x7, 0x3, 0x8108, 0x7, 0x101, 0x2c94cded, 0x4, 0x6, 0x2, 0x9, 0x4, 0x80000000, 0x4, 0xe1, 0x3ff, 0x8, 0x9, 0x9, 0x4, 0x40, 0xffffff01, 0xb, 0xa, 0x6, 0x7fffffff, 0x2, 0x1, 0xfffffffb, 0x4, 0x10, 0x9, 0x101, 0x7, 0x9, 0xfffffffe, 0x3, 0x400000, 0x8, 0x1, 0x0, 0xc0000, 0x2, 0x4, 0x7, 0x1, 0x9, 0xf, 0x6, 0x1, 0x200, 0x40ba, 0x3, 0xbd6, 0x7, 0x4, 0x80000000, 0x54fc3549, 0x101, 0x6, 0x6, 0xd53, 0x71, 0x5, 0xe1d], [0x8, 0x1, 0xe2d, 0x8, 0x0, 0xfff, 0xfffff2d2, 0x4, 0x0, 0x8, 0x2, 0x5, 0x10001, 0x7bf, 0xa, 0x7ff, 0x3, 0xd6f, 0x5, 0xa, 0xc, 0x8, 0x1, 0x1, 0x3, 0x5, 0x2, 0xf, 0x0, 0x3b, 0x3, 0x475, 0x7, 0x10001, 0x5, 0x39, 0xff, 0x6, 0xedd7, 0x2, 0x5421, 0xaf, 0xffffffff, 0x1ff, 0x10001, 0x1, 0x5, 0x2, 0x2, 0x6, 0xe, 0x9, 0x5, 0x0, 0x7, 0x7fff, 0xeb1a, 0x0, 0x7, 0x4, 0x5, 0x8001, 0x10001, 0x5], [0xd, 0x4, 0x52c, 0xfb44, 0x7f, 0xe, 0x1ff, 0xfffffffa, 0x800, 0x9, 0x1ff, 0x401, 0xfffffff8, 0x7, 0x7, 0x3b, 0xffffffff, 0x8, 0x800, 0x10001, 0x2, 0x18b, 0x8000, 0x508, 0x7, 0x10, 0x6, 0x6, 0x6, 0x9b0, 0x7, 0x1, 0x9, 0x60000000, 0x8001, 0x200, 0x7, 0x3, 0x9, 0x3f, 0x1, 0x4, 0x4, 0x6, 0x5, 0x10000, 0xfffffff8, 0xc, 0xffffffff, 0x7ff, 0x5, 0x4, 0x8, 0x6, 0x7fff, 0x8001, 0x0, 0x80, 0xd0b, 0x800, 0x9, 0x1b, 0x5, 0xfffff432], [0x4, 0x9, 0x8, 0x2, 0x6, 0xfffff5c9, 0x0, 0x1000, 0x0, 0x4, 0x6, 0x8, 0x6, 0x0, 0x2, 0x1000081, 0x100, 0xfffffff7, 0x5, 0x3, 0x10, 0x7c1f, 0x8, 0x8, 0x2, 0x7, 0x7, 0x0, 0x1d, 0x80000000, 0x3, 0xfb0, 0xa, 0x3, 0x3d9, 0xc27, 0x1, 0x2, 0x8, 0x81, 0x7, 0x7, 0x3, 0x2, 0x202, 0x7, 0x6c56, 0x4, 0x29, 0x0, 0x3, 0x8001, 0x5, 0x149, 0x2, 0x3, 0x4, 0x4, 0xfff, 0x8, 0xa91, 0x101, 0x5, 0x4]}, 0x45c) 3m39.282162909s ago: executing program 5 (id=5912): r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x191000, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) ppoll(&(0x7f00000000c0)=[{r1, 0x10}, {r1, 0x1406}, {r1, 0x9204}, {r0, 0x504}, {r1, 0x105}], 0x5, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={[0x8]}, 0x8) file_setattr(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x80000001, 0x0, 0x5, 0x5, 0x6}, 0x18, 0x800) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x8400, 0x0) read$alg(r2, &(0x7f0000000240)=""/202, 0xca) ioctl$XFS_IOC_FSBULKSTAT(0xffffffffffffffff, 0xc0205865, &(0x7f0000000480)={&(0x7f0000000340)=0x5, 0xac2, &(0x7f0000000380)=[{}], &(0x7f0000000440)}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f00000004c0)) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000540)=0x90000) ioctl$CDROMREADCOOKED(r2, 0x5315, &(0x7f0000000580)) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001000), 0x400000, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000001040)={{@local, 0x10000}, @local, 0xc, 0x5, 0x4a, 0xfff, 0x7, 0x26a9, 0x8}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000001080)={{@any, 0x2}, 0x1, 0x1, 0x3014}) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000010c0)={0x1, 0xde, "054b2a2bc527ef258da449f606be8edc5b99e4bc1494225e8a9bc88c375e6cb9af027e276c82cb69c6eda1e3495f1979ce8a1997ef9a14b9caf160ce846c648e2a533aa296467e792ca3bfeb18f00a356fce6a4338f66b24a23f68ca7089b4134692912e4b32c1a9d28a9295ef747177d8ec7c488b3c4190e6b2afef11dcba46ff19db538ec24a0ab82d61fde7313ef459f394a23facb9c08f65ef3937b92da5c9980a8c203485533d7708fbe9e38f13ba5af131784b24f9a6fbe83cc54da89a1b622ae748d6f70d9b67dc1440ef66a167e9c3930c5bbc5c056d7462015a"}) r4 = signalfd4(r2, &(0x7f00000011c0)={[0x3]}, 0x8, 0x80000) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000001240)={&(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, &(0x7f00000012c0)={r5, 0x6, 0x10000, 0x3, 0x1, [], [0x26f, 0x3, 0x8000, 0xa], [0x5, 0x1, 0x80000000], [0xfffffffffffffffb, 0x6, 0xfffffffffffffffa, 0x8]}) fstat(r1, &(0x7f0000001340)) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r6, 0x80186e84, &(0x7f0000001480)={&(0x7f00000013c0)=[{0x8dc9, 0x4, 0x2}, {0x8000000000000001, 0xc2, 0x2}, {0x0, 0x0, 0x1}, {0x5, 0x1, 0x1}, {0x6, 0x12}, {0x9, 0x8, 0x1}, {0x536a}, {0x61a, 0x7fff}, {0x5, 0x2}], 0x9, 0x10, 0xe, 0x8a5}) prctl$PR_GET_TIMERSLACK(0x1e) ioctl$FE_READ_STATUS(r2, 0x80046f45, &(0x7f00000014c0)) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, &(0x7f0000002500)={&(0x7f0000001500)=[0x4, 0x1, 0x9, 0xb7b4, 0x0, 0x3, 0xc7, 0xf0, 0x80, 0x0, 0x7, 0x5, 0x1, 0x2e, 0x0, 0x1, 0x8000, 0x100, 0xffff, 0x1, 0x4, 0x9, 0x80000000, 0x100, 0x3, 0x3, 0x1, 0x2, 0x4, 0x3, 0x6, 0x81, 0x7, 0x80000001, 0xb, 0x6, 0x8, 0x4, 0xa837, 0x7c, 0x10000, 0x1, 0x4, 0x8, 0xfffffff9, 0x5, 0x800, 0x8, 0x6d7, 0x8000, 0x8c6, 0x8001, 0x4, 0x9, 0xfffffffc, 0x6, 0x80000001, 0x0, 0xa8, 0x1, 0x5, 0xe656, 0x4, 0x2, 0xf, 0x8a9, 0x80000000, 0x6, 0x1000, 0xff, 0x3, 0x8000, 0x9, 0x1, 0x4, 0x3, 0x6, 0x4, 0x8, 0x0, 0x3, 0x4, 0x2, 0x5, 0x0, 0x7f, 0xff, 0x7, 0x7, 0x72, 0xb52, 0xe3c6, 0x7, 0x5, 0x401, 0x3, 0x2, 0xffffc6ea, 0x2, 0xac4, 0x4, 0x15, 0x80000000, 0x6, 0x101, 0x8, 0xffff, 0x8, 0x8, 0x7, 0x1, 0x5, 0x4, 0x7, 0x2, 0xe, 0x1, 0xa9e7, 0x6, 0x4, 0x7ff, 0x0, 0xcf, 0x8, 0x7f, 0x3, 0x2, 0x40, 0x1, 0x10, 0x3, 0xf400, 0x6, 0x1, 0x5, 0x6, 0x6, 0x80000000, 0x7fffffff, 0x5, 0x8, 0x102, 0xe, 0x2, 0x4, 0x100, 0x8000, 0x3, 0xffff8001, 0x2, 0x8, 0x5ef1, 0x800, 0xffffffff, 0x8, 0x9, 0x3, 0x4, 0x8, 0x401, 0x802, 0x8, 0x7, 0xffff8001, 0xb, 0xe44, 0x4, 0xebf8, 0x16e, 0x8, 0x18000, 0xe4e, 0x1, 0x9, 0x9, 0xe, 0x6, 0x0, 0x6, 0x401, 0x932, 0xfffffffd, 0x3, 0x31, 0x7, 0xab, 0x8000, 0xd, 0x5, 0xfffffffa, 0xffffffff, 0x92e7, 0x9, 0x80000001, 0x1, 0x5, 0x0, 0x5, 0x485295b, 0x7, 0xe659, 0x5, 0x289a, 0xf, 0x200, 0x6, 0x8, 0x0, 0x101, 0x4, 0x0, 0x10000, 0x85, 0x0, 0xe, 0x8, 0x7, 0xc0, 0x2, 0x4, 0xffffff81, 0x7, 0x40, 0x4, 0x59, 0x0, 0x2, 0x6, 0xfffffff4, 0xd, 0x4, 0x5, 0xfffffffc, 0xe2, 0x10000, 0x8000, 0x2, 0x5, 0x3, 0xd, 0xffffffff, 0x0, 0x5, 0x2, 0xb, 0x73e62eed, 0x9, 0x7f, 0x2, 0x9de5, 0x0, 0x8, 0x4, 0xb4, 0x5, 0x3, 0x9, 0x6, 0xcf, 0x6, 0x0, 0xae3a, 0x0, 0x5, 0xffffffff, 0x401, 0x0, 0x3, 0x8, 0x5f8f, 0x4, 0x40, 0x9, 0x3, 0x663f01a8, 0x7e91, 0x80000001, 0x7, 0x9, 0x200, 0x8, 0x3, 0xfffffff7, 0x2, 0x0, 0xda6, 0xffffffb3, 0x6, 0xf, 0x10, 0x7, 0x10, 0xd2c, 0x4, 0x10, 0x7fff, 0x8, 0x6, 0x2, 0x7, 0xfe51, 0xc5d0, 0xff, 0x7, 0xd, 0x9d9a, 0x5f2b, 0x8, 0x2, 0x7, 0x6, 0x3, 0xfffffc2f, 0xff, 0x101, 0x4, 0x5d, 0xffffff2c, 0x1, 0x1ff, 0x7, 0x4, 0x3, 0x8000, 0x5, 0x54, 0x5, 0x800, 0x800, 0x9d, 0x4, 0x5ea, 0x0, 0x2, 0x374a, 0x7fff, 0x5, 0xff, 0x2, 0x1, 0x10, 0x4, 0x7f, 0x800, 0x28c, 0x8000, 0x8, 0x101, 0x4f, 0x7, 0xfffffff9, 0x80010, 0x5ca6, 0x8, 0x6, 0x3, 0x8, 0x9, 0x0, 0x9, 0x9954, 0x1, 0xb, 0x1, 0x6, 0x5, 0x5, 0x0, 0x134, 0x7, 0x623, 0x415, 0x4, 0x2, 0x2, 0x4, 0x10001, 0x249d, 0x8000, 0x2, 0x4, 0x48, 0x3, 0x7, 0x7ff, 0x7, 0x9, 0x8, 0x0, 0x4, 0x10001, 0x1000, 0x6, 0x1, 0x40, 0x8, 0x6, 0x6, 0x1, 0x4, 0x6, 0x6f8, 0x1a, 0x7de4b670, 0x0, 0x8, 0x10, 0x35, 0x2, 0xd, 0xffff7fff, 0x7, 0xcc, 0x3, 0x3, 0x81, 0x3ff, 0x80000000, 0x9, 0x0, 0x2, 0x63f, 0x1, 0x8, 0xffffff62, 0x5, 0x7, 0x3, 0x7, 0x6, 0x4, 0x800, 0x87, 0x7, 0x9, 0xffff, 0x400, 0x0, 0xfffff51c, 0x2, 0x6, 0x80000001, 0x37af, 0x8, 0x6, 0x7, 0x3, 0x4, 0x3, 0x7, 0xffffffff, 0x3, 0xc1, 0x100, 0x3, 0x1ff, 0x7fffffff, 0x6, 0x200, 0x3, 0x7, 0xffffff6d, 0x3, 0x8, 0xd, 0x94, 0x4, 0x8, 0x8, 0x9, 0xff000000, 0x7, 0x40, 0x5, 0x5, 0x5347, 0x7f, 0x8, 0xfffffffc, 0x1, 0x6, 0x0, 0xcf94, 0x7, 0x2, 0x6c, 0x7, 0x9, 0x10000, 0xff, 0xa, 0x81, 0x1a, 0x8, 0x102, 0xfffffff7, 0x4, 0xca, 0x7ff, 0x9, 0x6, 0x7, 0x8000, 0x10000, 0x2, 0x5, 0x2, 0x4, 0x5, 0x8, 0xffffffff, 0x9, 0x400, 0x40000000, 0x5, 0x10, 0x9, 0x8, 0x8, 0x7, 0x1, 0xfff, 0x8, 0x5, 0xde, 0x1, 0x3, 0xd0c, 0x5, 0xd, 0xb, 0x1000, 0x8, 0x9, 0x0, 0x800, 0xa0a, 0x2, 0x40, 0x7, 0x5, 0xffffffff, 0x1, 0x4, 0x6, 0xffffffff, 0x5, 0x3, 0x9, 0x4, 0x2, 0xc, 0xaac, 0x2, 0x7, 0x200, 0x9, 0x7, 0x6, 0x4, 0xe2, 0xe51, 0x841d, 0x8, 0x1, 0x331b, 0xa, 0x5, 0x5, 0x7, 0x8, 0x5, 0x14b1, 0xa, 0x3, 0x2, 0x9, 0x7fffffff, 0xd70, 0x2, 0x0, 0x10001, 0x2, 0x3, 0x2, 0xe, 0x3, 0x1, 0x9, 0x5, 0x2315, 0x7, 0x46, 0xf, 0x1ff, 0x66edd75a, 0x10000, 0x7, 0xfffffff7, 0x3, 0xcc0c, 0x5, 0x3, 0x6c30, 0xff31, 0x1000, 0xff, 0x1ff, 0x800, 0xc35, 0x5, 0x7fffffff, 0x3, 0x9, 0x0, 0x2, 0xc4b, 0x2, 0x5, 0x0, 0x2, 0x9, 0x9, 0xf, 0x0, 0x800, 0xfffffff8, 0x1ff, 0x6, 0xfffff800, 0x6, 0x1, 0xffffffff, 0x0, 0x40, 0x9, 0x400, 0x9, 0x4, 0x3ff, 0x2, 0x7, 0x1, 0xfffffff7, 0xfffffff7, 0x1, 0x8, 0x5, 0x6, 0x8e, 0x401, 0x8, 0x5, 0x7f, 0x5, 0x80000000, 0x800, 0x80000000, 0xffff, 0x0, 0xf83, 0x2, 0x717, 0x7fffffff, 0x4, 0x3, 0x7, 0x6, 0x6a08, 0x7, 0x8, 0x1, 0x10000, 0xfffffffc, 0x3, 0x5, 0x6, 0x8, 0x0, 0x7f, 0x54, 0x18, 0x8000, 0xfffffffd, 0xfffffff9, 0x8, 0x4, 0x8, 0x3ff, 0x1, 0x35, 0x8, 0x3, 0x81, 0x0, 0x4c4, 0xffff, 0x8, 0x3, 0x80000001, 0xffff, 0x8001, 0x0, 0x5, 0x7, 0x9, 0xfffffffd, 0x80000000, 0x0, 0x0, 0x3, 0x4, 0x0, 0xfffff8cb, 0x2, 0x2, 0xc77c, 0xa000, 0x5, 0x8, 0xfea, 0x0, 0x3, 0x8, 0xc, 0x5, 0x7, 0xfffffff7, 0x80000001, 0xffff, 0x3, 0x58, 0x7, 0x5, 0x1, 0x3, 0xe15, 0x101, 0x40, 0x6, 0x1, 0x7, 0xff, 0x80000001, 0xd21, 0xbe85, 0x80000000, 0x8, 0x10000, 0x4, 0x0, 0x6, 0x400, 0x2, 0x5, 0x6, 0x5, 0x6, 0x3000000, 0x7, 0xd56, 0x0, 0x30000, 0x1, 0xffff, 0xf4, 0x9, 0x8, 0xe, 0xfffffffd, 0x7, 0x101, 0x7fffffff, 0xfffffff4, 0x9, 0x6, 0xf, 0x0, 0xffffffff, 0x8, 0x0, 0x10, 0xbf, 0x7fff, 0x3, 0x6, 0x0, 0x5, 0xa54b, 0x8001, 0x8, 0x9, 0x416, 0x9, 0x4, 0x1, 0x1, 0x6, 0x1, 0x7fffffff, 0x6, 0x2, 0x9, 0x40, 0x2, 0x0, 0x7f, 0x4, 0x8, 0x8, 0x2, 0x9, 0x40, 0x2, 0x7, 0x1, 0x1, 0x0, 0x4, 0x3, 0x401, 0xffff71b1, 0xcbd, 0x4, 0x8ef, 0x7ff, 0x10000, 0x5, 0x5, 0x2, 0x2, 0x4, 0x9, 0xfffff800, 0x3, 0x1000, 0x2, 0xffffffff, 0x9, 0x1, 0x5, 0x100, 0x1, 0x1, 0x2, 0x0, 0x0, 0x80000000, 0x4, 0xc000000, 0x6, 0xfffffffe, 0x5, 0xeb0, 0x3ff, 0xe5e, 0xaf, 0x2, 0xfff, 0x5, 0x1, 0x4, 0x5, 0xffff8000, 0x7e, 0x0, 0x2, 0x10000, 0x5, 0x3, 0x4, 0x400, 0x1, 0xcdc, 0xffffe9df, 0x5, 0x3, 0x8, 0x9, 0x0, 0xeb, 0x6, 0x5e, 0x8, 0x5, 0x3, 0x6, 0xfff, 0x3, 0xe000000, 0x9, 0x2, 0xc5, 0x401, 0x7c1, 0x9, 0x0, 0x8, 0x3, 0x6, 0xe2c, 0x2, 0x6, 0x6, 0x4, 0xfffffffa, 0x6, 0x4, 0x4, 0x401, 0x36035ee0, 0xfffff584, 0x101, 0x8, 0x4, 0x9, 0x3, 0x6, 0x2, 0x7, 0x1ff, 0x6, 0x1a4f, 0x3, 0x3, 0x8, 0x3, 0x51ded57a, 0x3938, 0x700000, 0x20d, 0x800, 0x1, 0x0, 0x54f, 0x8, 0x3ff, 0x2, 0xfffffff9, 0x9, 0x5, 0x0, 0x81, 0xfffffffa, 0x1ff, 0x6, 0x3eb, 0x9783, 0x401, 0x8, 0x5, 0x0, 0x2, 0x162b, 0x1, 0x9, 0xb77, 0x6, 0x4, 0xffffff80, 0x6, 0xc5, 0x3, 0xfffffff8, 0x6, 0x8000, 0x80000000, 0x2, 0xf9a, 0x55d, 0x8, 0x4, 0x9, 0x5, 0x3, 0x1ff, 0x8, 0x5, 0xfffff6ab, 0xfaca, 0x0, 0x0, 0x81, 0x6, 0x8, 0x7, 0x4, 0x2, 0x8, 0x5a, 0x3, 0x4, 0x3, 0x5, 0x7fffffff, 0x7, 0x5, 0x8, 0x2, 0x101, 0x3, 0x4, 0x6, 0x1, 0x200, 0x4, 0x3, 0xfffffffc, 0x23, 0x9, 0x0, 0x401, 0x7f, 0x5, 0xe, 0x80000001, 0xfa6011d, 0xd9e80000, 0x3, 0xe, 0x8, 0x7, 0x101, 0x8], 0x3, 0x400, 0x2}) sendfile(r4, r2, 0x0, 0x9) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000027c0)={0x4c, 0x0, &(0x7f0000002680)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000025c0)={@fda={0x66646185, 0x6, 0x0, 0x1}, @fda={0x66646185, 0x5, 0x2, 0x32}, @ptr={0x70742a85, 0x0, &(0x7f0000002540)=""/88, 0x58, 0x1, 0x27}}, &(0x7f0000002640)={0x0, 0x20, 0x40}}}, @acquire={0x40046305, 0x2}], 0xc0, 0x0, &(0x7f0000002700)="03f0f7033e79a9e5366c9b485bfd8ce68ed924e097e066c75814609c42984cca666fe776d2f56e14af2a22ccf942ee112be7d8db0654d293924c58bc5f41efc666e294646e05d5a6a62c3099c3db854126df4ff612f3db6d75cc279ae6bbbf4f5253c1835f0ef171269f6cd06e439ecf6b32cc78873641212b50c2674ebe7b84ea46972daf3b50fd48e42cad63b7486d69d8101baebf61f6df37ae6148cec7f6aa09e2f0a94e4d4c8c6e9855843cbb530e7cffb2ecd9d4416f39ab0054fe8dbc"}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r3, 0x7a6, &(0x7f0000002800)={0x5, 0x7, 0xe, 0x7f, 0x0, 0x4}) 3m39.281894973s ago: executing program 5 (id=5913): r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000200)={0x28, 0x4, r2, 0x0, &(0x7f0000d35000/0x4000)=nil, 0x4000, 0x8000000004000000}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x7, r3, r2, 0x5, 0xfffffffffffffffa, 0x3002}) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="11da3cf44b1a8c3d8a39ccbd630e8ef9170ccf07ef1800322de53ae3b183ee66", 0x20) r4 = accept4(r0, 0x0, 0x0, 0x80000) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r5, &(0x7f0000000480)=[{&(0x7f0000000100)="781b", 0x2}], 0x1) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r4) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0007000002000000000000002000000020000016"], 0x14}, 0x1, 0x0, 0x0, 0x24000885}, 0x800) 3m37.822128489s ago: executing program 5 (id=5933): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) (async) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') (async) symlink(&(0x7f00000012c0)='.\x00', &(0x7f0000001300)='./bus\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) (async) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r1, &(0x7f0000000400)=""/4096, 0x1000) 3m37.425446811s ago: executing program 5 (id=5941): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x8, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x5, 0x10}], "ac"}, @ptr={0x5}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x0, 0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/51, 0x54, 0x33, 0x0, 0x3}, 0x28) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0xfffffffffffffff8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x9, 0xa, 0x6, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0xb, 0x0, 0x50, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x4, 0x1a, &(0x7f00000004c0)=""/26, 0x41100, 0x2, '\x00', r1, 0x25, r4, 0x8, &(0x7f0000000680)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r6], &(0x7f0000000740)=[{0x2, 0x1, 0x5, 0x9}, {0x1, 0x3, 0x7, 0x7}], 0x10, 0x200000}, 0x94) 3m21.383518567s ago: executing program 41 (id=5941): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x20004000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x80) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0), 0x8040, &(0x7f0000000600)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}, {@workdir={'workdir', 0x3d, './bus'}}]}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000001c0)}, 0x20) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x31, 0x31, 0x8, [@datasec={0x9, 0x1, 0x0, 0xf, 0x1, [{0x5, 0x5, 0x10}], "ac"}, @ptr={0x5}, @float={0x1, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x5f, 0x0, 0x0, 0x30, 0x2e, 0x2e]}}, &(0x7f0000000580)=""/51, 0x54, 0x33, 0x0, 0x3}, 0x28) r5 = creat(&(0x7f0000000040)='./bus\x00', 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) copy_file_range(r6, 0x0, r5, 0x0, 0xfffffffffffffff8, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffff9}, @jmp={0x5, 0x0, 0x9, 0xa, 0x6, 0x0, 0x4}, @map_idx={0x18, 0x6, 0x5, 0x0, 0xe}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0xb, 0x0, 0x50, 0xffffffffffffffff}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00', 0x4, 0x1a, &(0x7f00000004c0)=""/26, 0x41100, 0x2, '\x00', r1, 0x25, r4, 0x8, &(0x7f0000000680)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0x10, 0x0, 0x4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r6], &(0x7f0000000740)=[{0x2, 0x1, 0x5, 0x9}, {0x1, 0x3, 0x7, 0x7}], 0x10, 0x200000}, 0x94) 11.377534809s ago: executing program 0 (id=7788): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x80000, 0x0) mknodat$null(r0, &(0x7f0000000280)='./file0\x00', 0x2000, 0x103) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r7 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$PIO_UNISCRNMAP(r7, 0x4b6a, &(0x7f0000004a80)="69a865e58d2d1e88f3") sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@newtfilter={0x2c, 0x2c, 0xd27, 0x170bd2b, 0x3, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0x4}}, [@TCA_CHAIN={0x8, 0xb, 0x7fffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0x2) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000080)={0x1, {{0xa, 0x4e21, 0xb14, @mcast2}}, {{0xa, 0x4e20, 0x8, @private0}}}, 0x108) (async) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast1}, 0x1c) (async) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async) bind$inet6(r9, &(0x7f00000002c0)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x6}, 0x1c) 11.308285381s ago: executing program 0 (id=7789): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=@newtaction={0x14, 0x30, 0xeb294530a2951e2, 0x0, 0x7}, 0x14}}, 0x0) r1 = inotify_init() r2 = fsopen(&(0x7f0000000000)='iso9660\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x29) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x100) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) listen(r5, 0x5) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r7 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r7, 0xc0045543, &(0x7f0000000100)=0x10) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x200000, 0x100, 0x27}, 0x18) fanotify_mark(r4, 0x1, 0x2, r8, 0x0) close(0x3) 11.21479487s ago: executing program 0 (id=7792): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000080)=0x1) socket$kcm(0x2, 0xa, 0x2) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="000086dd03000a0000001400"], 0x340a) 11.015671623s ago: executing program 0 (id=7795): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000180)) setns(r2, 0x4000000) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x1000420, 0x0) r3 = syz_pidfd_open(r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) mount$fuseblk(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x24000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="016155bdf000fbdbdf251c0000000c00018008000100", @ANYRES32=r7], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x40006) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0xff08, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1010}], 0x1}, 0x0) 10.89584871s ago: executing program 0 (id=7798): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000000000)=0xffffffffffffffff, 0x4) (async) r1 = socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1400000004000000040000000a"], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) preadv(r4, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/229, 0xe5}, {&(0x7f0000000380)=""/209, 0xd1}], 0x3, 0xfffffffe, 0x0) (async) syz_open_pts(r4, 0x8000) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SSP_MODE={{0xb}, 0x6f}}}, 0x7) (async) bind$alg(r1, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-des3_ede-asm)\x00'}, 0x58) 10.415633604s ago: executing program 0 (id=7803): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)={0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) 10.360996436s ago: executing program 42 (id=7803): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0), 0x2) ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000100)={0x1}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x515}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}]}, 0x3c}}, 0x40) 4.790204621s ago: executing program 2 (id=7838): syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x22402) (async) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x22402) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x20081, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000042c0)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000004300)={0x2020}, 0x2020) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="500000000802110000010802110000000802110093f300000000000000000000010101000006020202022402010071070000010001080150ae38a11b1e38513d18e0049be3b4887fdf0ca7a7706d0d44218221f5112adf2115591402a9b0690a591e291690c01d68907a492e78453a99b001db02758f9e96c29e9229506249385b881b69"], 0x37) (async) syz_80211_inject_frame(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="500000000802110000010802110000000802110093f300000000000000000000010101000006020202022402010071070000010001080150ae38a11b1e38513d18e0049be3b4887fdf0ca7a7706d0d44218221f5112adf2115591402a9b0690a591e291690c01d68907a492e78453a99b001db02758f9e96c29e9229506249385b881b69"], 0x37) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0xb, '\x00', @data=0x4}]}) (async) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000040)={0x21, &(0x7f00000000c0)=[{0xb, '\x00', @data=0x4}]}) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000280)={0xffffffff, 0x8000000000000001, 0x2, 0x6, 0x6}) (async) ioctl$XFS_IOC_GETBMAPA(r0, 0xc020582c, &(0x7f0000000280)={0xffffffff, 0x8000000000000001, 0x2, 0x6, 0x6}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c", 0xe, 0x8, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002040), 0x82401, 0x0) clock_adjtime(0xffffffd3, &(0x7f0000000300)={0x0, 0x3, 0x6, 0x0, 0x8, 0x8, 0x652, 0x9c2, 0x8000009657, 0xfffffffffffffffc, 0x4fe, 0x41000, 0x9, 0x800000000b, 0x80000000000000, 0xcc0, 0x1, 0x6, 0x94d6, 0x10000000000001, 0x9, 0x80a, 0x2, 0x42943f8e4, 0x7, 0xffffffffffffffff}) ioctl$sock_ifreq(r2, 0x8910, &(0x7f0000000000)={'vlan0\x00', @ifru_mtu=0x6}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r6, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r5, {0x101, 0xfffffff8}}, './file0\x00'}) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) 4.316747149s ago: executing program 4 (id=7843): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (async) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000a00)=@vmx={0x6, 0x0, 0x2080, {0x0, 0xdddd0000, {0x1}, 0x0, 0xd}, {"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", "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"}}) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea4, 0x20000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}, 0x20) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd0}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4.041248495s ago: executing program 2 (id=7846): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x3700, 0x0) read$FUSE(r1, &(0x7f0000002d80)={0x2020}, 0x2020) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x40fff, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='nfsd\x00', 0x0, 0x0) r5 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000002bc0)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xc, 0x7fffffff}]}) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000103c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88"], 0x0) syz_usb_connect(0x1, 0x2d, &(0x7f0000000080)=ANY=[@ANYRESHEX=0x0, @ANYRES64=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESHEX=r2, @ANYRES16], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x800000000000) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000000c0)={0x2f, 0x2, 0x2, 0x2, 0x0, [@empty]}, 0x18) close_range(r0, 0xffffffffffffffff, 0x0) 3.733001379s ago: executing program 4 (id=7847): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2, 0x0, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e]}}, 0x0, 0x61}, 0x28) r0 = socket$netlink(0x10, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1) sendmsg$nl_xfrm(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000480)=@newsa={0xf0, 0x10, 0x200, 0x70bd2a, 0x25dfdbfe, {{@in=@remote, @in6=@empty, 0x4e21, 0x9, 0x4e22, 0x97, 0x2, 0x0, 0xa0, 0x16}, {@in=@loopback, 0x4d6, 0xff}, @in6=@loopback, {0x4, 0x9, 0x0, 0x1, 0x4d7, 0x7ff, 0x2, 0x10001}, {0x7f, 0x4, 0x10001, 0x1}, {0xffff, 0x9, 0xf}, 0x70bd2b, 0x3504, 0x2, 0x4, 0x10}}, 0xf0}}, 0x4040) 3.539342516s ago: executing program 4 (id=7849): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) madvise(&(0x7f0000130000/0xd000)=nil, 0xd000, 0x66) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x19) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x32) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="da086767266766660f001666b9a20a00000f3266366636f30fc7750f66b9960b000066b80c00000066ba000000000f30d86cdc66b97007000066b84200000066ba000000000f3066b8000000000f23c00f21f8663503000b000f23f80f09ba2000b8e500ef", 0x65}], 0x1, 0x8, &(0x7f00000000c0)=[@dstype3={0x7, 0xc}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x1a}}}}]}, 0x38}}, 0x0) syz_clone3(&(0x7f00000001c0)={0x2000000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 3.272032772s ago: executing program 4 (id=7852): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x109802) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x28, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}, @IFLA_VLAN_EGRESS_QOS={0x1c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xfff}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x60}, 0x1, 0x0, 0x0, 0x81}, 0x8000002) 3.110949127s ago: executing program 4 (id=7854): r0 = syz_open_dev$sg(&(0x7f0000000080), 0x6f5e, 0x20803) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private2}}, &(0x7f0000000000)=0xe8) setresuid(0x0, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x370, 0x140, 0xc8, 0x8, 0x140, 0x5803, 0x2a0, 0x2e8, 0x2e8, 0x2a0, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x140, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}, {0x5}}, @common=@inet=@socket3={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x1, {0xb}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x13}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0xfffffffd, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x32, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c200000eaa0000001190780800001cac1414bb000017c100109078020700"/50], 0x0) sendmmsg$inet6(r3, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x22003, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x6a53f5cd494df848) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000001400)='./file0\x00', 0x12000, 0x40) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) chown(&(0x7f0000000680)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f00000001c0)="0f785ce82e0f09362e262e650f789d0010753866b8010000000f01c10f070f0d520066b89a26204e0f23c00f21f86635030003000f23f866b9800000c00f326635010000000f300f01cf", 0x4a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0xa, 0x6, 0xb, 0xd6bffffffffffe, 0x8, 0x8000040000000001, 0xb3, 0x8, 0x4b1d, 0x4000000000000008, 0x10000000000000d, 0x2081, 0x7, 0x1ff, 0xe6, 0xb286], 0x4, 0x383fc2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) recvmsg(r2, &(0x7f0000002640)={&(0x7f0000000580)=@ieee802154, 0x80, &(0x7f0000002580)=[{&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000002440)=""/19, 0x13}, {&(0x7f0000002480)=""/13, 0xd}, {&(0x7f00000024c0)=""/184, 0xb8}], 0x4, &(0x7f00000025c0)=""/77, 0x4d}, 0x10080) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, &(0x7f00000003c0)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x0, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) listen(r7, 0xf5f) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000000c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)=""/175, 0xfffffffffffffdb1}, {&(0x7f0000000340)=""/107, 0x6b}, {&(0x7f00000003c0)=""/65, 0x41}]}, &(0x7f0000000040)="414c211b2dc8", 0x0, 0x7, 0x10026, 0xffffffffffffffff, 0x0}) accept4$unix(r9, &(0x7f0000000180), &(0x7f0000000200)=0x6e, 0x80000) 2.673234638s ago: executing program 4 (id=7858): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r2, 0x0) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xfffff001, 0x0, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) (async) socket$unix(0x1, 0x1, 0x0) (async) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) (async) listen(r2, 0x0) (async) mount$9p_unix(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000180), 0x800000, &(0x7f0000000140)) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x40, 0xfffffffc, {0xa, 0x3f, 0x0, 0x0, r1}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x4, 0xfffff001, 0x0, 0x6}}, @IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x3f}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) (async) 1.514362277s ago: executing program 1 (id=7863): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x8000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) r2 = socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x0, 0xc9, 0x4}}}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) writev(r0, &(0x7f00000019c0)=[{&(0x7f00000000c0)="d7dec6d058eaa02b33abb420251b65854836fc8991d052c53a8fc38d4d6f2c69028a8812606826f3db19e7099be9c6d2c99557dfbf60dfbf4670beb655a52a4a607a2aedcd699f84d116d7", 0x4b}, {&(0x7f0000000800)="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", 0x1000}, {&(0x7f0000001800)="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", 0xfc}, {&(0x7f0000001900)="5b27faa432b1d7b2e5562b4ae197e10ca8409ee904bbf04bbc6cbdd0d2ee675a162aeed94ada1df8a76b8aac180252f4b5b6c22056c8075c45bac9d7894310312e977ae5be3f6d24f93f7cb0bf959e8afc9019a9852eee5e51dbd562cf52829178db8be906208550eb8ae1cd4c80c201704965170483a2d5425a71f27f8bcc4c2ccd1ed0af4a9b49e3c7bfb256", 0x8d}], 0x4) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x7, '\x00', 0x7fffffff, 0x81, 0x7, 0x2}}}}]}, 0x48}}, 0xc0) ptrace(0x10, 0x1) 1.360125592s ago: executing program 1 (id=7864): syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @none, 0x0, 0x2}, 0xe) listen(r0, 0x1) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0x0, 0x507, {}, {0xffffffffffffffff}, 0x8, 0x3}) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x4e20, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, r3}, {0x0, 0x4, 0x1, 0x0, 0x0, 0x807}, {0x8f7, 0xffffffffa, 0x4053e5, 0x20}, 0x6, 0x1, 0x1, 0x0, 0xbc2536767ff1cec3, 0x1}, {{@in=@private=0xa0100fc, 0x2, 0x32}, 0xa, @in=@local, 0x3506, 0x1, 0x0, 0x0, 0x9, 0xfffffffd, 0xd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) accept4(r0, 0x0, 0x0, 0x800) listen(r0, 0xe) 1.091155383s ago: executing program 1 (id=7865): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000340)={{@hyper, 0x2}, 0x4, 0x3, 0x69c9, 0x4, 0xd, 0x385a2d2f, 0x4, 0x100000000}) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000000b0101000000000000000000000000000002400000000291ff0100282e255e0034df3c3db035cdfb048116f699f12c09e7334f81ff5891cf941fdcdf56b3985a54507bd5cd828af28dc7dc81dfb6f9c55f48a4ce5a6705ac1c520e6e416a2a8ec53cd5fd7b52823ac86f484d1c5159759906c68677277e45c960e7f41a925f0d56aaafb4a7162d4fd46e10d5307299e7e29ab85b291ed7f144964386d41019406403473ce7c08f5765370e8cb2250728a0f2e4ccc11ac8ec3e323c1545c414f0e7f360c1d202bb4801220fb26e37fd75562d06c881fdefd489cb189b7fb4d1810000003400034000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x1}, 0x2400c040) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newtaction={0x1e0, 0x30, 0x1, 0x0, 0x25dfdbfd, {}, [{0x1cc, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x8af45}]}, {0x4}, {0xc}, {0xc}}}, @m_simple={0x190, 0xb, 0x0, 0x0, {{0xb}, {0x94, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x7, 0xd71, 0x5, 0x9, 0x5}}, @TCA_DEF_PARMS={0x18, 0x2, {0x5, 0x3, 0x0, 0x10001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x2, 0x8, 0x2, 0x3}}, @TCA_DEF_PARMS={0x18, 0x2, {0x4, 0x6, 0x1, 0x6, 0x74}}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x4, 0x0, 0x5, 0x7fffffff}}, @TCA_DEF_PARMS={0x18, 0x2, {0xffffff50, 0x2, 0x0, 0x800004, 0xffffffff}}]}, {0xd4, 0x6, "a3658178c3362a32271118f6ee14d784343194a2ba20dc1a6b3892fdd4bf7f7d478639ac4bf9c2dc52f2bf1d82a80a5e378f37e982a548a2bdecbd59ac8ae3c4f335b7c913c51153c39c8ae1156f23015cbd19e0400c507b1ae7246c602ca85dc9200be8cc1f78aedf886d9c6bffb475bfcd576f5153108c5e8c85aafa0c847d628339a704e0d1109b29a256532c7f54ed4dfc1468b7907ea53a7f531e6f3119a8384014fc4399e0e2aaeaa2bc75176baac7f16e66fc0ef9c4bd3ba86c7c315b91e85c55eddf97bc12adb4d2a26f1d0a"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}]}, 0x1e0}}, 0x0) 988.848762ms ago: executing program 9 (id=7835): r0 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x138, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd6000000001020600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="a40000009078000013123efa89eaad891c443df3a310ceb7813d030068c089edf513c945bfb413b1604dbfbd7758bf9cb7fcd186c406fe13e4fac7ce69e9a8545549dcbcd2f76da7a42689d29bdd74ae693919010762c615fc89e531de8d578cdee2b90bea7de8d5a6d563db3e1974e4582307ca50f6369807068f7d53f4b99f6dca461723543d91dd9b8771298b63155968ba4ac5d4f3288a01d935eb3fedf355c549ff3fa8ff32cb5c6338ec875fb3650238e4e8f4081df50ce4bdc7f6344e9ca419341ff77f4945ab1f23a29cacfd4bafcd9434984dce38cf1f5bcf9a68ae4262b6002ed2e1c048edca0c7484d770ba3f66bb312d"], 0x0) (async) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000006c0)="2c10098f478959948e2ff3", 0xb) (async) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x6, &(0x7f0000000000)=0x5, 0x5d) (async) r2 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000000)={"b85cad57", 0xff, 0x0, 0x6, 0x2, 0x4, '\x00', '\x00', "ee448507", "00000400", ["e0cadd713852c5204de8a878", "e19e029c0b99c0f100", "2c0f2bf4b925dadbc83d0571"]}) (async) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') (async) r4 = syz_open_dev$video(&(0x7f0000000000), 0x7fffffffffffffff, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r4, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000580), 0x30000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x8, "07bbfe1b9c5ad2888187a9223e00", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r6, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000280)=[{}]}) (async) ppoll(&(0x7f0000000480)=[{r4, 0x2000}], 0x1, &(0x7f0000000500), 0x0, 0x0) (async) preadv(r3, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) (async) r7 = fsopen(&(0x7f0000000140)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r3, 0xc10c5541, &(0x7f0000000240)={0x0, 0xfffffff9, 0x6532b311fbce4f95}) (async) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)=@RTM_GETMDB={0x18, 0x56, 0x400, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) r9 = accept4(r0, 0x0, 0x0, 0x800) (async) ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000ec0)={0x1, @pix={0x5, 0x6, 0x32314d59, 0x8, 0xe7c, 0x4, 0x5, 0x9, 0x0, 0x0, 0x1, 0x6}}) (async) r10 = syz_open_dev$sg(&(0x7f0000000280), 0x0, 0x22c43) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0x1c}}, 0xea5bc50b6199d77e) (async) ioctl$SCSI_IOCTL_SEND_COMMAND(r10, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r10]) (async) recvmsg$kcm(r3, &(0x7f0000000e80)={&(0x7f0000000140)=@alg, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000700)=""/202, 0xca}, {&(0x7f0000000800)=""/224, 0xe0}, {&(0x7f0000000900)=""/24, 0x18}, {&(0x7f0000000940)=""/100, 0x64}, {&(0x7f00000009c0)=""/133, 0x85}, {&(0x7f0000000a80)=""/132, 0x84}, {&(0x7f0000000b40)=""/245, 0xf5}, {&(0x7f0000000c40)=""/28, 0x1c}, {&(0x7f0000000c80)=""/93, 0x5d}, {&(0x7f0000000d00)=""/21, 0x15}], 0xa, &(0x7f0000000e00)=""/127, 0x7f}, 0x20) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)="a802912741424463", 0x8}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24000814}], 0x1, 0x48050) (async) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 888.394025ms ago: executing program 1 (id=7866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x14, 0x15, 0x1, 0x70bd26, 0x0, {0xb}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000200000000050037000000000008000200", @ANYRES32=r2, @ANYBLOB="06000600fe000000060004"], 0x50}, 0x4, 0x700000000000000, 0x0, 0x4}, 0x4040084) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r4, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x19, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) (async, rerun: 64) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (rerun: 64) 813.357346ms ago: executing program 9 (id=7867): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@mpls_getroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x14}, [@RTA_DST={0x8, 0x1, {0x7}}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) sendmmsg$inet(r0, &(0x7f0000000000), 0x400000000000003, 0x40) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=""/216, 0x2c632127) 675.886691ms ago: executing program 9 (id=7868): r0 = socket$nl_crypto(0x10, 0x3, 0x15) (async) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl1\x00', &(0x7f0000000340)={'ip6gre0\x00', 0x0, 0x2f, 0x7, 0x9, 0x0, 0x7e, @private0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x700, 0x8, 0x6, 0x438c}}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x5, [@float={0x8, 0x0, 0x0, 0x10, 0x10}, @typedef={0x5, 0x0, 0x0, 0x8, 0x1}, @union={0xb, 0x2, 0x0, 0x5, 0x1, 0x9, [{0x9, 0x2, 0x5}, {0x9, 0x3, 0x3}]}, @float={0x2, 0x0, 0x0, 0x10, 0x8}]}, {0x0, [0x30, 0x5f, 0x2e]}}, &(0x7f0000000480)=""/161, 0x65, 0xa1, 0x0, 0x2}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0xa, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x10001}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @alu={0x7, 0x1, 0x2, 0x5, 0x7, 0x50}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0xfffffffa, 0xd5, &(0x7f0000000240)=""/213, 0x41000, 0x22, '\x00', r2, @fallback=0x37, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x0, 0xf, 0x3ff, 0x6}, 0x10, r4, 0xffffffffffffffff, 0x2, 0x0, &(0x7f00000005c0)=[{0x88, 0x4, 0x2, 0x9}, {0x3, 0x5, 0xd, 0xa}], 0x10, 0x800}, 0x94) (async) sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f00000001200"], 0xf0}}, 0x0) 675.391591ms ago: executing program 2 (id=7869): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xfffc}, {0x1, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x88, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {}, {0x8, 0x10}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x200, 0x4, 0x1000, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) fcntl$dupfd(r1, 0x406, r2) 555.733405ms ago: executing program 1 (id=7870): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016001000071b48013d030100000000000702000000b00000bc26100000000000bf67200000000000160200000fff07006702"], 0x0}, 0x94) syz_emit_vhci(&(0x7f00000001c0)=ANY=[@ANYBLOB="040e0487470c"], 0x7) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0xfe, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x0) 535.857003ms ago: executing program 9 (id=7871): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) socket$inet(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x0) r4 = add_key$keyring(&(0x7f0000004a00), &(0x7f0000004a40)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, 0x0, r4) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="010026bd70000000001c3b00000008000300", @ANYRES32=r1, @ANYBLOB="5200330080200900ffffffffffff080211"], 0x84}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f00003cd000/0x2000)=nil, 0x2000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0xd, 0x8, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) 385.381849ms ago: executing program 2 (id=7872): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) (async) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4c}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x800000)=nil, 0x800000}, 0x1}) (async) madvise(&(0x7f0000001000/0x2000)=nil, 0x100000, 0x8) readv(r1, &(0x7f0000000640)=[{&(0x7f0000000180)=""/185, 0xb9}], 0x1) (async) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000300)={0x0}) (async) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000080)={r3, 0x3, r4, 0x3, 0x80000}) (async) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) (async) setresuid(0x0, 0xee00, 0x0) setrlimit(0x40000000000008, &(0x7f0000000000)={0x4}) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_LIST_KEY(r7, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x60000890}, 0x8) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000001c0)={0x28, 0x6, r6, 0x0, &(0x7f0000b33000/0x1000)=nil, 0x1000, 0x1}) 236.241158ms ago: executing program 1 (id=7873): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0xa, 0x0, 0x8c}, 0x20) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000040)={0xfffffffffffff912, 0x1e, 0x0, 0xdb7c, 0x1, 0x0, [{0x4, 0xffffffffffffffff, 0x52, '\x00', 0x400}]}) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x4, 0x420000) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) ioctl$EVIOCGMASK(r2, 0x80015b11, 0x0) 235.953107ms ago: executing program 9 (id=7874): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x8, 0x0, 0xfffffffd}, 0x24) write(r0, &(0x7f0000000100)="240000001a007f0214f9f407000904f702000000000000000002000008000f40fe00000e", 0x24) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x800000000000000, 0x0, 0x0, 0x800, 0x0, 0x8100000}, 0x0, &(0x7f0000000080)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6a9, 0x3ac8}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) shutdown(r3, 0x0) memfd_create(0x0, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000001c0)={0x2c, r2, 0x1, 0x20000000, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8ea}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xd}], @chandef_params]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r7) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0x78, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0xe6, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x40004) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r10 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff0600000016000000450000002500000019000400480000000d00000000000006040000000000f93132", 0x39}], 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, r10, r9, 0x0) r12 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r12, &(0x7f0000002b00)={&(0x7f0000000540)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x10, &(0x7f0000002980)=[{&(0x7f0000000580)="290f", 0x2}], 0x1, &(0x7f0000002a00)=[@ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x18}, 0x4) 235.441847ms ago: executing program 2 (id=7875): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, &(0x7f0000000140)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r0, 0xc01864cd, &(0x7f0000000340)={&(0x7f00000001c0)=[r1, r1], &(0x7f0000000280)=[0x8a, 0xceeb], 0x2}) (async) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000000000)={r1, r1, 0x1, 0x7}) (async) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000500)={'sit0\x00', &(0x7f0000000280)={'tunl0\x00', 0x0, 0x710, 0x80, 0x1, 0x0, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x0, 0x0, 0x5, 0x29, 0x0, @empty, @private}}}}) 416.722µs ago: executing program 2 (id=7876): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) sendfile(r2, r1, 0x0, 0x200000006) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x6}, 0x1c) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_TMR_START(r3, 0x5402) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$inet6(0xa, 0x2, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/key-users\x00', 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) (async) sendfile(r2, r1, 0x0, 0x200000006) (async) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e27, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x6}, 0x1c) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$SNDCTL_TMR_START(r3, 0x5402) (async) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) (async) 0s ago: executing program 9 (id=7877): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) (rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 32) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x7) (rerun: 32) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0xf9) kernel console output (not intermixed with test programs): 4 [ 805.338786][ T1328] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 805.343094][ T1328] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 805.353270][ T1328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.354703][T31799] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 805.361040][T31799] overlayfs: failed to set xattr on upper [ 805.361837][T31800] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 805.362915][T31799] overlayfs: ...falling back to redirect_dir=nofollow. [ 805.362923][T31799] overlayfs: ...falling back to index=off. [ 805.368897][T31778] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 805.373850][T31799] overlayfs: ...falling back to uuid=null. [ 805.384538][T31800] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 805.412552][T31796] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 51000000 out of range (51000..2150000) [ 805.522626][T31804] nbd: socks must be embedded in a SOCK_ITEM attr [ 805.528835][T31806] nbd: socks must be embedded in a SOCK_ITEM attr [ 805.853122][ T60] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 806.304924][ T60] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 806.321748][ T60] em28xx 14-1:0.0: board has no eeprom [ 806.403664][ T60] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 806.406512][ T60] em28xx 14-1:0.0: dvb set to bulk mode. [ 806.409125][ T6013] em28xx 14-1:0.0: Binding DVB extension [ 806.421146][ T60] usb 14-1: USB disconnect, device number 53 [ 806.424072][ T60] em28xx 14-1:0.0: Disconnecting em28xx [ 806.489728][ T6013] em28xx 14-1:0.0: Registering input extension [ 806.498384][ T60] em28xx 14-1:0.0: Closing input extension [ 806.527633][T31258] udevd[31258]: setting mode of /dev/i2c-3 to 020600 failed: No such file or directory [ 806.536076][T31258] udevd[31258]: setting owner of /dev/i2c-3 to uid=0, gid=0 failed: No such file or directory [ 806.540620][ T60] em28xx 14-1:0.0: Freeing device [ 807.665415][T22955] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 807.825729][T22955] usb 9-1: Using ep0 maxpacket: 16 [ 807.832451][T22955] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 807.842226][T22955] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 807.845184][T22955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.847802][T22955] usb 9-1: Product: syz [ 807.849161][T22955] usb 9-1: Manufacturer: syz [ 807.850728][T22955] usb 9-1: SerialNumber: syz [ 807.855943][T22955] usb 9-1: config 0 descriptor?? [ 807.863689][T22955] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 807.866611][T22955] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 807.931568][ T40] kauditd_printk_skb: 1828 callbacks suppressed [ 807.931580][ T40] audit: type=1400 audit(2000000183.440:225433): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 807.941678][ T40] audit: type=1400 audit(2000000183.449:225434): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 807.949393][ T40] audit: type=1400 audit(2000000183.449:225435): avc: denied { read write } for pid=24610 comm="syz-executor" name="loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.957309][ T40] audit: type=1400 audit(2000000183.449:225436): avc: denied { read write open } for pid=24610 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.965184][ T40] audit: type=1400 audit(2000000183.449:225437): avc: denied { ioctl } for pid=24610 comm="syz-executor" path="/dev/loop9" dev="devtmpfs" ino=667 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 807.973205][ T40] audit: type=1400 audit(2000000183.468:225438): avc: denied { ioctl } for pid=31899 comm="syz.1.7412" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 807.988143][ T40] audit: type=1400 audit(2000000183.496:225439): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56392 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 807.996003][ T40] audit: type=1400 audit(2000000183.496:225440): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 808.004077][ T40] audit: type=1400 audit(2000000183.496:225441): avc: denied { read } for pid=31903 comm="syz.9.7413" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 808.007909][ T6013] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 808.011305][ T40] audit: type=1400 audit(2000000183.496:225442): avc: denied { read open } for pid=31903 comm="syz.9.7413" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 808.093820][ T6061] usb 5-1: USB disconnect, device number 46 [ 808.093964][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 808.098515][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 808.189311][ T6013] usb 6-1: Using ep0 maxpacket: 32 [ 808.199875][ T6013] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 808.203104][ T6013] usb 6-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 808.206712][ T6013] usb 6-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 808.210991][ T6013] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 808.222634][ T6013] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 808.225475][ T6013] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.227960][ T6013] usb 6-1: Product: syz [ 808.229304][ T6013] usb 6-1: Manufacturer: syz [ 808.230792][ T6013] usb 6-1: SerialNumber: syz [ 808.244776][ C1] imon 6-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 808.249872][ T6013] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:155.0/input/input191 [ 808.499454][ T6061] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 808.521415][T22955] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 808.529207][ T6013] imon:send_packet: packet tx failed (-71) [ 808.563557][ T6013] imon 6-1:155.0: panel buttons/knobs setup failed [ 808.565655][ T6013] imon 6-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 808.568238][ T6013] (id 0x00) [ 808.638022][ T6061] usb 5-1: device descriptor read/64, error -71 [ 808.691306][ T6013] rc_core: IR keymap rc-imon-pad not found [ 808.693210][ T6013] Registered IR keymap rc-empty [ 808.694817][ T6013] imon 6-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 808.698079][ T6013] imon 6-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 808.701397][ T6013] imon:send_packet: packet tx failed (-71) [ 808.727783][ T6013] imon 6-1:155.0: remote input dev register failed [ 808.730036][ T6013] imon 6-1:155.0: imon_init_intf0: rc device setup failed [ 808.832610][ T6013] imon 6-1:155.0: unable to initialize intf0, err 0 [ 808.835272][ T6013] imon:imon_probe: failed to initialize context! [ 808.837788][ T6013] imon 6-1:155.0: unable to register, err -19 [ 808.842306][ T6013] usb 6-1: USB disconnect, device number 60 [ 808.894476][ T6061] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 808.977088][T22955] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 808.984598][T22955] em28xx 9-1:0.0: board has no eeprom [ 809.033776][ T6061] usb 5-1: device descriptor read/64, error -71 [ 809.056021][T22955] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 809.058578][T22955] em28xx 9-1:0.0: dvb set to bulk mode. [ 809.062952][ T6062] em28xx 9-1:0.0: Binding DVB extension [ 809.069725][T22955] usb 9-1: USB disconnect, device number 29 [ 809.072242][T22955] em28xx 9-1:0.0: Disconnecting em28xx [ 809.136550][ T6062] em28xx 9-1:0.0: Registering input extension [ 809.139679][T22955] em28xx 9-1:0.0: Closing input extension [ 809.152239][ T6061] usb usb5-port1: attempt power cycle [ 809.155140][T22955] em28xx 9-1:0.0: Freeing device [ 809.349329][T31947] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 809.354160][ T6062] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 809.515020][ T6062] usb 6-1: Using ep0 maxpacket: 8 [ 809.523049][ T6062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 809.527934][ T6061] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 809.533112][ T6062] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 809.537460][ T6062] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.543743][ T6062] usb 6-1: config 0 descriptor?? [ 809.559599][ T6061] usb 5-1: device descriptor read/8, error -71 [ 809.783833][ T6062] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 809.794470][ T6062] usb 6-1: USB disconnect, device number 61 [ 809.799277][T31961] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 809.810085][T31961] overlay: filesystem on ./bus not supported as upperdir [ 809.814027][T31961] overlay: filesystem on ./bus not supported as upperdir [ 809.814409][ T6061] usb 5-1: new low-speed USB device number 50 using dummy_hcd [ 809.825477][T31961] overlay: filesystem on ./bus not supported as upperdir [ 809.829199][T31961] overlay: filesystem on ./bus not supported as upperdir [ 809.834531][T31961] overlay: filesystem on ./bus not supported as upperdir [ 809.837629][ T6061] usb 5-1: device descriptor read/8, error -71 [ 809.856693][ T6014] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 809.954820][ T6061] usb usb5-port1: unable to enumerate USB device [ 810.021586][ T6014] usb 9-1: config 0 interface 0 altsetting 251 bulk endpoint 0x9 has invalid maxpacket 99 [ 810.024747][ T6014] usb 9-1: config 0 interface 0 has no altsetting 0 [ 810.038798][ T6014] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 810.041688][ T6014] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 810.044261][ T6014] usb 9-1: Product: syz [ 810.045683][ T6014] usb 9-1: Manufacturer: syz [ 810.047163][ T6014] usb 9-1: SerialNumber: syz [ 810.051535][ T6014] usb 9-1: config 0 descriptor?? [ 810.056902][T31954] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 810.062501][ T6014] usb 9-1: selecting invalid altsetting 0 [ 810.294717][T31954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 810.298616][T31954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 810.309477][ T6013] usb 9-1: USB disconnect, device number 30 [ 810.968138][T31984] netlink: 'syz.1.7432': attribute type 1 has an invalid length. [ 810.996998][T31984] bond3: entered promiscuous mode [ 810.998884][T31984] 8021q: adding VLAN 0 to HW filter on device bond3 [ 811.030403][T31985] bond3: (slave bridge3): making interface the new active one [ 811.033556][T31985] bridge3: entered promiscuous mode [ 811.036211][T31985] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 811.278842][ T5995] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 811.326099][T31998] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 811.336726][T31998] "syz.1.7435" (31998) uses obsolete ecb(arc4) skcipher [ 811.352166][T31999] input: syz1 as /devices/virtual/input/input194 [ 811.441019][ T5995] usb 9-1: Using ep0 maxpacket: 16 [ 811.451677][ T5995] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 811.464082][ T5995] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 811.471144][ T5995] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.473733][ T5995] usb 9-1: Product: syz [ 811.475235][ T5995] usb 9-1: Manufacturer: syz [ 811.476753][ T5995] usb 9-1: SerialNumber: syz [ 811.481215][ T5995] usb 9-1: config 0 descriptor?? [ 811.491799][ T5995] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 811.495936][ T5995] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 811.546199][T32008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.549661][T32008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.802599][ T5976] usb 14-1: new high-speed USB device number 54 using dummy_hcd [ 811.973602][ T5976] usb 14-1: Using ep0 maxpacket: 32 [ 811.993901][ T5976] usb 14-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 812.025553][ T5976] usb 14-1: string descriptor 0 read error: -22 [ 812.028910][ T5976] usb 14-1: New USB device found, idVendor=086a, idProduct=0002, bcdDevice= 0.40 [ 812.033236][ T5976] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.144683][ T5995] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 812.273444][ T6013] usb 14-1: USB disconnect, device number 54 [ 812.538689][T32032] __nla_validate_parse: 4 callbacks suppressed [ 812.538706][T32032] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7444'. [ 812.549993][T32032] netem: incorrect gi model size [ 813.015666][ T5995] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 813.018338][ T5995] em28xx 9-1:0.0: board has no eeprom [ 813.085448][ T5995] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 813.088082][ T5995] em28xx 9-1:0.0: dvb set to bulk mode. [ 813.090442][ T5976] em28xx 9-1:0.0: Binding DVB extension [ 813.094870][ T5995] usb 9-1: USB disconnect, device number 31 [ 813.097656][ T5995] em28xx 9-1:0.0: Disconnecting em28xx [ 813.220686][ T5976] em28xx 9-1:0.0: Registering input extension [ 813.234894][ T5995] em28xx 9-1:0.0: Closing input extension [ 813.249092][ T5995] em28xx 9-1:0.0: Freeing device [ 813.285670][ T40] kauditd_printk_skb: 946 callbacks suppressed [ 813.285683][ T40] audit: type=1400 audit(2000000188.444:226389): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.309669][ T40] audit: type=1400 audit(2000000188.463:226390): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.317417][ T40] audit: type=1400 audit(2000000188.472:226391): avc: denied { read write } for pid=25609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.325228][T32039] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7446'. [ 813.328055][T32039] netlink: 'syz.4.7446': attribute type 30 has an invalid length. [ 813.330620][T32039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7446'. [ 813.342479][ T40] audit: type=1400 audit(2000000188.472:226392): avc: denied { read write open } for pid=25609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.350640][ T40] audit: type=1400 audit(2000000188.481:226393): avc: denied { ioctl } for pid=25609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 813.359611][ T40] audit: type=1400 audit(2000000188.509:226394): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56392 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.367954][ T40] audit: type=1400 audit(2000000188.509:226395): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.377396][ T40] audit: type=1400 audit(2000000188.509:226396): avc: denied { recv } for pid=15 comm="ksoftirqd/0" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56392 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.387276][ T40] audit: type=1400 audit(2000000188.509:226397): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.396529][ T40] audit: type=1400 audit(2000000188.509:226398): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 813.540427][T32042] netlink: 100 bytes leftover after parsing attributes in process `syz.0.7448'. [ 813.859248][T32052] tmpfs: Bad value for 'mpol' [ 813.862810][T32052] mac80211_hwsim hwsim67 syzkaller0: entered promiscuous mode [ 814.032592][T32061] openvswitch: netlink: Key type 153 is out of range max 32 [ 814.160973][T32064] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1124 sclass=netlink_route_socket pid=32064 comm=syz.0.7456 [ 814.240732][ T6013] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 814.336749][T32071] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 814.366720][T32071] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7457'. [ 814.369981][T32071] netlink: 43 bytes leftover after parsing attributes in process `syz.9.7457'. [ 814.372700][T32071] netlink: 'syz.9.7457': attribute type 6 has an invalid length. [ 814.375068][T32071] netlink: 'syz.9.7457': attribute type 5 has an invalid length. [ 814.377434][T32071] netlink: 43 bytes leftover after parsing attributes in process `syz.9.7457'. [ 814.422083][ T6013] usb 9-1: Using ep0 maxpacket: 16 [ 814.436767][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 814.449488][ T6013] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 814.452471][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.459318][ T6013] usb 9-1: Product: syz [ 814.460670][ T6013] usb 9-1: Manufacturer: syz [ 814.474769][ T6013] usb 9-1: SerialNumber: syz [ 814.482079][ T6013] usb 9-1: config 0 descriptor?? [ 814.495420][ T6013] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 814.502131][ T6013] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 815.006423][T32093] SELinux: syz.1.7462 (32093) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 815.153674][ T6013] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 815.598261][ T6013] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 815.600859][ T6013] em28xx 9-1:0.0: board has no eeprom [ 815.666497][ T6013] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 815.672913][ T6013] em28xx 9-1:0.0: dvb set to bulk mode. [ 815.674969][ T1328] em28xx 9-1:0.0: Binding DVB extension [ 815.678973][ T6013] usb 9-1: USB disconnect, device number 32 [ 815.681264][ T6013] em28xx 9-1:0.0: Disconnecting em28xx [ 815.757165][ T1328] em28xx 9-1:0.0: Registering input extension [ 815.762460][ T6013] em28xx 9-1:0.0: Closing input extension [ 815.778718][ T6013] em28xx 9-1:0.0: Freeing device [ 815.980930][T32119] netlink: 'syz.0.7468': attribute type 13 has an invalid length. [ 816.259595][T32132] netlink: 'syz.4.7472': attribute type 1 has an invalid length. [ 816.261081][T32131] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7472'. [ 816.474538][T17609] usb 14-1: new high-speed USB device number 55 using dummy_hcd [ 816.635764][T17609] usb 14-1: Using ep0 maxpacket: 8 [ 816.642653][T17609] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 816.646584][T17609] usb 14-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 816.649805][T17609] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 816.653782][T17609] usb 14-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 816.657643][T17609] usb 14-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 816.660835][T17609] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.672112][T17609] hub 14-1:1.0: bad descriptor, ignoring hub [ 816.674009][T17609] hub 14-1:1.0: probe with driver hub failed with error -5 [ 816.676473][T17609] cdc_wdm 14-1:1.0: skipping garbage [ 816.679330][T17609] cdc_wdm 14-1:1.0: skipping garbage [ 816.691498][T17609] cdc_wdm 14-1:1.0: cdc-wdm0: USB WDM device [ 816.693329][T17609] cdc_wdm 14-1:1.0: Unknown control protocol [ 816.888326][T32128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.891288][T32128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 817.629198][T32128] usb 14-1: reset high-speed USB device number 55 using dummy_hcd [ 817.768927][T32128] usb 14-1: device descriptor read/64, error -71 [ 817.795337][T32165] CIFS mount error: No usable UNC path provided in device string! [ 817.795337][T32165] [ 817.798512][T32165] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 818.024388][T32128] usb 14-1: reset high-speed USB device number 55 using dummy_hcd [ 818.164226][T32128] usb 14-1: device descriptor read/64, error -71 [ 818.256279][T32178] qnx6: unable to read the first superblock [ 818.258958][T32178] qnx6: unable to read the first superblock [ 818.261450][T32178] qnx6: unable to read the first superblock [ 818.270583][T32178] qnx6: unable to read the first superblock [ 818.273166][T32178] qnx6: unable to read the first superblock [ 818.275486][T32178] qnx6: unable to read the first superblock [ 818.372150][T32182] blk_print_req_error: 6 callbacks suppressed [ 818.372164][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.378475][T32182] buffer_io_error: 45 callbacks suppressed [ 818.378487][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.383156][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.386195][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.388763][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.391758][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.394257][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.397202][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.401616][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.404579][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.409501][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.412499][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.415081][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.417964][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.421656][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.425596][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.428858][T32182] ldm_validate_partition_table(): Disk read failed. [ 818.430748][T32128] usb 14-1: reset high-speed USB device number 55 using dummy_hcd [ 818.432612][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.438713][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.441880][T32182] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 818.444834][T32182] Buffer I/O error on dev nbd0, logical block 0, async page read [ 818.447295][T32182] Dev nbd0: unable to read RDB block 0 [ 818.449825][T32182] nbd0: unable to read partition table [ 818.455158][T32128] usb 14-1: device descriptor read/8, error -71 [ 818.643430][ T40] kauditd_printk_skb: 1981 callbacks suppressed [ 818.643443][ T40] audit: type=1400 audit(2000000193.458:228380): avc: denied { read } for pid=32183 comm="syz.0.7490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 818.652693][ T40] audit: type=1400 audit(2000000193.458:228381): avc: denied { write } for pid=32183 comm="syz.0.7490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 818.659698][ T40] audit: type=1400 audit(2000000193.467:228382): avc: denied { ioctl } for pid=32127 comm="syz.9.7471" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 818.667720][ T40] audit: type=1400 audit(2000000193.486:228383): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 818.675710][ T40] audit: type=1400 audit(2000000193.486:228384): avc: denied { read write } for pid=25609 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.683325][ T40] audit: type=1400 audit(2000000193.486:228385): avc: denied { read write open } for pid=25609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.692605][ T40] audit: type=1400 audit(2000000193.486:228386): avc: denied { ioctl } for pid=25609 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 818.700965][ T40] audit: type=1400 audit(2000000193.486:228387): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 818.708713][T32128] usb 14-1: reset high-speed USB device number 55 using dummy_hcd [ 818.709449][ T40] audit: type=1400 audit(2000000193.523:228388): avc: denied { read write } for pid=32188 comm="syz.0.7491" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 818.719849][ T40] audit: type=1400 audit(2000000193.523:228389): avc: denied { read write open } for pid=32188 comm="syz.0.7491" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 818.732518][T32128] usb 14-1: device descriptor read/8, error -71 [ 818.817544][T32191] binder: Unknown parameter 'pcr' [ 818.849240][T32128] cdc_wdm 14-1:1.0: Error autopm - -16 [ 818.849398][ T6062] usb 14-1: USB disconnect, device number 55 [ 819.007869][ T6062] usb 14-1: new high-speed USB device number 56 using dummy_hcd [ 819.148006][ T6062] usb 14-1: device descriptor read/64, error -71 [ 819.328568][T32202] overlayfs: failed to get inode (-116) [ 819.331928][T32202] overlayfs: failed to get inode (-116) [ 819.403525][ T6062] usb 14-1: new high-speed USB device number 57 using dummy_hcd [ 819.586581][T32213] netlink: 830 bytes leftover after parsing attributes in process `syz.4.7499'. [ 820.125383][T32236] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 820.174364][T32237] xt_limit: Overflow, try lower: 271964/0 [ 820.334322][T32241] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 820.346291][T32243] syzkaller0: entered promiscuous mode [ 820.348675][T32243] syzkaller0: entered allmulticast mode [ 820.359847][T32243] openvswitch: netlink: IPv4 tunnel dst address is zero [ 820.626264][T32254] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7514'. [ 821.004957][T32267] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 821.015283][T32267] bond5 (unregistering): Released all slaves [ 821.176820][T32283] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7524'. [ 821.184902][T32283] netdevsim netdevsim1: Direct firmware load for , failed with error -2 [ 821.193530][T32283] netdevsim netdevsim1: Falling back to sysfs fallback for: , [ 821.268379][T32284] netlink: 165 bytes leftover after parsing attributes in process `syz.0.7523'. [ 821.356313][T32295] FAULT_INJECTION: forcing a failure. [ 821.356313][T32295] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 821.360851][T32295] CPU: 3 UID: 0 PID: 32295 Comm: syz.0.7528 Tainted: G L syzkaller #0 PREEMPT(full) [ 821.360869][T32295] Tainted: [L]=SOFTLOCKUP [ 821.360873][T32295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 821.360880][T32295] Call Trace: [ 821.360884][T32295] [ 821.360889][T32295] dump_stack_lvl+0x100/0x190 [ 821.360970][T32295] should_fail_ex.cold+0x5/0xa [ 821.361055][T32295] _copy_from_user+0x2e/0xd0 [ 821.361073][T32295] do_sys_poll+0x345/0xeb0 [ 821.361116][T32295] ? bpf_ksym_find+0x128/0x1c0 [ 821.361159][T32295] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 821.361293][T32295] ? is_bpf_text_address+0x94/0x1a0 [ 821.361309][T32295] ? kernel_text_address+0x8d/0x100 [ 821.361353][T32295] ? __pfx_do_sys_poll+0x10/0x10 [ 821.361364][T32295] ? arch_stack_walk+0xa6/0xf0 [ 821.361445][T32295] ? __mutex_unlock_slowpath+0x15c/0x790 [ 821.361461][T32295] ? __fget_files+0x215/0x3d0 [ 821.361473][T32295] ? set_user_sigmask+0x1e1/0x270 [ 821.361487][T32295] ? __pfx_set_user_sigmask+0x10/0x10 [ 821.361503][T32295] __x64_sys_ppoll+0x2b5/0x350 [ 821.361522][T32295] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 821.361533][T32295] ? ksys_write+0x1ac/0x250 [ 821.361544][T32295] ? __pfx_ksys_write+0x10/0x10 [ 821.361558][T32295] do_syscall_64+0x106/0xf80 [ 821.361574][T32295] ? clear_bhb_loop+0x40/0x90 [ 821.361587][T32295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.361599][T32295] RIP: 0033:0x7f48e719c819 [ 821.361609][T32295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 821.361620][T32295] RSP: 002b:00007f48e8123028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 821.361631][T32295] RAX: ffffffffffffffda RBX: 00007f48e7415fa0 RCX: 00007f48e719c819 [ 821.361638][T32295] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 821.361645][T32295] RBP: 00007f48e8123090 R08: 0000000000000000 R09: 0000000000000000 [ 821.361651][T32295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 821.361657][T32295] R13: 00007f48e7416038 R14: 00007f48e7415fa0 R15: 00007ffceefccc38 [ 821.361671][T32295] [ 821.373816][T32296] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7529'. [ 821.431139][T32297] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7529'. [ 822.033383][ T6013] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 822.183520][ T6019] usb 14-1: new high-speed USB device number 58 using dummy_hcd [ 822.215283][ T6013] usb 9-1: Using ep0 maxpacket: 16 [ 822.223373][ T6013] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 822.238208][ T6013] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 822.241159][ T6013] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.244701][ T6013] usb 9-1: Product: syz [ 822.246112][ T6013] usb 9-1: Manufacturer: syz [ 822.247727][ T6013] usb 9-1: SerialNumber: syz [ 822.252887][ T6013] usb 9-1: config 0 descriptor?? [ 822.264083][ T6013] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 822.289453][ T6013] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 822.327841][T32331] FAULT_INJECTION: forcing a failure. [ 822.327841][T32331] name failslab, interval 1, probability 0, space 0, times 0 [ 822.344369][T32331] CPU: 2 UID: 0 PID: 32331 Comm: syz.1.7540 Tainted: G L syzkaller #0 PREEMPT(full) [ 822.344389][T32331] Tainted: [L]=SOFTLOCKUP [ 822.344393][T32331] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 822.344399][T32331] Call Trace: [ 822.344403][T32331] [ 822.344408][T32331] dump_stack_lvl+0x100/0x190 [ 822.344433][T32331] should_fail_ex.cold+0x5/0xa [ 822.344449][T32331] ? do_sys_poll+0x273/0xeb0 [ 822.344460][T32331] should_failslab+0xc2/0x120 [ 822.344516][T32331] __kmalloc_noprof+0xe0/0x850 [ 822.344569][T32331] do_sys_poll+0x273/0xeb0 [ 822.344581][T32331] ? bpf_ksym_find+0x128/0x1c0 [ 822.344592][T32331] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 822.344610][T32331] ? is_bpf_text_address+0x94/0x1a0 [ 822.344627][T32331] ? kernel_text_address+0x8d/0x100 [ 822.344641][T32331] ? __pfx_do_sys_poll+0x10/0x10 [ 822.344652][T32331] ? arch_stack_walk+0xa6/0xf0 [ 822.344701][T32331] ? __mutex_unlock_slowpath+0x15c/0x790 [ 822.344713][T32331] ? __fget_files+0x215/0x3d0 [ 822.344724][T32331] ? set_user_sigmask+0x1e1/0x270 [ 822.344737][T32331] ? __pfx_set_user_sigmask+0x10/0x10 [ 822.344753][T32331] __x64_sys_ppoll+0x2b5/0x350 [ 822.344767][T32331] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 822.344779][T32331] ? ksys_write+0x1ac/0x250 [ 822.344789][T32331] ? __pfx_ksys_write+0x10/0x10 [ 822.344802][T32331] do_syscall_64+0x106/0xf80 [ 822.344819][T32331] ? clear_bhb_loop+0x40/0x90 [ 822.344833][T32331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.344848][T32331] RIP: 0033:0x7f5daf59c819 [ 822.344858][T32331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.344868][T32331] RSP: 002b:00007f5db04a1028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 822.344879][T32331] RAX: ffffffffffffffda RBX: 00007f5daf815fa0 RCX: 00007f5daf59c819 [ 822.344885][T32331] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 822.344891][T32331] RBP: 00007f5db04a1090 R08: 0000000000000000 R09: 0000000000000000 [ 822.344898][T32331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 822.344904][T32331] R13: 00007f5daf816038 R14: 00007f5daf815fa0 R15: 00007ffca83292e8 [ 822.344919][T32331] [ 822.370577][ T6019] usb 14-1: config 1 has an invalid interface number: 188 but max is 0 [ 822.437031][ T6019] usb 14-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 822.440775][ T6019] usb 14-1: config 1 has no interface number 0 [ 822.442757][ T6019] usb 14-1: config 1 interface 188 has no altsetting 0 [ 822.453641][ T6019] usb 14-1: New USB device found, idVendor=2040, idProduct=7200, bcdDevice=5b.6b [ 822.472918][ T6019] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.475525][ T6019] usb 14-1: Product: syz [ 822.476900][ T6019] usb 14-1: Manufacturer: syz [ 822.478457][ T6019] usb 14-1: SerialNumber: syz [ 822.582610][T32337] QAT: failed to copy from user cfg_data. [ 822.591790][T32339] QAT: failed to copy from user cfg_data. [ 822.717015][T32311] netlink: 'syz.9.7534': attribute type 10 has an invalid length. [ 822.720612][T32311] team0: Cannot enslave team device to itself [ 822.725713][ T39] usb 14-1: USB disconnect, device number 58 [ 822.925966][ T6013] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 823.218847][T32362] FAULT_INJECTION: forcing a failure. [ 823.218847][T32362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 823.223614][T32362] CPU: 2 UID: 0 PID: 32362 Comm: syz.0.7550 Tainted: G L syzkaller #0 PREEMPT(full) [ 823.223633][T32362] Tainted: [L]=SOFTLOCKUP [ 823.223637][T32362] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 823.223644][T32362] Call Trace: [ 823.223648][T32362] [ 823.223653][T32362] dump_stack_lvl+0x100/0x190 [ 823.223676][T32362] should_fail_ex.cold+0x5/0xa [ 823.223693][T32362] _copy_from_user+0x2e/0xd0 [ 823.223706][T32362] do_sys_poll+0x345/0xeb0 [ 823.223718][T32362] ? bpf_ksym_find+0x128/0x1c0 [ 823.223729][T32362] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 823.223746][T32362] ? is_bpf_text_address+0x94/0x1a0 [ 823.223763][T32362] ? kernel_text_address+0x8d/0x100 [ 823.223777][T32362] ? __pfx_do_sys_poll+0x10/0x10 [ 823.223788][T32362] ? arch_stack_walk+0xa6/0xf0 [ 823.223838][T32362] ? __mutex_unlock_slowpath+0x15c/0x790 [ 823.223850][T32362] ? __fget_files+0x215/0x3d0 [ 823.223861][T32362] ? set_user_sigmask+0x1e1/0x270 [ 823.223874][T32362] ? __pfx_set_user_sigmask+0x10/0x10 [ 823.223890][T32362] __x64_sys_ppoll+0x2b5/0x350 [ 823.223903][T32362] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 823.223914][T32362] ? ksys_write+0x1ac/0x250 [ 823.223925][T32362] ? __pfx_ksys_write+0x10/0x10 [ 823.223938][T32362] do_syscall_64+0x106/0xf80 [ 823.223955][T32362] ? clear_bhb_loop+0x40/0x90 [ 823.223968][T32362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.223980][T32362] RIP: 0033:0x7f48e719c819 [ 823.223989][T32362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.224000][T32362] RSP: 002b:00007f48e8123028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 823.224011][T32362] RAX: ffffffffffffffda RBX: 00007f48e7415fa0 RCX: 00007f48e719c819 [ 823.224018][T32362] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 823.224024][T32362] RBP: 00007f48e8123090 R08: 0000000000000000 R09: 0000000000000000 [ 823.224030][T32362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 823.224036][T32362] R13: 00007f48e7416038 R14: 00007f48e7415fa0 R15: 00007ffceefccc38 [ 823.224050][T32362] [ 823.365798][ T6013] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 823.368407][ T6013] em28xx 9-1:0.0: board has no eeprom [ 823.455221][ T6013] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 823.457923][ T6013] em28xx 9-1:0.0: dvb set to bulk mode. [ 823.465401][ T1328] em28xx 9-1:0.0: Binding DVB extension [ 823.472410][ T6013] usb 9-1: USB disconnect, device number 33 [ 823.482624][ T6013] em28xx 9-1:0.0: Disconnecting em28xx [ 823.546302][ T1328] em28xx 9-1:0.0: Registering input extension [ 823.555323][ T6013] em28xx 9-1:0.0: Closing input extension [ 823.576752][ T6013] em28xx 9-1:0.0: Freeing device [ 823.732687][T32364] overlayfs: failed to resolve './bus': -2 [ 823.881106][T32378] macsec2: entered promiscuous mode [ 823.969895][T32382] program syz.1.7559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 823.975817][T32382] netlink: 'syz.1.7559': attribute type 2 has an invalid length. [ 823.990463][ T40] kauditd_printk_skb: 1459 callbacks suppressed [ 823.990475][ T40] audit: type=1400 audit(2000000198.471:229849): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 823.990495][T32382] netlink: 46 bytes leftover after parsing attributes in process `syz.1.7559'. [ 824.010758][ T40] audit: type=1400 audit(2000000198.481:229850): avc: denied { recv } for pid=44 comm="kcompactd0" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 824.032624][ T40] audit: type=1400 audit(2000000198.490:229851): avc: denied { read write } for pid=32380 comm="syz.1.7559" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 824.040665][ T40] audit: type=1400 audit(2000000198.490:229852): avc: denied { read write open } for pid=32380 comm="syz.1.7559" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 824.057495][T32390] netlink: 'syz.0.7560': attribute type 63 has an invalid length. [ 824.059909][T32390] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7560'. [ 824.095897][ T40] audit: type=1400 audit(2000000198.490:229853): avc: denied { ioctl } for pid=32380 comm="syz.1.7559" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 824.109404][T32392] FAULT_INJECTION: forcing a failure. [ 824.109404][T32392] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 824.116208][T32392] CPU: 2 UID: 0 PID: 32392 Comm: syz.4.7561 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.116227][T32392] Tainted: [L]=SOFTLOCKUP [ 824.116231][T32392] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 824.116238][T32392] Call Trace: [ 824.116242][T32392] [ 824.116247][T32392] dump_stack_lvl+0x100/0x190 [ 824.116270][T32392] should_fail_ex.cold+0x5/0xa [ 824.116284][T32392] ? prepare_alloc_pages+0x16d/0x5f0 [ 824.116299][T32392] should_fail_alloc_page+0xeb/0x140 [ 824.116312][T32392] prepare_alloc_pages+0x1f0/0x5f0 [ 824.116338][T32392] ? ima_match_policy+0x8b8/0x2340 [ 824.116352][T32392] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 824.116374][T32392] ? do_sys_poll+0x273/0xeb0 [ 824.116386][T32392] ? stack_trace_save+0x8e/0xc0 [ 824.116401][T32392] ? __pfx_stack_trace_save+0x10/0x10 [ 824.116416][T32392] ? stack_depot_save_flags+0x27/0x9d0 [ 824.116430][T32392] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 824.116446][T32392] ? __pfx___might_resched+0x10/0x10 [ 824.116508][T32392] ? do_sys_poll+0x273/0xeb0 [ 824.116518][T32392] ? kasan_save_stack+0x3f/0x50 [ 824.116534][T32392] ? kasan_save_stack+0x30/0x50 [ 824.116550][T32392] ? kasan_save_track+0x14/0x30 [ 824.116569][T32392] ? __kasan_kmalloc+0xaa/0xb0 [ 824.116585][T32392] ? __kmalloc_noprof+0x301/0x850 [ 824.116600][T32392] ? do_sys_poll+0x273/0xeb0 [ 824.116610][T32392] ? __x64_sys_ppoll+0x2b5/0x350 [ 824.116621][T32392] ? do_syscall_64+0x106/0xf80 [ 824.116641][T32392] ? __lock_acquire+0x4a5/0x2630 [ 824.116692][T32392] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 824.116738][T32392] ? policy_nodemask+0xed/0x4f0 [ 824.116750][T32392] alloc_pages_mpol+0x1fb/0x550 [ 824.116762][T32392] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 824.116778][T32392] alloc_pages_noprof+0x136/0x390 [ 824.116789][T32392] ? __pfx___pollwait+0x10/0x10 [ 824.116799][T32392] get_free_pages_noprof+0x10/0xb0 [ 824.116810][T32392] __pollwait+0x29a/0x470 [ 824.116822][T32392] ? __pfx___pollwait+0x10/0x10 [ 824.116832][T32392] pipe_poll+0x17c/0x6b0 [ 824.116844][T32392] ? __pfx_pipe_poll+0x10/0x10 [ 824.116855][T32392] do_sys_poll+0x6e5/0xeb0 [ 824.116871][T32392] ? __pfx_do_sys_poll+0x10/0x10 [ 824.116882][T32392] ? arch_stack_walk+0xa6/0xf0 [ 824.116909][T32392] ? __pfx___pollwait+0x10/0x10 [ 824.116921][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.116933][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.116944][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.116956][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.116978][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.116991][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.117002][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.117013][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.117025][T32392] ? __pfx_pollwake+0x10/0x10 [ 824.117036][T32392] ? __mutex_unlock_slowpath+0x15c/0x790 [ 824.117047][T32392] ? __fget_files+0x215/0x3d0 [ 824.117058][T32392] ? set_user_sigmask+0x1e1/0x270 [ 824.117071][T32392] ? __pfx_set_user_sigmask+0x10/0x10 [ 824.117087][T32392] __x64_sys_ppoll+0x2b5/0x350 [ 824.117101][T32392] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 824.117112][T32392] ? ksys_write+0x1ac/0x250 [ 824.117122][T32392] ? __pfx_ksys_write+0x10/0x10 [ 824.117136][T32392] do_syscall_64+0x106/0xf80 [ 824.117152][T32392] ? clear_bhb_loop+0x40/0x90 [ 824.117166][T32392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.117177][T32392] RIP: 0033:0x7f1aea19c819 [ 824.117202][T32392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 824.117215][T32392] RSP: 002b:00007f1aeafe2028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 824.117227][T32392] RAX: ffffffffffffffda RBX: 00007f1aea415fa0 RCX: 00007f1aea19c819 [ 824.117233][T32392] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 824.117240][T32392] RBP: 00007f1aeafe2090 R08: 0000000000000000 R09: 0000000000000000 [ 824.117246][T32392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.117252][T32392] R13: 00007f1aea416038 R14: 00007f1aea415fa0 R15: 00007ffe154cae18 [ 824.117266][T32392] [ 824.128775][ T40] audit: type=1400 audit(2000000198.518:229854): avc: denied { read write } for pid=26323 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 824.166653][T32396] audit: audit_backlog=65 > audit_backlog_limit=64 [ 824.166905][T32395] audit: audit_backlog=65 > audit_backlog_limit=64 [ 824.166916][T32395] audit: audit_lost=553 audit_rate_limit=0 audit_backlog_limit=64 [ 824.166924][T32395] audit: backlog limit exceeded [ 824.393535][T32405] xt_hashlimit: max too large, truncated to 1048576 [ 824.397318][T32405] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 824.403994][T32405] xt_hashlimit: max too large, truncated to 1048576 [ 824.406359][T32405] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 824.513986][T32416] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7569'. [ 824.528703][T32416] 8021q: adding VLAN 0 to HW filter on device bond3 [ 824.555936][T32416] bond3: (slave veth5): Enslaving as an active interface with an up link [ 824.570451][T32416] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 824.575314][T32416] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 824.597418][T32421] netlink: 209852 bytes leftover after parsing attributes in process `syz.9.7570'. [ 824.731894][T32425] 8021q: adding VLAN 0 to HW filter on device bond5 [ 824.748776][T17609] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 824.840866][T32431] FAULT_INJECTION: forcing a failure. [ 824.840866][T32431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 824.845375][T32431] CPU: 2 UID: 0 PID: 32431 Comm: syz.9.7574 Tainted: G L syzkaller #0 PREEMPT(full) [ 824.845393][T32431] Tainted: [L]=SOFTLOCKUP [ 824.845397][T32431] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 824.845404][T32431] Call Trace: [ 824.845409][T32431] [ 824.845414][T32431] dump_stack_lvl+0x100/0x190 [ 824.845436][T32431] should_fail_ex.cold+0x5/0xa [ 824.845452][T32431] _copy_to_user+0x32/0xd0 [ 824.845466][T32431] simple_read_from_buffer+0xcb/0x170 [ 824.845518][T32431] proc_fail_nth_read+0x1af/0x230 [ 824.845571][T32431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 824.845588][T32431] ? rw_verify_area+0xce/0x6d0 [ 824.845605][T32431] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 824.845621][T32431] vfs_read+0x1e4/0xb30 [ 824.845633][T32431] ? __pfx_vfs_read+0x10/0x10 [ 824.845642][T32431] ? __fget_files+0x215/0x3d0 [ 824.845657][T32431] ? __fget_files+0x21f/0x3d0 [ 824.845673][T32431] ksys_read+0x12a/0x250 [ 824.845683][T32431] ? __pfx_ksys_read+0x10/0x10 [ 824.845696][T32431] do_syscall_64+0x106/0xf80 [ 824.845714][T32431] ? clear_bhb_loop+0x40/0x90 [ 824.845727][T32431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 824.845739][T32431] RIP: 0033:0x7efe0ed5d04e [ 824.845749][T32431] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 824.845759][T32431] RSP: 002b:00007efe0fc6afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 824.845770][T32431] RAX: ffffffffffffffda RBX: 00007efe0fc6b6c0 RCX: 00007efe0ed5d04e [ 824.845777][T32431] RDX: 000000000000000f RSI: 00007efe0fc6b0a0 RDI: 0000000000000004 [ 824.845783][T32431] RBP: 00007efe0fc6b090 R08: 0000000000000000 R09: 0000000000000000 [ 824.845789][T32431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 824.845796][T32431] R13: 00007efe0f016038 R14: 00007efe0f015fa0 R15: 00007ffc760b1b98 [ 824.845810][T32431] [ 824.941042][T17609] usb 6-1: Using ep0 maxpacket: 16 [ 824.965654][T17609] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 824.977447][T17609] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 824.981324][T17609] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.991119][T17609] usb 6-1: Product: syz [ 824.992948][T17609] usb 6-1: Manufacturer: syz [ 824.995015][T17609] usb 6-1: SerialNumber: syz [ 825.003378][T17609] usb 6-1: config 0 descriptor?? [ 825.028303][T17609] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 825.031509][T17609] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 825.181148][T32449] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 825.683408][T17609] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 825.688719][T32478] lo speed is unknown, defaulting to 1000 [ 825.807063][T32482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 825.809208][T32482] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 825.811779][T32482] vhci_hcd vhci_hcd.0: Device attached [ 825.821861][T32482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 825.823944][T32482] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 825.829009][T32482] vhci_hcd vhci_hcd.0: Device attached [ 825.831552][T32486] vhci_hcd: connection closed [ 825.831739][T32483] vhci_hcd: connection closed [ 825.834812][T31912] vhci_hcd vhci_hcd.0: stop threads [ 825.838161][T31912] vhci_hcd vhci_hcd.0: release socket [ 825.842988][T31912] vhci_hcd vhci_hcd.0: disconnect device [ 825.846225][T31912] vhci_hcd vhci_hcd.0: stop threads [ 825.848510][T31912] vhci_hcd vhci_hcd.0: release socket [ 825.856656][T31912] vhci_hcd vhci_hcd.0: disconnect device [ 826.128703][T17609] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 826.131287][T17609] em28xx 6-1:0.0: board has no eeprom [ 826.160651][T32493] __nla_validate_parse: 2 callbacks suppressed [ 826.160668][T32493] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7593'. [ 826.192058][T17609] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 826.194643][T17609] em28xx 6-1:0.0: dvb set to bulk mode. [ 826.196895][ T5969] em28xx 6-1:0.0: Binding DVB extension [ 826.204867][T17609] usb 6-1: USB disconnect, device number 62 [ 826.208415][T17609] em28xx 6-1:0.0: Disconnecting em28xx [ 826.343031][ T5969] em28xx 6-1:0.0: Registering input extension [ 826.346224][T17609] em28xx 6-1:0.0: Closing input extension [ 826.375028][T17609] em28xx 6-1:0.0: Freeing device [ 826.396231][T32499] kvm: user requested TSC rate below hardware speed [ 826.844392][T32508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7598'. [ 826.847227][T32508] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7598'. [ 826.984251][T32534] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=32534 comm=syz.1.7604 [ 827.298960][T32551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7610'. [ 827.302205][T32551] nbd: must specify a size in bytes for the device [ 827.453738][ T6062] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 827.614418][ T6062] usb 6-1: Using ep0 maxpacket: 16 [ 827.628743][ T6062] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 827.631604][T32560] netlink: 'syz.4.7614': attribute type 3 has an invalid length. [ 827.641534][ T6062] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 827.644446][ T6062] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 827.647542][ T6062] usb 6-1: Product: syz [ 827.648998][ T6062] usb 6-1: Manufacturer: syz [ 827.650515][ T6062] usb 6-1: SerialNumber: syz [ 827.658362][ T6062] usb 6-1: config 0 descriptor?? [ 827.671426][ T6062] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 827.675387][ T6062] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 827.699487][T32566] kvm: kvm [32565]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0xcd [ 827.719410][T32566] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7616'. [ 827.885923][T32568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7617'. [ 827.898278][T32568] tipc: Invalid UDP bearer configuration [ 827.898337][T32568] tipc: Enabling of bearer rejected, failed to enable media [ 828.093831][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7623'. [ 828.096810][T32582] netlink: 'syz.9.7623': attribute type 30 has an invalid length. [ 828.107208][T31917] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.107669][T32582] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7623'. [ 828.109951][T31917] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.112677][T32582] netlink: 'syz.9.7623': attribute type 30 has an invalid length. [ 828.115223][T31917] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.120371][T31917] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 828.138326][T32577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7621'. [ 828.325080][ T6062] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 828.344938][T32582] /dev/sr0: Can't open blockdev [ 828.471524][T32597] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 828.770935][ T6062] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 828.773511][ T6062] em28xx 6-1:0.0: board has no eeprom [ 828.803811][T32611] nft_compat: unsupported protocol 0 [ 828.844045][ T6062] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 828.849376][ T6062] em28xx 6-1:0.0: dvb set to bulk mode. [ 828.851242][ T6061] em28xx 6-1:0.0: Binding DVB extension [ 828.866563][ T6062] usb 6-1: USB disconnect, device number 63 [ 828.877992][ T6062] em28xx 6-1:0.0: Disconnecting em28xx [ 828.951593][ T6061] em28xx 6-1:0.0: Registering input extension [ 828.953788][ T6062] em28xx 6-1:0.0: Closing input extension [ 828.968435][ T6062] em28xx 6-1:0.0: Freeing device [ 829.069240][ T5976] usb 14-1: new high-speed USB device number 59 using dummy_hcd [ 829.232789][ T5976] usb 14-1: Using ep0 maxpacket: 8 [ 829.254065][ T5976] usb 14-1: config 0 has an invalid interface number: 55 but max is 0 [ 829.260076][ T5976] usb 14-1: config 0 has no interface number 0 [ 829.262028][ T5976] usb 14-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 829.265285][ T5976] usb 14-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 829.269003][ T5976] usb 14-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 829.303700][ T5976] usb 14-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 829.314021][ T5976] usb 14-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 829.317032][ T5976] usb 14-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.326877][ T5976] usb 14-1: config 0 descriptor?? [ 829.345535][ T40] kauditd_printk_skb: 1787 callbacks suppressed [ 829.345548][ T40] audit: type=1400 audit(2000000459.464:231625): avc: denied { read write open } for pid=26323 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.360080][ T5976] ldusb 14-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 829.377817][ T40] audit: type=1400 audit(2000000459.464:231626): avc: denied { ioctl } for pid=26323 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 829.385816][ T40] audit: type=1400 audit(2000000459.482:231627): avc: denied { ioctl } for pid=32610 comm="syz.9.7633" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 829.427735][ T40] audit: type=1400 audit(2000000459.482:231628): avc: denied { ioctl } for pid=32610 comm="syz.9.7633" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 829.441771][ T40] audit: type=1400 audit(2000000459.482:231629): avc: denied { ioctl } for pid=32610 comm="syz.9.7633" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 829.449592][ T40] audit: type=1400 audit(2000000459.482:231630): avc: denied { create } for pid=32626 comm="syz.4.7639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.473949][ T40] audit: type=1400 audit(2000000459.482:231631): avc: denied { write } for pid=32626 comm="syz.4.7639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.480382][ T40] audit: type=1400 audit(2000000459.482:231632): avc: denied { read } for pid=32626 comm="syz.4.7639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.489382][ T40] audit: type=1400 audit(2000000459.492:231633): avc: denied { read } for pid=32626 comm="syz.4.7639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.505920][ T40] audit: type=1400 audit(2000000459.492:231634): avc: denied { create } for pid=32626 comm="syz.4.7639" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 829.512225][T32629] netlink: 1736 bytes leftover after parsing attributes in process `syz.1.7640'. [ 829.631082][ T60] usb 14-1: USB disconnect, device number 59 [ 829.640380][ T60] ldusb 14-1:0.55: LD USB Device #0 now disconnected [ 829.767384][T32642] xt_CT: You must specify a L4 protocol and not use inversions on it [ 829.775346][T32645] xt_hashlimit: size too large, truncated to 1048576 [ 830.286412][ T60] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 830.447321][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 830.458875][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 830.487074][ T60] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 830.494000][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.497281][ T60] usb 9-1: Product: syz [ 830.499056][ T60] usb 9-1: Manufacturer: syz [ 830.506148][ T60] usb 9-1: SerialNumber: syz [ 830.513326][ T60] usb 9-1: config 0 descriptor?? [ 830.533946][ T60] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 830.537341][ T60] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 830.662216][T32668] /dev/sr0: Can't open blockdev [ 830.679040][T32671] netlink: 'syz.1.7651': attribute type 12 has an invalid length. [ 830.755357][T32675] netlink: 'syz.1.7651': attribute type 12 has an invalid length. [ 830.944704][T32680] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 830.953527][T32671] /dev/sr0: Can't open blockdev [ 831.037302][T32679] Process accounting resumed [ 831.112814][T32683] binder: BINDER_SET_CONTEXT_MGR already set [ 831.115459][T32683] binder: 32681:32683 ioctl 4018620d 200000000180 returned -16 [ 831.199645][ T60] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 831.645860][ T60] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 831.651820][ T60] em28xx 9-1:0.0: board has no eeprom [ 831.720477][ T60] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 831.722929][ T60] em28xx 9-1:0.0: dvb set to bulk mode. [ 831.740374][ T1328] em28xx 9-1:0.0: Binding DVB extension [ 831.747610][ T60] usb 9-1: USB disconnect, device number 34 [ 831.750205][ T60] em28xx 9-1:0.0: Disconnecting em28xx [ 831.829706][ T1328] em28xx 9-1:0.0: Registering input extension [ 831.831772][ T60] em28xx 9-1:0.0: Closing input extension [ 831.843927][ T60] em28xx 9-1:0.0: Freeing device [ 831.960214][T32722] xt_TCPMSS: Only works on TCP SYN packets [ 832.094462][ T5935] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.099656][ T5935] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.102781][ T5935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.117476][ T5935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.120098][ T5935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 832.148833][T17928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 832.151446][T17928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 832.153926][T17928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 832.162008][T17928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 832.165876][T17928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 832.220725][T32731] netlink: 'syz.9.7670': attribute type 1 has an invalid length. [ 832.232922][T32731] netlink: 'syz.9.7670': attribute type 7 has an invalid length. [ 832.238426][T32731] netlink: 'syz.9.7670': attribute type 8 has an invalid length. [ 832.240846][T32731] __nla_validate_parse: 32 callbacks suppressed [ 832.240855][T32731] netlink: 208 bytes leftover after parsing attributes in process `syz.9.7670'. [ 832.244250][T32727] lo speed is unknown, defaulting to 1000 [ 832.377722][T32736] befs: (loop4): No write support. Marking filesystem read-only [ 832.381128][T32736] befs: (loop4): unable to read superblock [ 832.712599][T32727] chnl_net:caif_netlink_parms(): no params data found [ 832.783421][T32727] bridge0: port 1(bridge_slave_0) entered blocking state [ 832.785706][T32727] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.788249][T32727] bridge_slave_0: entered allmulticast mode [ 832.791322][T32727] bridge_slave_0: entered promiscuous mode [ 832.795730][T32727] bridge0: port 2(bridge_slave_1) entered blocking state [ 832.798084][T32727] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.801187][T32727] bridge_slave_1: entered allmulticast mode [ 832.804124][T32727] bridge_slave_1: entered promiscuous mode [ 832.824446][T32727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.830467][T32727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.830972][ T6014] usb 9-1: new low-speed USB device number 35 using dummy_hcd [ 832.852529][T32727] team0: Port device team_slave_0 added [ 832.857180][T32727] team0: Port device team_slave_1 added [ 832.876533][T32727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 832.879328][T32727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.889486][T32727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 832.897182][T32727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 832.899860][T32727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 832.910699][T32727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 832.944119][T32727] hsr_slave_0: entered promiscuous mode [ 832.947003][T32727] hsr_slave_1: entered promiscuous mode [ 832.951473][T32727] debugfs: 'hsr0' already exists in 'hsr' [ 832.953685][T32727] Cannot create hsr debugfs directory [ 832.992070][ T6014] usb 9-1: Invalid ep0 maxpacket: 16 [ 833.107347][T32727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.114237][T32727] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.134058][ T6014] usb 9-1: new low-speed USB device number 36 using dummy_hcd [ 833.237920][T32727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.241115][T32727] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.271945][T32759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7675'. [ 833.290772][ T6014] usb 9-1: Invalid ep0 maxpacket: 16 [ 833.302088][ T6014] usb usb9-port1: attempt power cycle [ 833.373050][T32727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.376492][T32727] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.468336][T32727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 833.471616][T32727] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.664751][ T6014] usb 9-1: new low-speed USB device number 37 using dummy_hcd [ 833.688834][ T6014] usb 9-1: Invalid ep0 maxpacket: 16 [ 833.795701][T32727] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 833.802353][T32727] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 833.815895][T32727] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 833.824994][ T6014] usb 9-1: new low-speed USB device number 38 using dummy_hcd [ 833.834709][T32727] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 833.852320][ T6014] usb 9-1: Invalid ep0 maxpacket: 16 [ 833.857222][ T6014] usb usb9-port1: unable to enumerate USB device [ 833.953903][ T5995] usb 14-1: new high-speed USB device number 60 using dummy_hcd [ 834.010472][T32727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 834.032223][T32727] 8021q: adding VLAN 0 to HW filter on device team0 [ 834.043291][T31926] bridge0: port 1(bridge_slave_0) entered blocking state [ 834.045585][T31926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 834.058316][T31917] bridge0: port 2(bridge_slave_1) entered blocking state [ 834.060654][T31917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 834.117495][ T316] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7682'. [ 834.127256][ T5995] usb 14-1: Using ep0 maxpacket: 16 [ 834.139701][ T5995] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 834.163289][ T5995] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 834.166915][ T5995] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.173358][ T5995] usb 14-1: Product: syz [ 834.175182][ T5995] usb 14-1: Manufacturer: syz [ 834.177220][ T5995] usb 14-1: SerialNumber: syz [ 834.204057][ T5995] usb 14-1: config 0 descriptor?? [ 834.215660][ T5995] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 834.219651][ T5995] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 834.412978][T17928] Bluetooth: hci3: command tx timeout [ 834.419691][T32727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 834.441707][ T330] netlink: 488 bytes leftover after parsing attributes in process `syz.1.7685'. [ 834.444899][ T330] netlink: 1041 bytes leftover after parsing attributes in process `syz.1.7685'. [ 834.479977][T32727] veth0_vlan: entered promiscuous mode [ 834.495360][T32727] veth1_vlan: entered promiscuous mode [ 834.557201][T32727] veth0_macvtap: entered promiscuous mode [ 834.570075][T32727] veth1_macvtap: entered promiscuous mode [ 834.593555][T32727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 834.605219][T32727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 834.616140][T31923] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.619131][T31923] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.626235][T31923] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.631721][T31923] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 834.716256][ T40] kauditd_printk_skb: 2014 callbacks suppressed [ 834.716271][ T40] audit: type=1400 audit(2000000464.496:233649): avc: denied { read } for pid=32727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 834.728920][T11426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.731502][T11426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.741357][ T40] audit: type=1400 audit(2000000464.496:233650): avc: denied { write } for pid=32727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 834.750934][ T40] audit: type=1400 audit(2000000464.496:233651): avc: denied { read } for pid=32727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 834.760232][ T40] audit: type=1400 audit(2000000464.505:233652): avc: denied { write } for pid=32727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 834.767510][T31923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 834.770081][T31923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 834.773019][ T40] audit: type=1400 audit(2000000464.505:233653): avc: denied { read } for pid=32727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 834.786626][ T40] audit: type=1400 audit(2000000464.505:233654): avc: denied { write } for pid=32727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 834.793373][ T40] audit: type=1400 audit(2000000464.515:233655): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56392 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 834.801197][ T40] audit: type=1400 audit(2000000464.515:233656): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 834.809636][ T40] audit: type=1400 audit(2000000464.515:233657): avc: denied { recv } for pid=5837 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56392 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 834.817458][ T40] audit: type=1400 audit(2000000464.524:233658): avc: denied { recv } for pid=31935 comm="udevd" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 834.867992][ T5995] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 835.162242][ T351] netlink: 'syz.1.7689': attribute type 10 has an invalid length. [ 835.165436][ T351] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7689'. [ 835.320599][ T5995] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 835.325500][ T5995] em28xx 14-1:0.0: board has no eeprom [ 835.407937][ T5995] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 835.411278][ T5995] em28xx 14-1:0.0: dvb set to bulk mode. [ 835.413716][ T336] em28xx 14-1:0.0: Binding DVB extension [ 835.426312][ T5995] usb 14-1: USB disconnect, device number 60 [ 835.430503][ T5995] em28xx 14-1:0.0: Disconnecting em28xx [ 835.479319][ T336] em28xx 14-1:0.0: Registering input extension [ 835.492985][ T5995] em28xx 14-1:0.0: Closing input extension [ 835.508645][ T5995] em28xx 14-1:0.0: Freeing device [ 835.518316][T31269] udevd[31269]: setting owner of /dev/bus/usb/014/060 to uid=0, gid=0 failed: No such file or directory [ 835.839466][ T371] erspan1: entered promiscuous mode [ 836.334979][ T391] overlayfs: missing 'workdir' [ 836.339092][ T393] binder: 392:393 ioctl c020aa00 200000000400 returned -22 [ 836.626382][T17928] Bluetooth: hci3: command tx timeout [ 836.945236][ T413] lo speed is unknown, defaulting to 1000 [ 836.991314][ T6061] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 837.148533][ T419] pim6reg99999999: entered allmulticast mode [ 837.149781][ T6061] usb 6-1: Using ep0 maxpacket: 8 [ 837.174593][ T6061] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 837.177977][ T6061] usb 6-1: config 179 has no interface number 0 [ 837.180631][ T6061] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 837.192512][ T6061] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 837.196748][ T6061] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 837.201590][ T6061] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 837.207420][ T6061] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 837.212927][ T6061] usb 6-1: config 179 interface 65 has no altsetting 0 [ 837.223098][ T6061] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 837.229188][ T6061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 837.272499][ T6061] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input202 [ 837.331918][ T5322] input input202: unable to receive magic message: -110 [ 837.399364][ T5322] input input202: unable to receive magic message: -32 [ 837.497609][ T5322] input input202: unable to receive magic message: -32 [ 837.911140][ T6014] usb 6-1: USB disconnect, device number 64 [ 837.913169][ C3] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 838.108897][ T472] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 838.219833][ T6061] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 838.358374][ T6061] usb 5-1: device descriptor read/64, error -71 [ 838.405769][ T479] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7726'. [ 838.540749][ T486] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 838.561059][ T336] usb 9-1: new low-speed USB device number 39 using dummy_hcd [ 838.573392][ T484] syzkaller0: entered promiscuous mode [ 838.575366][ T484] syzkaller0: entered allmulticast mode [ 838.581090][ T484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1453 sclass=netlink_route_socket pid=484 comm=syz.9.7727 [ 838.625469][ T6061] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 838.751206][ T336] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 838.754654][ T336] usb 9-1: config 0 has no interface number 0 [ 838.756635][ T336] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 838.760215][ T336] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 838.763661][ T336] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 838.769476][ T336] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 838.777387][ T6061] usb 5-1: device descriptor read/64, error -71 [ 838.781981][ T336] usb 9-1: config 0 descriptor?? [ 838.786539][ T475] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 838.793756][ T336] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 838.857716][T17928] Bluetooth: hci3: command tx timeout [ 838.894312][ T6061] usb usb5-port1: attempt power cycle [ 839.017234][ T5969] usb 9-1: USB disconnect, device number 39 [ 839.255999][ T6061] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 839.280676][ T6061] usb 5-1: device descriptor read/8, error -71 [ 839.533788][ T6061] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 839.557539][ T6061] usb 5-1: device descriptor read/8, error -71 [ 839.677531][ T6061] usb usb5-port1: unable to enumerate USB device [ 839.920112][ T6061] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 840.093087][ T6061] usb 9-1: Using ep0 maxpacket: 16 [ 840.095910][ T40] kauditd_printk_skb: 1299 callbacks suppressed [ 840.095922][ T40] audit: type=1400 audit(2000000001.571:234958): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.099460][ T6061] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 840.106732][ T40] audit: type=1400 audit(2000000001.571:234959): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.115805][ T6061] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 840.117155][ T40] audit: type=1400 audit(2000000001.571:234960): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.119551][ T6061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.119567][ T6061] usb 9-1: Product: syz [ 840.119574][ T6061] usb 9-1: Manufacturer: syz [ 840.119592][ T6061] usb 9-1: SerialNumber: syz [ 840.127135][ T40] audit: type=1400 audit(2000000001.571:234961): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.127172][ T40] audit: type=1400 audit(2000000001.571:234962): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.127204][ T40] audit: type=1400 audit(2000000001.571:234963): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.127250][ T40] audit: type=1400 audit(2000000001.590:234964): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.127298][ T40] audit: type=1400 audit(2000000001.590:234965): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.127338][ T40] audit: type=1400 audit(2000000001.590:234966): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.127378][ T40] audit: type=1400 audit(2000000001.590:234967): avc: denied { ioctl } for pid=503 comm="syz.4.7732" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 840.199203][ T6061] usb 9-1: config 0 descriptor?? [ 840.208370][ T6061] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 840.211260][ T6061] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 840.866395][ T6061] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 841.073267][T17928] Bluetooth: hci3: command tx timeout [ 841.134343][ T509] netlink: 'syz.9.7734': attribute type 10 has an invalid length. [ 841.137141][ T509] macvlan0: entered allmulticast mode [ 841.139941][ T509] veth1_vlan: entered allmulticast mode [ 841.144386][ T509] team0: Port device macvlan0 added [ 841.168589][ T506] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7733'. [ 841.251420][ T513] bridge_slave_0: left allmulticast mode [ 841.253309][ T513] bridge_slave_0: left promiscuous mode [ 841.256586][ T513] bridge0: port 1(bridge_slave_0) entered disabled state [ 841.263217][ T513] bridge_slave_1: left allmulticast mode [ 841.265156][ T513] bridge_slave_1: left promiscuous mode [ 841.272771][ T513] bridge0: port 2(bridge_slave_1) entered disabled state [ 841.286374][ T513] bond0: (slave bond_slave_0): Releasing backup interface [ 841.312157][ T6061] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 841.314739][ T6061] em28xx 9-1:0.0: board has no eeprom [ 841.319860][ T513] bond0: (slave bond_slave_1): Releasing backup interface [ 841.344598][ T515] input: syz0 as /devices/virtual/input/input203 [ 841.376025][ T519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7735'. [ 841.381833][ T513] team0: Port device team_slave_0 removed [ 841.383280][ T6061] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 841.392745][ T6061] em28xx 9-1:0.0: dvb set to bulk mode. [ 841.395156][T22955] em28xx 9-1:0.0: Binding DVB extension [ 841.409400][ T6061] usb 9-1: USB disconnect, device number 40 [ 841.411876][ T6061] em28xx 9-1:0.0: Disconnecting em28xx [ 841.421879][ T513] team0: Port device team_slave_1 removed [ 841.424466][ T513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 841.429183][ T513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 841.432632][ T513] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 841.445997][ T513] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 841.472199][ T513] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 841.505242][T22955] em28xx 9-1:0.0: Registering input extension [ 841.508183][ T6061] em28xx 9-1:0.0: Closing input extension [ 841.527843][ T6061] em28xx 9-1:0.0: Freeing device [ 841.555409][ T518] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7737'. [ 841.737049][ T529] program syz.0.7738 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 842.307538][ T553] bond6: option ad_user_port_key: mode dependency failed, not supported in mode broadcast(3) [ 842.312050][ T553] bond6 (unregistering): Released all slaves [ 842.347771][ T549] lo speed is unknown, defaulting to 1000 [ 842.560013][ T5995] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 842.634106][ T60] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 842.725336][ T5995] usb 5-1: Using ep0 maxpacket: 16 [ 842.730968][ T572] netlink: 44 bytes leftover after parsing attributes in process `syz.9.7753'. [ 842.743414][ T5995] usb 5-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 842.747078][ T5995] usb 5-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 842.751001][ T5995] usb 5-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 842.767506][ T5995] usb 5-1: config 1 interface 0 has no altsetting 0 [ 842.794407][ T5995] usb 5-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 842.798252][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.800999][ T5995] usb 5-1: Product: syz [ 842.802767][ T5995] usb 5-1: Manufacturer: syz [ 842.804662][ T5995] usb 5-1: SerialNumber: syz [ 842.806222][ T60] usb 9-1: Using ep0 maxpacket: 16 [ 842.821750][ T60] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 842.859856][ T60] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 842.863546][ T60] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.867900][ T60] usb 9-1: Product: syz [ 842.878757][ T60] usb 9-1: Manufacturer: syz [ 842.884874][ T60] usb 9-1: SerialNumber: syz [ 842.913708][ T60] usb 9-1: config 0 descriptor?? [ 842.929900][ T60] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 842.942631][ T60] em28xx 9-1:0.0: DVB interface 0 found: bulk [ 843.086145][ T5995] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 55 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 843.101781][ T586] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7758'. [ 843.205736][ T588] CUSE: info not properly terminated [ 843.320076][ T593] program syz.1.7761 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 843.327491][ T596] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 843.364807][ T5995] usb 5-1: USB disconnect, device number 55 [ 843.382628][ T5995] usblp0: removed [ 843.585192][ T60] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 843.827878][ T608] sch_tbf: burst 0 is lower than device veth0_virt_wifi mtu (1514) ! [ 844.032615][ T60] em28xx 9-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 844.040755][ T60] em28xx 9-1:0.0: board has no eeprom [ 844.109407][ T60] em28xx 9-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 844.111847][ T60] em28xx 9-1:0.0: dvb set to bulk mode. [ 844.113605][ T1328] em28xx 9-1:0.0: Binding DVB extension [ 844.127003][ T60] usb 9-1: USB disconnect, device number 41 [ 844.129587][ T60] em28xx 9-1:0.0: Disconnecting em28xx [ 844.179800][ T1328] em28xx 9-1:0.0: Registering input extension [ 844.182975][ T60] em28xx 9-1:0.0: Closing input extension [ 844.204430][ T60] em28xx 9-1:0.0: Freeing device [ 844.823941][ T614] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 844.988521][ T624] tmpfs: Unknown parameter 'usrquotaes 0 peak_states 0 mark_read 0 [ 844.988521][ T624] ' [ 845.065671][ T626] kAFS: unable to lookup cell 'syz0' [ 845.084913][ T626] Process accounting resumed [ 845.100749][ T629] comedi: valid board names for 8255 driver are: [ 845.102796][ T629] 8255 [ 845.105178][ T629] comedi: valid board names for vmk80xx driver are: [ 845.109378][ T629] vmk80xx [ 845.110447][ T629] comedi: valid board names for usbduxsigma driver are: [ 845.112747][ T629] usbduxsigma [ 845.113868][ T629] comedi: valid board names for usbduxfast driver are: [ 845.119501][ T629] usbduxfast [ 845.122211][ T629] comedi: valid board names for usbdux driver are: [ 845.124241][ T629] usbdux [ 845.128447][ T629] comedi: valid board names for ni6501 driver are: [ 845.130680][ T629] ni6501 [ 845.131816][ T629] comedi: valid board names for dt9812 driver are: [ 845.134174][ T629] dt9812 [ 845.135259][ T629] comedi: valid board names for ni_labpc_cs driver are: [ 845.143489][ T629] ni_labpc_cs [ 845.144623][ T629] comedi: valid board names for ni_daq_700 driver are: [ 845.148943][ T629] ni_daq_700 [ 845.150104][ T629] comedi: valid board names for labpc_pci driver are: [ 845.152317][ T629] labpc_pci [ 845.153633][ T629] comedi: valid board names for adl_pci9118 driver are: [ 845.155881][ T629] pci9118dg [ 845.159173][ T629] pci9118hg [ 845.160426][ T629] pci9118hr [ 845.161701][ T629] comedi: valid board names for 8255_pci driver are: [ 845.163872][ T629] 8255_pci [ 845.165018][ T629] comedi: valid board names for s526 driver are: [ 845.174250][ T629] s526 [ 845.175377][ T629] comedi: valid board names for multiq3 driver are: [ 845.177727][ T629] multiq3 [ 845.179808][ T629] comedi: valid board names for pcmuio driver are: [ 845.182028][ T629] pcmuio48 [ 845.188369][ T629] pcmuio96 [ 845.194010][ T629] comedi: valid board names for pcmmio driver are: [ 845.196132][ T629] pcmmio [ 845.197110][ T629] comedi: valid board names for pcmda12 driver are: [ 845.199219][ T629] pcmda12 [ 845.200542][ T629] comedi: valid board names for pcmad driver are: [ 845.202526][ T629] pcmad12 [ 845.203689][ T629] pcmad16 [ 845.204687][ T629] comedi: valid board names for ni_labpc driver are: [ 845.206797][ T629] lab-pc-1200 [ 845.210895][ T629] lab-pc-1200ai [ 845.212104][ T629] lab-pc+ [ 845.213142][ T629] comedi: valid board names for atmio16 driver are: [ 845.215142][ T629] atmio16 [ 845.216121][ T629] atmio16d [ 845.217152][ T629] comedi: valid board names for ni_at_ao driver are: [ 845.219417][ T629] at-ao-6 [ 845.220436][ T629] at-ao-10 [ 845.221962][ T629] comedi: valid board names for ni_at_a2150 driver are: [ 845.224202][ T629] ni_at_a2150 [ 845.225336][ T629] comedi: valid board names for adq12b driver are: [ 845.227346][ T629] adq12b [ 845.228339][ T629] comedi: valid board names for mpc624 driver are: [ 845.230419][ T629] mpc624 [ 845.231396][ T629] comedi: valid board names for c6xdigio driver are: [ 845.234008][ T629] c6xdigio [ 845.235038][ T629] comedi: valid board names for aio_iiro_16 driver are: [ 845.237212][ T629] aio_iiro_16 [ 845.238323][ T629] comedi: valid board names for aio_aio12_8 driver are: [ 845.240472][ T629] aio_aio12_8 [ 845.241575][ T629] aio_ai12_8 [ 845.242730][ T629] aio_ao12_4 [ 845.243781][ T629] comedi: valid board names for fl512 driver are: [ 845.245838][ T629] fl512 [ 845.246771][ T629] comedi: valid board names for dmm32at driver are: [ 845.248841][ T629] dmm32at [ 845.250063][ T629] comedi: valid board names for dt282x driver are: [ 845.252652][ T629] dt2821 [ 845.254031][ T629] dt2821-f [ 845.255112][ T629] dt2821-g [ 845.256154][ T629] dt2823 [ 845.257140][ T629] dt2824-pgh [ 845.258233][ T629] dt2824-pgl [ 845.259353][ T629] dt2825 [ 845.260326][ T629] dt2827 [ 845.261305][ T629] dt2828 [ 845.262254][ T629] dt2829 [ 845.263236][ T629] dt21-ez [ 845.264773][ T629] dt23-ez [ 845.265807][ T629] dt24-ez [ 845.266826][ T629] dt24-ez-pgl [ 845.267934][ T629] comedi: valid board names for dt2817 driver are: [ 845.270074][ T629] dt2817 [ 845.271033][ T629] comedi: valid board names for dt2815 driver are: [ 845.273075][ T629] dt2815 [ 845.274065][ T629] comedi: valid board names for dt2814 driver are: [ 845.276277][ T629] dt2814 [ 845.277248][ T629] comedi: valid board names for dt2811 driver are: [ 845.279349][ T629] dt2811-pgh [ 845.280412][ T629] dt2811-pgl [ 845.281511][ T629] comedi: valid board names for dt2801 driver are: [ 845.283581][ T629] dt2801 [ 845.284556][ T629] comedi: valid board names for das6402 driver are: [ 845.286792][ T629] das6402-12 [ 845.287888][ T629] das6402-16 [ 845.289013][ T629] comedi: valid board names for das1800 driver are: [ 845.291127][ T629] das-1701st [ 845.292213][ T629] das-1701st-da [ 845.293394][ T629] das-1702st [ 845.294487][ T629] das-1702st-da [ 845.295691][ T629] das-1702hr [ 845.298495][ T629] das-1702hr-da [ 845.299641][ T629] das-1701ao [ 845.300689][ T629] das-1702ao [ 845.301748][ T629] das-1801st [ 845.302788][ T629] das-1801st-da [ 845.303901][ T629] das-1802st [ 845.304958][ T629] das-1802st-da [ 845.306122][ T629] das-1802hr [ 845.310005][ T629] das-1802hr-da [ 845.311161][ T629] das-1801hc [ 845.312219][ T629] das-1802hc [ 845.313458][ T629] das-1801ao [ 845.314513][ T629] das-1802ao [ 845.315544][ T629] comedi: valid board names for das800 driver are: [ 845.324793][ T629] das-800 [ 845.325797][ T629] cio-das800 [ 845.326860][ T629] das-801 [ 845.327863][ T629] cio-das801 [ 845.331386][ T629] das-802 [ 845.332370][ T629] cio-das802 [ 845.333423][ T629] cio-das802/16 [ 845.334549][ T629] comedi: valid board names for isa-das08 driver are: [ 845.336611][ T629] isa-das08 [ 845.337656][ T629] das08-pgm [ 845.342267][ T629] das08-pgh [ 845.343311][ T629] das08-pgl [ 845.344332][ T629] das08-aoh [ 845.345357][ T629] das08-aol [ 845.346381][ T629] das08-aom [ 845.347393][ T629] das08/jr-ao [ 845.348477][ T629] das08jr-16-ao [ 845.353638][ T629] pc104-das08 [ 845.354713][ T629] das08jr/16 [ 845.355775][ T629] comedi: valid board names for das16m1 driver are: [ 845.357792][ T629] das16m1 [ 845.358789][ T629] comedi: valid board names for dac02 driver are: [ 845.363540][ T629] dac02 [ 845.364490][ T629] comedi: valid board names for rti802 driver are: [ 845.366515][ T629] rti802 [ 845.367440][ T629] comedi: valid board names for rti800 driver are: [ 845.369447][ T629] rti800 [ 845.370409][ T629] rti815 [ 845.373759][ T629] comedi: valid board names for pcm3724 driver are: [ 845.375779][ T629] pcm3724 [ 845.376789][ T629] comedi: valid board names for pcl818 driver are: [ 845.378865][ T629] pcl818l [ 845.379862][ T629] pcl818h [ 845.380872][ T629] pcl818hd [ 845.382476][ T629] pcl818hg [ 845.383486][ T629] pcl818 [ 845.384414][ T629] pcl718 [ 845.385374][ T629] pcm3718 [ 845.386358][ T629] comedi: valid board names for pcl816 driver are: [ 845.388312][ T629] pcl816 [ 845.389254][ T629] pcl814b [ 845.390284][ T629] comedi: valid board names for pcl812 driver are: [ 845.392348][ T629] pcl812 [ 845.393288][ T629] pcl812pg [ 845.394296][ T629] acl8112pg [ 845.395316][ T629] acl8112dg [ 845.396346][ T629] acl8112hg [ 845.397394][ T629] a821pgl [ 845.398375][ T629] a821pglnda [ 845.399431][ T629] a821pgh [ 845.400398][ T629] a822pgl [ 845.401385][ T629] a822pgh [ 845.402396][ T629] a823pgl [ 845.403432][ T629] a823pgh [ 845.404418][ T629] pcl813 [ 845.405364][ T629] pcl813b [ 845.406343][ T629] acl8113 [ 845.407323][ T629] iso813 [ 845.408253][ T629] acl8216 [ 845.409236][ T629] a826pg [ 845.410168][ T629] comedi: valid board names for pcl730 driver are: [ 845.412197][ T629] pcl730 [ 845.413196][ T629] iso730 [ 845.414693][ T629] acl7130 [ 845.415656][ T629] pcm3730 [ 845.416637][ T629] pcl725 [ 845.417574][ T629] p8r8dio [ 845.418570][ T629] acl7225b [ 845.419594][ T629] p16r16dio [ 845.420635][ T629] pcl733 [ 845.421651][ T629] pcl734 [ 845.422817][ T629] opmm-1616-xt [ 845.423958][ T629] pearl-mm-p [ 845.425122][ T629] ir104-pbf [ 845.426159][ T629] comedi: valid board names for pcl726 driver are: [ 845.428145][ T629] pcl726 [ 845.429065][ T629] pcl727 [ 845.430017][ T629] pcl728 [ 845.430945][ T629] acl6126 [ 845.431911][ T629] acl6128 [ 845.432883][ T629] comedi: valid board names for pcl724 driver are: [ 845.434942][ T629] pcl724 [ 845.435880][ T629] pcl722 [ 845.436785][ T629] pcl731 [ 845.437717][ T629] acl7122 [ 845.438719][ T629] acl7124 [ 845.439699][ T629] pet48dio [ 845.440700][ T629] pcmio48 [ 845.441666][ T629] onyx-mm-dio [ 845.442765][ T629] comedi: valid board names for pcl711 driver are: [ 845.444799][ T629] pcl711 [ 845.445818][ T629] pcl711b [ 845.446823][ T629] acl8112hg [ 845.447878][ T629] acl8112dg [ 845.448952][ T629] comedi: valid board names for amplc_pc263 driver are: [ 845.451124][ T629] pc263 [ 845.452044][ T629] comedi: valid board names for amplc_pc236 driver are: [ 845.454150][ T629] pc36at [ 845.455091][ T629] comedi: valid board names for amplc_dio200 driver are: [ 845.457420][ T629] pc212e [ 845.458410][ T629] pc214e [ 845.459345][ T629] pc215e [ 845.460306][ T629] pc218e [ 845.461269][ T629] pc272e [ 845.462224][ T629] comedi: valid board names for comedi_parport driver are: [ 845.464462][ T629] comedi_parport [ 845.465668][ T629] comedi: valid board names for comedi_test driver are: [ 845.467891][ T629] comedi_test [ 845.469006][ T629] comedi: valid board names for comedi_bond driver are: [ 845.471118][ T629] comedi_bond [ 845.488493][ T40] kauditd_printk_skb: 1114 callbacks suppressed [ 845.488512][ T40] audit: type=1400 audit(2000000006.613:236082): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 845.504864][ T40] audit: type=1400 audit(2000000006.622:236083): avc: denied { recv } for pid=5838 comm="syz-executor" saddr=10.0.2.2 src=34154 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 845.517063][ T40] audit: type=1400 audit(2000000006.622:236084): avc: denied { read write } for pid=32727 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 845.530666][ T40] audit: type=1400 audit(2000000006.622:236085): avc: denied { read write open } for pid=32727 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 845.540325][ T40] audit: type=1400 audit(2000000006.622:236086): avc: denied { ioctl } for pid=32727 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 845.541663][ T635] netlink: 'syz.0.7773': attribute type 1 has an invalid length. [ 845.549614][ T40] audit: type=1400 audit(2000000006.660:236087): avc: denied { create } for pid=633 comm="syz.0.7773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 845.554610][ T634] netlink: 'syz.0.7773': attribute type 1 has an invalid length. [ 845.561924][ T40] audit: type=1400 audit(2000000006.669:236088): avc: denied { write } for pid=633 comm="syz.0.7773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 845.570023][ T40] audit: type=1400 audit(2000000006.669:236089): avc: denied { write } for pid=633 comm="syz.0.7773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 845.580388][ T40] audit: type=1400 audit(2000000006.678:236090): avc: denied { recv } for pid=0 comm="swapper/1" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=56392 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 845.589977][ T40] audit: type=1400 audit(2000000006.678:236091): avc: denied { recv } for pid=0 comm="swapper/1" saddr=127.0.0.1 src=56392 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 845.971027][ T641] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 845.973539][ T641] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 845.976408][ T641] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 845.978830][ T641] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 846.059513][ T644] netlink: 'syz.1.7777': attribute type 1 has an invalid length. [ 846.062520][ T644] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 846.104164][ T649] x_tables: duplicate underflow at hook 1 [ 846.160941][ T1328] usb 14-1: new high-speed USB device number 61 using dummy_hcd [ 846.356664][ T1328] usb 14-1: Using ep0 maxpacket: 16 [ 846.368107][ T1328] usb 14-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 846.381807][ T1328] usb 14-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 846.385601][ T1328] usb 14-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.399666][ T1328] usb 14-1: Product: syz [ 846.401525][ T1328] usb 14-1: Manufacturer: syz [ 846.403488][ T1328] usb 14-1: SerialNumber: syz [ 846.416492][ T1328] usb 14-1: config 0 descriptor?? [ 846.426739][ T1328] em28xx 14-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 846.432736][ T1328] em28xx 14-1:0.0: DVB interface 0 found: bulk [ 847.033696][ T697] binder: BINDER_SET_CONTEXT_MGR already set [ 847.035593][ T697] binder: 695:697 ioctl 4018620d 200000000100 returned -16 [ 847.048470][ T697] binder_alloc: binder_alloc_mmap_handler: 695 200000ffd000-200001000000 already mapped failed -16 [ 847.055031][ T697] binder: BINDER_SET_CONTEXT_MGR already set [ 847.057076][ T697] binder: 695:697 ioctl 4018620d 200000004a80 returned -16 [ 847.080575][ T1328] em28xx 14-1:0.0: unknown em28xx chip ID (0) [ 847.265429][ T705] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 847.293335][ T711] netlink: 4084 bytes leftover after parsing attributes in process `syz.0.7795'. [ 847.528549][ T1328] em28xx 14-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 847.531142][ T1328] em28xx 14-1:0.0: board has no eeprom [ 847.606520][ T1328] em28xx 14-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 847.612544][ T1328] em28xx 14-1:0.0: dvb set to bulk mode. [ 847.620455][ T1328] usb 14-1: USB disconnect, device number 61 [ 847.627569][ T1328] em28xx 14-1:0.0: Disconnecting em28xx [ 847.629548][ T29] em28xx 14-1:0.0: Binding DVB extension [ 847.744867][ T29] em28xx 14-1:0.0: Registering input extension [ 847.755366][ T1328] em28xx 14-1:0.0: Closing input extension [ 847.762996][ T1328] em28xx 14-1:0.0: Freeing device [ 847.939747][ T5935] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 847.946356][ T5935] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 847.950274][ T5935] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 847.956410][ T5935] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 847.959958][ T5935] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 848.062587][ T1150] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.116450][ T732] lo speed is unknown, defaulting to 1000 [ 848.163162][ T1150] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.244796][ T1150] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.296308][ T743] IPv6: syztnl0: Disabled Multicast RS [ 848.335461][ T1150] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.347112][ T6019] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 848.381180][ T732] chnl_net:caif_netlink_parms(): no params data found [ 848.449250][ T732] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.453145][ T732] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.456124][ T732] bridge_slave_0: entered allmulticast mode [ 848.459252][ T732] bridge_slave_0: entered promiscuous mode [ 848.465830][ T732] bridge0: port 2(bridge_slave_1) entered blocking state [ 848.475286][ T732] bridge0: port 2(bridge_slave_1) entered disabled state [ 848.478325][ T732] bridge_slave_1: entered allmulticast mode [ 848.483629][ T732] bridge_slave_1: entered promiscuous mode [ 848.510317][ T732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 848.528522][ T732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 848.542414][ T6019] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 848.545290][ T6019] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.549236][ T6019] usb 9-1: Product: syz [ 848.550556][ T6019] usb 9-1: Manufacturer: syz [ 848.552031][ T6019] usb 9-1: SerialNumber: syz [ 848.595619][ T732] team0: Port device team_slave_0 added [ 848.606057][ T732] team0: Port device team_slave_1 added [ 848.679226][ T756] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 848.692605][ T732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 848.694823][ T732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.706485][ T732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.715644][ T732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.718124][ T732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.725840][ T732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.785888][ T760] No control pipe specified [ 849.020642][ T735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.023634][ T735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.031244][ T735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.034287][ T735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.045254][ T735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.049967][ T735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.053379][ T1150] bond0 (unregistering): Released all slaves [ 849.126503][ T732] hsr_slave_0: entered promiscuous mode [ 849.128729][ T732] hsr_slave_1: entered promiscuous mode [ 849.130779][ T732] debugfs: 'hsr0' already exists in 'hsr' [ 849.132408][ T732] Cannot create hsr debugfs directory [ 849.181612][ T764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.190253][ T764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.200094][ T1150] IPVS: stopping backup sync thread 596 ... [ 849.797272][ T5995] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 849.900782][ T1150] hsr_slave_0: left promiscuous mode [ 849.903164][ T1150] hsr_slave_1: left promiscuous mode [ 849.913106][ T1150] veth1_macvtap: left promiscuous mode [ 849.915053][ T1150] veth0_macvtap: left promiscuous mode [ 849.917467][ T1150] veth1_vlan: left promiscuous mode [ 849.919767][ T1150] veth0_vlan: left promiscuous mode [ 849.969149][ T5995] usb 6-1: Using ep0 maxpacket: 16 [ 849.977533][ T5995] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 849.996733][ T5995] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 850.000932][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.003653][ T5995] usb 6-1: Product: syz [ 850.005033][ T5995] usb 6-1: Manufacturer: syz [ 850.006567][ T5995] usb 6-1: SerialNumber: syz [ 850.013329][ T5995] usb 6-1: config 0 descriptor?? [ 850.025440][ T5995] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 850.028392][ T5995] em28xx 6-1:0.0: DVB interface 0 found: bulk [ 850.138956][ T5935] Bluetooth: hci2: command tx timeout [ 850.685478][ T5995] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 850.886798][ T40] kauditd_printk_skb: 1901 callbacks suppressed [ 850.886812][ T40] audit: type=1400 audit(2000000011.664:237993): avc: denied { search } for pid=796 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.905628][ T40] audit: type=1400 audit(2000000011.683:237994): avc: denied { ioctl } for pid=769 comm="syz.1.7813" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 850.914515][ T40] audit: type=1400 audit(2000000011.683:237995): avc: denied { ioctl } for pid=769 comm="syz.1.7813" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 850.944618][ T40] audit: type=1400 audit(2000000011.720:237996): avc: denied { search } for pid=797 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.951640][ T40] audit: type=1400 audit(2000000011.720:237997): avc: denied { search } for pid=797 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.958711][ T40] audit: type=1400 audit(2000000011.720:237998): avc: denied { search } for pid=797 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.966078][ T40] audit: type=1400 audit(2000000011.720:237999): avc: denied { search } for pid=797 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1907 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.977765][ T40] audit: type=1400 audit(2000000011.748:238000): avc: denied { search } for pid=799 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.984870][ T40] audit: type=1400 audit(2000000011.748:238001): avc: denied { search } for pid=799 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 850.992293][ T40] audit: type=1400 audit(2000000011.748:238002): avc: denied { search } for pid=799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 851.136503][ T5995] em28xx 6-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 851.139161][ T5995] em28xx 6-1:0.0: board has no eeprom [ 851.208600][ T5995] em28xx 6-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 851.211202][ T5995] em28xx 6-1:0.0: dvb set to bulk mode. [ 851.214252][ T831] em28xx 6-1:0.0: Binding DVB extension [ 851.221897][ T5995] usb 6-1: USB disconnect, device number 65 [ 851.224680][ T5995] em28xx 6-1:0.0: Disconnecting em28xx [ 851.297263][ T831] em28xx 6-1:0.0: Registering input extension [ 851.325669][ T6019] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 851.330490][ T6019] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 851.336955][ T5995] em28xx 6-1:0.0: Closing input extension [ 851.340617][ T6019] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 851.344306][ T6019] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 851.355195][ T6019] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 851.363887][ T5995] em28xx 6-1:0.0: Freeing device [ 851.406468][ T6019] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 851.460612][ T6019] usb 9-1: USB disconnect, device number 42 [ 851.522195][ T811] bond4 (unregistering): Released all slaves [ 851.600526][ T732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 851.619457][ T732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 851.626611][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7821'. [ 851.627107][ T732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 851.629533][ T814] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7821'. [ 851.636925][ T814] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7821'. [ 851.646470][ T814] netlink: 24 bytes leftover after parsing attributes in process `syz.9.7821'. [ 851.649749][ T732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 851.886288][ T732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.904035][ T837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7826'. [ 851.920492][ T732] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.943716][T31917] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.946064][T31917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.964194][T31922] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.966518][T31922] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.046225][ T840] netlink: 64 bytes leftover after parsing attributes in process `syz.9.7827'. [ 852.234927][T22955] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 852.362678][ T5935] Bluetooth: hci2: command tx timeout [ 852.409523][T22955] usb 9-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 852.415993][T22955] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.418543][T22955] usb 9-1: Product: syz [ 852.419881][T22955] usb 9-1: Manufacturer: syz [ 852.421369][T22955] usb 9-1: SerialNumber: syz [ 852.454564][ T732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.513426][ T732] veth0_vlan: entered promiscuous mode [ 852.527067][ T732] veth1_vlan: entered promiscuous mode [ 852.581491][ T732] veth0_macvtap: entered promiscuous mode [ 852.593275][ T732] veth1_macvtap: entered promiscuous mode [ 852.617876][ T732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.629367][ T732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.643026][T31917] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.646542][T31917] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.650495][T31917] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.657116][T31917] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.707863][T22955] rtl8150 9-1:1.0: couldn't reset the device [ 852.710141][T22955] rtl8150 9-1:1.0: probe with driver rtl8150 failed with error -5 [ 852.717265][T22955] usb 9-1: USB disconnect, device number 43 [ 852.751615][T31917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.754067][T31917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.782120][T31926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.784555][T31926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.954928][ T873] netlink: 'syz.1.7833': attribute type 1 has an invalid length. [ 852.957517][ T873] netlink: 'syz.1.7833': attribute type 4 has an invalid length. [ 852.959961][ T873] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.7833'. [ 853.219828][T17928] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 853.226544][T17928] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 853.233104][T17928] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 853.236734][T17928] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 853.249225][T17928] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 853.354839][ T886] lo speed is unknown, defaulting to 1000 [ 853.468510][ T899] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 853.471106][ T902] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 853.486937][ T903] mac80211_hwsim hwsim67 syzkaller0: entered allmulticast mode [ 853.794321][ T910] overlayfs: statfs failed on './file0' [ 853.813643][ T886] chnl_net:caif_netlink_parms(): no params data found [ 853.951573][ T886] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.954166][ T886] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.965359][ T886] bridge_slave_0: entered allmulticast mode [ 853.973775][ T886] bridge_slave_0: entered promiscuous mode [ 853.980935][ T886] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.983476][ T886] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.986036][ T886] bridge_slave_1: entered allmulticast mode [ 853.990339][ T886] bridge_slave_1: entered promiscuous mode [ 854.033706][ T886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 854.060298][ T886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 854.100167][ T886] team0: Port device team_slave_0 added [ 854.109286][ T886] team0: Port device team_slave_1 added [ 854.143999][ T886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 854.147013][ T886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.159102][ T886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 854.167454][ T886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 854.169943][ T886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 854.191816][ T886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 854.272664][ T886] hsr_slave_0: entered promiscuous mode [ 854.275603][ T886] hsr_slave_1: entered promiscuous mode [ 854.288106][ T886] debugfs: 'hsr0' already exists in 'hsr' [ 854.290108][ T886] Cannot create hsr debugfs directory [ 854.293430][ T937] xt_hashlimit: size too large, truncated to 1048576 [ 854.410157][ T944] xt_hashlimit: size too large, truncated to 1048576 [ 854.558179][ T886] netdevsim netdevsim9 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.586580][ T5935] Bluetooth: hci2: command tx timeout [ 854.698296][ T886] netdevsim netdevsim9 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.782636][ T886] netdevsim netdevsim9 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.821376][ T60] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 854.855176][ T963] overlay: Unknown parameter 'dincašèÞî|t×;Zj' [ 854.867175][ T886] netdevsim netdevsim9 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 854.887952][ T959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7849'. [ 854.961683][ T60] usb 7-1: device descriptor read/64, error -71 [ 854.988563][ T974] kAFS: unable to lookup cell '1' [ 854.993560][ T974] binder: BINDER_SET_CONTEXT_MGR already set [ 855.001103][ T974] binder: 971:974 ioctl 4018620d 200000000100 returned -16 [ 855.133919][ T983] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=983 comm=syz.1.7853 [ 855.141023][ T886] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 855.151639][ T886] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 855.171774][ T886] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 855.192309][ T886] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 855.239270][ T60] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 855.248093][ T993] ip6t_rpfilter: unknown options [ 855.361241][ T1003] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 855.363762][ T1003] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 855.388348][ T60] usb 7-1: device descriptor read/64, error -71 [ 855.414511][ T886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 855.441574][ T5935] Bluetooth: hci3: command tx timeout [ 855.457362][ T886] 8021q: adding VLAN 0 to HW filter on device team0 [ 855.477429][T31917] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.479726][T31917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 855.491582][T11426] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.493944][T11426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 855.516582][ T60] usb usb7-port1: attempt power cycle [ 855.658079][ T1013] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 855.879940][ T60] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 855.893910][ T1027] gfs2: error -5 reading superblock [ 855.916894][ T60] usb 7-1: device descriptor read/8, error -71 [ 856.087690][ T886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 856.179096][ T60] usb 7-1: new low-speed USB device number 30 using dummy_hcd [ 856.203099][ T60] usb 7-1: device descriptor read/8, error -71 [ 856.246519][ T40] kauditd_printk_skb: 4187 callbacks suppressed [ 856.246531][ T40] audit: type=1400 audit(2000000016.678:242190): avc: denied { module_request } for pid=886 comm="syz-executor" kmod="netdev-netdevsim9" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 856.262377][ T40] audit: type=1400 audit(2000000016.678:242191): avc: denied { create } for pid=1036 comm="syz.1.7861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 856.270889][ T40] audit: type=1400 audit(2000000016.678:242192): avc: denied { create } for pid=1036 comm="syz.1.7861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 856.279408][ T40] audit: type=1400 audit(2000000016.678:242193): avc: denied { setopt } for pid=1036 comm="syz.1.7861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 856.285597][ T40] audit: type=1400 audit(2000000016.678:242194): avc: denied { create } for pid=1036 comm="syz.1.7861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 856.294600][ T40] audit: type=1400 audit(2000000016.678:242195): avc: denied { execmem } for pid=1036 comm="syz.1.7861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 856.304138][ T40] audit: type=1400 audit(2000000016.687:242196): avc: denied { search } for pid=1035 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.312008][ T40] audit: type=1400 audit(2000000016.687:242197): avc: denied { read } for pid=1035 comm="cmp" name="resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 856.319089][ T40] audit: type=1400 audit(2000000016.687:242198): avc: denied { read open } for pid=1035 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=4 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 856.328162][ T40] audit: type=1400 audit(2000000016.687:242199): avc: denied { search } for pid=1035 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 856.336283][ T60] usb usb7-port1: unable to enumerate USB device [ 856.688785][ T886] veth0_vlan: entered promiscuous mode [ 856.717949][ T1051] ptrace attach of "/syz-executor exec"[26323] was attempted by "/syz-executor exec"[1051] [ 856.720323][ T886] veth1_vlan: entered promiscuous mode [ 856.768185][ T886] veth0_macvtap: entered promiscuous mode [ 856.776469][ T886] veth1_macvtap: entered promiscuous mode [ 856.810350][ T5935] Bluetooth: hci2: command tx timeout [ 856.812588][ T886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 856.833392][ T886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 856.866518][ T1150] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.869580][ T1150] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.874039][ T1150] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 856.878134][ T1150] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 857.004731][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.007220][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.054890][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 857.058667][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 857.170845][ T1061] netlink: 220 bytes leftover after parsing attributes in process `syz.1.7865'. [ 857.668344][ T5935] Bluetooth: hci3: command tx timeout [ 857.773304][ T1098] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7871'. [ 858.052531][ T1111] random: crng reseeded on system resumption [ 858.172145][ T1111] netlink: 'syz.9.7874': attribute type 4 has an invalid length. [ 858.250099][ T1123] [ 858.250941][ T1123] ====================================================== [ 858.253177][ T1123] WARNING: possible circular locking dependency detected [ 858.255418][ T1123] syzkaller #0 Tainted: G L [ 858.257436][ T1123] ------------------------------------------------------ [ 858.259706][ T1123] syz.2.7876/1123 is trying to acquire lock: [ 858.261648][ T1123] ffff88803e86ba10 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xe1/0x1270 [ 858.264305][ T1123] [ 858.264305][ T1123] but task is already holding lock: [ 858.266615][ T1123] ffff888050275468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 858.269286][ T1123] [ 858.269286][ T1123] which lock already depends on the new lock. [ 858.269286][ T1123] [ 858.272559][ T1123] [ 858.272559][ T1123] the existing dependency chain (in reverse order) is: [ 858.275421][ T1123] [ 858.275421][ T1123] -> #4 (&pipe->mutex){+.+.}-{4:4}: [ 858.277798][ T1123] __mutex_lock+0x1a2/0x1b90 [ 858.279474][ T1123] pipe_lock+0x69/0x80 [ 858.280969][ T1123] iter_file_splice_write+0x1fd/0x10a0 [ 858.282936][ T1123] do_splice+0x109c/0x1fd0 [ 858.284537][ T1123] __do_splice+0x33b/0x370 [ 858.286161][ T1123] __x64_sys_splice+0x187/0x250 [ 858.287837][ T1123] do_syscall_64+0x106/0xf80 [ 858.289497][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.291545][ T1123] [ 858.291545][ T1123] -> #3 (sb_writers#6){.+.+}-{0:0}: [ 858.293917][ T1123] mnt_want_write+0x6f/0x450 [ 858.295585][ T1123] ovl_set_acl+0x3a0/0xa70 [ 858.297216][ T1123] set_posix_acl+0x263/0x320 [ 858.298881][ T1123] vfs_set_acl+0x411/0x9e0 [ 858.300462][ T1123] do_set_acl+0xd9/0x1a0 [ 858.301996][ T1123] do_setxattr+0xeb/0x180 [ 858.303552][ T1123] file_setxattr+0x139/0x1b0 [ 858.305171][ T1123] path_setxattrat+0x335/0x3b0 [ 858.306840][ T1123] __x64_sys_fsetxattr+0xc5/0x140 [ 858.308600][ T1123] do_syscall_64+0x106/0xf80 [ 858.310252][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.312257][ T1123] [ 858.312257][ T1123] -> #2 (&ovl_i_mutex_dir_key[depth]){++++}-{4:4}: [ 858.315041][ T1123] down_read+0x99/0x460 [ 858.316562][ T1123] lookup_slow+0x42/0x70 [ 858.318104][ T1123] path_lookupat+0x5e8/0xc40 [ 858.319743][ T1123] filename_lookup+0x202/0x590 [ 858.321496][ T1123] kern_path+0x37/0x50 [ 858.322973][ T1123] lookup_bdev+0xd8/0x280 [ 858.324535][ T1123] resume_store+0x1d6/0x460 [ 858.326216][ T1123] kobj_attr_store+0x58/0x80 [ 858.327831][ T1123] sysfs_kf_write+0xf2/0x150 [ 858.329503][ T1123] kernfs_fop_write_iter+0x3e0/0x5f0 [ 858.331331][ T1123] vfs_write+0x6ac/0x1070 [ 858.332873][ T1123] ksys_write+0x12a/0x250 [ 858.334399][ T1123] do_syscall_64+0x106/0xf80 [ 858.336012][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.338029][ T1123] [ 858.338029][ T1123] -> #1 (&of->mutex){+.+.}-{4:4}: [ 858.340350][ T1123] __mutex_lock+0x1a2/0x1b90 [ 858.342006][ T1123] kernfs_seq_start+0x4f/0x2a0 [ 858.343711][ T1123] seq_read_iter+0x2c1/0x1270 [ 858.345394][ T1123] kernfs_fop_read_iter+0x46c/0x610 [ 858.347209][ T1123] copy_splice_read+0x4ba/0xb90 [ 858.348960][ T1123] do_splice_read+0x285/0x370 [ 858.350669][ T1123] splice_direct_to_actor+0x2a1/0xa30 [ 858.352543][ T1123] do_splice_direct+0x174/0x240 [ 858.354269][ T1123] do_sendfile+0xadc/0xe20 [ 858.355884][ T1123] __x64_sys_sendfile64+0x1d8/0x220 [ 858.357729][ T1123] do_syscall_64+0x106/0xf80 [ 858.359379][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.361459][ T1123] [ 858.361459][ T1123] -> #0 (&p->lock){+.+.}-{4:4}: [ 858.363728][ T1123] __lock_acquire+0x14b8/0x2630 [ 858.365524][ T1123] lock_acquire+0x1cf/0x380 [ 858.367156][ T1123] __mutex_lock+0x1a2/0x1b90 [ 858.368818][ T1123] seq_read_iter+0xe1/0x1270 [ 858.370502][ T1123] proc_reg_read_iter+0x220/0x310 [ 858.372276][ T1123] copy_splice_read+0x4ba/0xb90 [ 858.374017][ T1123] do_splice_read+0x285/0x370 [ 858.375693][ T1123] splice_file_to_pipe+0x82/0x120 [ 858.377487][ T1123] do_sendfile+0x366/0xe20 [ 858.379088][ T1123] __x64_sys_sendfile64+0x1d8/0x220 [ 858.380862][ T1123] do_syscall_64+0x106/0xf80 [ 858.382464][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.384423][ T1123] [ 858.384423][ T1123] other info that might help us debug this: [ 858.384423][ T1123] [ 858.387619][ T1123] Chain exists of: [ 858.387619][ T1123] &p->lock --> sb_writers#6 --> &pipe->mutex [ 858.387619][ T1123] [ 858.391252][ T1123] Possible unsafe locking scenario: [ 858.391252][ T1123] [ 858.393561][ T1123] CPU0 CPU1 [ 858.395223][ T1123] ---- ---- [ 858.396953][ T1123] lock(&pipe->mutex); [ 858.398316][ T1123] lock(sb_writers#6); [ 858.400430][ T1123] lock(&pipe->mutex); [ 858.402550][ T1123] lock(&p->lock); [ 858.403799][ T1123] [ 858.403799][ T1123] *** DEADLOCK *** [ 858.403799][ T1123] [ 858.406476][ T1123] 1 lock held by syz.2.7876/1123: [ 858.408160][ T1123] #0: ffff888050275468 (&pipe->mutex){+.+.}-{4:4}, at: pipe_lock+0x69/0x80 [ 858.410969][ T1123] [ 858.410969][ T1123] stack backtrace: [ 858.412902][ T1123] CPU: 1 UID: 0 PID: 1123 Comm: syz.2.7876 Tainted: G L syzkaller #0 PREEMPT(full) [ 858.412919][ T1123] Tainted: [L]=SOFTLOCKUP [ 858.412923][ T1123] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 858.412930][ T1123] Call Trace: [ 858.412935][ T1123] [ 858.412940][ T1123] dump_stack_lvl+0x100/0x190 [ 858.413005][ T1123] print_circular_bug.cold+0x178/0x1c7 [ 858.413023][ T1123] check_noncircular+0x146/0x160 [ 858.413066][ T1123] __lock_acquire+0x14b8/0x2630 [ 858.413077][ T1123] ? mark_held_locks+0x40/0x70 [ 858.413088][ T1123] lock_acquire+0x1cf/0x380 [ 858.413098][ T1123] ? seq_read_iter+0xe1/0x1270 [ 858.413108][ T1123] ? __pfx___might_resched+0x10/0x10 [ 858.413154][ T1123] __mutex_lock+0x1a2/0x1b90 [ 858.413165][ T1123] ? seq_read_iter+0xe1/0x1270 [ 858.413175][ T1123] ? seq_read_iter+0xe1/0x1270 [ 858.413186][ T1123] ? __pfx___mutex_lock+0x10/0x10 [ 858.413200][ T1123] ? seq_read_iter+0xe1/0x1270 [ 858.413209][ T1123] seq_read_iter+0xe1/0x1270 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 858.413222][ T1123] proc_reg_read_iter+0x220/0x310 [ 858.413235][ T1123] copy_splice_read+0x4ba/0xb90 [ 858.413249][ T1123] ? __pfx_copy_splice_read+0x10/0x10 [ 858.413262][ T1123] ? __fget_files+0x215/0x3d0 [ 858.413275][ T1123] ? __pfx_copy_splice_read+0x10/0x10 [ 858.413286][ T1123] do_splice_read+0x285/0x370 [ 858.413298][ T1123] splice_file_to_pipe+0x82/0x120 [ 858.413312][ T1123] do_sendfile+0x366/0xe20 [ 858.413330][ T1123] ? __pfx_do_sendfile+0x10/0x10 [ 858.413350][ T1123] ? __pfx___seccomp_filter+0x10/0x10 [ 858.413393][ T1123] __x64_sys_sendfile64+0x1d8/0x220 [ 858.413406][ T1123] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 858.413420][ T1123] do_syscall_64+0x106/0xf80 [ 858.413436][ T1123] ? clear_bhb_loop+0x40/0x90 [ 858.413448][ T1123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 858.413458][ T1123] RIP: 0033:0x7f1e0a19c819 [ 858.413468][ T1123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 858.413479][ T1123] RSP: 002b:00007f1e0b106028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 858.413489][ T1123] RAX: ffffffffffffffda RBX: 00007f1e0a415fa0 RCX: 00007f1e0a19c819 [ 858.413496][ T1123] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000000 [ 858.413502][ T1123] RBP: 00007f1e0a232c91 R08: 0000000000000000 R09: 0000000000000000 [ 858.413509][ T1123] R10: 0000000200000006 R11: 0000000000000246 R12: 0000000000000000 [ 858.413515][ T1123] R13: 00007f1e0a416038 R14: 00007f1e0a415fa0 R15: 00007ffe158ac2a8 [ 858.413525][ T1123] [ 858.413617][T22955] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 858.670367][T22955] usb 6-1: Using ep0 maxpacket: 8 [ 858.907741][T22955] usb 6-1: device descriptor read/all, error -71 [ 859.643981][T31912] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.712694][T31912] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.882913][T31912] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 859.956176][T31912] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.204377][T31912] bridge_slave_1: left allmulticast mode [ 860.206237][T31912] bridge_slave_1: left promiscuous mode [ 860.208102][T31912] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.215436][T31912] bridge_slave_0: left allmulticast mode [ 860.217286][T31912] bridge_slave_0: left promiscuous mode [ 860.219152][T31912] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.437925][T31912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.467817][T31912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 860.510934][T31912] bond0 (unregistering): Released all slaves [ 861.074941][T31912] hsr_slave_0: left promiscuous mode [ 861.077821][T31912] hsr_slave_1: left promiscuous mode [ 861.079883][T31912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.082322][T31912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 861.085636][T31912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.090747][T31912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.104368][T31912] veth1_macvtap: left promiscuous mode [ 861.106112][T31912] veth0_macvtap: left promiscuous mode [ 861.108170][T31912] veth1_vlan: left promiscuous mode [ 861.109875][T31912] veth0_vlan: left promiscuous mode [ 861.166758][T31912] team0 (unregistering): Port device team_slave_1 removed [ 861.173422][T31912] team0 (unregistering): Port device team_slave_0 removed [ 861.615515][ T40] kauditd_printk_skb: 5490 callbacks suppressed [ 861.615525][ T40] audit: type=1400 audit(2000000021.701:247480): avc: denied { search } for pid=1187 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.625469][ T40] audit: type=1400 audit(2000000021.710:247481): avc: denied { search } for pid=1187 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.632317][ T40] audit: type=1400 audit(2000000021.710:247482): avc: denied { search } for pid=1187 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.639294][ T40] audit: type=1400 audit(2000000021.710:247483): avc: denied { getattr } for pid=1187 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth8.link" dev="tmpfs" ino=23605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 861.648497][ T40] audit: type=1400 audit(2000000021.710:247484): avc: denied { search } for pid=1187 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.656369][ T40] audit: type=1400 audit(2000000021.710:247485): avc: denied { search } for pid=1187 comm="rm" name="dhcpcd" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.663168][ T40] audit: type=1400 audit(2000000021.710:247486): avc: denied { search } for pid=1187 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.670980][ T40] audit: type=1400 audit(2000000021.710:247487): avc: denied { search } for pid=1187 comm="rm" name="hook-state" dev="tmpfs" ino=1906 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.678316][ T40] audit: type=1400 audit(2000000021.710:247488): avc: denied { remove_name search } for pid=1187 comm="rm" name="resolv.conf.eth8.link" dev="tmpfs" ino=23605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 861.687072][ T40] audit: type=1400 audit(2000000021.710:247489): avc: denied { unlink } for pid=1187 comm="rm" name="resolv.conf.eth8.link" dev="tmpfs" ino=23605 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 861.923545][T31912] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.998734][T31912] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.062704][T31912] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.127524][T31912] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.318390][T31912] bridge_slave_1: left allmulticast mode [ 862.320785][T31912] bridge_slave_1: left promiscuous mode [ 862.323263][T31912] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.335387][T31912] bridge_slave_0: left allmulticast mode [ 862.337427][T31912] bridge_slave_0: left promiscuous mode [ 862.339622][T31912] bridge0: port 1(bridge_slave_0) entered disabled state [ 862.513342][T31912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 862.564116][T31912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 862.616354][T31912] bond0 (unregistering): Released all slaves [ 863.334127][T31912] hsr_slave_0: left promiscuous mode [ 863.336693][T31912] hsr_slave_1: left promiscuous mode [ 863.339346][T31912] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 863.341898][T31912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.353423][T31912] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 863.355763][T31912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.361599][T31912] veth1_macvtap: left promiscuous mode [ 863.363393][T31912] veth0_macvtap: left promiscuous mode [ 863.365198][T31912] veth1_vlan: left promiscuous mode [ 863.366892][T31912] veth0_vlan: left promiscuous mode [ 863.426308][T31912] team0 (unregistering): Port device team_slave_1 removed [ 863.433509][T31912] team0 (unregistering): Port device team_slave_0 removed